The General Data Protection Regulation (GDPR) comes into effect on 25 May 2018.
This document sets out our activities related to the data our customers provide to us.
Retention of information about you
When you place an order with us, you provide us with an invoice address, a delivery address and a contact name. You will also provide us with an email address and a phone number. We do not collect any other data from you than this. As we are required by law to retain invoices for six years, we also hold your data for that period.
When you pay for your order, you will be directed away from our site to a third party site which will either be (at your choice) Sagepay or PayPal. We do not have sight of or access to any current or historic details of any credit card, debit card or similar payment information so none is retained by us.
When we despatch your order we will send you an invoice by email or post. We are required by law to retain invoices for six years so we will maintain your name and address data for that period.
Our use of your data
We ask our customers to review the products they have bought and the quality of our service. We do this by sending an email to the address provided at time of order, about 7 days after delivery.
We not carry out any sales or marketing using the data provided by you when you placed your order. Nor do we supply your data to anyone else.
Under the GDPR (General Data Protection Regulation) in effect from 25th May 2018 , you, as a data subject have a number of rights which are detailed below.
Some of these only apply in specific circumstances and are qualified in several respects by exemptions in data protection legislation.
We will advise you in our response to your request if we are relying on any such exemptions.