PURPOSE OF THIS NOTICE
This notice describes how we collect and use personal data about you, in accordance with the General Data Protection Regulation (GDPR), and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK (‘Data Protection Legislation’).
Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
ABOUT US
For the purpose of the Data Protection Legislation and this notice, we are the ‘data controller’. This means that we are responsible for deciding how we hold and use personal data about you. We are required under the Data Protection Legislation to notify you of the information contained in this privacy notice.
TYPES OF PERSONAL DATA PROCESSED
We will process ‘personal data’ as defined in Article 4(1) GDPR if you have given us information about yourself by completing forms on our website or corresponding with us by phone, email, in store, events or otherwise. The information you provide may include: your name, your contact details: postal address, telephone numbers (including mobile numbers) and e-mail address, as well as your purchase history.
HOW WE USE YOUR PERSONAL DATA
We may use information held about you in the following ways:
- To provide you with information or services that you have requested from us.
- To carry out our obligations arising from any contracts or arrangements entered into between you and us.
- We may use the information to provide you with service and warranty information regarding the products you have purchased from us in the past and also future purchases.
LEGAL BASIS FOR DATA PROCESSING
As the Data Controller for the personal data we collect from you, we have identified a number of legal bases on which to carry out our processing activities. These are defined under GDPR as:
Consent: By providing us with your personal data and asking us to deliver you with specific products and services you provide us with your permission to utilise your personal data for those purposes.
Legitimate interests: We may also use your personal data to contact you in relation to a product or service we have provided to you in the past.
Legal obligations: Certain statutory obligations apply which require us to process personal data and in some circumstances to provide it to third parties, such as law enforcement. Where such obligations arise we will, insofar as is possible without breaching any other duty we owe to those services, advise you of our intention to process your data for their purposes.
DATA RETENTION
We will process personal data in accordance with our legal obligations. Upon termination of our services to you we will retain your data for a maximum of 2 years.
DATA SHARING
Why might you share my personal data with third parties?
We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us or where we have another legitimate interest in doing so.
Which third-party service providers process my personal data?
“Third parties” includes third-party service providers and other entities within our group. The following activities are carried out by third-party service providers: IT and cloud services, suppliers appropriate to your product(s) and service(s) required.
All of our third-party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data. We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
What about other third parties?
We do not sell, distribute, or lease your personal information to third parties unless we are required to do so by law.
YOUR DATA SUBJECT RIGHTS
Where we act as a Data Controller for your data you may exercise a number of rights.
You may:
• Request access to the personal data we hold about you
• Ask us to correct any data which are inaccurate
• Request to have your personal data deleted
• Put in place restrictions on our processing of your data
• Ask us to transfer your data to another controller (data portability)
We will handle all exercise of your data subject rights in accordance with the requirements of GDPR and any national laws at the time of your request. Requests should be submitted in writing via the contact form on this website.
CONTACT US
If you have any questions regarding this notice or if you would like to speak to us about the manner in which we process your personal data, please contact us via the contact form on this website.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, at any time. For more information, please visit https://ico.org.uk
Lucy Marks
Copyright © 2020 Lucy Marks - All Rights Reserved.