Privacy Policy
1. SECTION 1 – DATA PROTECTION PRINCIPLES
We are committed to protecting the privacy and security of your personal information. This privacy notice describes how we collect and use personal information about you during and after your relationship with us, in accordance with the General Data Protection Regulations (GDPR).
GDPR states that the personal information we hold about you must be:
a) Used lawfully, fairly and in a transparent way.
b) Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
c) Relevant to the purposes we have told you about and limited only to those purposes.
d) Accurate and kept up to date.
e) Kept only as long as necessary for the purposes we have told you about.
f) Kept securely.
2. SECTION 2 – INFORMATION WE HOLD ABOUT YOU AND WHY
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
When you make a purchase from our store, and as part of the transaction or when you sign up to the newsletter, we will collect, store, and use the following categories of personal information about you:
a) Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses.
b) Your computers protocol (IP) address. This will be collected when you browse the store online.
We process the above data for appropriate lawful bases as follows:
Provision of services. The completion of a contract to purchase outdoor goods such as clothing, footwear, accessories or equipment;
Provision of marketing further information. We undertake marketing activities therefore we have carried out the following steps to ensure that when we do so we are complaint:
a) We have checked that consent is the most appropriate lawful basis for processing.
b) We have made the request for consent prominent and separate from our terms and conditions.
c) We ask people to positively opt in.
d) We tell individuals they can withdraw their consent.
e) We ensure that individuals can refuse to consent without detriment.
Recording consent
a) We keep a record of when and how we got consent from the individual.
b) We keep a record of exactly what they were told at the time.
We will not share your data, other than with the necessary 3rd parties such as credit card companies, postal organisations and if there is a legal requirement. We will also not hold or transfer your data outside the UK.
We will normally hold personal data for no longer than 12 months unless there is a legal obligation to hold it for longer.
3. SECTION 3 - CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will ask you directly for your expressed consent and provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at IT@Bollingroup.com or mailing us at:
Bollin Group
3 Bailey Court
Green Street
Macclesfield
SK10 1JQ
You can also withdraw consent using the “unsubscribe me” button which is included at the bottom of every marketing e-mail which we send you.
4. SECTION 4 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
5. SECTION 5 – WEBSITE
Our website is provided to you by an ecommerce or content management system and hosted on a purpose-built secure server, behind a firewall. Your personnel information is stored and secured within our business systems on purpose-built servers situated behind a firewall.
For websites hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
We will keep and process your personal data only for as long as is necessary for the purposes for which it was collected in connection with your relationship with us, unless we have a legal right or obligation to retain the data for a longer period, or the data is necessary for the establishment, exercise or defence of legal claims.
Payment Methods:
Shopify Pay
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service and Privacy Statement.
Paypal
Where we accept payment via PayPal this is secure and fully PCI compliant. We have no access to your credit or debit card information via Paypal.
If you have a specific question about PayPal’s collection, use, storage, disclosure and protection of information, please review the PayPal’s Privacy Policy.
6. SECTION 6 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us (eg postal services). However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Statement or our website’s Terms of Service.
Links
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
7. SECTION 7 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
8. SECTION 8 – COOKIES
What is a Cookie?
A cookie is a small data file stored by your web browser on your computer or your handheld device. Some cookies are essential for the website to work, for example remembering what you have in your wish list or basket when you return to our site. Cookies are useful because they help us to provide you with relevant information. They also allow us to recognise your computer (but not specifically who is using it) when you access our website and to improve the usability and performance of our website.
Types of Cookies
1. SESSION COOKIES
Session cookies are deleted after each 'session'. For example, when you are browsing a website, it will remember you for the duration of your visit, but the cookie will be removed from your computer as soon as you close down your internet browser. Without a session cookie, every time you open a new web page the web server where that page is stored will treat you like a completely new visitor and items placed in your shopping basket will disappear by the time you reach the checkout. These are used to show your recently viewed items, for us to understand how the site is used or where there may be issues.
2. PERSISTENT COOKIES
Persistent cookies remember you for a set period of time unless you delete your cookies within this period. On your first visit to our site it will be presented to you in a default manner. Over time, the version of the site you see may change, as persistent cookies remember items you have viewed, preference changes you have made, or whether you logged into or out of your account while browsing. Here is a list of the different types of cookies we use and why we use them.
3. TURNING OFF AND DELETING COOKIES
When you access our website we will have placed some cookies on our computer, in order to be able to display the page to you. If you continue to use our site, additional cookies will be placed for the site functionality to work. If you don’t want cookies placed on your computer, you can change your browser settings to either reject all cookies; to only allow “trusted sites” or only accept cookies from the site(s) you are currently on. You can disable cookies on your computer by changing the preferences or options menus in your browser. Instructions for disallowing cookies can usually be found in the browser's 'Help' menu. However, some parts of our website will not operate correctly if you disable cookies.
For more detailed information about the cookies used on this website click this link.
9. SECTION 9 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
10. SECTION 10 - CHANGES TO THIS PRIVACY STATEMENT
We reserve the right to modify this privacy statement at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this statement, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
You have a duty to inform us of changes to your personal data as it is important that the information we hold about you is accurate and current. Please keep us informed if your personal information changes during the period your data is held by us.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at IT@Bollingroup.com or by mail at:
Alison Freeman
Data Protection Co-ordinator
Bollin Group
3 Bailey Court
Green Street
Macclesfield
SK10 1JQ