Privacy


Last modified 25th May 2018


Contents



Introduction

We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.


Data controller

The data controller responsible for this website is Example Data Controller, who can be contacted at Example Address. Our Data Protection Officer is Example Data Protection Officer, who can be contacted at Example Data Protection Officer Address.

This website contains links to third-party websites, which have their own data controllers and privacy policies. This privacy policy applies only to this website.


Lawful basis for processing

For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.


Individual rights

The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.


Security


The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. Additional technical measures are described at the relevant points in this privacy policy.


Disclosures

In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.


Changes to this privacy policy

We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.


Cookies

Cookies are small pieces of text that are stored by your browser. Each cookie has a name and is associated with a particular site. When your browser sends a request to a site (for example, to download a page, image, or video), the computer that responds (known as a server) may tell your browser to set one or more cookies. When your browser makes further requests to the same site it sends the cookies back to the server. This allows the server to remember you as you browse the site, and provide features such as shopping baskets or password-protected areas. For more information on the cookies we use, see our cookie policy.


Data collected when you contact us


Comments

When you submit a comment through a ‘Leave a comment’ form on our site we collect your name, e-mail address, and comment. We may choose to publish your name and comment on our site. Comments are submitted to the Akismet anti-spam service in order to detect and block spam. For more information on how Automattic (the operator of Akismet) handles the data it collects, see Automattic’s privacy policy.

You can delete a comment by contacting us with your request.


Lawful basis for processing: Consent given by data subject
Why? You have given your consent by checking the box on the ‘Leave a comment’ form


Data collected by our shop


Accounts

When you place an order you can either create a guest account or register for a full account. A registered account allows you to log in to your account in future and view your order history, or place further orders without needing to enter your details again. You can also choose to create a registered account without placing an order. When you register for an account we collect your name, e-mail address, telephone number, and company.

You can download the data we have collected about you by going to your account page and following the link to download your data.

You can close your account by going to your account page and following the link to close your account. If you close your account we will retain records of any orders you have placed (as described below), but will delete any other data you have supplied.


Lawful basis for processing: Consent given by data subject
Why? You have supplied us with this data in order to create an account


Orders

When you place an order we collect your name, e-mail address, telephone number, company, delivery and billing addresses, and any comments you choose to leave.


Lawful basis for processing: Performance of a contract
Why? To enable us to enter into a contract with you and fulfil our obligations under it


Lawful basis for processing: Compliance with a legal obligation
Why? To maintain a record of financial transactions for taxation purposes


Payment through Authipay

When you make a payment through Authipay, we send Authipay your name, billing address, e-mail address, and telephone number. After you enter your card details, Authipay attempts to take payment and tells us whether the payment was successful. For more information on how Authipay handles the data it collects, see Authipay’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Payment through ePDQ

When you make a payment through ePDQ, we send ePDQ your name, billing address, delivery address, e-mail address, and telephone number. After you enter your card details, ePDQ attempts to take payment and tells us whether the payment was successful. For more information on how Barclaycard (the operator of ePDQ) handles the data it collects, see Barclaycard’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Payment through Global Iris

When you make a payment through Global Iris, we send Global Iris your billing address postcode and country, and delivery address postcode and country. After you enter your card details, Global Iris attempts to take payment and tells us whether the payment was successful. For more information on how Global Iris handles the data it collects, see Global Iris’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Payment through Paymentsense

When you make a payment through Paymentsense, we send Paymentsense your name, billing address, e-mail address, and telephone number. After you enter your card details, Paymentsense attempts to take payment and tells us whether the payment was successful. For more information on how Paymentsense handles the data it collects, see Paymentsense’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Payment through PayPal

When you make a payment through PayPal, we send PayPal your name, billing address, and e-mail address. After you enter your card details, PayPal attempts to take payment and tells us whether the payment was successful. For more information on how PayPal handles the data it collects, see PayPal’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Payment through Sage Pay

When you make a payment through Sage Pay, we send Sage Pay your name, billing address, delivery address, e-mail address, and telephone number. After you enter your card details, Sage Pay attempts to take payment and tells us whether the payment was successful. For more information on how Sage Pay handles the data it collects, see Sage Pay’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Payment through Worldpay

When you make a payment through Worldpay, we send Worldpay your name, billing address, e-mail address, and telephone number. After you enter your card details, Worldpay attempts to take payment and tells us whether the payment was successful. For more information on how Worldpay handles the data it collects, see Worldpay’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Payment through Cardstream

When you make a payment through Cardstream, we send Cardstream your name, billing address, e-mail address, and telephone number. After you enter your card details, Cardstream attempts to take payment and tells us whether the payment was successful. For more information on how Cardstream handles the data it collects, see Cardstream’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Data collected by third parties on our behalf

Spoton.net

Our site is hosted by Spoton.net Limited (registered company number 06139437 in England and Wales). Spoton.net logs all requests in order determine the causes of reported faults and to detect and block suspicious traffic. The log records the time of the request, your IP address, the requested resource, the referring site (if specified by your browser), and your browser’s user agent string (which will usually include the name and version of your browser and operating system). Log files are deleted after ninety days.


