Effective Date: 21 April 2020.
When do we collect personal data about you?
We collect personal data when you visit any of our websites and use your account to buy products and services, when you make an online purchase, when you engage with us on our social media channels, when you sign up for newsletters and alerts, when you enter data into online forms on our websites, when you contact us (including by email, telephone or online chat), when you complete surveys or questionnaires, when you participate in prize draws or competitions, comment on or review our products and services, and when you participate in public user postings such as comments and discussion forums.
What personal data do we collect about you?
The personal data collected varies and may include information that you provide, such as your name, mailing address, billing address, email address, telephone number, fax number, information required to process your order such as the name and address of recipients, details of your interactions with us, etc. For your security, we’ll also keep an encrypted record of your login password if you create an account on our website.
We may also automatically collect data about the devices you use to interact with our websites. The data we automatically collect may include IP address, device identifier, web browser, and browsing information collected through cookies, web beacons, pixels, clear gifs, and other similar technologies (collectively “Cookies and Other Tracking Technologies”) on our websites. We may also automatically collect data about how you use our websites, such as what you have searched for and viewed on the websites. The data automatically collected will be associated with any personal data you have provided.
How do we use the personal data we collect about you?
The personal data we collect may be used where we have your specific consent to do so, or where we have a legitimate interest in, or other legal reasons for, processing such data.
What automated decision making and/or profiling do we do with the data?
We want to ensure you enjoy the best experience that we can offer, whether it be the shopping experience you have on our website or through our communications with you. We believe sharing timely and relevant information with you, provides a more tailored, and so better, experience. We achieve this by combining all the data we have about you; how you’ve previously used our website, the products you’ve purchased and how you’ve responded to our direct communications. This enables us to showcase to you a more relevant set of products on our website & share news of the most relevant products, offers and events. The data privacy law allows this as part of our legitimate interest in understanding our customers and our promise to provide the highest levels of service.
How do we protect your personal data?
We have implemented generally accepted standards of technology and operational security to protect personal data from loss, misuse, alteration, or destruction. Only authorised personnel and third-party service providers are provided access to personal data, and these employees and service providers are required to treat any personal data dataas confidential. Despite these precautions, however, we cannot guarantee that unauthorised persons will not obtain access to your personal data.
Who do we share your personal data with?
We will not intentionally disclose or transfer (and will take reasonable steps to prevent the unauthorised or accidental disclosure of) your personal data to third parties without your consent, whether for such third parties’ own marketing purposes or otherwise, except as follows. We may provide access to your personal data to third-party service providers engaged by us to provide services related to the websites, provided that such third-party service providers will first agree to maintain the strict confidentiality of such data and provide the same level of data security as provided by us.
We also may share your personal data with third-party service providers who perform services and functions on our behalf to support our interactions with you, including, for example, processing and fulfiling orders, administering surveys or contests, or communicating with you. These third-party service providers are not permitted to use or disclose your personal data except as necessary to perform services on our behalf or to comply with legal requirements.
Additionally, we may disclose your personal data:
- If we are required to do so by law or legal process;
- To law enforcement authorities or other government officials;
- When we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity;
- If disclosure is necessary to protect the vital interests of a person;
- To protect our property, services and legal rights;
- To prevent fraud against us, our subsidiaries, affiliates and/or business partners;
- To support auditing, compliance, and corporate governance functions;
- To comply with any and all applicable laws; or
- In the event of a re-organisation, merger, sale, joint venture, assignment, or other transfer or disposition of all or any portion of our business.
Where your personal data may be processed
Personal data collected on our websites may be transferred from time to time to our subsidiaries and affiliates and their personnel, as well as to third-party service providers located throughout the world, including in countries where the local law may grant you fewer rights than you have in your own country. Additionally, our websites may be hosted by third-party service providers anywhere in the world.
Where required by law, we have put in place legal mechanisms designed to ensure adequate data protection of your personal data that is processed by our subsidiaries, affiliates and third-party service providers, including the transfer of your personal data to countries other than the one in which you reside. If you would like more information about these legal mechanisms, which may include the EU’s Standard Contractual Clauses, please contact us at the address below. By using any of our websites and providing information on any of them, you voluntarily consent to such trans-border transfer and hosting of your personal data.
How long will we keep your personal data?
What are your rights over your personal data?
Where granted by local law, you may have the right to request access to the personal data that we have collected about you review the data, or request that the data be modified or deleted. You may also have the right to request a copy of the personal data that we have collected about you and to have any inaccuracies in that data corrected. In certain circumstances, you may also request that we cease processing your personal data.
If you would like to make a request to access, review, or correct the personal data we have collected about you, or to discuss how we process your personal data, please contact us at firstname.lastname@example.org. To help protect your privacy and security, we will take reasonable steps to verify your identity, such as requiring a password and user ID, before granting access to your personal data. We will make reasonable attempts to promptly investigate, comply with, or otherwise respond to your requests as may be required by applicable law.
Different laws may prevent us from providing access to your personal data or otherwise fully complying with your request depending upon the circumstances and the request, such as for example, where producing your data may reveal the identity of someone else. We reserve the right to charge an appropriate fee for complying with your request where allowed by applicable law, and/or deny your requests where they may be manifestly unfounded, and/or excessive, or otherwise objectionable or unwarranted under applicable law.
Contacting the Regulator
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. You can contact them by calling 0303 123 1113 or go online to www.ico.org.uk/concerns (opens in a new window; please note we can’t be responsible for the content of external websites). If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.
How do I stop receiving marketing promotions and offers
Our websites are not designed for or directed at children 13 years of age or younger, and we do not intentionally collect or maintain personal data about anyone under this age.
How to contact us
Cotswolds Hampers Limited
19 Lynn Close
Oxford OX3 0JH
or by email to email@example.com