STATEMENT OF COMPLIANCE TO THE GDPR
WHAT IS GDPR?
The General Data Protection Regulation (GDPR) is a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). The main difference is that the regulation puts more onus on organizations for seeking and recording permission, being transparent about what, how and for how long data is stored and used. It also addresses the export of personal data outside the EU. The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
The General Data Protection Regulation came into effect on 25th May 2018 and affects all organizations that hold data on individuals. The UK government has confirmed that the UK’s decision to leave the EU will not affect the commencement of the GDPR.
Moore Large is committed to ensuring that your personal information is protected and never misused.
We take responsibility for the personal information we collect about you, and we aim to be transparent about how we handle it, and give you control over it.
The Personal information we collect
Our main reason for collecting your personal information is to provide and improve the service, products and experiences that you and our customers expect from us.
To guarantee your privacy and the protection of your information, we define personal information as any information that could be used to help identify you or another individual.
We collect personal information about you in a number of different ways. In this section, we explain the different ways we collect personal information about you and the ways in which that information will be used.
For more detail on how we use your personal information, please see the section titled "How do we use your personal information?"
Information you share with us
We may collect personal information that you share with us when you contact us or interact with us through our website, email, phone, in person at our stands and events, or otherwise.
For example, you will provide information to us when you contact our customer service teams, place an order, register your warranty, complete a survey, competition or questionnaire, update your preferences and account information or rate one of our products on our website.
Through these interactions you may share with us: your name, address, e-mail address, contact number and payment information. In some circumstances, we will need that information to be able to fulfil our contract with you -provide you with a product or service that you have asked for- for example, we need your payment information when you buy a product, and your address to deliver it to you.
When updating your information, you may be asked to provide us with information about your interests and what appeals to you most about a particular range of products. All of that information is optional, which means that you can choose whether or not to provide it; you can also ask us to delete it at any time by contacting customer services or by e-mailing our data protection team at email@example.com
Information from your online interactions
We may collect and store limited personal information and some anonymous, aggregate statistics from all visitors to our websites, whether you actively provide us with that information or merely browse our websites.
The information we collect may include the internet protocol (IP) address of the device you are using, the browser software you use, your operating system, the date and time of access, the internet address of the website from which you link through to our website and information on how you use our websites.
We will only use this information to see how well our websites are working, how they are used and what users look at most.
We may also collect and handle information about how you engage with our promotional campaigns and advertising online, outside of our own websites (for example, on Google and on social media).
For further information, including on the types of cookies that we use and how to manage cookies placed on our websites, please refer to our cookies policy.
If a user of our products, we will send you support communications by e-mail.
As long as you indicate that you are happy for us to do so, we would also like to keep you posted on our latest product announcements, owner offers or upcoming events, we want to make sure you’re happy with the communications you receive from us.
We may collect information about how you engage with our e-mails; including whether they are delivered to you, whether you open them, whether you choose to learn more about what's happening at Moore Large (for example, by clicking on a link in our e-mail) and if you ask us not to contact you anymore (by clicking on the unsubscribe option included in all our e-mail correspondence).
We may use that information by itself and in combination with your customer record (the information you share with us) to make sure that we stop sending you support or marketing communications when you ask us to.
We may also use it to make our e-mails as interesting as possible by providing you with content and experiences that we think you will be interested in based on how you have engaged with our previous e-mails; you have the right to object to our use of your information for this purpose (see the section below titled 'Your controls and choices').
How do we use your personal information?
The main reason for collecting and using your personal information is to provide and improve the service, products and experiences that you expect from us.
Information you share with us
- We use the personal information you share with us in the following ways:
- To respond to your queries and requests;
- To communicate with you;
- To provide services and support for our products;
- To provide updates to you about any changes to our policies, terms and conditions and any other matters which we may need to tell you;
- As long as you are happy for us to do so, to tell you about our other products and services;
- To provide you with essential service updates about your purchases; and
- To customise and improve the way that you deal with us in the future; for example, by showing you products and offers that we think you might like.
