Privacy Policy
Reign Bowstrings Privacy Policy
Last Updated – April 2020, Version 1
Who are we?
We are Reign Bowstrings and we provide high quality bow string & fitting services. (“We”, “Us”).
We are a sole trader, and our trading address is Unit 8, Cattermole Buildings, Market Pl, Codnor, Ripley DE5 9QA.
We comply with the relevant data protection regulations there is no requirement for us to register with the Information Commissioners Office.
Our Data Protection Officer is Simon Scott and he can be contacted at the above address or via [email protected].
What this privacy policy covers
This policy applies to www.reign-bowstrings.co.uk or www.reign-bowstrings.com (“website”) and our day to day business operations. This policy covers what data we may collect about you, how we use it, your rights and how you can exercise them.
Any links from our website to third-party sites are not subject to this privacy policy so please make sure you read the privacy policy of those websites before you progress, we cannot accept any responsibility or liability for those third-party websites.
What information do we collect?
- Contact details – This is basic personal data which may include name, email address, telephone number, address and if relevant organisation name & your job title.
- Contact history – This is a record of what communications or telephone calls we may have sent or made to you.
- Payment details – Your payment details are processed on our behalf by Stripe, our third-party payment provider.
Where do we collect your information from, what is our lawful basis for doing so and what is the purpose for the processing?
We may collect your personal information from a range of sources and this table explains them: –
Source | Lawful Basis | Purpose | Retention Period | GDPR Article Reference |
Our Website / Other order channels | Legitimate Interest / Contract | Fulfilling your order & enquiry | For as long as it is relevant and appropriate to keep this information | Article 6(1)(f) Article 6(1)(b) |
General Networking | Legitimate Interest | Prospecting our goods and services | For as long as it is relevant and appropriate to keep this information | Article 6(1)(f) |
Suppliers (Current / Lapsed) | Legitimate Interest / Contract | Management of supply of goods & services | 7 years post contract termination | Article 6(1)(f) Article 6(1)(b) |
Recruitment | Contract | Recruitment | 36 months | Article 6(1)(b) |
Suppressions / Opt Outs | Legal Obligation | To honour your request to opt out of communications | Indefinite | Article 6(1)(c) |
Who do we share your details with?
- Our Service Providers – currently this includes Stripe for payment processing and postal service providers. Where we do employ a third-party data processor this is ALWAYS under a written contract as is required under Article 28 of the GDPR.
- Regulatory Bodies – on rare occasions we may be asked to share your information with regulatory bodies who are investigating a complaint on your behalf.
Do we use Cookies?
We only use cookies which are strictly necessary for the operation of our website, as these are strictly necessary, we do not need your consent for them as without the cookies, you would be unable to buy anything through our website. The details are –
- Woocommerce – This is our online shop, there a number of cookies which may be set including wc_fragments_# and wc_cart_hash_# which remember what is in your basket. These cookies are an essential part of the website operations and we cannot offer any service that depends on payments if these cookies are disabled by the user. You can view the details of all these cookies here.
- Stripe Payment Provider – Stripe uses Cookies to enable payment services to be provided through our website. These cookies are an essential part of the payment operations and we cannot offer any service that depends on payments if these cookies are disabled by the user. You can view all the cookies used by Stripe here. They include –
- Authentication. We use cookies to remember Your login state, so You don’t have to login as You navigate through our site and Your dashboard. For example, when You log into Your Stripe dashboard account, we use a cookie so that You don’t have to login again as You navigate throughout the website.
- Fraud Prevention and Detection. Cookies and similar technologies that we deploy through websites and the Services help us learn things about computers and web browsers used to access the Services. This information helps us monitor for and detect potentially harmful or illegal use of our Services.
- Site Features and Services. We use cookies to remember how You prefer to use our Services so that You don’t have to reconfigure Your settings each time You log into Your account. For example, You can customize Your Stripe Checkout experience by using the “Remember Me” feature to store Your payment details for faster checkout with participating merchants. A cookie helps us associate Your device with the payment details You provide when You sign up for the “Remember Me” feature.
We do not use any marketing or advertising cookies.
You can learn more about cookies and how to enable / disable them here. You can if you wish also disable cookies in your Internet Browser, refer to your browser help guide for instructions on how to do this.
What are your rights?
Under the data protection regulations, you have several rights as the data subject and the following section outlines these rights. Please contact us at [email protected] to exercise any of these rights.
- Right to be informed
- When we collect your information or within a reasonable period after collecting your information, we have to tell you about the collection and use of your information. The information we must provide you with includes, our purpose, lawful basis, retention periods, who we intend to share it with and your rights.
- We must provide this in plain English, and we have done this in this privacy policy. If you feel anything is unclear, please contact us.
- Right to access
- You have the right to request access to the personal data that we process about you.
- We must provide this free of charge. However, we can charge a ‘reasonable fee’ when a request is manifestly unfounded or excessive, particularly if it is repetitive.
- Right to rectification
- You have a right to have inaccurate personal data rectified or completed if it is incomplete.
- Right to erasure
- This gives you the right to request that we erase your information from our systems under certain circumstances.
- This is not an absolute right to have your data erased and can be a bit confusing, for example if you are a supplier of goods and services to us, we need to process your information so that we can pay you. Or if you’ve bought something from us, we need to maintain records for a certain number of years. You can read more about when this right applies here.
- If you have asked us to stop sending you marketing messages, in order to honour this request, we need to maintain a suppression file and we will do this under a legal obligation inline with data protection and PECR regulations.
- If we do not believe that we need to comply with your request, we will explain why.
- Right to restrict processing
- You have the right to request the restriction or the suppression of your personal data, again it only applies in certain cases and is an alternative to the “Right to erasure”. You can read more about this right here.
- Right to data portability
- This right would be highly unlikely to apply to Reign Bowstrings and the data it holds about you. It would most likely apply in situations like switching banks and utility providers for instance. This right only applies where the following conditions have been met: –
- you provided the personal data to the data controller (Reign Bowstrings)
- where our lawful basis (see table above) is based on your consent or contract; and
- is processed by automated means.
- This right would be highly unlikely to apply to Reign Bowstrings and the data it holds about you. It would most likely apply in situations like switching banks and utility providers for instance. This right only applies where the following conditions have been met: –
- Right to object
- You have the right to object to: –
- Processing which is based on legitimate interest, or the performance of a task in the public interest where there is no overriding justification for the processing of your data.
- Direct Marketing, including profiling.
- Processing for purposes of scientific / historic research and statistics.
- You have the right to object to: –
- Rights related to automated decision-making including profiling
- You have the right to not be subject to a decision based solely on automated decision making which produces legal effects or significantly affects you. You also have the right to request human intervention, express your point of view or obtain an explanation of the decision and be able to challenge it.
- However, we do not use any automated decision-making processes.
- Right to complain to a supervisory authority
- If we have been unable to deal with your complaint to a satisfactory level, you have the right to complain to the Information Commissioners Office (ICO), you can contact them here.
Changes to our privacy policy
We reserve the right to update this Privacy Policy from time to time as appropriate in relation to legislative or our business developments. The “last updated” date will be updated with the date of the last change.