Date of Issue: 30 April 2018
We are committed to protecting and respecting your privacy.
For the purposes of Data Protection Legislation (meaning: (i) unless and until it is no longer applicable in the UK, the Data Protection Act 1998; (ii) unless and until the GDPR is no longer directly applicable in the UK, the General Data Protection Regulation ((EU) 206/679) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK and then (iii) any successor legislation to the GDPR or the Data Protection Act 1998), Windmill Computing Limited is the data controller of your personal information.
Information that we may collect from you
- information that you provide when completing e-commerce transactions;
- information for the purposes of delivering your ordered products;
- if you contact us, we may keep a record of that correspondence;
- if you provide a review on a social media channel (e.g. facebook, Instagram, snapchat, reviews.co.uk) these may appear on the XXXXX website;
- details of your visits to the Website including, but not limited to, traffic data, location data, weblogs interaction data and other communication data, the pages you access;
- information provided by you when you participate in any forum, discussion board or other social media function on the Website;
- technical information including: your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and
- storing your username and password as a cookie, to the extent you give us permission to do so.
Use of personal information
To the extent that the processing of your personal information is necessary in order for us to provide you with a service you have requested under a contract we have with you, we rely on that contract as the legal basis on which we process your personal information.
Otherwise, we rely on your consent as the legal basis on which we process your personal information. We will seek your consent when you register for the Website and we may seek further consents from you from time to time on the Website or by contacting you in other ways, including by email.
We process personal information about you in relation to our Website for the following purposes and in the following ways:
- tailoring our service to your requirements and preferences;
- aggregating and anonymising (i.e. removing all identifiers which could otherwise be used to identify you) certain information about you and your use of the Website with that of other users and sharing this with carefully selected third parties. We may not limit such third parties’ use of such aggregated information except that we do require them to agree not to seek to make such data personally identifiable;
- using aggregated and anonymised information about you and your use of the Website to improve the Website;
- analysing information about you to subsequently use for marketing;
- processing e-commerce transactions, and
- delivering your products to you with information you have provided to us in your order.
Withdrawal of consent
Retention of Personal Data
Personal Data (for both non-account customers and account customers) will be retained by us for a maximum period of 24 months. Following this time, the Personal Data will be deleted.
The Website provides you with the opportunity to opt out of receiving marketing information from us or a third party (MailChimp), or to opt in to receiving marketing information. We will inform you (before collecting your information) if we intend to use your information for marketing purposes.
Where and how we store your personal information
The information we collect from you is held on severs physically located within the UK or the European Economic Area (“EEA”).
We will use appropriate technical and organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction or damage of your personal information.
Whilst we will take every reasonable step to protect the files provided by users for the purposes of printing, we provide no guarantee to users that their files cannot become lost or corrupted. We recommend that users take adequate precaution to save these files.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Disclosure of your personal information
We will not sell your personal information in a personally identifiable format to third parties without your prior consent.
We may share your personal information with selected third parties, including:
- Worldpay and Paypal (for the purposes of completing e-commerce transactions);
- DPD (or any other delivery company we contract with from time to time) to deliver your products;
- any member of our group companies, which includes our ultimate holding company and its subsidiaries;
- prospective and actual successors in title to our business;
- suppliers and external agencies we engage to process information on our behalf;
- certain third parties who provide technical support for the operation of our site (our Web hosting service for example) may access such information;
- business partners and sub-contractors for the performance of any contract we enter into with them or you – for the purposes of processing your information on our behalf;
- analytics (such as Google analytics) and search engine providers that assist us in the improvement and optimisation of our Website, and
- to the extent that disclosure is required by law or any regulatory authority.
Personal information of minors
Cancellation of account
If your account is cancelled, by you or by us, this will result in the permanent deletion of your account from our Website. It will typically take up to one month to delete an account, however, we will inform you if this is likely to take longer. We will not retain any other data about you for any other purpose after deletion of your account.
We delete accounts of customers which are inactive for 13 months or longer.
Given that the internet is a global environment, using the internet to collect and process personal information necessarily involves the transmission of information on an international basis. Therefore, by browsing the Website and communicating electronically with us, you acknowledge and agree to our processing of personal information in this way.
The transmission of information via the internet is not completely secure. Although we do our best to protect personal information, we cannot guarantee the security of your information transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access or processing.
Changes to this Policy
Access to information
However, where a request is excessive, onerous or repetitive, it may take us longer than 30 days to process this request and we may charge you a reasonable fee. Where this is the case we will inform you.
Erasure or rectification of information
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation that requires processing of personal data by EU or member state law to which the controller is subject, or for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health;
- for archiving purposes in the public interest, or scientific and historical research purposes or statistical purposes in so far as the erasure of the information would be likely to render impossible or seriously impair the achievement of the objectives of the archiving purposes in the public interest, or the scientific and historical research purposes or the statistical purposes, and
- for the establishment, exercise or defence of legal claims.
Right to complain
If you have any requests or queries concerning your personal information or any queries with regard to our practices, please send us an email on sales at wcl.co.uk or write to us at the following address: Windmill Computing Limited, Broadoak Lodge, Horsham Road, Cranleigh, GU6 8DJ, United Kingdom