(1) What information do we collect?
We may collect, store and use the following kinds of personal data:
(a) information about your computer and about your visits to and use of this website, such as your IP address, geographical location, browser type, referral source, length of visit and number of page views;
(b) information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our goods or services;
(c) information that you provide to us for the purpose of registering with us;
(d) information that you provide to us for the purpose of subscribing to our website services, email notifications and/or newsletters;
(e) any other information that you choose to send to us; and
(f) information that you provide in the process of ordering goods or services from us.
It can contain any text based information, but it cannot be used to spread viruses or other malicious software. This enables the web server to identify and track the web browser, for example, it enables your order in the 'shopping basket' to be transferred to our secure server when proceeding to the checkout to pay.
We may send a cookie which may be stored on by your browser on your computer’s hard drive. We may use the information we obtain from the cookie in the administration of this website, and to improve the website’s usability. We may also use that information to recognise your computer when you visit our website, and to personalise our website for you.
Most browsers allow you to refuse to accept cookies. (For example, in Internet Explorer you can refuse all cookies by clicking “Tools”, “Internet Options”, “Privacy”, and selecting “Block all cookies” using the sliding selector.) This will, however, have a negative impact upon the usability of many websites, including this one.
We do not use the cookie information for any other purpose beyond making your experience on the website as smooth and enjoyable as possible, and do not ourselves use cookie information for any marketing or advertising purposes.
(3) Using your personal data
We may use your personal information to:
(a) administer the website;
(b) improve your browsing experience by personalising the website;
(c) enable your use of the services available on the website;
(d) send to you goods purchased via the website, and supply to you services purchased via the website;
(e) send statements and invoices to you, and collect payments from you;
(f) send you general (non-marketing) commercial communications;
(g) send you email notifications which you have specifically requested;
(h) send to you marketing communications relating to our business or other organisations if you give us permission to do so, where you have specifically agreed to this, by post, email or similar technology (you can inform us at any time if you no longer require marketing communications to be sent by emailing us at firstname.lastname@example.org);
(i) provide us with statistical information about our users;
(j) deal with enquiries, suggestions and complaints made by or about you relating to the website; a
We will not, without your consent, provide your personal information to any third parties for the purpose of direct marketing.
(4) Other disclosures
(a) to the extent that we are required to do so by law;
(b) in connection with any legal proceedings or prospective legal proceedings;
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
(5) International data transfers
(6) Security of your personal data
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
We will store all the personal information you provide on our secure servers. All electronic transactions you make to or receive from us will be encrypted.
Our Payment Service Provider is Sage Pay (formerly Protx) – the largest independent payment service provider (PSP) in the UK and Ireland. Sage Pay provides a secure payment gateway (Level 1 PCI DSS), processing payments for thousands of online businesses, including ours. It is Sage Pay’s utmost priority to ensure that transaction data is handled in a safe and secure way.
Sage Pay uses a range secure methods such as fraud screening, I.P address blocking and 3D secure. Once on the Sage Pay systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards.
Sage Pay is PCI DSS (Payment Card Industry Data Security Standard) compliant to the highest level and maintains regular security audits. They are also regularly audited by the banks and banking authorities to ensure that their systems are impenetrable.
Sage Pay is an active member of the PCI Security Standards Council (PCI SSC) that defines card industry global regulation.
In addition, you know that your session is in a secure encrypted environment when you see https:// in the web address, and/or when you see the locked padlock symbol alongside the URL.
So when buying through our site, you can be sure that you are completely protected.
More information about shopping securely with Sagepay can be found at www.sagepay.com/shoppers
Of course, data transmission over the internet is inherently insecure and we cannot guarantee the security of data sent over the internet, but we promise you we take our responsibility to keep your data safe very seriously.
(7) Policy amendments
(8) Your rights
You may instruct us to provide you with any personal information we hold about you. Provision of such information may be subject to the payment of a fee (currently fixed at £10.00).
You may instruct us not to process your personal data for marketing purposes by email at any time. (In practice, you will usually either expressly agree in advance to our use of your personal data for marketing purposes, or we will provide you with an opportunity to opt-out of the use of your personal data for marketing purposes.)
(9) Third party websites
The website contains links to other websites. We are not responsible for the privacy policies or practices of third party websites.
(10) Updating information
Please let us know if the personal information which we hold about you needs to be corrected or updated.