Changes to Data Protection Legislation. The UK Data Protection Act 2018 (DPA 2018), the applied GDPR (General Data Protection Regulation) has introduced significant and enhanced Rights for Data Subjects, which we will outline in this Privacy Notice.
The Data Controller. We, Warren James (Jewellers) Limited) are what is known as the Data Controller, namely we have decided upon the purpose and means of processing your personal data on Website. Our contact details are:
Data Protection Officer (DPO). Warren James (Jewellers) Limited’s DPO can be reached at PO Box 755, Stockport, SK5 9AN or email firstname.lastname@example.org. Warren James (Jewellers) Limited’s DPO fulfils a number of roles, one of which is to be the primary and independent point of contact for Data Subjects, namely you. If you wish to contact Warren James (Jewellers) Limited DPO, please email or send a letter to our contact details above.
Lawful Basis of Processing Personal Data When Visiting This Website. The lawful basis of processing your personal data is
Purpose of Processing Personal Data. Personal data is collected on our Website for the following purposes
Warren James (Jewellers) Limited may collect and process other personal data of yours, however where this occurs there will be a supporting Privacy Notice.
Categories of Personal Data Processed by Warren James (Jewellers) Limited. We will collect and process the following personal data when you use Website.
This list is not exhaustive and occasionally we may need to collect additional data for purposes set out in this policy.
In addition, when you visit our website, open our emails, use our apps or interact with our related tools, widgets or plug-ins, we may collect certain information by automated means, such as cookies, web beacons and web server logs. The information we collect in this manner may include your IP address, unique device identifier, browser characteristics, domain and other system settings, search queries, device characteristics, operating system type, language preferences, referring URLs, actions taken on our site, dates and times of website visits, metadata and other information associated with other files stored on your device. Through these automated collection methods, we obtain ‘clickstream data’, which is a log of the links and other content on which a visitor clicks while browsing a website. We may link certain data elements we have collected through automated means, such as your browser information, with other information we have obtained about you for the purposes described below, and to let us know, for example, whether you have opened an email we sent to you. While you can change your cookies settings in your browser, please note that without cookies your use of the website may be impaired.
We may also offer internet-based advertising programs on our website such as AdChoices and NetworkAdvertising. These third-party services selectively display adverts based on browsing history. You can opt out of these services via these third party websites (please note we have no control over third party websites).
We also may collect information about the location of the mobile device or tablet used to access the website (“Location Data”). Location Data includes: (a) the location of the mobile device or tablet derived from GPS or WiFi use; (b) the IP address of the mobile device or tablet or internet service used to access the website; and (c) other information made available by a user or others that indicates the current or prior location of the user, such as geotag information in photographs. If you do not want us to collect Location Data from your device, please delete the app or disable the location settings on your device or tablet. Note, however, that disabling the location setting may affect your ability to access and use that app.
When you connect with social media though the website, you may link with social media platforms and social media plug-ins (e.g., the Facebook “Like” button, “Share to Twitter” button) (collectively, “Social Media”). When accessing services through a Facebook or other Social Media account, we may (depending on the applicable user privacy settings) automatically have access to information provided to or through the Social Media platform. We may collect and use this information for the purposes described in this Policy or at the time the information is collected.
Information collected directly by the third party providers of the features is subject to the privacy policies or notices of these providers. We are not responsible for these providers’ information and privacy practices.
How Do We Use Your Data? We use the data that we collect about you for the following purposes:
We will not disclose any of the information that you provide to us about yourself or anyone else to any third parties without your consent, although we reserve the right to disclose your information if the law requires us or permits us to do so. We may share personal information with service providers who perform services on our behalf. These service providers are permitted to use or disclose the information only as necessary to perform services on our behalf or comply with legal requirements.
We may use information collected through cookies, web beacons, pixels, web server logs and other automated means for purposes such as (a) customising our users’ visits to our website, (b) delivering content tailored to our users’ interests and the manner in which our users browse our website, and (c) managing our website and other aspects of our business. To the extent required by applicable law, we will obtain your consent before collecting information using cookies or similar automated means.
We may use third-party analytics services on our websites and apps, such as those of:
The analytics providers that administer these services use technologies such as cookies, web server logs and web beacons to help us analyse your use of our website. The information collected through these means (including IP address) may be used by these analytics providers and other relevant third parties who use the information, for example, to evaluate use of the website. To learn more about these analytics services and how to opt out, please visit the relevant websites listed above.
Transfer of Personal Data Outside the EEA (European Economic Area). All personal data collected by Warren James (Jewellers) Limited is stored in servers and data centres within the UK.
Sale or Passing of Personal Data to Third Parties. We will not sell or pass your personal data to any company, other than those described above. However, to support law enforcement investigation and other obligations, Warren James (Jewellers) Limited may be required to pass personal data outside of normal processes, for very specific and limited purposes.
Retention of Personal Data. We will not retain your data for longer than necessary for the purposes set out in this policy or as required by law or pursuant to our statutory obligations. Different retention periods apply to different types of data. Whilst we will not normally hold any personal data for longer than six years, we reserve the right to retain it to the extent permitted by law, or longer than six years in the event of a dispute or claim.
Data Subject’s Rights. Under DPA 2018 legislation you have a number of Rights which we have outlined below:
Fees and Timings. This information will be provided to you without charge; without delay and within one month. If an extension is required you will be informed of this. If requests are considered manifestly unfounded or excessive, in particular because they are repetitive, Warren James (Jewellers) Limited may choose to:
The reasons for this will be formally notified to you and your rights to appeal to the appropriate Supervisory Authority, i.e. UK Information Commissioner’s Office (ICO) will be highlighted.
Identify Verification. To protect your personal data, Warren James (Jewellers) Limited will seek to verify your identity before releasing any information, which will normally be in electronic format.
In these circumstances Warren James (Jewellers) Limited will provide a copy of your data to you in an electronic format free of charge, without undue delay and within one month. If there is a delay to this, you will be informed by Warren James (Jewellers) Limited.
Cookies. This section outlines the type of cookies we apply to the Website. The cookies we use are described as below:
Please note that this website is not for use by children or any persons under the age of 16.
Our Privacy Notice relating to the use of CCTV and Visual Surveillance Systems in our shops can be obtained by contacting email@example.com.
Our Privacy Notice for our employees can be obtained by contacting HR or firstname.lastname@example.org January 2020