Information from your online interactions
We may use the personal information from your online interactions, by itself and in combination with other personal information that we collect about you to identify any part of our websites that aren't working as well as they should for you – so that we can fix things and make our websites better for you and other users;
We may also want to be able to monitor your use of our websites, and how you engage with our promotional campaigns and advertising online, so that we can:
Customise and improve your future visits (for example, by showing you products and offers that we think you might like); and (as long as you indicate that you are happy for us to do so) send you more relevant and interesting marketing communications.
You have the right to object to our monitoring of your use of our websites and how you engage with our promotional campaigns and advertising online for these purposes. For more information on how to exercise your right to object, see the section below titled 'Your controls and choices'.
Other potential uses of your personal information
We may use your personal information:
To assist in any disputes, claims or investigations relating to your product or warranty matters;
To detect and prevent fraudulent transactions;
To comply with our legal obligations; &
For profiling and statistical analysis. As part of this activity we may combine different categories of personal information that we collect about you. For example, we may combine personal information from your online interactions or information you share with us, for the profiling and statistical analysis of product popularity, of your behaviour when you use our website or of how our products are used.
You have the right to object to the processing of personal information in this way. For more information on how to exercise your right to object, see the section below titled 'Your controls and choices'.
What is our justification for handling your personal information in this way?
- For the most part, we need to handle your personal information to be able to:
- provide you with the products or services that you have asked for; and
- for our websites to be able to work properly and to do all the things that you expect them to.
Sometimes, our use of your personal information is not strictly necessary for us to be able to provide you with our products and services, or for them to work properly. In those circumstances, we have what's called a "legitimate interest" in handling your personal information; our "legitimate interest" may be to:
- detect and prevent fraud;
- keep our websites and IT systems secure;
- ensure that our own processes, procedures and systems are as efficient as possible;
- analyse and enhance the information that we collect;
- determine the effectiveness of our promotional campaigns and advertising; &
- customise and improve the way that you shop and engage with us in future.
There will be certain personal information that you share with us which we specify as being optional. We will explain how we use that information and if you choose to provide it to us, you are agreeing to our use of your information in that way.
You can ask us to delete that information at any time by contacting customer services or by e-mailing our data protection team at firstname.lastname@example.org
Finally, in some, relatively limited circumstances we will need to handle your personal information in a certain way to be able to comply with our legal obligations; for example, if we are requested to disclose your personal information to regulatory bodies or law enforcement authorities.
Ultimately, the reason we handle your personal information in the way we do is so that we can directly or indirectly, improve our products, services and your overall experience of Moore Large as a business. Whatever our justification for handling your personal information (whether it is necessary for us to provide you with a certain product, or it is in our "legitimate interests"), we make sure that we take steps to honour our commitment to protect your privacy.
How can you change the way that we contact you about our products, services and support?
We will only send you marketing communications when you have told us that you are happy for us to do so.
You can change the way that we contact you in the following ways:
Opt-In/Start Contacting Me
If you haven’t previously asked us to send you marketing communications, you can ask us to start contacting you (sometimes called an "opt-in") by ticking the box next to sign up for our newsletter at the bottom of each web page or by contacting customer service and stating that you would like to receive communications from us.
Changing your preferences
If you have previously said that you would like us to contact you ("opted-in") but would like to change or update the way that we do so, you can update your preferences by: Contacting customer service and stating that you would like to change or update the way that we contact you; or Visiting our website and changing your preferences and information.
Opt-Out/Stop Contacting Me
If you want to stop receiving marketing or support communications from us (sometimes called "opting out"), you can do so at any time by: Contacting customer services stating that you no longer wish to receive such communications; Using the unsubscribe option included in all our e-mail correspondence, or Logging into your account on our website and changing your preferences and information. Emailing our data protection team at email@example.com
What personal information does Moore Large share with third parties?
Sharing within Moore Large
Most of our processes, procedures and systems are in-house and shared across Moore Large, which means that we may need to share your personal information between employees. We make sure that access to your personal information is limited to those of our staff who need it, and that all staff understand how and why we protect your personal information.
Third party service providers
- Certain retailers, who help us to sell and deliver our products to you;
- Those helping us to deliver products to you such as couriers;
- Third parties that help us with mailing services, product services and repairs, processing product purchases, financial services, audit services, administrative services, IT technologies (e.g. data storage), security services and insurance claims; and
- Third parties that help us to provide services and responses to you.
