Our contact details
The type of personal information we collect
We currently collect and process the following information:
- Identity Data which may include your first name, maiden name, last name, username, marital status, title, date of birth and gender.
- Contact Data which may include your billing address, delivery address, email address and telephone numbers.
- Financial Data which may include your bank account and payment card details.
- Transaction Data which may include details about payments between us and other details of purchases made by you.
- Technical Data which may include your login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access this site.
- Profile Data which may include your username and password, purchases or orders, your interests, preferences, feedback and survey responses.
- Usage Data which may include information about how you use our website, products and services.
- Marketing and Communications Data which may include your preferences in receiving marketing communications from us and our third parties and your communication preferences.
- Sensitive Data: we do not collect any Sensitive Data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not collect any information about criminal convictions and offences.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- Communicating with us by post, phone, email or otherwise.
- Providing information on our website.
- Ordering or contracting our products or services.
- Subscribing to our services or publications.
- Requesting resources or marketing be sent to you.
- Giving us feedback.
We use the information that you have given us:
- To perform the contract between us.
- Where it is necessary for our legitimate interests.
- Where we need to comply with a legal or regulatory obligation.
Your information is held in the strictest confidence. We do not sell or exchange your personal data with organisations who may want to sell you something or use your data for research or other purposes. However, may need to share this information with:
- Service providers who provide IT and system administration services.
- Professional advisers including lawyers, bankers, auditors and insurers
- Government bodies that require us to report processing activities.
We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting The Data Protection officer, Melanie Morrison, at the above address or by emailing firstname.lastname@example.org.
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a legitimate interest.
How we store your personal information
Like most small businesses, we store all your information using mainstream software packages. This means that some of your data may be held in the EEA, and some may be held in services in the USA (with suitable data privacy shields) or elsewhere.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
When deciding what the correct time is to keep the data for we look at its amount, nature and sensitivity, potential risk of harm from unauthorised use or disclosure, the processing purposes, if these can be achieved by other means and legal requirements.
If you subscribed to a newsletter or updates list, you will remain on the list(s) you joined until you unsubscribe from that list.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at email@example.com if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at firstname.lastname@example.org.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk