Document Version 2.0.3 – Effective From 2018.06.06
Who we are
We are Alastair Bols Ltd (referred to as “we” or “us” or “our”). We own and operate this website. Our full contact details are available on our contact page. Please contact us if you have any questions or feedback about this policy.
For the purposes of relevant data protection regulations, we are the data controller for information gathered via this website except in any circumstances explicitly stated as exceptions in this policy.
The point of this policy
This policy is here to inform you, to the best of our ability, about personal information collected from you when you use our website or otherwise. This includes how we get that information, how we might process or use that information, how and when we might disclose it and how you can control what we do with your information.
You should not use this website or provide us with any information via forms on our website unless you are completely happy with this policy. If you do use our website we will assume that you have read, understood and are happy with the terms of this policy.
It is important that you read this policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This policy supplements the other notices and is not intended to override them.
Changes to this policy
This policy is reviewed regularly and is subject to change. In the event that the policy is updated we will update this page and display a notice that the policy has been updated on our website home page.
If we make material changes to how we treat personal data we will employ our best efforts to notify you by email and through a notice on the website home page. The date this policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you and for periodically visiting our website and this policy page to check for any changes.
The data we collect
We may collect, use, store and transfer different kinds of personal data about you which we have categorised as follows:
- Information you give us
This is information you might choose to give us by filling out forms on our web site or otherwise and might include things like your name, address, email addresses and telephone numbers etc. Often these forms might also include options to specify your interests, ask questions, make comments or provide other optional information about you relevant to your enquiry.
- Marketing and communications data
This is information about your preferences in receiving marketing from us and your communication preferences.
- Financial data
This is information such as bank account and payment card details you might provide, for example, in relation to the performance of a contract we are about to enter into or have entered into with you.
- Transaction data
This is information about our transactions with you such as details about payments to and from you and other details of products and services you have purchased.
- Automatically collected information (web server logs)
When you visit our website some anonymous technical information is usually recorded automatically by both your Internet Service Provider (ISP) and the Internet Service Provider (ISP) web server that hosts our website. Examples include the Internet Protocol (IP) Address used to connect your computer to the internet, the time and date of the connection, software information such as browser type and version, type of operating system and platform (e.g. windows, mac or mobile device etc) and the pages visited. This information is not stored or processed by us.
How we collect information
When you visit a website, information can be collected and stored about you and your visit. We collect personally identifiable information via our website when you choose to fill out and submit an online form. These forms are provided to you as a convenient and structured alternative to sending us an email and employ the same technology and security as sending us an email directly.
You may also give personally identifiable information to our representatives via telephone, email or personally at trade shows or other marketing events in connection with marketing, promotion or sale of our products.
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.
Lawful basis for processing your personal data
We have a lawful basis for our processing of your personal data, including processing for our legitimate interests (when balanced against your rights and freedoms), to fulfil our obligations to you under any contract with you, as required by law and with your consent.
Within the European Union the processing of your personal data is lawful only if it is permitted under the applicable data protection laws. We have a lawful basis for each of our processing activities (except when an exception applies as described below):
- Legitimate interests
We will process your personal data as necessary for our legitimate interests. Our legitimate interests are balanced against your rights and freedoms and we do not process your personal data if your rights and freedoms outweigh our legitimate interests. Specifically, our legitimate interests are to: facilitate communication between us and you; detect and correct bugs and to improve our website, products, and services; safeguard our IT infrastructure and intellectual property; detect and prevent fraud and other crime (including misappropriation of intellectual property); promote and market our business; check your credit and perform risk assessments; and develop our products and services.
- To fulfil our obligations to you (under agreement or contract)
We process your personal data in order to fulfil our obligations to you pursuant to any agreement or contract with you to deliver our products and services to you.
- As required by law
We may also process your personal data where it is necessary for compliance with a legal obligation that we are subject to.
Generally, we do not rely on consent as a legal basis for processing your personal data, although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.
How we process / use your information
We work hard to make sure that any information you give us is used only to fulfil the purpose for which the information was given to us.
Reasons that we might collect, process and use your information include:
- To help us to communicate with you effectively and for the provision of products and services we supply to you.
- To answer questions that you ask or respond to feedback, queries or comments that you submit to us and to verify or validate any claims that you may make.
- To notify you about important product and service information that may directly affect you (non-marketing communications).
- To notify you about products and services that may be of interest to you (marketing communications). You may receive marketing communications from us if you have registered with us for the possible sale or purchase of a product or service, but you can opt out of receiving marketing communications at any time as detailed in this policy.
- We may use personal data to recognise you when you visit or return to our site so we can increase security, prevent or detect fraud or abuses or to help us improve our site and services.
- We might retain personal data from closed or obsolete user accounts in order to comply with legal obligations, enforce our terms and conditions, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations and take other actions as permitted or required by law.
- We may access, remove, alter, store, disclose or otherwise use any personal data if we have reason to believe that it breaches our terms and conditions, or that such steps are necessary to protect us or others, or that a criminal act has been committed, or if we are required to do so by law or appropriate authority.
