In May 2018, the original Data Protection Act 1998 was replaced by General Data Protection Regulation (GDPR). This had an impact on small businesses such as mine to notify users of how we collect and use their personal details. This page outlines how I do this.
What This Confidentiality Notice Covers
Upper Grange is committed to protecting your personal information. In this notice, references to 'we' or 'us' means ‘Upper Grange’. This notice explains how we collect and use personal information about you.
Who We Are
Upper Grange is a retailer of soy wax products and accessories.
Information We Gather
Upper Grange gathers certain information about people using the website. We collect information in the following ways:
Information from Website Use
We do not gather or collect any specific information about you when you browse our website, but we do collect some information that allows us to give you a better user experience, this may include your IP address, your device type and browser, your language preferences, country and your location.
We do collect information from you when you submit a contact form to us, i.e. name, email address etc. we use this information to make contact with you. In submitting a contact form you agree to us using the information supplied to contact you and also to us storing the information you submitted.
Information About You from Third Parties
We do not collect your personal information from other 3rd party sources.
How We May Use Your Information
We do not use your information for other 3rd party marketing in any way.
We may use your information for a number of purposes including the following:
- Compliance with legal, regulatory and corporate governance obligations and good 'Upper Grange'
To provide you with information about our business, your treatment, your appointments, etc.
We will use the information you give us to:
- Any other reasonable purposes of Upper Grange, acting always in accordance with the data protection law (as amended from time to time).
We do not use your information for marketing purposes.
Information Sharing and Disclosure
We do not normally share your information with 3rd parties at all.
However, we may disclose your personal information to law enforcement agencies:
- If we are under a duty to disclose your personal data in order to comply with any legal obligation (for example to government bodies and law enforcement agencies) on the production of an appropriate warrant for such data;
- To protect the rights, property, information or safety of Upper Grange, our patients, or others.
Keeping Your Records
We keep records only for as long as required to operate the business in accordance with legal requirements.
Where We May Store Your Information
We keep your personal data in digital format, on a personal computer, laptop, tablet or similar which is PIN locked.
The Upper Grange will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice.
By providing us with your data, you warrant to us that you are over 13 years of age.
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Upper Grange does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
Your Data Protection Rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
If you would like to update the details we hold about you please contact us via telephone on 07796 27259 or by letter at the address listed below.
Enquiries and Complaints
Carmen Booker is the Data Protection Officer and the first point of contact regarding any enquiries arising from this Privacy Notice. Where possible, please raise all enquiries in writing.
If you are unhappy with our work or something that we have done or failed to do in regard to protecting your personal data, please inform us in writing. Upper Grange will acknowledge receipt of all complaints and will endeavour to investigate the complaint within 15 working days.
All information enquires or complaints should be sent in writing to:-
- Carmen Booker
- Upper Grange
- 24 Upper Grange Road
- NR34 9NU
Changes to this Notice
This policy was last updated on 20/06/2021.