Third parties that help us with our advertising and marketing
We want to make sure that our advertising and marketing is relevant and interesting to you and our other customers. That means that we may work with third parties to help us to understand how well our online advertising works, or to reach people who are more interested in our products. They do this by setting cookies on our website (more information on this can be found in our cookies policy).
Other third parties
We may share certain personal information with third parties who help us to detect and prevent fraudulent transactions. The information we share with those third parties includes some of the information that you share with us (such as, your contact details and information about the transaction), and some of the information from your online interactions (such as the IP address of your device). That information is used to determine whether a transaction could be fraudulent.
We will also share your personal information if we are required to do so by law, including in response to a legal process, such as a court order, or to comply with other national laws.
Links to third party websites
We provide links to other websites which are not operated and controlled by Moore Large. We have no control over and are not responsible for the content of those sites or how the third parties responsible for them collect and use your personal information. We do not endorse or make any representations about third party websites. Third party websites usually have their own privacy policies explaining how they use and share your personal information. You should carefully review those privacy policies before you use these websites to make sure that you are happy with how your personal information is being collected and shared.
How long do we keep your personal information?
Your controls and choices
Where possible, we give you control over the personal information we collect about you, to ensure it is accurate and reflects your preferences. You have the right to access, update and amend personal information that we hold about you; you can do that in relation to some of your personal information in any account you may have with us. If you would like to change the way that we contact you, see the section above titled 'How can you change the way that we contact you about our products, services and support?'
- In certain circumstances, you can also:
- Object to our use of your personal information for certain purposes;
- Ask us to limit or restrict our use of your personal information;
- Ask us to correct, remove or delete personal information about you; or
- Ask us to provide your personal information to a third party provider of services.
Please note that those rights do not always apply and there are certain exceptions to them. We will also need to confirm identity before acting on certain requests.
If you would like to exercise any of your rights in relation to your personal information, please email firstname.lastname@example.org
How do we protect your personal information?
We are committed to protecting your personal information. We use appropriate technical and organisational measures, including encryption, to protect your personal information and privacy, and review those regularly. We protect your personal information using a combination of physical and IT security controls, including access controls that restrict and manage the way in which your personal information and data is processed, managed and handled. We also ensure that our staff are adequately trained in protecting your personal information. Our procedures mean that we may occasionally request proof of identity before we share your personal information with you.
In the unlikely event that we do suffer a security breach which compromises our protection of your personal information and we need to let you know about it, we will do so.
Data transfers, storage and the global handling of your personal information
When you supply your information to us you accept the risks associated with the Internet and will not hold us responsible for any loss of your information unless we have breached our duty of care to you.
We do not transfer your information outside the European Economic Area (“EEA”) unless you are a user located outside the EEA, in which case we may need to transfer your information to deliver your goods, process payment/refunds, or to send you promotional information you have subscribed to.
However, our website host may transmit Personal Information outside of the UK. The host remains responsible for Personal Information that is transferred to a third party abroad for processing or to support our efforts in providing our Services to you. Any Personal Information transferred to a third party for data processing is subject, by law, to a comparable level of protection as that provided by Moore Large. A “comparable level of protection” means a level of protection generally equivalent to that provided by Moore Large.
We will make sure that any transfers of your personal information from one country to another comply with those data protection and privacy laws which apply to us. European data protection laws, in particular, include specific rules on transferring personal information outside the EEA.
If you would like further information about the global handling of your personal information, please contact us at email@example.com
You can find out further information about the rules on data transfers outside the EEA, including the mechanisms that we rely upon, on the European Commission website.
Moore Large’s websites are not directed at children. We do not knowingly collect any personal information from children.
If you are under the age of 17, please do not attempt to become a registered user of our websites, products or otherwise provide us with any personal information. If we learn that we have inadvertently obtained personal information from a child, we will delete that information as soon as possible.
If you are aware of a child who has provided their personal information to us, please contact us at firstname.lastname@example.org
You can also contact the relevant regulator or authority in your country that is responsible for handling complaints about the use of personal information. In the UK, this authority is the ICO (Information Commissioner’s Office).