In specific situations, we collect and process your data to send out a newsletter to you by email. We only do this when you consent to receiving a newsletter i.e. when you tick a box to receive a newsletter on our website or when you personally give us your email address in the shop so that you can receive a newsletter. You can amend your preferences to receive this email at any time. We do not pass on this personal data to third parties for their own marketing purposes.
Our cookies policy is reviewed and amended on a regular basis to meet current legislation.
In certain circumstances we need your personal data to comply with our contractual obligations. For example, when you set up an online account with us and order an item from our website we will collect your personal data (your address, email address and telephone number/s) to meet our contractual obligation and to deliver your purchase. We will pass this information onto our courier. This data will be retained by the courier for as long as is necessary to meet their contractual obligations.
In specific situations we require your email address or telephone number to pursue our legitimate interests in a way in which might be reasonably required to run our business, for example to inform you of products of interest in line with your previous buying history or to make you personalised offers. We also collect your email address and/or telephone number/s when you require us to contact you about a specific product or brand or when your details are required for a specific transaction, a repair, a complaint or a query. Other occasions when we can collect this personal data include when you make an enquiry via our website, enter one of our competitions and/or engage with us on social media. Any data collected by us in these ways is locked away or stored on our computers with several layers of password protection. When we collect and process data, we will only keep this data for as long as is necessary to complete the task for which it was collected, or for as long as is legitimately required by the business. All stored data will be kept and reviewed after a five year period so that we can adhere to our legal and contractual obligations. This data collection does not impact on your rights.
We will pass over your personal details when the law requires us to, for example if there has been, or if there is a suspected incident of crime or fraud where some, or all, of your personal details or CCTV images are legally required.
If you visit our shop your image will be recorded on CCTV during your visit. This image will be held on CCTV memory for less than one month.
When you set up an online account with us we do not store your password but can generate a new, temporary password if you have problems accessing your account. We strongly recommend that you do not use the browser’s password memory function as this may permit other people using your terminal to access your account. Please contact us if you feel your account is being used in an unauthorised manner.
We use Sagepay, an online secure payment provider, to process your payments when you order from us online. This facility is password protected and has a time out facility. Sensitive data such as payment card information is secured and tokenised. We only access and pass on specific details collected by SagePay - your contact details, your location at the time of order, the basic card information used in an order and the IP address linked to your order - if we suspect your order is part of a fraudulent attack or when we are required to do so by law.
Receipts from card transactions made in the shop via Global Payments are securely stored and retained for as long as is required by the HMRC. They are not passed onto any third party unless they are required for accountancy or other legal requirements.
If you apply for a job with us and are unsuccessful, your personal data will be destroyed after the interview process. Information about existing members of staff will be stored securely and only used to meet legal, accountancy and HMRC regulations. When you leave employment with us, your details will be deleted following the issue and management of necessary employment and HMRC documentation.
Please contact us if you require information, wish to correct or have any concerns regarding the data we hold about you. If you have given us consent to use your personal data, you can withdraw that consent at any time. Where we rely on our legitimate interest to process your data, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue the processing of this data. In the interests of confidentiality, we will ask you to verify your identity before proceeding with any request about your data or ask you to prove you have permission to act on behalf of a third party.
For further information about this policy, please contact Georgina Collins at firstname.lastname@example.org, on 01423 565002 or in writing to 50 Parliament Street, Harrogate, North Yorkshire, HG1 2RL.