How do we use your personal data?

We will only use your personal data when the law allows us to.  Most commonly, we will use your personal data in the following circumstances:

- Where we need to perform the contract, we are about to enter into or have entered into with you.

- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

- Where we need to comply with a legal or regulatory obligation.

Generally we do not rely on consent as a legal basis for processing your personal data.  Where we rely on consent, you have the right to withdraw consent to marketing at any time by contacting us.

The following list provides general details about the types of data we process, why we process it, and the lawful basis upon which we do so:

To register you as a new customer

a)   Types of data:  Identity, Contact

b)   Lawful basis: Performance of a contract with youTo process and deliver your orderTypes of data: Identity, Contact, Financial, Transaction, Marketing and Communications

Lawful basis: a) Performance of a contract with you, (b) Necessary for our legitimate interests (to recover debts due to us)

Marketing:

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you.  This is how we decide which products, services, newsletters and offers may be relevant for you (we call this marketing).

You will receive marketing communications (including newsletters) from us if you have requested information from us or purchased goods or services from us, or if you provided us with your details when you entered a competition or registered for a promotion, or you have consented to receive marketing communications from us and, in each case, you have not opted out of receiving that marketing.

You can ask us to stop sending you marketing messages or adjust your marketing preferences at any time:

- by logging into your online account and checking or unchecking relevant boxes to adjust your marketing preferences;

- or by following the unsubscribe links on any marketing message sent to you;

- or by contacting us.

How we protect your data?

Your personal data is stored securely on databases and servers that are maintained either by us, or by our third-party service providers.

For any of our website sections that process payment, or have password-protected areas, we use HTTPS - your web browser should indicate that such pages are secure.  Access to your personal data is password-protected, and sensitive data (such as payment card information) is secured by SSL encryption.

We maintain administrative, technical and physical safeguards to protect against unauthorised access, use, modification and disclosure of any personal data in our custody and control.  Internal access to personal data is restricted to specific employees.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.