1.1 At Numskull we take care to ensure you data remains safe and secure. We strongly believe in our customer’s privacy rights and as such, your data is stored securely and where possible, also encrypted.
1.2 This policy applies where we are acting as a data controller (i.e. controlling your personal information). We determine how that data is processed and managed.
1.3 The following definitions apply to this document:
(i) ‘Numskull’, ‘us’, ‘we’ and ‘our’ refers to Numskull.co.uk;
(iii) ‘consent’ refers to your agreement and acceptance of our terms and conditions in full;
(iii) ‘products’ and ‘services’ refer to any official product we provide, either offline or online;
1.4 You are responsible for ensuring that your personal information held on record is accurate, to the best of your knowledge. We cannot be held responsible for issues arising from out of date information.
1.5 We may update this policy from time to time at our sole discretion. You are responsible for regularly checking this document for updates.
2.1 By using Numskull.co.uk and any other services that we provide, you agree to be legally bound by this document, in full, in addition to any local laws that may apply.
2.2 We collect data only where strictly necessary and where we have a justified purpose for keeping it. Data that is no longer required is routinely deleted.
2.3 Where possible, we ask for you consent before collecting personal information. Before providing us with any information, it is advised that you carefully read this document first.
3.1 We may collect and process your personal data. Types of data that we collect include, but are not limited to: your IP address, geographical location, operating system, browser type, source of referral, length of visit, name, email address, phone number, address, transactional data, account data in addition to the frequency and pattern of your service use.
3.2 The personal data that we collect and manage is as listed:
(i) Email submission forms collect name and email addresses. These are collected to receive email newsletters. This information is stored securely in a database and is deleted upon request. Consent is obtained before collection. This information is regarded as sensitive.
(ii) Contact forms collect name, email address and phone numbers. These are collected to reply to new queries. This information is stored securely in a database and is deleted upon request. Consent is not obtained before collection. This information is regarded as sensitive.
(iii) Order confirmations collect name, email address, phone number and addresses. This information is stored securely in a database and is deleted upon request. Consent is not obtained before collection. This information is regarded as sensitive.
3.3 We may use third party sub-processors to handle your data. They are as listed:
(i) We use Mailchimp to process and handle email newsletter subscriptions.
(ii) We use Shopify to manage and process orders placed on our website.
3.4 You may request a copy of all your data that we have on record, free of charge, via the website contact form. We will require some identification to prove that it is you, such as a passport or driving licence. After identification, these documents will be deleted.
3.5 You may request that all your data we have on record be deleted, free of charge, via the website contact form. We will require some identification to prove that it is you, such as a passport or driving licence. After identification, these documents will be deleted.
3.6 Personal data is retained only as long that it is necessary for us to have it. We routinely delete personal information that we no longer have use for or justification to keep. The default period of retention will be determined at our discretion up to a maximum period of five years.
3.7 You may not supply us with another person’s personal data unless you have their permission and we have asked you to do so.
3.8 We may process your data where it is necessary for court proceedings or an administrative out-of-court procedure.
- Your rights
4.1 Your principle rights under this document and data protection laws are:
(i) the right to request and access;
(ii) the right to delete;
(iii) the right to update;
(iii) the right to stop processing;
(iv) the right to restrict processing;
(v) the right to data portability;
(vi) the right to withdraw consent;
(vii) the right to complain to a supervisory body;
4.2 You may exercise any of your rights relating to your personal data by writing to us via the provided contact form on numskull.co.uk.
4.3 Withdrawal of your consent relating to your data being processed will not affect the lawfulness of data processing prior to the consent being withdrawn.
4.4 If you consider that data processing on our part has infringed data protection laws, you have the legal right to complain to a supervisory body responsible for data protection.
4.5 You have the right to restrict or stop data processing of your information at any time where there is a legal basis to do so.
5.1 A cookie is a small file that is downloaded onto your computer and stored by your web browser. This file is sent back to the browser on each request.
5.2 Cookies do not typically contain personal information that identifies you and they are usually quick to expire when they do.
5.3 We set the following cookies:
(i) Google Analytics (for advertising purposes);
(ii) VWO (to improve user experience);
5.4 For information about each cookie we set, we recommend that you visit the official web page of the company that sets the relevant cookie.
- Restricting cookies
6.1 Web browsers typically have a setting that allows you to disable cookies. We recommend that you read your browser’s help page for more information.
6.3 There is no standard way of disabling cookies on a per-website basis and we cannot therefore offer any advice on how to do so.
- Data protection officer
Our data protection officer is Peter B and can be contacted at firstname.lastname@example.org