It is effective from 25 May 2018
● what information we collect and when we collect it
● what we do with it and how we keep it secure
● what we use it for; and
● how you can control our use of it.
We operate under the General Data Protection Regulation (GDPR), a European Union regulation, effective from 25 May 2018. GDPR is designed to improve the data security and privacy of European citizens. You can read more about it on Wikipedia. In short, it is designed to ensure that your data is safe, and that you can access and control it. It gives you greater security, transparency, and control of your personal data online, something we are fully committed to.
We collect and process information about you only where we have legal bases for doing so under applicable EU laws. The legal bases depend on your engagement with us and how you use any of our products or services. This means we collect and use your information only where:
● we need it to provide you with our products and services, including to operate them, provide support and to protect their safety and security;
● it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our products and services and to protect our legal rights and interests; or
● we need to process your data to comply with a legal obligation.
What information we collect and when we collect it
We may collect information about you whenever you engage with us, including when you subscribe to one of our mailing lists, or place an order for our products or services and/or manage your account with us. We also collect information when you voluntarily provide feedback or complete customer surveys. Website usage information may also be collected when you are on our website, using cookies (which we talk more about later in this document).
We may collect the following information:
● name and contact information e.g. email address
● demographic information e.g. location
● other information e.g. preferences and interests – relevant to our products and services, market research and/or offers we may be able to provide
We only ever gather the information we require to understand your needs and provide you with the highest quality products and services.
What we do with the information
We use the information we gather for the following reasons:
● internal record keeping
● improving our products and services
● periodically sending emails about our products and services, special offers or other information which we genuinely think you may find interesting. You are always able to opt out at any time
● we may also use your information to contact you for market research purposes or to get feedback in order to improve our products and services. You are always able to opt out at any time
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. We also review our contracts with vendors and partners to make sure they are also compliant, and can give us the guarantees on privacy and data protection that we require, such as the EU-US Privacy Shield framework.
Website analytics and cookies
We use web analytics to learn how our website is performing and to help us to continually improve the site’s functionality. Any analytics data that is collected, processed and stored while you are on our website is aggregated, anonymous, secure and kept confidential.
Links to other websites
Controlling your personal information
Whenever you are asked to provide us with any of your information, either electronically or in person, this is always your choice and we will always keep your information confidential. You may change your mind at any time by updating your contact preferences or unsubscribing using the links we include in all direct marketing emails.
We will not sell your personal information.
We will not share your personal information with third parties unless we have your permission or are required by law to do so.
Access to your information and correction
You may request details of personal information which we hold about you by emailing email@example.com or writing to us at: The Melting Pot, 5 Rose Street, Edinburgh EH2 2PR.
We will always do our best to ensure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate, and we will promptly correct any information found to be incorrect.