Nine Lives and Beyond Privacy Policy

Name: Emma Wray

UK – West Yorkshire

E-mail: emma.wray@ninelivesandbeyond.co.uk

website address is: https://ninelivesandbeyond.co.uk

Our core beliefs regarding user privacy and data protection

User privacy and data protection are human rights
We have a duty of care to the people within our data
Data is a liability, it should only be collected and processed when absolutely necessary
We loathe spam as much as you do!
We will never sell, rent or otherwise distribute or make public your personal information

Relevant legislation

Along with our business and internal computer systems, this website is designed to comply with the following national and international legislation with regards to data protection and user privacy:

UK Data Protection Act 1988 (DPA)
EU Data Protection Directive 1995 (DPD)
EU General Data Protection Regulation 2018 (GDPR)

This site’s compliance with the above legislation, all of which are stringent in nature, means that this site is likely compliant with the data protection and user privacy legislation set out by many other countries and territories as well. If you are unsure about whether this site is compliant with your own country of residences’ specific data protection and user privacy legislation you should contact our data protection officer (details of whom can be found towards the end of this policy) for clarification.

PERSONEL INFORMATION WE COLLECT

Data we collect includes:

Name
Contact information such as email addresses and telephone numbers
Financial information such as credit/debit card details
IP address (automatically collected)
Web browser type and version (automatically collected)
operating system (automatically collected)
a list of URLs starting with a referring site, your activity on this website, and the site you exit to (automatically collected)

In each case, in accordance with this Privacy Policy. This data is given to us by you and some data is collected automatically.

This website collects and uses personal information for the following reasons:

Site visitation tracking

Like most websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.

Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you but Google do not grant us access to this. We consider Google to be a third-party data processor (see section 6.0 below).

GA makes use of cookies, details of which can be found on Google’s developer guides. FYI our website uses the analytics.js implementation of GA.

Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.

Online Store

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers and PayPal details), email address, and phone number. We refer to this information as “Order Information”.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
– Communicate with you;
– Screen our orders for potential risk or fraud; and
– When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

Our website and blog

Should you choose to add a comment to any posts that we have published on our blog, the name and email address you enter with your comment will be saved to the WordPress website database, along with your computer’s IP address and the time and date that you submitted the comment. This information is only used to identify you as a contributor to the comment section of the respective blog post and is not passed on to any of the third-party data processors detailed below. Only your name will be shown on the public-facing website.

Your comment and its associated personal data will remain on this site until we see fit to either 1.) remove the comment or 2.) remove the blog post. Should you wish to have the comment and its associated personal data deleted, please email us here using the email address that you commented with.

If you are under 16 years of age you MUST obtain parental consent before posting a comment on our blog.

NOTE: You should avoid entering personally identifiable information to the actual comment field of any blog post comments that you submit on our blog.

Contact forms and email links

Should you wish to contact us via the Contact Page, you can send an email to our business mail account or connect via Facebook. Your data is not stored by us in this event and is held by the third party email provider you use, our third-party data processor – MailerLite (in mail and contacts).

Email newsletter

If you choose to join our email newsletter, the email address that you submit to us will be forwarded to MailerLite who provide us with email marketing services. We consider MailerLite to be a third-party data processor. The email address that you submit will not be stored within this website’s own database or in any of our internal computer systems.

Your email address will remain within MailerLite’s database for as long as we continue to use MailerLite’s services for email marketing or until you specifically request removal from the list. You can do this by unsubscribing using the unsubscribe links contained in any email newsletters that we send you or by requesting removal via email. When requesting removal via email, please send your email to us using the email account that is subscribed to the mailing list.

If you are under 16 years of age you MUST obtain parental consent before joining our email newsletter.

While your email address remains within the MailerLite database, you will receive periodic newsletter-style emails from us for as long as you wish to. You can unsubscribe at any time.

Our use of Data

Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following reasons:

a. internal record keeping;

b. improvement of our products / services;

c. transmission by email of marketing materials that may be of interest to you;

d. contact for market research purposes which may be done using email, telephone, fax or mail. Such information may be used to customise or update the Website;

in each case, in accordance with this Privacy Policy.

How we store your personal information

As detailed above, if you submit a comment to a blog post published on our blog some personal information will be stored within this WordPress’ website database. This is currently the only occasion where personal data will be stored on any of our websites. This data is currently stored in an identifiable fashion; a limitation of the content management system that our blog website is built on (WordPress).

We will use technical and organisational measures to safeguard your Data, for example;

a. access to your account is controlled by a password and a user name that is unique to you.

b. we store your Data on secure servers.

c. payment details are encrypted using SSL technology (typically you will see a lock icon or green address bar (or both) in your browser when we use this technology.

About this website’s server

This is a WordPress site hosted by IONOS on their servers. It is therefore part of the third-party data processors mentioned below.

We use a number of third parties to process personal data on our behalf. These third parties have been carefully chosen and all of them comply with legislation.

IONOS – Email, Contacts & Attachments
MaierLite – Newsletter and Mailing List
WordPress – Website
WooCommerce – Store
Facebook, Instagram, Pintrest, YouTube – Social Media

Data Retention

Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this Privacy Policy or until you request that the Data be deleted.

Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

Your Rights

You have the following rights in relation to your Data:

a. Right to access – the right to request (i) copies of the information we hold about you at any time, or (ii) that we modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is “manifestly unfounded or excessive.” Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.

b. Right to correct – the right to have your Data rectified if it is inaccurate or incomplete.

c. Right to erase – the right to request that we delete or remove your Data from our systems.

d. Right to restrict our use of your Data – the right to “block” us from using your Data or limit the way in which we can use it.

e. Right to data portability – the right to request that we move, copy or transfer your Data.

f. Right to object – the right to object to our use of your Data including where we use it for our legitimate interests.

To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this e-mail address: emma.wray@ninelivesandbeyond.co.uk

It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.

Transfers Outside the United Kingdom and European Economic Area

Data which we collect from you may be stored and processed in and transferred to countries outside of the UK and European Economic Area (EEA). For example, this could occur if our servers are located in a country outside the UK or EEA or one of our service providers is situated in a country outside the UK or EEA.

We will only transfer Data outside the UK or EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data, e.g. by way of data transfer agreement, incorporating the current standard contractual clauses adopted by the European Commission.

To ensure that your Data receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Data with. This ensures your Data is treated by those third parties in a way that is consistent with the Data Protection Laws.

Links to Other Websites

This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This Privacy Policy does not extend to your use of such websites. You are advised to read the Privacy Policy or statement of other websites prior to using them.

Data Breaches

We will report any unlawful data breach of this website’s database or the database(s) of any of our third-party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.

If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via this e-mail address: emma.wray@ninelivesandbeyond.co.uk

Data Controller

The data controller of this website is: Emma Wray ‘Nine Lives and Beyond’

Data Protection Officer

Ms Emma Wray

Owner, Nine Lives and Beyond

Email: emma.wray@ninelivesandbeyond.co.uk

Changes to our Privacy Policy

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes. Specific policy changes and updates are mentioned in the change & audit log below.

Change log