We do update this Policy from time to time so please do review this Policy regularly.
For the purpose of the Data Protection Act 1998 and the General Data Protection Regulations 2016, our data controller is Shirlaws Group Ltd. Registered number 11020393.
In operating our website, we may collect and process the following data about you:
On occasion, we may gather information about your computer for our services and to provide statistical information regarding the use of our website to our affiliates or advertisers.
Such information will not identify you personally, it is statistical data about our visitors and their use of our site. This statistical data does not identify any personal details whatsoever.
Similarly, to the above, we may gather information about your general internet use by using a cookie file. Where used, these cookies are downloaded to your computer automatically. This cookie file is stored on the hard drive of your computer as cookies contain information that is transferred to your computer’s hard drive. They help us to improve our website and the service that we provide to you.
All computers have the ability to decline cookies. This can be done by activating the setting on your browser which enables you to decline the cookies. Please note that should you choose to decline cookies, you may be unable to access particular parts of our website.
The information that we collect and store relating to you is primarily used to enable us to provide our services to you. In addition, we may use the information for the following purposes:
If you are an existing customer, we may contact you with information about goods and services similar to those which were the subject of a previous sale to you.
Further, we may use your data, or permit selected third parties to use your data, so that you can be provided with information about unrelated goods and services which we consider may be of interest to you. We or they may contact you about these goods and services by any of the methods that you consented at the time your information was collected.
If you are a new customer, we will only contact you or allow third parties to contact you only when you have provided consent and only by those means you provided consent for.
Please be advised that we do not reveal information about identifiable individuals to our advertisers, but we may, on occasion, provide them with aggregate statistical information about our visitors.
Data that is provided to us is stored on our secure servers. Details relating to any transactions entered into on our site will be encrypted to ensure its safety.
The transmission of information via the internet is not completely secure and therefore we cannot guarantee the security of data sent to us electronically and transmission of such data is therefore entirely at your own risk. Where we have given you (or where you have chosen) a password so that you can access certain parts of our site, you are responsible for keeping this password confidential.
Where applicable, we may disclose your personal information to any member of our group. This includes, where applicable, our subsidiaries, our holding company and its other subsidiaries (if any).
We may also disclose your personal information to third parties:
You may find links to third party websites on our website. These websites should have their own privacy policies which you should check. We do not accept any responsibility or liability for their policies whatsoever as we have no control over them.
You have a number of rights under data protection law. These rights and how you can exercise them are set out in this section. We will normally need to ask you for proof of your identity before we can respond to a request to exercise any of the rights in this section and we may need to ask you for more information, for example to help us to locate the personal data that your request relates to.
We will respond to any requests to exercise your rights as soon as we can and, in any event, within one month of receiving your request and any necessary proof of identity or further information. If your request is particularly difficult or complex, or if you have made a large volume of requests, we may take up to three months to respond. If this is the case, we will let you know as soon as we can and explain why we need to take longer to respond.
You also have a right to ask us to send you a copy of all personal data that we hold about you (subject to some exceptions). A request to exercise this right is called a “subject access request” and must be made in writing to: email@example.com or to: Data Protection Officer, 1 Farnham Road, Guildford, GU2 4RG.
If we have compelling legitimate grounds to carry on processing your personal data, we will be able to continue to do so. Otherwise, we will cease processing your personal data.
You can exercise this right by emailing firstname.lastname@example.org.
Remember that you can always unsubscribe from receiving marketing material.
You can ask us not to send you direct marketing or advertising and can opt out at any time. More information about opting out of marketing and advertising can be obtained from Shirlaws Group Limited, 1 Farnham Road, Guildford, GU2 4RG.
You have a right to ask us to correct inaccurate data that we hold about you. If we are satisfied that the new data you have provided is accurate, we will correct your personal data as soon as possible.
If you would like to make a request to exercise this right, please contact email@example.com. If we are required by law to comply with your request, we will fully anonymise your data, so that it is no longer personal data and cannot be used to identify you.
You can ask us to restrict processing of your personal data in some circumstances, for example if you think the personal data is inaccurate and we need to verify its accuracy, or if we no longer need the data but you require us to keep it, so that you can exercise your own legal rights.
Restricting your personal data means that we only store your personal data and don’t carry out any further processing on it unless you consent, or we need to process the data to exercise a legal claim or to protect a third party or the public.