OUR PROMISE TO YOU
What happens to your data?
Privacy is important
Who we are
We respect your privacy and are committed to protecting it. As such, we comply with the EU law retained version of the General Data Protection Regulation (2016/679), together with the UK Data Protection Act 2018. If any of these laws are replaced or superseded, we will also comply with those too.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (https://ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance by emailing us at firstname.lastname@example.org.
What personal data we collect and why we collect it
Personal data, or personal information, is any information about an individual from which that person can be identified. It doesn’t include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you when you engage with us. Whenever we collect personal data about you, we must have a legal ground (lawful basis) to do so.
Before being able to provide you with our Services, we will need to collect personal information from you. The information we need will depend on the nature of the Services, but may include the following: name, email address, phone number, home address, business name and job role. We’ll also need to use this information to contact you about any customer service issue raised. Our lawful basis for collecting this information is that it enables us to provide our Services to you and that you have consented.
Purchases on our Website
Our Website has an online shop and when you make a purchase we need to collect personal information from you, such as your name, email address, phone number and home address. Payments are either taken by third-party payment processor, currently Google Pay, Apple Pay, Stripe, or you can log into your PayPal account (depending on which browser you use). PayPal, for instance, uses the SSL “Secure Socket Layer” protocol, which means all information is encrypted by software and so neither we nor third parties can access this information during the processing of your payment. However you make a payment, we never have sight of your payment details.
These third-party payment processors’ privacy policies will apply to your purchase and so you should read this before making a payment.
If for any reason you are entitled to a refund, we won’t see your full payment details but we may need to confirm the last four digits of your payment card.
Since we will be posting your purchase to you, we will share your name and address to the delivery provider. Our lawful basis for the collection (and sharing) of this personal information is to fulfil our contract with you so that we can sell and deliver your purchase. You have also consented to the collection of this information.
Comments or reviews
When you leave comments or reviews on our Website we collect the data shown in the comments form, and also your IP address and browser user agent string to help spam detection.
We collect information about visitors who comment on our Website that use our Akismet anti-spam service. The information we collect depends on how the user sets up Akismet for the Website, but typically includes the commenter’s IP address, user agent, referrer, and website URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).
If you upload images to our Website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to our Website can download and extract any location data from images on our Website.
Information you voluntarily submit to our Website
We may collect personal information from you such as your name or email address. For example, you may voluntarily submit information to our Website by leaving a comment or review, subscribing to a newsletter, or submitting a contact form. Our lawful basis is that it’s necessary for our legitimate interest to present relevant content, products and services to you (only where you have provided your consent that we do so) and that you have consented.
We automatically collect certain information about you and the device with which you access our Website. For example, when you use our Website, we will log your IP address, operating system type, browser type, referring website, pages you viewed, and the dates/times when you accessed our Website. We may also collect information about actions you take when using our Website, such as links clicked.
We may use the information collected in the following ways:
To operate and maintain our Website;
To create your account, identify you as a user of our Website, and customise our Website for your account;
To send you promotional information, such as newsletters. Each email promotion will provide information on how to opt-out of future mailings;
To send you administrative communications, such as administrative emails, confirmation emails, technical notices, updates on policies, or security alerts;
To respond to your comments or inquiries;
To provide you with user support;
To track and measure advertising on our Website;
To protect, investigate, and deter against unauthorised or illegal activity.
If you leave a comment on our Website you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to our Website, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
You are free to withhold consent to cookies, but it means that we might not be able to provide the full website experience to you, including some elements of video advertising.
Our lawful basis for collection of this information is that it’s necessary for us to perform our contract with you, i.e. to give you access to the service our Website provides. We also need this information to study how you use our Website, in order to improve and develop the services we provide, and better inform our marketing strategies.
Embedded content from other websites
Articles on this Website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
What happens when we link to other websites
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our Website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on our Website, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Third-party use of personal information
We may share your information with third parties when you explicitly authorise us to share your information.
Additionally, our Website may use third-party service providers to service various aspects of our Website. Each third-party service provider’s use of your personal information is dictated by their respective privacy policies over which we have no control.
Our Website currently uses the following third-party service providers:
This service tracks Website usage and provides information such as referring websites and user actions on our Website. Google Analytics may capture your IP address, but no other personal information is captured by Google Analytics. Our lawful basis for collection of this information is that it is necessary for our legitimate interest to present relevant content, products and services to you.
At this time, your personal information is not shared with any other third-party applications. This list may be amended from time to time at our sole discretion.
Except when required by law, we will not sell, distribute, or reveal your email addresses or other personal information without your consent; however, we may disclose or transfer personal information collected through our Website to third parties who acquire all or a portion of our business, which may be the result of a merger, consolidation, or purchase of all or a portion of our assets, or in connection with any bankruptcy or re-organisation proceeding brought by or against us.
Affiliate Program Participation
Our Website may engage in affiliate marketing, which is done by embedding tracking links into our Website. If you click on a link for an affiliate partnership, a cookie may be placed on your browser to track any sales for purposes of commissions.
On our Website, you may subscribe to the newsletter, which may be used for advertising purposes. The newsletters sent may contain tracking pixels. The pixel is embedded in emails and allows an analysis of the success of online marketing campaigns. Because of these tracking pixels, we may see if and when you open an email and which links within the email you click. Also, this allows our Website to adapt the content of future newsletters to the interests of the user. This behaviour will not be passed on to third parties.
Our lawful basis for collection of this information (under the advertising heading) is that it is in our legitimate interest so that we can present relevant content, product and services to you.
How I store your personal data
Your personal data is stored on our servers within the United Kingdom.
We may transfer your collected data to storage outside the European Economic Area (EEA) or the United Kingdom. It may be processed outside the EEA or the United Kingdom so you can receive our Website and deal with payment. If we do store or transfer data outside the EEA or the United Kingdom, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA or the United Kingdom.
This means that sometimes we may need to use legally binding contractual terms between us and any third parties we engage with and the use of the EU-approved Model Contractual Arrangements.
Data security is of great importance to me, and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected through our Webite. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We will still be responsible for protection of your personal data, even where it has been transferred outside the EEA or the United Kingdom.
We regularly review our data retention obligations to ensure we are not retaining data for longer than we are legally obliged to.
Notice for California residents of privacy practices and rights
If you are a California resident, California law may provide you with additional rights regarding your personal data.
The California Consumer Privacy Act of 2020 (“CCPA”) gives you the following rights:
Right to know about the personal information we collect and share:
- The CCPA gives you the right to request that we disclose the specific pieces of personal information we have collected about you;
- Please see above for information on the data we collect on you, and how we process it; and
- We do not sell your personal information. However, we do disclose your personal data to limited third parties, as described above
Right of deletion:
- You have the right to request that we delete your personal information, subject to certain exceptions
If you wish to delete your personal data, please contact us at email@example.com. Please note that we may require certain information from you in order to verify your identity before proceeding with your request.
Disclosures about your personal information
We collect the categories of personal information from you in connection with your use of our Website as described above.
We will not discriminate against you for exercising any of your CCPA rights.
Rights relating to your personal information
You may opt-out of future email communications by following the unsubscribe links in our emails. You may also notify us at firstname.lastname@example.org to be removed from our mailing list.
You may access the personal information we have about you by submitting a request us at email@example.com
You may contact us at firstname.lastname@example.org to amend or update your personal information.
In certain situations, you may request that we erase or forget your personal data. To do so, please submit a request at email@example.com
Please note that we may need to retain certain information for record keeping purposes or to complete transactions, or when required by law.
Sensitive personal information