PLEASE BE AWARE IF YOU NO LONGER WISH TO REMAIN ON OUR RECORDS PLEASE EMAIL SALES@SHELTERSONLINE.CO.UK, WITH YOUR NAME, CONTACT NUMBER AND EMAIL ADDRESS AND WE WILL REMOVE ALL OF YOUR DATA FROM OUR SYSTEMS.
Maintaining the security of your data is a priority for Shelters Online, its brands and trusted partners and we are totally committed to respecting your privacy rights and that your personal information is protected. We will ensure that we handle your data lawfully and fairly and we commit to being transparent about what personal data we collect and how we use it.
• Why we collect personal data;
• What personal data we collect;
• How we use your data;
• How we ensure that your privacy and personal data is maintained;
• Your legal rights relating to your personal data.
WHY WE COLLECT PERSONAL DATA:
Shelters Online Limited collect personal data according to the following lawful bases:
• Contract: The processing of personal data is necessary for us to fulfil our contractual obligations with you (e.g. you are purchasing products from us) or because you have asked us to do something before entering into a contract (e.g. you have asked us to prepare and send you a quote).
• Consent: Clear consent has been given for us to process your personal data for a specific purpose (e.g. you have given your clear consent for us to include your personal data to send you promotional and marketing communications).
Note: We will always rely on formal consent being given as the basis for processing personal data for promotional and marketing communications by whatever media we use.
Customers have the right to withdraw consent at any time. Where such consent has been given for a specific purpose (e.g. promotional and marketing communications), we will cease to process data after consent is withdrawn.
Legal Obligation: We may need to process personal data to enable us to comply with UK law and regulatory requirements.
Legitimate Interest: We need to process personal data to enable us to meet our commercially legitimate interests, for example:
- Supplying goods and services to our customers;
- Advertising our products and services;
- Understanding our customers' commercial behaviour, activities, preferences and needs;
- Improving existing and developing new products and services;
- Preventing, investigating and detecting crime and fraud, including working with law enforcement agencies;
- Protecting customers by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to Charterhouse Holdings plc and its two brands;
- Handling customer contacts, queries, complaints or disputes.Important: If you do not wish to provide your personal data, we will be unable to provide you with those products and services that may be of interest to you.
Important: If you do not wish to provide your personal data, we will be unable to provide you with those products and services that may be of interest to you.
WHAT DATA DO WE COLLECT?
Relevant to the legal bases that apply to us, Shelters Online and its brands may collect the following information:
• Your name, age/date of birth and gender;
• Your contact details: postal address, including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address;
• Purchases and orders made by you;
• Your online browsing activities on the Charterhouse Holdings plc, Kustom Kit, Xpres and Vanilla websites that you may go on;• your online account password(s);
• When you make an order or purchase with us, your payment card details;
• Your elected communication and marketing preferences;
• Your interests, preferences, feedback and survey responses;
• Your location;
• Your correspondence and communications with us;
• Other publicly available personal data, including any which you have shared via a public platform (such as a Twitter feed or public Facebook page).
The above list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the above personal data is collected directly, for example when you set up an online account on our websites, or send an email to our customer services team. Other personal data is collected indirectly, for example your browsing or shopping activity. We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources.
We also receive personal data from our trusted partners who support us in providing services to our customers for marketing and financing/leasing arrangements.
HOW WE USE YOUR DATA
Relevant to the legal bases that apply to us, Shelters Online, its brands and our trusted partners acting on our behalf use your personal data to:
• Provide goods and services to you;
• Make a tailored website available to you;
• Verify your identity;• manage any registered account(s) that you hold with us;
• Deal with crime and fraud prevention, detection and related purposes;
• Contact you electronically about promotional offers and products and services which we think may interest you, based on your elected consent (see below);
• Better understand your needs through market research purposes;
• Manage our customer services interactions with you;
• Disclose information, where we have a legal obligation or duty to do so (for example, in relation to a legal dispute or regulatory investigation).
Promotional Communications, Marketing and Advertising
Shelters Online use your personal data for electronic marketing and direct mail purposes only with your consent. We aim to update you with such information that is considered to be of interest and relevant to you as an individual.
