- Our details
- How we collect or obtain personal information about you
- Personal information we collect or obtain about you
- How we use your personal information
- How long we store your personal information
- How we secure your personal information
- Transfers of your personal information to other countries and safeguards used
- Your rights in relation to your personal information
- Consequences of not providing your personal information to us
The data controller for our website is Haven Distribution Limited of 2 Red Kiln Close, Horsham, West Sussex RH13 5QL, UK Company Number 08014183.
You can contact the data controller by writing to the address above, calling 01403 258474 or sending an email to firstname.lastname@example.org.
How we collect or obtain personal information about you
We collect personal information about you when you provide it to us, such as through your use of our website, when you contact us directly by email, phone, in writing, or via social media, when you order goods and services, or any other means by which you provide personal information to us.
Where permitted by law, we may also receive information about you from third parties, such as payment processing or delivery companies.
Personal information we collect or obtain about you
The type of information we collect about you may include information such as:
- your name
- your email address
- your address
- your phone number
- information about your computer (e.g. your IP address and browser type)
- whether you have subscribed to our newsletter
- details regarding orders you have placed with us, including comments regarding those orders.
We do not collect any special categories of data, such as information regarding your gender, race or political affiliations.
How we use your personal information
We use your personal information to process orders and provide support regarding those orders, and for marketing purposes subject to your consent.
We may provide your information to third parties to process orders made with us, or send you newsletters. These include payment processing, delivery companies and in the event of a warranty claim or a product recall we may provide this to the manufacturer of a product you have purchased.
We use a third party company called Campaign Monitor to deliver our newsletter emails. You can read about their privacy and security practices here. We only send newsletters where we have consent to do so. Our newsletter contains tracking beacons and tracked clickable links in order to track subscriber activity. Thus our provider may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards and geographic. Such data, within its limitations shows the activity each subscriber made for that email campaign. We provide you with an easy method to withdraw your consent (unsubscribe) at any time. See our newsletter for instructions on how to unsubscribe.
We do not sell personal information to third parties.
We use Google Analytics to track user behaviour across our website. However, all information is anonymized.
How long we store your personal information
If you have ordered from us or created an account on our website, we will store your personal information indefinitely, subject to your rights regarding your personal information under GDPR.
If you have subscribed to our newsletter, we will retain the full information for as long as you are subscribed. If you unsubscribe, we will store suppression information after you unsubscribe so that we don’t contact you again.
How we secure your personal information
All information transferred via our website is encrypted between your browser and our servers, using the latest recommended security protocols.
Our SSL certificate is provided by Digicert, and is an Extended Validation certificate. This means that our business details have been validated by Digicert. For full details regarding our certificate, use the controls in your browser.
We monitor changes to security best practices, and implement them in a timely fashion.
We monitor security advisories regarding the software we use, and apply them in a timely fashion.
Backups of our website database are stored encrypted using a third party provider with best-in-class security practices.
We limit access to the data in our systems appropriately based on an employee’s need to access that information.
We do not hold any more information than we need to process your orders, or send you our newsletter.
- We use only cookies essential to the operation of the website, and those required by Google Analytics to provide anonymized behaviour tracking.
- We do not use any advertising network cookies, or cross-site remarketing technologies.
Transfers of your personal information to other countries and safeguards used
Your information may be transferred to suppliers or their representatives in other countries for the purposes of handling transactions, if you live outside of the UK.
Also, your information may be stored on non-UK computers for the purposes of backup and payment processing.
We only use service providers with best-in-class security practices. These include Amazon, Google and Stripe.
Your rights in relation to your personal information
Under the GDPR your rights are as follows:
- the right to be informed
- the right of access
- the right to rectification
- the right to erasure
- the right to restrict processing
- the right to data portability
- the right to object
- the right not to be subject to automated decision-making including profiling.
You also have the right to complain to the ICO if you feel there is a problem with the way we are handling your data.
You can read more about your rights in detail here.
We handle subject access requests in accordance with the GDPR. Contact email@example.com to make a request, or for further information.
Consequences of not providing your personal information to us
If you choose not to provide your personal information to us, you will not be able to transact with us, or receive our newsletters.