For the purposes of the Data Protection Act 2018 and the General Data Protection Regulation (EU) 2016/679) ("GDPR") and all successor legislation to the Data Protection Act 2018 and the GDPR (the "Data Protection Legislation"), the data controller is "Company name here" (company number here) of (company address here).
We may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from (date here).
Information you give us
This information about you that you give us by filling in forms on our website or by corresponding with us by phone, email or otherwise. This can include information you provide to us when completing our enquiry form; register for our newsletters, enter a competition, promotion or survey; when you report a problem with our site; and when you give us feedback.
The information you give us may include :
Information we collect about you
When you visit our website we may automatically collect the following informations:
We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philisophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
What we do with the information we gather
We will only use your personal data when the law allows us to. We will use your data to understand your needs and provide you with a better service and in particular for the following reasons.
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
We may use your identity, contact details, usage data, technical data and marketing preferences to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which properties and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us and you have not opted out of receiving that marketing.
We will get your express opt-in consent before we share your personal data with any company outside of our group for marketing purposes
If you would prefer not to receive any particular information from us, please inform us of this by sending us an appropriate email explaining this to email@example.com, write to us at The Old Dairy. You can ask us or third parties to stop sending you marketing messages by contacting us at any time.
Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of any transaction or contract entered into between you and us.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the orginal purpose, please conact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
However, the transmission of information via the internet is never completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your personal information for as long as is necessary to carry out the purposefor which it has been collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Your rights/Controlling your personal information
Under the Data Protection Legislation you may be entitled to the following rights:
Where you have provided your consent to the processing of your personal data for any purpose, you have the right to withdraw such consent at any time by contacting us at firstname.lastname@example.org, write to us at The Old Dairy, Maidstone Road, St Mary's Platt, Sevenoaks Kent TN15 8JJ
You can ask us to rectify any inaccuracies in the personal information that we hold about you.
You can request the erasure of personal information that we hold about you where there is no good reason for us to continue processing it, where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.
You can object to our processing of your personal data where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
You have the right to restrict our processing of your personal data (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
You can request a copy of your personal data from us in a commonly used and machine-readable format or that we transmit your personal data to another data controller.
You have the right to access information held about you. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
You can exercise any of the above rights at any time by contacting us at email@example.com, write to us at The Old Dairy, Maidstone Road, St Mary's Platt, Sevenoaks Kent TN15 8JJ
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffice or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an idividual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way give us access to your computer or any information about you, other than the data you choose to share with us.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.