On 25th May 2018 the law changed with the introduction of the General Data Protection Regulation (GDPR) with regards to how organisations must protect your ‘data’ (personal data and records). This privacy notice explains why confidential data is held by us (Treasures Toys) and how this is protected.
What are your rights?
We are committed to protecting your rights to privacy. They include:
Right to be informed about what we do with your personal data
Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete
Right to have a copy of all the personal information we process about you
Right to be forgotten and your personal data destroyed
Right to restrict the processing of your personal data
Right to object to the processing we carry out based on our legitimate interest
Why do we collect information about you?
We gather information about you in order that we can may contact you about our services.
What information do we collect about you?
We may collect information about you that includes personal information, such as:
First name or given name
Family name or surname
Telephone and/or email address
We also process personal data that is relevant to our legitimate interests in running our business such as:
Invoices and receipts
Accounts and tax returns
How do we store the information about you?
We take your privacy very seriously. We are committed to ensure we take reasonable steps to protect any individual identifying information that you provide to us. Once we receive your data, we make best efforts to ensure its security on our systems. All personal information provided is stored in compliance with EU General Data Protection Regulations (GDPR) rules. All computers and iPads used within our work with you are password protected and use security software.
How long do we keep your information for?
We do not keep your data for longer than is necessary. Administrative data is retained for up to six years. We are required to do this in the unlikely event there are queries from HMRC. Where it is not necessary to retain the data for six years, it is destroyed as soon as possible.
Who do we share your personal information with?
Your information is kept confidential at all times.
How can you access your information and correct it, if necessary?
Treasures Toys tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ or ‘Right of Access’ under the Data Protection Act and the General Data Protection Regulation. Within one calendar month we will then supply to you:
A description of all data we hold about you
Inform you how it was obtained (if not supplied by you)
Inform you why, what purposes, we are holding it
What categories of personal data is concerned
Inform you who it could be disclosed to
Inform you of the retention periods of the data
Inform you around any automated decision making including profiling
Let you have a copy of the information in an intelligible electronic form unless otherwise requested.
To make a request to access any personal information we may hold, you need to put the request in writing. We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate, please address these changes to Z Armstrong.
Complaints or queries
Treasures Toys tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures. If you do have a complaint, please contact Z Armstrong who will investigate the matter.