Who is Company?
What are your rights?
Under the GDPR you have the following rights:
- The right to be informed about the Company’s collection and use of your personal data;
- The right of access to the personal data Company holds about you;
- The right to correct any personal data which is inaccurate or incomplete;
- The right to request Company to delete any personal data Company has about you (please note that Company holds your personal data for a limited time only, but if you would want me to delete it sooner, please contact me on firstname.lastname@example.org;
- The right to data portability, you have the right to request that any Data you supply to Company is provided in a structured, commonly used and machine readable format;
- The right to automated decision making and profiling; you have the right not to be a subject to a decision based solely on automated processing
- The right to restrict your personal data being processed or shared with third parties; and
- The right to object to using your personal data for any particular purposes, which is inconsistent with the primary purpose for which the Data was collected.
If you have any cause for complaint about the Company’s use of your personal data, please contact Company using the details provided below and Company will endeavour to solve the problem for you. For further data about your rights, please contact the Data Commissioner’s Office or your local Citizens Advice Bureau in the United Kingdom.
What Data is collected?
Depending on your use of the Website, Company may collect, use, store or transfer some or all of the following Data:
- Your identity includes data such as first name, last name, title, date of birth, and other identifiers that you may have provided at some time;
- Your order history;
- Your contact data which includes data such as billing address, delivery address, email address, telephone numbers and any other data you have provided to me for the purpose of communication or the rendering of the Services to you;
- Your financial data such as your bank account and payment card details;
- Transaction data includes details about payments or communications to and from you as well as data about the services you have purchased; and
- Technical data includes you internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this Website.
How does Company use your Data?
All Data is processed and stored securely, for no longer than is necessary and used for only the purpose it was intended for when first collecting the Data. The Company’s use of your Data will always have a lawful basis, being either Company has a contractual obligation with you or because you have consented to the Company’s use of your personal data or for the Company’s legitimate interests or Company has a legal obligation to divulge your Data. More specifically, Company may use your Data for the following purposes:
(i) Data Company processes because Company has a contractual obligation with you:
When you create an account on the Company’s Website, buy a Service from Company, or otherwise agree to our terms and conditions, a contract is formed between you and Company. In order to carry out the Company’s obligations under that contract Company must process the Data you provide to Company. Some of this Data may be personal data. Company may use the personal data in order to: verify your identity for security purposes; sell Services to you; provide you with the Company’s services and/or provide you with suggestions and advice on the Company’ Services and how to obtain the most from using the Website. Company processes this Data on the basis there is a contract between us, or that you have requested Company to use the Data before we enter into a legal contract. Company shall continue to process this Data until the contract between us ends or is terminated by either party under the terms of the contract.
(ii) Data Company processes with your consent:
(iii) Data Company processes for the purposes of legitimate interests:
Company may process Data on the basis there is a legitimate interest, either to you or to Company. Where Company processes your Data on this basis, Company shall do so after having given careful consideration to: whether the same objective could be achieved through other means; whether processing (or not processing) might cause you harm; and whether you would expect Company to process your Data, and whether you would, consider it reasonable to do so.
For example, Company may process your data on this basis for the purposes of: record-keeping for the proper and necessary administration of the Company’s business; responding to unsolicited communication from you to which Company believes you would expect a response; protecting and asserting the legal rights of any party; insuring against or obtaining professional advice that is required to manage business risk; protecting your interests where Company believes it has a duty to do so, etc.
(iv) Data Company processes because has a legal obligation:
Sometimes, Company must process your Data in order to comply with a statutory obligation. For example, we may be required to give Data to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. This may include your personal data.
How data is stored?
Your data is only retained for as long as it is required to fulfill the Services Company provides However, it may occur that some or all of your data may be stored outside of the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). You are deemed to accept and agree to this by using the Website and submitting information to Company.
If Company does store data outside the EEA, Company will take all reasonable steps to ensure that your Data is treated as safely and securely as it would be within the United Kingdom and under GDPR including: Applying the same laws that are in place within the EU to your data security; and only using verified security-hosting companies who have the applicable security and safety measures in place.
How data is shared?
Company may sometimes contract with third parties to supply services to you on the Company’s behalf. These may include payment processing, search engine facilities, advertising and marketing. In some cases, the third parties may require access to some or all of your Data. Where any of your Data is required for such a purpose, Company shall take all reasonable steps to ensure that your Data will be handled safely, securely, and in accordance with your rights, the Company’s obligations, and the obligations of the third party under the law.
Data will only be shared and used within the bounds of the law.
Company may sometimes use third party data processors that are located outside of the EEA. Where Company transfers any personal data outside the EEA, Company shall take all reasonable steps to ensure that your Data is treated as safely and securely as it would be within the UK and under GDPR. Company currently uses the following third parties to run the Company’s business:
Google – used for search analytics;
Facebook – used to set up Facebook page, order tracking and management;
OVH UK – used to host the Website; and
OVH UK – used for email deliverability.
Cookies are small text files that are placed on your computer’s hard drive by your web browser when you visit any website. They allow data gathered on one web page to be stored until it is needed for use on another, allowing a website to provide you with a personalised experience and the website owner with statistics about how you use the website so that it can be improved. Some cookies may last for a defined period of time, such as one day or until you close your browser. Others last indefinitely. Your web browser should allow you to delete any you choose. It also should allow you to prevent or limit their use.
Data from third parties
Third party advertising on the Company’s Website
Use of site by children
Company does not sell its Services for purchase by children, nor does Company market to children. If you are under 18 years of age, you may use the Website only with consent from a parent or guardian.
How to lodge a complaint
If you are still in any way dissatisfied about how Company processes your Data, you have a right to lodge a complaint with the Data Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/.
Retention period for personal data
Effective Date: 01.03.2019