ScUFFS gdpr / privacy policy

Identity of the Controller

Penny Walters
ScUFFS

Redroofs
Gorse Close
Farnham
Surrey, GU10 4SE
01252 711679

info@scuffs.biz

www.scuffs.biz

Purpose of the processing and the lawful basis and legitimate interests for the processing of data

We process your data in connection with your purchase from our online store and our supply and delivery of ScUFFS products to you

The legal basis for processing this data is to support the contract that exists between us and the legal obligations that places on us, as well as our legitimate business interests.  This means that we use this information to understand your needs and provide you with a better service:

·         To process your order and obtain payment

·         For internal record keeping

·         To improve our products and services

·         To periodically send promotional emails about new products or special offers

Categories of personal data obtained

We hold personal information about you.  

·         We hold identity data which may include your first and last names and title. 

·         We hold contact data which may include your delivery address, phone number and your email address. 

·         We hold transaction data including details of purchases made by you.  On occasion you may choose to supply ScUFFS with payment card details to complete a transaction at an event or over the telephone.  Once this transaction has been completed, ScUFFS will destroy these card details

Stripe.com and financial transaction data

ScUFFS does not receive any financial data from the ScUFFS online payment system.  This information is provided by Stripe.  Your payment data is stored with Stripe and further details of their Privacy Policy can be found here:  https://stripe.com/gb/privacy

Any recipient or categories of recipients of the personal data

We will only share your data with third-party service providers, such as web-hosting providers, email hosting providers, technical support providers

Details of transfers of personal data to any third countries or international organisations

We will not share your data outside of the EEA

Retention period for personal data

We will retain your personal information for this purpose for a period of 5 years

The rights available to individuals in respect of processing and the right to withdraw consent

·         You have the right of access to the data we hold about you

·         You have the right to rectification of any data we hold erroneously

·         You have the right to erasure of the personal data we hold

·         You have the right to restrict processing of your data if you contest the accuracy of the personal data we hold while we verify the data, or we are processing your data unlawfully, or we no longer need your data but you require us to keep it, or you have objected to us processing your data

·         You have the right of data portability for data you have provided to us

·         You have the right to withdraw your consent to our processing your data to provide you with information about related services that we provide at any time, We also process your data to meet our contractual and legal obligations, which we undertake without your consent and therefore your consent in this context cannot be withdrawn. 

·         You have the right to object to our processing of your Personal Data

·         You can see more about these rights at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

If you wish to exercise any of these rights set out above, please email us at info@scuffs.biz   We try to respond to all legitimate requests within one month

The right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the Information Commissioner’s Office, the Supervisory Authority for privacy matters in the UK

The source the personal data originates from and whether it came from publicly accessible sources

Personal data may be collected from you in the following ways:

Direct interactions.  You may give us your data by filling in forms or by corresponding with us by post, phone, email or otherwise.  This includes personal data you provide when you:

·         Apply for our products or services

·         Request information to be sent to you

·         Enter a competition, promotion or survey

·         Give us feedback or contact us

Automated technologies or interactions.  As you interact with our website we will automatically collect Technical Data about your equipment, browsing actions and patterns.  We may collect this personal data by using cookies and other similar technologies.

Social media platforms such as Facebook, LinkedIn, Instagram and Twitter

The details of whether individuals are under a statutory or contractual obligation to provide the personal data

You are under a contractual obligation to provide the personal data we process for this purpose

The existence of automated decision making, including profiling and information about how decisions are made, the significance and the consequences

We will not use your data for any automated decision making

Data security

We are committed to ensuring that your data is secure.  In order to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect