We collect some personal data from you to manage your purchase, communicate with you, fulfil our administrative purposes and to comply with our legal obligations.
We need to share your data with third parties such as postal providers.
We only collect the personal data we need, and we collect, process, store and share this personal data safely and securely. We also ensure the third parties we work with are equally as careful with your data as we are. Furthermore, we only store your personal data for as long as necessary. Different retention periods apply for different types of data, however the longest we will normally hold any personal data is 6 years.
You are in control of your data and if the information we hold on you is incorrect, let us know what needs updating and we’ll correct it.
1 What personal data do we collect?
Categories of data we collect
We may collect and process the following categories of information about you:
|Information we collect||Reason for collecting it|
|Name, contact details (address, contact telephone numbers, email address, IP address).||When you request information or purchase an item from us|
|Information about how you use our website and other forms of electronic communication||When you navigate our website and open and view our email communications. See section 7 for more information|
|Information about your transaction, although we do not retain any bank account or payment card details. When you make a purchase or place an order through contacting us via our website your payment card details will only be retained by PayPal. PayPal processes your payment and notifies us that your item can be dispatched.||When you pay for an item that you are purchasing|
|The communications you exchange with us (for example, your emails, letters, calls, or your messages on our social media accounts)||When you contact us or when we contact you
|Your posts on social media||When you interact with us on social media|
2 How & why we use personal data
We use personal data for the following purposes:
To manage your purchase –
When you purchase an item from us, we use your information to ship the item to you.
To communicate with you & manage our relationship –
We may need to contact you by email for administrative or operational reasons, for example to send you confirmation that your item has been dispatched.
We will also use your personal data after you have sent us a request, filled in a web-form through our website or contacted us on social media, where required, to meet your request.
In order to manage our relationship with you as our customer and to improve our services and experiences for customers we will use the communications you exchange with us and the feedback you may provide.
3 Requesting access to your personal data
We respect your right to control your data. Your rights include:
Right of access – you have the right to access and obtain a copy of the personal data that we hold about you. We will only charge you for making such an access request where we feel your request is unjustified or excessive. You can send an access request via the Data Access Request page.
Right to rectification – you have the right to request that we correct any inaccuracies in the personal data stored about you.
Right to erasure – in certain circumstances, you have the right to request that we erase your personal data. For example, you may exercise this right in the following circumstances:
- your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by us;
- where you withdraw consent and no other legal ground permits the processing;
- where you object to the processing and there are no overriding legitimate grounds for the processing;
- your personal data have been unlawfully processed; or
- your personal data must be erased for compliance with a legal obligation.
Where we store your personal data for statistical purposes, we may not be able to comply with such a request where it would likely impair such statistical purposes or where we require your personal data for compliance with a legal obligation or in connection with legal proceedings.
Right to restriction – you have the right to restrict our processing of your personal data where any of the following circumstances apply:
- where you feel that the personal data which we hold about you are not accurate. This restriction will be in place for a period to enable us to verify the accuracy of your personal data;
- where the processing is unlawful and you do not want your personal data be erased and request the restriction of its use instead;
- where we no longer need to process your personal data (e.g. any of the purposes outlined above have been completed or expire), but we require it in connection with legal proceedings;
- where you have objected to our processing of your personal data pending the verification of whether or not our legitimate business interests override your interests, rights and freedoms.
Where you exercise your right to restrict our processing of your personal data, we will only continue to process it with your consent or in connection with legal proceedings or for the protection of the rights of other people or for reasons of important public interest.
Right to data portability – you have a right to receive and transfer the personal data that you provide to us in a structured, commonly used and machine readable format where we process your personal data on the legal bases of: a) your consent; or b) where it is necessary to perform our contract with you. Where you make such a request, we will directly transfer your personal data on your behalf to another controller of your choice (where it is feasible for us to do so).
Right to withdraw consent – you have a right to withdraw your consent, at any time, to our processing of your personal data which is based on your consent. Where you exercise this right, our processing of your personal data prior to your withdrawal of consent will remain valid.
Right to object to processing – In certain circumstances, you have a right to object to our processing of your personal data where we process it on the legal bases of our legitimate business interest or your consent to marketing. We may not be able to comply with such a request where we can demonstrate that there are compelling legitimate grounds for us to process your personal data which override your interests, rights and freedoms or where the processing of your personal data is required for compliance with a legal obligation or in connection with legal proceedings.
If you would like to make a personal data access request, please email us at firstname.lastname@example.org with the subject title ‘My data request’ including the following required Information:
- your full name;
- a description of your data access request;
- all email addresses (past and present) used to book trips with us; and
- attach to the email a copy of your current and valid photo ID (for example, passport photo page).
From the date that we receive ALL the required Information, we have one month to process your request. If the request is complex or numerous we may require an additional two months and will contact to explain why the extension is necessary within the first month of your request.
If you have questions in relation to your personal data, please contact us at: email@example.com
4 Security of your personal data
We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage to personal data. When you provide your personal data through our website, this information is transmitted across the internet securely using high-grade encryption.
5 Holding of your personal data
To fulfil our administrative purposes, we’ll hold onto your personal data such as name, address and email address.
Where we or third parties are required to comply with legal obligations, we will hold the data for the period we/they are legally obliged to.
We respect your right to control your data, details are covered in section 3.
6 Cookies or other tracking technologies
Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise the device you are using and provide you with a better website experience.
For example, we use software to monitor customer traffic patterns and website usage to help us develop the design and layout of the website in order to enhance the experience of the visitors to our website. This software does not enable us to collect any personal data, however it does recognise your IP address.
You can delete cookies if you wish; while certain cookies are necessary for viewing and navigating on our website, most of the features will still be accessible without cookies.
How to manage or opt out of cookies
If you’d prefer to restrict, block or delete cookies from this website you can use your browser to do this. Visit www.aboutcookies.org to view full details of how to manage cookies on different types of web browser.
How do I change my cookie settings?
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org
Find out how to manage cookies on popular browsers visit the browser developer’s website.
7 Sharing your personal data
We may also share some of your personal data with, or obtain your personal data from, the following categories of third parties:
If you believe that any aspects of your data protection or privacy rights have been infringed by us, you can complain directly to us at firstname.lastname@example.org or to the UK Information Commissioner’s Office which regulates and enforces data protection law in the UK. Details of how to do this can be found at www.ico.org.uk
Dated: 22 May 2018