how we collect your personal information;
what personal information we collect;
how we use your personal information;
who we share your personal information with; and
the rights and choices you have when it comes to your personal information.
We may collect personal information about you when you use our Services. We may also collect information about the way in which you use our Site.
The ways in which we may use your personal information are described in Section 4 below. They include:
enabling you to access and use the Service;
personalising and improving aspects of our Service;
research (such as analysing market trends and customer demographics); and
communicating with you about our Services.
For certain purposes set out in section 6 below, we may share your personal information with our third parties.
1. Who are we?
Mersten Ltd. take your privacy very seriously.
Mersten Ltd. (company number 09618921) is the data controller in relation to the processing of the personal information that you provide to us when you use our Services. Its registered address is 73A London Road, Alderley Edge, SK9 7DY. If you have any queries relating to our use of your personal information, or any other related data protection questions, please contact our Data Protection Officer at email@example.com or write to us at 73A London Road, Alderley Edge, SK9 7DY.
2. How do we collect personal information?
We may obtain personal information from you through our website, mobile interactions, email communications or other similar devices, channels or applications operated by us.
3. What personal information do we collect?
We collect personal information about you when you give this to us in the course of our interactions and/or using our services via our website for example we may collect your name, address, email address or telephone number. In the course of providing the Services to you, we may also store information about how you use our Site, for example, the pages viewed, the website from which you came to visit our Site, changes you make to information you supply to us. We make sure that we have appropriate security measures to protect your information (see section 8 How secure is our site and what steps do we take to keep you safe? below). We will periodically review your personal information to ensure that we do not keep it for longer than is permitted by law see section 9 below which details how long we keep your personal information for.
Note that it is your responsibility to check and ensure that all information, content, material or data you provide on the Site is correct, complete, accurate and not misleading and that you disclose all relevant facts.
We do not knowingly collect or store any personal information about children under the age of 16. If you are aged under 16 please get your parent or guardian’s permission before you provide any personal information to us.
4. How do we use your personal information?
We may use your personal information:
to enable you to access and use our Services;
to personalise and improve aspects of our Services;
for research, such as analysing market trends and customer demographics;
to communicate with you, including some or all of the following:
sending you information about products and services which we think may be of interest to you - If you agree, we will contact you (depending on your contact preferences) via email, post, telephone, sms, or by other electronic means such as via social and digital media this may include new product launches, newsletters and opportunities to participate in market research
sending you a confirmation emails to verify transactions.
to process a transaction between you and a third party;
to match our data with data from other sources - we may validate and analyse your information and, in some cases, match it against information that has been collected by a third party to ensure that the information we hold about you is as accurate, consistent and well-organised as possible. As well as ensuring that any marketing material that we send you is appropriate to your needs, this process also ensures that our Services continue to be as personalised and focused as possible;
to enable you to share our content with others, e.g. by using any 'Email a friend' or 'Share this' functionality on our Site.
We may monitor or record your calls, emails, sms or other communications but we will do so in accordance with data protection legislation and other applicable law. Monitoring or recording will always be for business purposes, such as for quality control and training (e.g. where you call our customer services help line), to prevent unauthorised use of our telecommunication systems and Site, to ensure effective systems operation, to meet any legal obligation and/or to prevent or detect crime.
5. Why do we process your information?
We will only collect and use your personal information (as described in section 4) in accordance with data protection laws. Our grounds for processing your personal information are as follows:
Performance of contract – Where required we will process your personal information to fulfill a contractual obligation to you. We will rely on this ground for processing only when it is necessary to execute the terms of the contract.
Consent – Where necessary we will only collect and process your personal information if you have given your consent for us to do so, for example, we will only send you certain marketing emails and process any sensitive information about you if we have your consent.
Legitimate Interests – We may use and process some of your personal information where we have sensible and legitimate business grounds for doing so. Under European privacy laws there is a concept of “legitimate interests” as a justification for processing your personal information. Our legitimate interests for processing your personal information are:
to enable you to access and use the Services by: searching our website. Using your information in this way is an essential part of us being able to provide the Services to you;
to communicate with you about the Services. We need to keep you informed about your use of the Services for example sending you a confirmation emails. This won’t include marketing communications unless you have given us your consent to receive these; and
to improve our Services. We may use your personal information to: personalise aspects of our service; for market research.
From May 2018, you will have a right to object to our use of your personal information for these legitimate interests including where we may use your personal information to create a profile to inform customer demographics. If you raise an objection we will stop processing your personal information unless very exceptional circumstances apply, in which case we will let you know why we are continuing to process your personal information. Please contact us at firstname.lastname@example.org if you wish to exercise this right.
6. What cookies do we use?
A cookie is a very small text file placed on your computer or device. Cookies help us to:
understand browsing habits on the Site;
understand the number of visitors to the Site and the pages visited.
7. How secure is our site and what steps do we take to keep you safe?
Your personal data’s security is very important to us. However, no data transmission over the internet can be guaranteed to be totally secure. Certain information, for example, your credit card details, is encrypted to minimise the risk of interception during transit.
We do our best to keep the information you disclose to us secure. To minismise the risk of accidental loss/theft of your personal data, we conduct regular internal audits to ensure any personal data sent via electronic means is password protected. However, we can't guarantee or warrant the security of any information which you send to us, and you do so at your own risk. By using our Site/services you accept the inherent risks of providing information online and will not hold us responsible for any breach of security.
It might sometimes be necessary for us to transfer your personal information outside of the European Economic Area (EEA) to locations that may not provide the same level of protection as the UK. However, we will only transfer your personal information out of the EEA if we have put in place appropriate safeguards and protections as stated under UK law for example by the use of a data-transfer agreement incorporating certain standard model protection clauses.
8. Your personal data rights and how to contact us
You have certain rights under existing data protection legislation including the right to request a copy of the personal information we hold about you, if you request it from us in writing.
From May 2018 you will have the following rights:
Right to access: the right to request copies of your personal information from us;
Right to correct: the right to have your personal information rectified if it is inaccurate or incomplete;
Right to erase: the right to request that we delete or remove your personal information from our systems;
Right to restrict our use of your information: the right to ‘block’ us from using your personal information or limit the way in which we can use it;
Right to data portability: the right to request that we move, copy or transfer your personal information;
Right to object: the right to object to our use of your personal information including where we use it for our legitimate interests or where we use your personal information to carry out profiling to inform our market research and customer demographics (see section 5 above).
If you are not satisfied with the way any complaint you make in relation to your personal information is handled by us then you may be able to refer your complaint to the relevant data protection regulator which in the UK is the Information Commissioner's Office.
9. How long do we keep your personal information?