1. THIS SITE
2.2 We collect, use and are responsible for certain personal data concerning you. When we do so we are regulated under the General Data Protection Regulation which applies across the European Union (including in the United Kingdom). We are responsible as "controller" of that personal data for the purposes of those laws.
3. CONTACTING US
3.1.1 by e-mail at firstname.lastname@example.org; or
3.1.2 by post at Caledonia House, 5 Inchinnan Drive, Inchinnan, Renfrew, Scotland, PA4 9AF
3.2 We will endeavour to respond to you promptly. Please note that our email and telephone facilities are monitored only during the hours of 9.00am to 5.00pm Monday to Friday (excluding public and bank holidays in Scotland).
3.3 Please also note that we may record calls and keep a record of correspondence to enable us to properly manage our Site, to deal with your query, and for quality and training purposes.
4. OUR SITE
5. THIRD PARTY SITES
6. HOW WE COLLECT PERSONAL DATA
6.2 We collect this personal data from you either directly, such as when you register with us, contact us or purchase goods via our Site or indirectly, when you are browsing our Site or via the providers of the facilities to us and to you, for example social media providers.
7. PERSONAL DATA COLLECTED
7.1.1 your name, address and contact details;
7.1.2 the location and/or device from which you are visiting our Site;
7.1.3 your date of birth;
7.1.4 your social media profile information;
7.1.5 your bank account and payment details;
7.1.6 if you are a business, the employee details of persons responsible for ordering goods from our Site;
7.1.7 details of any feedback you give us by phone, email, post or via social media;
7.1.8 your account details, such as username, login details; and/or
7.1.9 information concerning the elements of our Site that you visit, read, interact with, and information concerning the manner of that interaction.
8. USES OF YOUR PERSONAL DATA
8.1.1 create and manage your account with us;
8.1.2 verify your identity;
8.1.3 provide goods and services to you;
8.1.4 customise our Site and its content to your particular preferences;
8.1.5 notify you of any changes to our Site or to our services that may affect you;
8.1.6 improve our business, for example through product feedback, or via training our staff;
8.1.7 to protect the rights, property or safety of others; and
8.1.8 to operate our Site and our business.
8.2 This Site is not intended for use by children and we do not knowingly collect or use personal data relating to children.
9. OUR LEGAL BASIS FOR PROCESSING YOUR DATA
9.2 The legal bases we may rely on include:
9.2.1 consent - where you have given us clear consent for us to process your personal data for a specific purpose;
9.2.2 contract - where our use of your personal data is necessary for a contract we have with you, for example to supply you with our goods, or because you have asked us to take specific steps before entering into a contract;
9.2.3 legal obligation- where our use of your personal data is necessary for us to comply with the law; and
9.2.4 legitimate interests - where our use of your personal data is necessary for our legitimate interests, your legitimate interests, or the legitimate interests of a third party, for example to prevent fraud (unless there is a good reason to protect your personal data which overrides our legitimate interests).
10. FURTHER INFORMATION
When information is collected
What information we collect
How and why we use your information
When you register to receive information from us on our products and business including our newsletters and updates on goods we supply from time to time.
Your name and email address.
We collect this personal data directly from you.
We will use this personal data to provide you with information on our products and business, including information on the availability of new products. We may do this by post, email, telephone, text message (SMS) or automated call.
Our basis for processing this personal data is consent, which you give to us when you input your details into our Site.
When you purchase goods from us.
We collect this personal data directly from you.
We will use this personal data to supply goods to you. We may also use this personal data, in conjunction with our third party payment services provider, to prevent fraud.
Our basis for processing this personal data is to perform our contract with you for the supply of goods.
We will retain this personal data for [SIXTY (60) DAYS] to allow us to deal with any returns. Please note that your rights to return any goods are set out in our Product Supply Terms, located here.
When you visit our social media profiles.
Our social media providers collect analytical information about the elements of our profiles that you visit and interact with. Also collected are any postings you make upon those profiles, and details of your sharing activities.
Our social media profile providers and us collect this information.
The basis for collecting and using this information is consent, which is given to these social media profile providers when using their services. If you do not wish your information to be used in this manner please contact the relevant social media provider, or alter your data sharing settings within upon their website.
11. PERSONAL DATA SHARING
11.2 We routinely share personal data as follows.
11.2.1 your name and address details (including where applicable your company name details) with our delivery partners, to enable the delivery of goods to you;
11.2.2 with our providers, who assist with enabling the operation of our Site, for example hosting providers, and email service providers. This sharing enables the provision of our Site to you. Some of these providers may be based outside the European Economic Area. For further information including on how we safeguard your personal data when this occurs, see the section below "Transfer of your information out of the EEA";
11.2.3 we will share personal data with law enforcement or other authorities if required by applicable law. Where we know you have breached, or where we suspect you may be breaching any obligations owed to us, for example the terms relating to the use of our Site, we may share your personal data with third parties to the enable us to help protect their rights, property or safety. This is includes sharing to prevent the risk of fraud.
12. THIRD PARTY MARKETING
13. COOKIES AND SIMILAR TECHNOLOGIES
14. YOUR RIGHTS
14.1 Under the General Data Protection Regulation you have a number of important rights. In summary, those include rights to:
14.1.1 fair processing of your personal data and transparency over how we use your use personal data;
14.1.2 access to your personal data;
14.1.3 require us to correct any mistakes in your personal data which we hold;
14.1.4 require the erasure of personal data concerning you in certain situations;
14.1.5 receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and to have us transmit that personal data to a third party in certain situations;
14.1.6 object at any time to processing of personal data concerning you for direct marketing;
14.1.7 object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you; and
14.1.8 object in certain other situations to our continued processing of your personal data.
14.2 For further information on each of those rights, including the circumstances in which they apply, see the Information Commissioner's guidance located here https://ico.org.uk/your-data-matters/.
15. KEEPING YOUR PERSONAL DATA SECURE
15.1 We have appropriate security measures in place to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality.
15.2 We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
15.3 We do not have access to your payment in formation. Our payment services providers are compliant with PCI standards (see http://www.pcisecuritystandards.org).
15.4 If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit https://www.getsafeonline.org.
16. HOW TO COMPLAIN
16.1 We hope that we can resolve any query or concern you raise about our use of your personal data.
16.2 The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/global/contact-us/.
17. CHANGES TO THIS POLICY
Please note that we may update this policy from time to time, so if you revisit our Site at a later date you should check this policy again at that time to make sure you have seen the current version. This policy was last updated on 2nd June 2021.