This policy describes how Gifts From Handpicked collects and uses personal data in accordance with the General Data Protection Regulation (GDPR).
The following describes how our procedures effect your personal data and how we will use it.
Gifts From Handpicked are an online retailer of Gifts and Homewares and are based at Unit 5 Hereward Business Centre, 296 Newark Road, North Hykeham. Lincoln. LN6 8JX.
For the purpose of the Data Protection Legislation and this policy, we are the ‘data controller’. This means that we are responsible for deciding how we hold and use personal data that is required under the Data Protection Legislation to notify you of the information contained in this privacy notice.
TYPES OF DATA PROCESSED
We will process ‘personal data’ as defined in Article 4(1) GDPR if you have given us information about yourself by completing forms on our website or corresponding with us by phone, email, in store or otherwise. The information you provide may include: your name, your contact details: postal address, telephone numbers (including mobile numbers) and e-mail address, as well as your purchase history.
HOW WE USE YOUR PERSONAL DATA
We may use information about you in the following ways:
- To provide you with information or services that you have requested from us.
- To carry out our obligations arising from any contracts or arrangements entered into between you and us.
- We may use the information to provide you with product information regarding the products you have purchased from us in the past and also for future purchases.
LEGAL BASIS FOR DATA PROCESSING
By providing us with your personal data and asking us to deliver you with your order and services you provide us with your permission to utilise your personal data for those purposes.
We may also use your personal data in delivering, promoting and developing our services and products. Activities promoting our products and services include marketing which you may opt-out of at any time. Opt-out can be achieved by emailing us at: firstname.lastname@example.org
Certain statutory obligations apply to Gifts From Handpicked which require us to process personal data and in some circumstances to provide it to third parties, such as law enforcement. Where such obligations arise we will,without breaching any other duty we owe to those services, advise you of our intention to process your data for their purposes.
We will process personal data for so long as you instruct us to do so and in accordance with our legal obligations. Upon termination of our services to you we will retain your data in accordance with our internal and statutory requirements.
Personal data we collect are managed in accordance with our Data Retention Policy which reflects current legal obligations. Retention periods for personal data vary.
To administer your order we will share your data with our delivery couriers using minimal information required to fulfil your order.
We will only share your personal data with third parties where we are required to by law.
We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
We Do NOT sell, distribute or lease your personal information to third parties unless we are required to do so by law.
YOUR DATA SUBJECT RIGHTS
As a data controller for your data you may exercise a number of rights.
- Request access to the personal data we hold about you
- Ask us to correct any data which are inaccurate
- Request to have your personal data deleted
- Put in place restrictions on our processing of your data
- Ask us to transfer your data to another controller (data portability)
We will handle all exercise of your data subject rights in accordance with the requirements of GDPR and any national laws at the time of your request. Requests should be submitted in writing to email@example.com
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
If you are dissatisfied with the way we have handled your personal data and we are unable to resolve the matter for you, you may take your complaint to the Information Commissioner’s Office. Further details can be found via their website at www.ico.org.uk.
Our website is hosted on a secure website with an SSL certificate.
Data transferred over the internet by us and through our website are protected using encryption technologies to ensure they remain secure.
We may use your personal data to provide you with details about our business updates, services, products and events which we think may be of interest via an email newsletter.
You have the right to opt-out by unsubscribing of receiving the information detailed above at any time. To opt-out of receiving such information you can: email firstname.lastname@example.org or at the time of receiving an email select unsubscribe.
VISITORS TO OUR WEBSITES
We may collect and process personal data about you in the following circumstances:
When you complete the online contact forms on our website providing us with your name, address, email address and contact number.
Whenever you provide information to us when reporting a problem with our Site, making a complaint, making an enquiry or contacting us for any other reason. If you contact us, we may keep a record of that correspondence.
When you visit our Sites we will retain details such as traffic data, location data, weblogs and other communication data, and the resources that you access (see section on Cookies below); and
Whenever you disclose your information to us, or we collect information from you in any other way, through our Sites.
We may also collect data in the following ways:
We may collect information about your device, including where available your Internet Protocol address, for reasons of fraud protection. We may also collect information about your device’s operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
Cookies are used to respond to an enquiry submitted via our online contact forms.
Ensure that content from our Sites are presented in the most effective manner for you and for your device.
Improve our Sites and services.
Process and deal with any complaints or enquiries made by you; and
Contact you for marketing purposes where you have signed up for these.
Our Site may, from time to time, contain links to and from the websites of third parties. Please note that if you follow a link to any of these websites, such websites will apply different terms to the collection and privacy of your personal data and we do not accept any responsibility or liability for these policies. Please check before you submit your information to these websites.
CHANGES TO THIS STATEMENT
We recommend you check this statement on a regular basis to ensure you remain happy with the activities we carry out in respect of processing personal data.
Should we make significant changes to the way we process data, we will draw your attention to the relevant part(s) of this statement through email and or other appropriate communications as part of our engagement activities with you.
If you have any questions regarding this notice or if you would like to speak to us about the manner in which we process your personal data, please email us at email@example.com or call us on 01522 262690.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, at any time. The ICO’s contact details are as follows:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Telephone – 0303 123 1113 (local rate) or 01625 545 745.
Website – www.ico.org.uk