We aim to update you with such information that is considered to be of interest and relevance to you as an individual.
You have the right to opt out of receiving such communications at any time, by using any of the following methods:
• Changing your marketing preferences via your online account;
• Making use of the straightforward "unsubscribe" link in e-mails;
• Contacting our customer services team as set out in the Contact section at the end of this Policy.
If you visit our websites, you may receive personalised advertisements whilst browsing other websites. Any advertisements you see will relate to products you have viewed whilst browsing our websites on your computer or other devices.
SHARING OF PERSONAL DATA
So that we can make certain services available to you, we may need to share your personal data with some of our trusted service partners. By example these could include IT, logistics, finance/leasing and marketing service support providers.
Shelters Online only allow service providers to handle your personal data when we have confirmed that they are registered with the Information Commissioners Office and that they apply appropriate data protection and security controls. We also impose contractual obligations on service providers relating to data protection and security, which mean they can only use your data to provide services to Shelters Online, its brands and to you, and for no other purposes.
OTHER THIRD PARTIES
Aside from our trusted service providers, Shelters Online will not disclose your personal data to any third party, except as set out below. We will never sell or rent our customer data to other organisations for marketing purposes. We may share your data with:
• Government bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so;
• To comply with our legal obligations;
• To exercise our legal rights (for example in court cases);
• For the prevention, detection, investigation of crime or prosecution of offenders;
• For the protection of our employees and customers.
All our trusted service partners are located within the European Economic Area (EEA). We do not share any personal data outside of the EEA.
Automated decision making in the processing of personal data, Shelters Online its brands and trusted partners do not use operations that involve automated decision making.
HOW LONG IS YOUR DATA KEPT FOR?
We will not retain your data for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of data, however the longest we will normally hold any personal data is 6 years, unless you elect to use your right to erase your personal data. We may be compelled to retain some data to comply with legislative compliance e.g. the legal requirement to retain details of financial transactions in accordance with UK law.
HOW WE PROTECT YOUR DATA
Shelters Online are committed to keeping your personal data safe and secure. Our security measures include:
• Encryption of data;
• Regular cyber security/risk analysis assessments of all service providers who may handle your personal data;
• Regular risk analysis planning to ensure that we are ready to respond to cyber security attacks and data security breach incidents;
• Regular systems penetration testing;
• Security controls that protect the entire Charterhouse and brand infrastructures from external attack and unauthorised access;
• Appropriate policies setting out our data protection approach and staff training.
Right to be informed:
Right of access:
You have the right to obtain:
• Confirmation that your personal data is being processed;
• Access to that personal data (i.e. you can request a copy of the personal data that we hold about you, at any time). This is provided free of charge and must be supplied to you within one month of receipt of your request.
Right to rectification:
You have the right to request that we correct any inaccurate or incomplete personal data that we hold about you.
Right to erasure:
You have the right to have your personal data erased and to prevent processing in a range of specified circumstances. This can only normally be refused based on public interest requirements and where we have to ensure compliance with legal and auditory regulations.
We would not be able to erase personal data whilst we are still providing our services to you. This can only be done once you cancel the service or once the service is completed.
Right to restrict processing:
You have the right to block or supress processing of your personal data. When such processing is blocked or restricted, personal data can still be stored but not processed.
Right to data portability:
You have the right to obtain a copy of your personal information in a legible and compatible format that is suitable for you to use for your own purposes.
Right to object:
You have the right to object to the collection and use of your personal information at any time, for example:
• Processing based on legitimate interests;
• Direct marketing;
• Processing for purposes of statistics i.e. scientific/historical research.
Right related to automated decision making and profiling. This right safeguard you against the risk of a potentially damaging automated decision being taken without human intervention. Shelters Online do not have operations that involve automated decision making.
Right to complain:
You have the right to complain to us directly by contacting us using the information in the contact section below.
You have the right to complain directly to the Information Commissioner's Office (ICO), which is the regulatory authority that deals with personal data and who makes sure that personal data is used in a lawful way by public sector bodies, commercial businesses and organisations that process personal data.