- For internal record keeping and to improve our products or services
How long we keep your information
We will hold the information you give us for as long as necessary to fulfil the purpose for which it was given and for a reasonable period thereafter. We will review the information held on a periodic basis and delete information which we assess will no longer be required for any future dealings between you and us.
How and when we might disclose information
Unless otherwise stated in this policy (and only when required to fulfil the purpose for which the information was given), we do not share, sell, distribute, modify, lease or otherwise disclose the information you give us via this website to any third party for marketing or any other purpose unless:
- we are instructed to do so by law or appropriate authority;
- it is necessary to enforce or apply our terms and conditions;
- such steps are necessary to protect us or others;
- we have reason to believe that a criminal act has been committed;
- for the purpose of facilitating conflict resolution; or
- we have your explicit consent.
We reserve the right to disclose information as required in the case of an actual or proposed sale (including negotiations for) or merger or business combination involving all or the relevant part of our business. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this policy.
Except as otherwise specifically included in this policy, this document addresses only the use and disclosure of information we collect from you. If you disclose your information to third parties, whether they are other users of our site or other websites, different rules may apply to their use or disclosure of your information.
We do not transfer your personal data outside the European Economic Area (EEA).
Current third-party disclosures
|Tsohost||Tsohost is the Internet Service Provider (ISP) that hosts our website. We do not share information you give us with Tsohost, however ISPs will often track anonymous information about traffic to and from their servers. For more information about them and their privacy policies, please visit www.tsohost.com.|
|We do not share information you give us with Google but we do use their analytical cookies to help us understand how people use our website. More information can be found in our cookies policy.|
Special categories of information
Unless otherwise stated in this policy we do not ask you to provide, and we do not knowingly collect, any special categories of personal data from you, such as data that reveals your racial or ethnic origin, political opinions, religious, philosophical beliefs, or trade unions membership, or the processing of data concerning your health or data concerning your sex life or sexual orientation or history of criminal convictions.
Automated decision making
We do not use your personal data with any automated decision-making processes.
Children under the age of 18
Our website is not intended for children under the age of 18 and we do not knowingly collect information from or about children under the age of 18. We will remove any information about a child under the age of 18 if we become aware of it.
Security is a high priority. We take appropriate precautions to protect personal data from loss, misuse, unauthorised access or disclosure, alteration or destruction using the same safeguards as we use for our own proprietary information.
Please note that communications over the internet are never totally secure and that the forms on our website employ standard email technology and as such are only as secure as sending us a normal email directly. Your communications may pass through third party servers in a number of countries before they reach us.
We do not accept responsibility for any unauthorised access to or loss of personal data that stems from a cause beyond our control. Nor can we be held responsible for the actions or omissions of other users or third parties who may misuse your personal data which they collect from the website.
If you have registered with us for the possible sale or purchase of a product or service, we might send you marketing communications, usually by email, to update you about what we’ve been up to and promote products and services that we think will be of interest to you.
Whenever you receive a communication of this kind from us you will be offered the opportunity to stop receiving any future marketing communications from us (an unsubscribe / opt-out option). You can also contact us to tell us that you would like to start or stop receiving some or all marketing communications.
Please note that a request to stop receiving marketing communications is not a request to never be contacted by us again. We might still need to contact you about non-marketing related topics and to fulfil any legitimate service or obligation as stated previously in this policy.
Change of purpose
We aim to only use your personal data for the purposes for which we collected it unless we reasonably consider that we need to use it for another purpose and that purpose is sufficiently compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If at any time we wish to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above, where this is required or permitted by law.
Your rights and controlling your information
You have certain rights under applicable data protection laws, including the right to:
- request access to your personal data.
This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it;
- request correction of the personal data that we hold about you.
This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us;
- request erasure of your personal data.
This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it and to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request;
- object to processing of your personal data
where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;
- request restriction of processing of your personal data.
This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it; and
- request the transfer of your personal data to you or to a third party.
We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
You also have the right to complain to a regulatory authority about our processing of your personal data. You can learn more about your rights regarding your personal data from the Information Commissioner’s Office.
If you believe that any information we are holding about you is incorrect or incomplete, please contact us as soon as possible. Every reasonable effort will be made to promptly correct any errors.
You can access and rectify any personal data we hold about you by contacting us by the means shown on our website.
Links to Other Websites
Any information collected by us via remarketing is used only for remarketing purposes.
We value our customers above all else and are committed to providing you with the best service possible – and that includes respecting your right to privacy. If at any time you feel unhappy with our web site, our services or our handling of your data please contact us in the first instance to give us a chance to put things right.
Should you feel that you have a data protection issue that we cannot resolve and you wish to make a formal complaint to the UK regulator, you can contact the Information Commissioner’s Office.
If you have any questions about data protection or how we use your data please contact us. For additional information about your rights under UK data protection laws, please visit the Information Commissioner’s web site.