This privacy policy explains what we do with your personal data when we are in the process of helping you as a customer.
It describes how we collect use and process your personal data and how in doing so we comply with our legal obligations to you. Your privacy is important to us and we are committed to protecting and safeguarding your data privacy rights.
This privacy notice applies to the personal data of our website users, customers and other people whom we may contact to undertake our business.
It is important to point out that we may amend this Privacy Policy from time to time. Please just visit this page if you want to stay up to date, as we will post any changes here.
What data do we collect and process
If you are a customer, we need to collect and use information about you in the course of providing you services such as:
- Sale and delivery of goods
- Product safety recalls
- Dealing with returns and refunds
We collect customer data when you create an account using our website or place and order by phone.
We collect data to fulfil or contractual obligations with you, such as name, address, delivery address, email address, telephone number. We do not collect or hold payment details.
We will pass on your personal data to logistics companies such as Royal Mail or Parcel Force to deliver items you have ordered. In some cases our warehouse may also arrange delivery directly with customers.
We hold your personal data are to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly, and to comply with legal requirements.
How long we keep your personal data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
By law, we have to keep basic information about our customers (including Contact and Transaction Data) for six years after they cease being customers for tax purposes. If we have not had meaningful contact with you for an additional four years, we will review your data and make efforts to determine if it is still relevant to our relationship. If it is not we will delete your personal data from our systems unless we believe in good faith that the law or other regulation requires us to preserve it (for example, because of our obligations to tax authorities or in connection with any anticipated litigation).
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Website data and cookies
We collect a limited amount of data from the users of our website. We use this data to help us to improve your experience when using our website and to help us manage the services we provide. This includes information such as how you use our website, the frequency with which you access our website, and the times that our website is most popular.
We also collect your I.P address to help us protect our systems from fraud.
Our website uses cookies. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
We collect data from you on our website if you enter any data into the web forms such as ‘Contact Us’. This data is emailed directly to the relevant person in our organisation and is not retained on our website.
Website Service Provider
Our website hosing is based in the UK and our provider complies with all relevant data protection legislation. Further information is available from: www.krystal.co.uk
Your rights
When we hold your personal data you have various rights in relation to it. To get in touch about these please contact us. We will seek to deal with your request without undue delay and in accordance with the requirements of any applicable laws. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
If we are using your data because we deem it necessary for our legitimate interests and you do not agree you have the right to object. We will respond to your request within 30 days.
If you have informed us that your personal data is inaccurate you have the right to have your data corrected on our systems. We will respond to your request within 30 days.
You have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update or delete it. At this point we may ask you to verify your identity, or ask for more information about your request. If your interests or requirements change you can ask us to modify, update or delete your data.
You have the right to lodge a complaint about the data we hold or the way it is used with your local supervisory authority, if you want to exercise this right you should contact the Information Commissioners Office at: www.ico.org.uk