Policy

The Memory Boxes Company Limited, a business registered in Scotland (Registration Number SC707748) recognise the need for appropriate protections and management of your personal information. When we collect and use your personal information in the way set out in this Privacy Notice, we are the controller for the purpose of Data Protection Legislation (defined below) and are responsible for your personal data. 

PURPOSE

We respect your privacy and are committed to protecting your personal data. This Privacy Notice will let you know how we collect and process your personal data when we interact with you or provide services to you and when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

KEY TERMS

When we refer to Data Protection Legislation, we mean the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and the Data Protection Act 2018.

Personal information is information that can be used to identify or contact a specific individual, such as a name, address, telephone number, email address, etc., and online identifiers and location data such as IP addresses and mobile device IDs.

A controller is someone who decides why personal data is to be collected and how it will be used and treated.

CONTACT US

If you have any questions regarding this Privacy Notice you can contact us using the following details:  Telephone +44 (0) 1563 606605 info@thememoryboxescompany.co.uk

If you are unhappy with how we handle your personal information you can write to us using the contact details noted above and / or notify the Information Commissioner’s Office (ICO) (please see: https://ico.org.uk/concerns/ for more information). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU?

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data includes first name, last name or similar identifier (such as date of birth).
Contact Data includes personal or business address, personal or business e-mail address and personal or business telephone numbers.
Financial Data includes bank account and payment card details as well as gift aid registration details.
Technical Data includes internet protocol (IP) address, geographic location, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website. Where possible, we use aggregated data or anonymous information which does not identify individual visitors to our website.
Usage Data includes information about how you use our website and services and includes information about your service preferences and survey responses (where applicable).
Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.

HOW DO WE USE YOUR PERSONAL DATA AND WHY?

We may collect your personal data in the following ways:

Direct interactions. You may give us your Identity, Contact, by filling in forms or by corresponding with us in person or by post, telephone, e-mail or otherwise. This includes personal data you provide when you:

· contact us about our services and/or enquire about our activities;

· donate to us and/or fundraise on our behalf;

· participate in an event;

· complete a survey and/or questionnaire;

· consent to us using your image, recording, voice or case study in our marketing materials;

· contact us on and/or visit our website;

· purchase or order our services and/or goods from our shop;

· request marketing or other communications to be sent to you; and

· give us feedback or otherwise contact us.

Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies.

Use of Cookies. A cookie is a small file which can be placed on your computer’s hard drive, the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies. This may prevent you from taking full advantage of the website. You can easily restrict or block the cookies used by this website through your browser settings, the Help function within your browser will provide detailed instruction of how to change these settings. You can find more information about cookies at www.aboutcookies.org, this site provides instructions on how to block cookies on all the major browsers and also explains how you can delete cookies that have already been stored on your computer.

You should be aware that most cookies are harmless and restricting them may impact on the functionality of the websites you visit.

Third parties or publicly available sources. We will receive personal data about you from various third parties and public sources as set out below:

Technical Data from the following parties:

· analytics providers such as Google based outside the EU; and

· social media platforms such as Twitter, Facebook, Linked In or Instagram in regards to your interactions with us through those platforms.

Identity and Contact Data from publicly available sources such as Companies House and the Electoral Register based inside the EU.

Contact, Financial and Usage Data from providers of technical, payment and delivery services such as

Stripe based in the UK.

We use your personal data on the following legal bases:

· Where it is necessary for our legitimate interests (or those of a third party) and your interests and

fundamental rights do not override those interests.

· Where we have a contract with you or are taking steps to enter into a contract with you.

· Where you have given your consent to the use of your data.

Except as provided above, we will not share personal information with any other third parties without informing you beforehand, unless required by, or in connection with, law and / or regulatory requirements.

We will not sell, trade or lease your personal information to others.

EUROPEAN ECONOMIC AREA

The data that we collect from you will usually be stored inside the UK or the European Economic Area (EEA).

However, if you live or work outside of the UK or the EEA, we may need to transfer your personal data outside of the UK or the EEA to correspond with you. Where this applies, we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.

We also may transfer data outside the UK or the EEA where our, service providers host, process, or store data outside the UK or the EEA. Where we do this, we will ensure that the transfer is to a country covered by a decision of the European Commission or is otherwise made in circumstances where we have put appropriate safeguards are in place to protect your data in accordance with the Data Protection Law (e.g. standard contractual clauses, EU-US Privacy Shield compliant, etc.).

RETENTION PERIODS

We will not hold your personal information for any longer than is necessary for the uses outlined above, unless we are required to keep your personal data longer to comply with the law and any regulatory requirements.

YOUR RIGHTS

You have certain rights under the Data Protection Legislation which can be exercised by contacting us using the contact details provided above, including:

· the right to access the personal data held about the you by making a subject access request in

accordance with the Data Protection Legislation. We may charge a reasonable fee when a request is

manifestly unfounded or excessive;

· the right to have your personal data rectified if it is inaccurate or incomplete;

· the right to request to have your personal data deleted in certain specific circumstances as set out in the Data Protection Legislation;

· the right to request to restrict the processing of your personal data in certain specific circumstances as set out in the Data Protection Legislation;

· the right to ask us not to process your personal data for marketing purposes (you may opt out of our marketing communications at any time by clicking the “unsubscribe” link at the end of our emails, sending us an “opt-out” text message and/or contacting our team at info@thememoryboxescompany.co.uk however we will maintain a suppression list with your name and contact details to ensure that we do not continue to contact you after you have asked us to stop, or for purposes based on our legitimate interests;

· the right to ask us to not undergo automated decision making; and

· where you have provided consent, to request to withdraw such consent at any time.

Further details about your rights can be found on the ICO’s website at https://ico.org.uk/.

LINKS TO OTHER WEBSITES

This Privacy Notice only relates The Memory Boxes Company Limited. If you link to a third-party website from our main website, you should remember that this is not our website and therefore you should read the terms and conditions and Privacy Notice on those third party websites before continuing. We are not responsible for any use of your information that is made by other websites and/or organisations.

UPDATES TO THIS PRIVACY NOTICE

We keep our Privacy Notice under regular review (Updated January 2022) and the most current version can be found on our website or requested from us on the contact details given above.

If we make any substantial changes we will notify you by posting a prominent notice on our website and/or Blog page.