Shuttleworth is committed to the General Data Protection Regulation (GDPR) and the Data Protection Act, and we want to ensure that our visitors feel the personal data they share with us is safe and secure.
This policy covers:
- What personal data we collect and how we collect it
- How we use the personal data we collect
- Who we may share your personal data with
- How long we keep your personal data
- Security and external sites
- Our use of cookies
- Your marketing preferences
- Your rights
- Complaining to the UK data protection regulator
What personal data we collect and how we collect it:
We may collect personal data from you via our website, social media accounts, your correspondence with us (via phone, email, or otherwise), or any verbal information you may give when visiting us.
The personal data we may collect includes information you provide to us to register to use our website, make a purchase and/or online booking, create and manage an online account with us, post material on our social media accounts, and any correspondence we may receive via email, phone or otherwise. We may also collect information from you when you choose to take part in any surveys or promotional activities we administer. When you visit our site, we collect CCTV images and marketing imagery and video. In instances where you may be individually identifiable in marketing imagery/video, we will ask you to complete a release form to give your consent for us to use your likeness in promotional activity.
The personal data we may ask you for, in line with the above, may include your name, address, email address, phone number, and date of birth. For purchases online, at our catering outlets, and in our shop, we will also collect credit/debit card details for the purchase of goods and/or services. In the event of a first aid incident, we may also collect medical information from you. We will always aim to minimise the amount of personal data needed to perform the relevant function of our services.
How we use the personal data we collect:
We may use and process your personal data where is it necessary for us to pursue our legitimate interests as a business.
|
WHERE THERE IS LEGITIMATE INTEREST |
|
|
To carry out marketing activity |
|
|
To fulfil online delivery and security |
|
|
For other purposes |
|
|
WHERE THERE IS A LEGAL REQUIREMENT |
|
|
To comply with our legal obligations |
|
|
To fulfil a contract with you |
|
|
WHERE YOU HAVE PROVIDED CONSENT |
|
|
We may use/process your data |
|
Who we may share your personal data with:
At no time will we share your data with third parties for marketing purposes.
We may share your information with our own third party service providers, agents, subcontractors and other organisations for the purposes of providing services to us or directly to you on our behalf.
These third party parties may include: cloud service providers, hosting, email and content providers, administrative service providers, and payment processing companies (who will securely process your debit/credit card information when you make purchases from us).
When using third parties, we only disclose the personal data necessary for them to provide their service. Contract will be in place to require them to keep your data secure and to ensure that your data is not used other than in accordance with our specific instructions.
We may also share your data if we are under a duty to disclose or share it to comply with a legal obligation, to detect or report a crime, to enforce or apply the terms of our contracts or our legal rights or to protect the rights, property or safety of our visitors.
How long we keep your personal data:
We only keep your personal data for the length of time that is appropriate for us to ensure we can deliver our services. Retention periods reflect legal requirements.
Security and external sites:
Whilst no online transmission of information can be completely secure. We will do our best to protect your personal information, but we cannot guarantee the security of any information you share with us via our website – this is done at your own risk. Upon receipt of your personal data, we have reasonable and appropriate measures in place to ensure its security against accidental or unlawful destruction, loss, alteration, or unauthorised access.
Our website contains external links to websites of our partners and/or other organisations, companies and public bodies where necessary to provide you with helpful information. Each of these companies, organisations, bodies or partners operates their own privacy policy regarding personal data and the use of cookies. When you click through to these external sites, we cannot take any responsibility for issues arising in connection with this third party’s use of your data, the website content or the services offered to you by these websites.
Our use of cookies:
We use cookies on our website to obtain and view visitor habits and volumes on our website. ‘Cookies’ are small pieces of information sent to and stored on your device to allow our website to recognise you when you visit. You can disable cookies at any time via your browser and/or device; however, doing so may adversely affect your experience of our website.
Your marketing preferences:
We will collect and process your preferences about the marketing information you receive from us via post, email, and/or text in the following ways:
- As a subscriber, we may contact you with marketing information about our products and/or services.
- If you place an order with us, we may contact you with marketing information in the ways mentioned in notices presented to you as part of that transaction.
- If you register for an account with us, we may ask if you give your consent to receive marketing information from us.
We may ask you to confirm you are still happy with your chosen marketing preferences to refresh our data. You may amend your preferences at any time by logging into your online account or contacting us using the details at the end of this policy.
Your rights:
You have various rights in relation to your personal data under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to identify your personal data on our systems.
|
RIGHT TO ACCESS |
You have a legal right to access a copy of the personal data we hold for you – this is a subject access request. In such cases, we will aim to respond to you within one month of your request. For these requests, you will need to provide one form of identification and proof of your address such as a driving license, passport, or utility bill. Please send any requests via the contact information at the end of this policy. We may not provide you with a copy of your personal information if this concerns other individuals or if we have another lawful reason to withhold that information. |
|
RIGHT TO CORRECT/UPDATE |
You can check that the personal data we hold is accurate via your online account. You can also contact us via the contact information at the end of this policy. |
|
RIGHT TO WITHDRAW CONSENT |
You can withdraw your consent for us to hold your data at any time by contacting us via the contact information at the end of this policy. To withdraw your consent to receiving marketing from us, you can log into your online account or contact us via the contact information at the end of this policy. If you choose to withdraw your consent, our use of your personal data prior to this withdrawal remains lawful. |
|
RIGHT TO OBJECT TO OUR USE OF YOUR DATA |
You may object to our use of your personal data for legitimate interest by contacting us via the contact information at the end of this policy. Except for the purposes for which we are confident we can continue to process your personal data, we will temporarily stop processing your personal data in line with your objection until we have investigated further. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your data for those purposes. Otherwise, we will provide you with our justification as to why we need to continue using your data. You may object to us using your personal data for marketing purposes at any time – in this case, we will comply with your request immediately. |
|
RIGHT TO ERASURE |
You may ask us to remove your personal data from our systems by contacting us via the contact information at the end of this policy. Unless there is a lawful reason allowing us to continue using your personal data, we will make reasonable efforts to comply with your request. You may also ask us to restrict processing your personal information where you believe it is unlawful for us to do so, you have objected to its use and our investigation is pending or you require us to keep it in connection with legal proceedings. In these situations, we may only process your personal information whilst its processing is restricted if we have your consent or are legally permitted to do so, for example for storage purposes, to protect the rights of another individual or company or in connection with legal proceedings. |
|
RIGHT TO TRANSFER |
In areas where we rely on consent as the legal basis for processing your personal data or need to process it in connection with a contract we’ve entered into with you, you may ask us to provide you with a copy of this information. We will provide this to you electronically in a structured, commonly used and machine-readable form, such as a CSV file. You can also ask us to transfer your personal data directly to another service provider – which we will do wherever this is technically possible. In this instance, we may not provide you with a copy of your personal information if it concerns other individuals or we have another lawful reason to withhold this information. |
Complaining to the UK data protection regulator:
We hope that we can work with you to resolve any concerns you may have directly. However, if we have not been able to do this, you have the right to complain to the Information Commissioner’s Office (ICO) regarding any concerns you have over our processing of your personal data.
Contacting us:
Any questions, comments or concerns you may have about this privacy policy, or how we process your personal data are welcome. Please reach out to use via any of the means below:
Email: enquiries@shuttleworth.org
Phone: +44 (0)1767 627 927
Mail: FAO Data Protection, Shuttleworth, Alder Drive, Biggleswade, Bedfordshire, SG18 9EP.
This policy was last reviewed in August 2024.