We are committed to protecting the accuracy, confidentiality, and security of your personally identifiable information (“Personal Information”). This privacy policy outlines how we collect, use, and disclose Personal Information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Introduction We are responsible for safeguarding the Personal Information we handle. We have designated an individual or team responsible for ensuring compliance with this privacy policy and relevant data protection laws.
2. Identifying Purposes We collect, use, and disclose Personal Information to provide the products or services you have requested and to offer additional products or services that may be of interest to you. The specific purposes for which we collect your Personal Information will be communicated at or before the point of collection. In cases where the purpose is obvious, such as when you provide payment information to complete a transaction, your consent will be implied.
3. Legal Basis for Processing Personal Information Under UK GDPR, we process your Personal Information on one or more of the following legal bases:
Consent: You have given clear consent for us to process your Personal Information for a specific purpose.
Contract: The processing is necessary for a contract you have with us or because you have asked us to take specific steps before entering into a contract.
Legal Obligation: We need to process your data to comply with a legal obligation.
Legitimate Interests: The processing is necessary for our legitimate interests or those of a third party, provided these are not overridden by your rights.
4. Consent Your consent is required to collect, use, or disclose Personal Information unless otherwise required by law. Providing Personal Information is optional, but if you choose not to provide certain information, it may limit our ability to offer you certain products or services. Consent can be withdrawn at any time by contacting us.
5. Limiting Collection We will collect Personal Information only as needed for the specific purposes identified. Personal Information may be collected through various means, including in person, over the phone, by mail, or electronically, with your consent.
6. Limiting Use, Disclosure, and Retention We will use or disclose your Personal Information only for the purpose it was collected unless you provide further consent or when required by law. We will retain Personal Information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law.
7. Data Accuracy We will take reasonable steps to ensure that Personal Information is accurate, complete, and up to date. You may update or correct your Personal Information at any time by contacting us.
8. Data Security We employ appropriate technical and organizational measures to protect your Personal Information from unauthorized access, loss, or disclosure, in line with the sensitivity of the information we collect.
9. Transparency We are committed to transparency about our data protection policies and practices. You may request information regarding how your Personal Information is managed.
10. Your Rights Under the UK GDPR, you have the following rights regarding your Personal Information:
Access: You have the right to request a copy of the Personal Information we hold about you.
Rectification: You can request corrections to your Personal Information if it is inaccurate or incomplete.
Erasure: You have the right to request that we erase your Personal Information, subject to certain conditions.
Restriction of Processing: You can ask us to restrict the processing of your Personal Information in certain situations.
Data Portability: You have the right to request that we transfer your data to another organization or directly to you, where technically feasible.
Objection: You have the right to object to the processing of your Personal Information where processing is based on legitimate interests.
To exercise any of these rights, please contact us using the information provided below.
11. Handling Complaints and Queries If you have any questions or concerns about our privacy policy or how we handle your Personal Information, you may contact us. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection authority.
