Spotted Fin are committed to complying with the General Data Protection Regulation and the Data Protection Act 2018, once enacted. Looking after the personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to offer you a better and more personalised shopping experience.
We have published this notice to help you understand:
- how and why Spotted Fin collect information from you
- who we share your information with, why and on what basis
- what your rights are
If we make changes to this notice we will notify you by updating it on our website. Spotted Fin will be what is known as the ‘Data Controller’ of the personal data you provide to us, and we will sometimes refer to ourselves in this notice as “we” or “us”. By Data Controller, this means Spotted Fin determines the purposes and way in which any personal data are, or will be, processed.
Should you need to contact us please write to:Spotted Fin Ltd Unit 7 Kingley Park
or via email@example.com quoting Security and Privacy Enquiry
This privacy notice was last updated on 11th May 2018
What personal information do we collect from the people that visit our blog, website or app?
When ordering on the telphone or registering and ordering on our website, as appropriate, you may be asked to enter your name, email address, mailing address, phone number or other details to help you with your experience.
What we collect
We may collect the following information if you choose to provide it:
- full name
- contact information including email address
- demographic information such as postal addres and postcode
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- Internal record keeping.
- We may use the information to improve our products and services.
- Where you have subscribed, we may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
- From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.
Data Protection says that we are allowed to use and share your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons and these are:
- To send your order of products from our website to your address
- Legitimate Interests – this means the interests of Spotted Fin Ltd in managing our business to allow us to provide you with the best products and service in the most secure and appropriate way e.g. to transfer your data to certain Third Party’s such as delivery partners.
- Legal Obligation – where there is statutory or other legal requirement to share the information e.g. when we have to share your information for law enforcement purposes.
We do not store any personal financial information either onsite at Spotted Fin Ltd or on our computer systems. All payment details are handed off to our merchant banks online systems for verification and payment processing.
Who we share your information with and why:
Spotted Fin work with a number of trusted suppliers, agencies and businesses in order to provide you the high quality goods and services you expect from us such as delivery companies.
Some examples of the categories of third parties with whom we share your data are:
Spotted Fin works with a number of trusted partners who supply products and services on our behalf. All partners are subject to thorough security checks, and will only hold the minimum amount of personal information needed in order to fulfil the orders you place or provide a service on our behalf.
In order for you to receive your goods, Spotted Fin work with a number of delivery partners. Again, we only pass limited information to them in order to ensure delivery of your items.
Spotted Fin works with our business IT Supplier who support our website and other business systems.
We work with marketing companies who help us manage our electronic communications with you or carry out surveys and product reviews on our behalf.
Spotted Fin works with trusted third party payment processing providers in order to securely take and manage payments.
Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.
For more information or to exercise your data protection rights, please contact us using the contact details above. You also have a right to complain to the Information Commissioner’s Office, which regulates the processing of personal data.
If you place an order with us and you are outside of the UK we will transfer the data that we hold on you to DHL Couriers.
Next also works with suppliers and partners who may make use of cloud and/or hosted technologies. We undertake data security due diligence on our partners and ensure that that these partners conform to appropriate accreditations.
Wherever transfers of data to third countries occurs Spotted Fin will put in place an appropriate contractual provisions to ensure that there are strict rules regarding both the confidentiality and security of your information. To find out more please contact us at firstname.lastname@example.org
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We may use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes.
If you interact with any social media buttons on our website, a cookie will be used to remember your actions.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
This website assumes implied consent for cookies and meets the ICO’s guidelines on the EU e-Privacy Directive.
We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
We may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Controlling your personal information
How long we keep your information:
If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws.
We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for 7 years after the date it is no longer needed by us for any of the purposes we have listed. The only exceptions to this are where:
- the law requires us to hold your personal information for a longer period, or delete it sooner;
- you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law;
- we bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible; or
- in limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.
What are your rights
You are entitled to request the following from Spotted FIn Ltd, these are called your Data Subject Rights and there is more information on these on the Information Commissioners website www.ico.org.uk
- Right of access –to request access to your personal information and information about how we process it
- Right to rectification –to have your personal information corrected if it is inaccurate and to have incomplete personal information completed
- Right to erasure (also known as the Right to be Forgotten) – to have your personal information erased. Contact Spotted Fin on email@example.com
- Right to restriction of processing – to restrict processing of your personal information
- Right to data portability – to electronically move, copy or transfer your personal information in a standard form
- Right to object – to object to processing of your personal information
- Rights with regards to automated individual decision making, including profiling –rights relating to automated decision making, including profiling
If you have any general questions about your rights or want to exercise your rights please contact firstname.lastname@example.org
You have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. The contact details for the Information Commissioner’s Office (ICO), the data protection regulator in the UK, are available on the ICO website www.ico.org.uk where your personal information has or is being used in a way that you believe does not comply with data, however, we encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have.
- Contacting Us