PRIVACY NOTICE
We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.
When we use your personal data we are regulated under the General Data Protection Regulation (GDPR) which applies across the European Union (including in the United Kingdom) and we are responsible as ‘controller’ of that personal data for the purposes of the GDPR.
We may provide additional, specific privacy information to you as you interact with us in different ways (e.g. that we will only use certain information for specific purposes). To the extent that any of that information differs from what we say below, those specific statements will apply in those circumstances.
2. Who we areRSVP London is a business established by Lucy Clemson; we decide why and how your personal information is processed, and you can find the relevant contact details at the end of this policy.
3. Personal Data that we collectPersonal data is defined in the GDPR as any information relating to an identified or identifiable natural person. Categories of personal data that we collect include:
Contact information – for examples your name, address, telephone numbers, email addresses, and other such information as may be necessary (such as your shipping address)
Financial information such as your billing address, and if necessary your bank and/or building society details
Details of the products you have ordered, and your shopping preferences
Details of your visits to our website
Correspondence generated when you contact us by email, post, social media or telephone (we may keep a record of this correspondence)
IT Communications information – for example information about your use of our IT, communication and other systems, and other monitoring information, eg if using our secure online customer portal
Embedded content from other websites – articles on our site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
Marketing, communication preferences and related information – with your permission, we retain your personal information, preferences and details of your transactions to keep you informed by email, post, phone and/or through other digital means (including social media) about products and services (including special offers, discounts and promotions)
Depending on how we interact, some of the above personal data may be required to enable us to provide our products to you; so if you do not provide personal data we ask for, it may delay or prevent us from doing so.
4. How your personal data is collectedWhen you use our website, our products or services, interact with us online, or by phone, email or otherwise, the categories of information that we collect about you are as follows; we collect most of this information from you when you:
Browse or use our website – we use cookies on our website (for more information on cookies, please see our cookie policy)
Leave comments on our site – when you leave comments on the website we collect the data shown in the comments form, and also your IP address and browser user agent string to help spam detection.
Register with us as a customer via our website using our secure customer login portal (and your use of the portal)
Contact us by telephone or email, or any other method (including via social media)
Subscribe to our newsletter, or tell us you’d like to hear about offers or promotions
We may also collect information in other ways, for example by monitoring of our website and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, email and instant messaging systems;
We may also receive information about you from Google Analytics, a web analytics service provided by Google, Inc. (“Google”) whose servers are in the United States of America. Google Analytics uses cookies to help us analyse how users use our site.
5. How and why we use your personal dataUnder data protection law, we can only use your personal data if we have a proper reason for doing so, eg:
to comply with our legal obligations;
for the performance of our contract with you or to take steps at your request before entering into a contract;
for our legitimate interests or those of a third party; or
where you have given consent.
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.
The table below explains what we use (process) your personal data for and our reasons for doing so:
What we use your personal data for / Why we use it (as per policy table above)
6. Special Category Data
It is highly unlikely that we will need to process any special category data – in any case, we would only do so where you have given explicit consent to the processing of such data for one or more specified purposes, or it is necessary to do so in order to establish, exercise or defend legal claims.
7. Promotional communicationsWe may use your personal data to send you updates (by email, text message, telephone or post) about things that might be of interest to you, such as information about our services, including exclusive offers, promotions or new services or products.
We have a legitimate interest in processing your personal data for promotional purposes. This means we do not usually need your consent to send you promotional communications.
We will always treat your personal data with the utmost respect and never sell it to other organisations for marketing purposes.
You have the right to opt out of receiving promotional communications at any time by contacting us or using opt-out methods in communications.
8. Who we share your personal data withWe may share your personal data with payment providers, logistics companies, professional service providers, credit reference agencies, fraud prevention agencies, IT providers, marketing partners, and others as set out in this policy.
9. Where we store your personal informationInformation may be held at our offices and third-party providers. Some data may be transferred outside the EEA, with appropriate safeguards.
10. How long we keep your personal informationWe retain personal data only as long as necessary for legal, operational, or contractual purposes, then delete or anonymise it.
11. Your rightsYou have rights including access, rectification, erasure, restriction, portability, objection, and rights relating to automated decision-making.
12. Withdrawing ConsentYou may withdraw consent at any time by contacting us. This does not affect the lawfulness of processing before withdrawal.
13. Keeping your personal data secureWe use appropriate security measures to protect your data and restrict access to authorised personnel only.
14. Complaining to the UK data protection regulatorYou can complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk.
15. Changes to this privacy policyThis policy may change from time to time, so please check it occasionally.
16. Contact detailsPlease contact us by email if you have any questions. Our email address is postmistress@rsvplondon.com