(Version 1.0, last modified Nov 2018)
Indy Interiors (“Indy”) is the trading name of Ben Mason, sole trader.
At Indy, respecting your privacy rights and maintaining the security of your data is a priority. We are dedicated to being transparent about the data we collect and how we use it. Indy is committed to the highest privacy standards. You can rest assured that we handle your personal data with the utmost care and take all appropriate steps to protect it. This policy, which applies whether you contact us by phone, email, or online, provides detailed information on:
- when and why we collect your personal information,
- how we use it,
- the very limited conditions under which we may disclose it to others,
- how we store your personal data and keep it safe, and
- your legal rights relating to your personal data.
WHAT IS PERSONAL DATA
Personal data means any information from which an individual can be directly or indirectly identified, such as your contact information, your order data or your product data.
PRINCIPLES FOR COLLECTION AND PROCESSING OF PERSONAL DATA
- Indy adheres to the following general principles when processing your personal data:
- We will only collect personal data for specified, explicit and legitimate purposes.
- We will not collect personal data beyond what is necessary to accomplish those purposes.
- We will not use personal data for purposes other than that for which the data was collected, except as stated herein, or with prior consent.
- We will not transfer personal data to third parties, except as stated herein, or with prior consent.
- We will do our best to ensure that information is up to date and encourage you to verify your personal data periodically.
- We will maintain appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction or accidental loss, alteration unauthorised disclosure or access and against all other unlawful forms of processing.
- Except when stated herein, we will not store personal data longer than is necessary to accomplish the purpose for which the data was collected or for which it is further processed, or as is required by law.
- Our website is not intended for children and we do not knowingly collect data relating to children.
HOW WE COLLECT AND PROCESS PERSONAL DATA
When you engage with Indy via various channels, including our website and speaking to us, we collect and process your personal data. The personal data we collect and process can be categorised as follows:
- Your personal details, such as your name, e-mail address, physical address (if provided), phone numbers (including mobile if provided), IP address, in some cases geo location and language.
- Information about our products and services you have ordered or enquired about.
- Your enquiry and purchase information, such as your personal details as specified above, order information, such as product range name and finish, design and product content, details of appointments and site visits, details of order processing information such as site survey reports, CAD drawings, manufacture and delivery details including
- your delivery address (if different), but not usually your payment information.
- Requests for customer support and warranty assistance containing your personal and order details as specified above.
- Information provided by telephone or other means may be monitored, recorded and stored. This may include notes from our conversations with you, such as details of information provided, comments you make, feedback on your experience and details of any complaints.
- Information provided when you interact with us on social media.
HOW AND WHY WE USE YOUR PERSONAL DATA
Indy wants to give you the best possible customer experience. One way for us to achieve this is by creating the best picture we can of who you are by combining the data we have about you. The data privacy law allows this as part of our legitimate interest in understanding our customer to provide you with the highest levels of service.
We use the information we collect about you to ensure we provide you with the best and most appropriate products and services and to fulfil our contractual obligations as follows:
- To process your appointment requests.
- To process your orders, complete supply chain purchases, ensure manufacture, delivery and fitting of purchased products, handle possible replacement items and returns.
- To provide you with customer service, handle your requests or complaints and provide you with product warranty support.
- With your consent, we will use your personal data, preferences and details of your purchases to keep you informed by email, post and telephone through our sales support or customer services about relevant products and services including news, events, promotions and similar marketing content.
- To develop and improve personnel, processes and systems, as well as the services and products we provide to you.
- To comply with our contractual or legal obligations.
HOW WE PROTECT YOUR PERSONAL DATA
Indy knows how important data security is to all our customers and we take all organisational, technical, and administrative steps to protect it. We use “https” technology to ensure our website is secure. Indy is committed to regularly testing our security systems and software to identify possible vulnerabilities and ways in which they can be further strengthened.
WHERE WE STORE AND PROCESS YOUR DATA
Your personal data is stored and processed within the European Economic Area (EEA). The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway.
If we are required to deliver or install products, or to perform services outside the EEA to any third countries, as defined in General Data Protection Regulation (GDPR), Indy will ensure that the transfer of your personal data to any third countries is done in accordance with valid law and that relevant legal and security safeguards are observed.
WHO WE SHARE YOUR PERSONAL DATA WITH
- Third parties when required by law, court order or a decision made by a competent public authority for the purposes of law enforcement.
- Trusted third parties carrying out services on our behalf such sales, marketing, IT support, advertising, analytics, research, customer service, product service support, shipping and purchase order fulfilment, data storage, validation, security, fraud prevention, payment processing, and legal services. Such third-party vendors have access to perform these services but are prohibited from using your personal data for other purposes.
- Third parties to establish, exercise or defend legal rights of Indy.
- Other third parties subject to your consent.
- When we disclose your personal data to a third party, we take all reasonable steps to ensure that those third parties are bound by confidentiality and privacy obligations with respect to the protection of your personal data. The disclosure is conducted in compliancewith legal requirements, including entering into data processing agreements with the relevant third parties, to ensure that personal data is only processed in accordance with our instructions, applicable law and regulations and for the purposes specified by us and to ensure adequate security measures.
HOW LONG WE KEEP YOUR PERSONAL DATA
Indy will not retain your data for longer than necessary for the purposes for which is was collected. At the end of the retention period, your data will be anonymised, suppressed or securely deleted, unless such data legitimately can be kept and processed for other processing purposes, which we have a legal basis for.
A cookie is a small text file that is placed on your computer or mobile device when you visit a site, that enables us to: (1) recognise your computer; (2) store your preferences and settings; (3) understand the web pages of Indy you have visited; (4) enhance your user experience by delivering and measuring the effectiveness or content and advertising tailored to your interests (5) perform searches and analytics; and (6) assist with security and administrative functions.
Pixels are tiny electronic tags with a unique identifier embedded in websites, online ads and/or email that are designed to: (1) collect usage information like ad impressions or clicks and e-mail open rates; (2) measure the popularity of the advertising; and (3) access user cookies.
As we adopt additional technologies, we may also gather information through other methods.
Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the “Help” section of your browser for more information. Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings on our websites or apps. For more information on the cookies we use and the purpose for which we use them, please refer to our Cookies Policy.
YOUR RIGHTS, UPDATING YOUR DATA AND MARKETING PREFERENCES
You have the right to request:
- Access to the personal data Indy holds about you, free of charge in most cases.
- The correction of your personal data when incorrect, out of date or incomplete. To ensure that your personal data processed by Indy is up-to-date we request that you inform us of any relevant changes when they occur.
- That Indy stops using your personal data for direct marketing (either through specific channels, or all channels). We must comply with your request. In cases where Indy is processing your personal data based on our legitimate interest, you can ask us to stop for reasons connected to your individual situation. Indy will stop using your personal data unless we believe we have a legitimate overriding reason to continue processing your personal data.
- That Indy stops any consent-based processing of your personal data after you withdraw that consent. Whenever you have given us your consent to use your personal data, you have the right to change your mind and at any time to withdraw your consent. Withdrawal of your consent will not affect the lawfulness of processing conducted prior to the withdrawal.
You can contact us to request to exercise these rights at any time.
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Policy.
If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.