Personal data is any information which identifies you personally whether directly (for example, your name) or indirectly (for example, information about your use of our products and services).
We may collect the following data about you:
• Contact details: your name, email address, and telephone number so that we can contact you in response to an enquiry you make via our Site or in relation to the products and services that we have from time to time agreed to provide to you;
• Correspondence: we collect any additional personal data you may provide to us from time to time if you contact us by email, letter or telephone, through our Site, by submitting a comment on our Site, or by any other means;
• Transaction details: we or our third-party payment providers will collect information relating to transactions you carry out through our Site and for the purposes of fulfilling your orders;
What are Cookies?
a. What cookies are used on this Site?
The cookies we use on our Site are broadly grouped into the following categories:
• Essential – Some of the cookies on our Site are essential for us to be able to provide you with a service you have requested. An example of this could be a cookie used to enable you to log into your account on our Site or which allows communication between your browser and our Site. Our ‘cookie preference’ cookie described in the section “How can I reject or opt out of receiving cookies?” is also an essential cookie. You may not be able to use our Site without these cookies.
• Analytics – We use analytics cookies to helps us understand how users engage with our Site. An example is counting the number of different people coming to our Site or using a particular feature, rather than the total number of times the site or feature is used. Without this cookie, if you visited our Site once each week for three weeks we would count you as three separate users. We would find it difficult to analyse how well our Site was performing and improve it without these cookies.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.
• Social Sharing – We use third party cookies to allow you to share content directly on the social networking/sharing sites like Facebook, Twitter or Google+. Examples would be if you wanted to “like” or “tweet” about us or our products or services. Please see our “Third Party Cookies” section below for more details.
b. How can I reject or opt out of receiving cookies?
For more information about cookies and how to stop cookies being installed or how to delete existing cookies from your hard drive visit the following website: allaboutcookies.org.
c. Third party cookies
Some of the cookies described in the “What Cookies are used on our Site” section above are stored on your machine by third parties when you use our Site. Third parties may also read cookies on your browser to collect information or to serve content or advertisements to you. We have no control over these cookies or how the third parties use them. They are used to allow that third party to provide a service to us, for example analytics. For more information on these cookies and how to disable them, please see:
• Internet Advertising Bureau website at www.youronlinechoices.com where you will be able to opt-out of receiving Interest-Based Advertising cookies from some of the third parties listed below; and/or
• If you want to know more about how cookies work and how to manage or delete them, visit the World Wide Web Consortium’s website.
Data protection law requires us to only process your personal data if we satisfy one or more legal grounds. These are set out in data protection law and we rely on a number of different grounds for the processing we carry out. These are as follows:
In certain circumstances, we process your personal data after obtaining your consent to do so for the purposes of:
- sending you marketing communications about our products and services;
- conducting marketing research;
Necessary for the performance of a contract and to comply with our legal obligations
It is necessary for us to process your basic contact details, payment details and information about the business you represent for the performance of the Terms and Conditions of business between us. In particular, we rely on this legal ground to:
- provide you with the products;
- communicate with you about the products and services that we provide to you, including to let you know about major changes to those products and services or to the Terms and Conditions of business between us or to any related information;
- provide and improve customer support; and
- notify you about changes to our service
If you choose not to give some or all of the aforementioned information to us, this may affect our ability to provide our products and services to you.
In certain circumstances, we also use your personal data, only to the extent required, in order to enable us to comply with our legal obligations, including to detect, investigate and prevent fraud.
Necessary for the purposes of our legitimate business interests or those of a third party
It is sometimes necessary to collect and use your personal data for the purposes of our legitimate interests as a business, which are to:
- provide you with products and services that are as useful and beneficial as possible, including by personalising our contact with you and making sure we tell you about all the offers that are relevant to you;
- better understand our customer base so that we can improve our products and services and marketing activities (which could also benefit you);
- comply with our contractual obligations to third parties;
- develop and improve our Site to enhance the customer experience;
- train our staff so that we can provide you with a better customer service;
- respond to any enquiries or complaints you have made, or deal with any dispute which may arise in the course of us providing our products and services to you; and
- to ensure that content from our Site is presented in the most effective manner for you and for your computer;
- ensure effective operational management and internal administration of our business, document retention, compliance with regulatory guidance and exercise or defence of legal claims.
Where we think there is a risk that one of your interests or fundamental rights and freedoms may be affected, we will not process your personal data unless there is another legal ground for us to do so (either that we have obtained your consent to the processing or it is necessary for us to perform our contract with you or to comply with our legal obligations).
We may provide your personal data to our suppliers and service providers, who provide certain business services for us and act as “processors” of your personal data on our behalf. In addition, we may disclose your personal data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property, or safety, of our business, our customers or others. This includes, in specific cases, exchanging information with other organisations for the purposes of fraud protection.
We retain your personal data for no longer than is necessary for the purposes(s) for which it was provided. What this means in practice will vary between different types of data. When determining the relevant retention periods, we take into account factors including:
- legal obligation(s) under applicable law to retain data for a certain period of time;
- statute of limitations under applicable law;
- potential or actual disputes; and
- guidelines issued by relevant data protection authorities.
Otherwise, we securely erase your personal data from our systems when it is no longer needed.
You have the following rights regarding your personal data:
What does this mean?
1. Right to be informed
2. Right of access
3. Right to rectification
You are entitled to have your personal data corrected if it is inaccurate or incomplete.
4. Right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enable you to request the deletion or removal of your personal data where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
5. Right to restrict processing
You have the right to ‘block’ or supress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further.
6. Right of data portability
You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
7. Right to object to processing
You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes (including in each case any related profiling).
8. Right to withdraw consent to processing
If you have given your consent to us to process your personal data for a particular purpose (for example, direct marketing), you have the right to withdraw your consent at any time (although if you do so, it does not mean that any processing of your personal data up to that point is unlawful).
9. Right to make a complaint to the data protection authorities
You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with data protection law.