DATA PROTECTION POLICY
Policy reviewed by board on: 21/5/2018
Policy is operational from 25/5/2018
Introduction
Aspire Furniture Ltd needs to gather and use certain information about individuals. This policy will cover all aspects of GDPR regulation and will ensure the company is compliant in all uses of data. Aspire Furniture Ltd acts as both a data controller, for our own retail business and a data processor for our drop ship customers. We use several sub processors. All of whom comply to Aspire Furniture Ltds data protection policy.
Types of Information We Collect
Aspire Furniture Ltd holds no information that is not necessary in the processing of orders. As such, Aspire Furniture Ltd holds only Contact information as per the below;
-Customer name
-Customer address and postcode
-Customer contact phone number
-Customer email address
-Sales history
Customer Financial Data
Aspire Furniture Ltd will sometimes action card payments in relation to a customers order. Aspire Furniture Ltd DOES NOT hold any card data. The payment is processed through either Lloyds Cardnet or Paypal who act as a data processors and merchant service providers. Any payment information goes straight into the merchant system and after a transaction is complete Aspire Furniture Ltd CANNOT access the financial data.
Lloyds Cardnet have a privacy policy available at the link below, and have satisfied us that they are compliant with all relevant legislation.
https://lloydsbankcardnet.com/privacy/#where-we-collect-personal-information-from
Payapl have a privacy policy available at the link below, and have satisfied us that they are compliant with all relevant legislation.
https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
How We Use the Information We Collect
The data we collect will be used exclusively for the fulfillment of orders requested by the customer and will be held for the purposes of being able to fulfill the manufacturer’s warranty. The data will only be shared with the sub processors necessary for the fulfillment of the order, all of our sub processors have policies in place to ensure compliance with GDPR, or have signed up to our own policy.
Marketing
We occasionally share customer data with third parties to perform services on our behalf, including improving targeted advertising to ensure you receive more relevant ads and products that you might be interested in. We obtain consent for such sharing where required by law or any applicable Google policies governing personalised ads and/or user consent including Google’s EU User Consent Policy, so you can be assured that your data is well protected.
Where We Store Information
Information is stored within our order database, provided by Advance Solutions. Advance Solutions have a comprehensive GDPR privacy policy and have satisfied us as to their compliance with GDPR and the security of the customer data in their care. Some customer data is kept in Aspire Furnitures G-Suite account. Either as sent items in G-Mail accounts or on Google Drive cloud storage. Their GDPR compliance information is below. G-Suite have convinced us at Aspire Furniture Ltd that they are GDPR compliant and that our data is stored responsibly and securely.
https://cloud.google.com/security/gdpr/
How We Share Information with Third Parties
Your data will be shared with only trusted third parties We share data using G-Suite, either by email or by sharing private links to very specific folders in the cloud storage. Their GDPR compliance information is below. G-Suite have convinced us at Aspire Furniture Ltd that they are GDPR compliant and that our data is stored responsibly and securely.
https://cloud.google.com/security/gdpr/
Cross Boarder Transfers
Aspire Furniture Ltd does not transfer any customer data outside of the EEA.
Accessing and Changing Your Information
You can review or change the personal information we hold on you. Please email your request to cs@aspire-furniture.co.uk. We will get back in touch for you to confirm your identity and then provide you with all data held on you.
Accountability
Aspire Furniture Ltd has appointed a data protection officer to be accountable for adherence to the data protection policy. The data protection officer can be contacted via the cs@aspire-furniture.co.uk, please mark the email for the attention of the data protection officer.
COOKIES
Cookies are an essential part of how our site works. Cookies are small text files that are stored on your PC, phone or other web enabled device. They are not harmful and do not contain any confidential information such as your home address, date of birth or credit card details.
Some of these cookies are required by our site to enable you to transact whilst other non-essential cookies enable us to give you an enhanced, personalised web experience and determine relevant products to show you.
It must be noted that if you choose not to consent to the use of cookies, your experience of our site will be limited and many integral aspects of the site.
COPYRIGHT
All website design, text, graphics, photographs and the selection and arrangement thereof, and all source code and all other material on this website are copyright Aspire Furniture Limited its content providers, unless otherwise expressly indicated. All rights reserved. You are permitted to print or download extracts from this material for your personal use only. None of this material may be used for any commercial or public use.
FRAUD PREVENTION
If false or inaccurate information is provided and fraud is identified, details will be passed to fraud prevention agencies. Law enforcement agencies may access and use this information.
CHANGES TO PRIVACY POLICY
We keep our privacy policy under regular review and we will place any updates in this webpage. This privacy policy was last updated on 21/05/2018.