Lawful basis for processing: Compliance with a legal obligation
Why? To comply with the GDPR obligation to implement appropriate technical measures to protect data


Facebook pixel

We use Facebook pixel to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. Facebook collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Facebook handles the data it collects, see Facebook’s privacy policy.

To opt out of Facebook pixel tracking on our site, see the Facebook pixel section of our cookie policy. To opt out of Facebook pixel tracking on all sites, see Facebook’s Ad Preferences.


Lawful basis for processing: Pursuance of our legitimate interests
Why? To allow us to analyse the effectiveness of our advertising


Google AdWords

We use Google AdWords to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. Google collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.

To opt out of Google AdWords tracking on our site, see the Google AdWords section of our cookie policy. To opt out of Google AdWords tracking on all sites, see Google’s Ad Settings.


Lawful basis for processing: Pursuance of our legitimate interests
Why? To allow us to analyse the effectiveness of our advertising


Google Analytics

We use Google Analytics to track visitor interaction with our site in order to produce statistical reports. Google collects details of the pages you view and the time you viewed them, the features of your browser, and your IP address. We have enabled IP anonymisation so that Google will not store your complete IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.

To opt out of Google Analytics tracking on our site, see the Google Analytics section of our cookie policy. To opt out of Google Analytics tracking on all sites, use the Google Analytics Opt-out Browser Add-on.


Lawful basis for processing: Pursuance of our legitimate interests
Why? To allow us to analyse how visitors interaction with our site in order to improve our site and our services


Tidio chat widget

When you view a page containing the Tidio chat widget, your browser connects to Tidio. When you chat with us your messages are sent to Tidio and then shared with us, and our responses are sent to Tidio and then shared with you. For more information on how Tidio handles the data it collects, see Tidio’s privacy policy.


Lawful basis for processing: Consent given by data subject
Why? You have sent us a message in the expectation of receiving a reply


PayPal button

When you make a payment through a PayPal button, PayPal collects your name, billing address, and e-mail address, and shares this data with us. For more information on how PayPal handles the data it collects, see PayPal’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Worldpay button

When you make a payment through a Worldpay button, Worldpay collects your name, billing address, e-mail address, and telephone number, and shares this data with us. For more information on how Worldpay handles the data it collects, see Worldpay’s privacy policy.


Lawful basis for processing: Performance of a contract
Why? To enable you to pay for your purchase


Other data collected by third parties

Dailymotion video player

When you view a page containing the Dailymotion video player, your browser connects to Dailymotion. For more information on how Dailymotion handles the data it collects, see Dailymotion’s privacy policy.


Facebook page widget

When you view a page containing the Facebook page widget, your browser connects to Facebook. For more information on how Facebook handles the data it collects, see Facebook’s privacy policy.


Mapbox maps

When you view a page containing Mapbox maps, your browser connects to Mapbox. For more information on how Mapbox handles the data it collects, see Mapbox’s privacy policy.


LinkedIn profile widget

When you view a page containing the LinkedIn profile widget, your browser connects to LinkedIn. For more information on how LinkedIn handles the data it collects, see LinkedIn’s privacy policy.


SchoolTube video player

When you view a page containing the SchoolTube video player, your browser connects to SchoolTube. For more information on how SchoolTube handles the data it collects, see SchoolTube’s terms of service.


Screencast video player

When you view a page containing the Screencast video player, your browser connects to Screencast. For more information on how TechSmith (the operator of Screencast) handles the data it collects, see TechSmith’s privacy policy.


SlideShare presentation player

When you view a page containing the SlideShare presentation player, your browser connects to SlideShare. For more information on how LinkedIn (the operator of SlideShare) handles the data it collects, see LinkedIn’s privacy policy.


Soundcloud audio player

When you view a page containing the Soundcloud audio player, your browser connects to Soundcloud. For more information on how Soundcloud handles the data it collects, see Soundcloud’s privacy policy.


Spotify audio player

When you view a page containing the Spotify audio player, your browser connects to Spotify. For more information on how Spotify handles the data it collects, see Spotify’s privacy policy.


Twitter profile widget

When you view a page containing the Twitter profile widget, your browser connects to Twitter. For more information on how Twitter handles the data it collects, see Twitter’s privacy policy.


Vimeo video player

When you view a page containing the Vimeo video player, your browser connects to Vimeo. For more information on how Vimeo handles the data it collects, see Vimeo’s privacy policy.


YouTube video player

When you view a page containing the YouTube video player, your browser connects to YouTube. For more information on how Google (the operator of YouTube) handles the data it collects, see Google’s privacy policy.