1. Information About Me
My Site is owned and operated by me, Arnold V Page, trading as Books for Life Today from 86A Totteridge Lane, High Wycombe, Bucks, HP13 7PN, UK.
2. What Does This Policy Cover?
3. What Are Personal Data?
Personal data are defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) and the Data Protection Act 2018 (collectively, “the Data Protection Legislation”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.Personal data are, in simpler terms, any information about you that enables you to be identified. The term personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
4. What Are Your Rights?
4.1 Under the Data Protection Legislation, you have the following rights, which I will always work to uphold:
b) The right to access the personal data I hold about you. Part 12 will tell you how to do this.
c) The right to have your personal data rectified if any of your personal data held by me are inaccurate or incomplete. Please contact me if they need to be amended.
d) The right to be forgotten, i.e. the right to ask me to delete or otherwise dispose of any of your personal data that I hold. Please tell me if you wish me to do this.
e) The right to restrict (i.e. prevent) the processing of your personal data.
f) The right to object to my using your personal data for a particular purpose or purposes.g) The right to withdraw consent. This means that, if I am relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time.h) The right to data portability. This means that, if you have provided personal data me directly and I am using it with your consent or for the performance of a contract and that data are processed using automated means, you can ask me for a copy of that personal data to re-use with another service or business in many cases.
i) Rights relating to automated decision-making and profiling. I do not use your personal data in this way.4.2 If you have any cause for complaint about my use of your personal data you have the right to lodge a complaint with the Information Commissioner’s Office. However, I would welcome the opportunity to resolve your concerns myself, so please contact me first.
4.3 For more information about my use of your personal data or exercising your rights as outlined above, please contact me using the details provided in Part 13. Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.
5. Updating Your Data
It is important that your personal data are kept accurate and up-to-date. If any of the data I hold about you change, please keep me informed.
6. What Personal Data Do I Collect and How?
6.1 My Site may automatically collect certain non-personal data information related to your visit such as your IP address and the type of browser you are using. It will also collect some information about the device you are using such as its display resolution so that the pages will be properly displayed according to the size of the screen you are using.
6.2 If you order an item or sign up for regular emails or if you contact me via email I shall receive your email address and any other information which you choose to give me. For the purposes of the Data Protection Legislation, I am the data controller responsible for such personal data.
6.3 The lawful basis under the Data Protection Legislation that allows me to use such information is article 6(1)(f) of the GDPR, which allows me to process personal data when it is necessary for the purposes of my legitimate interests, in this case, the proper operation and functionality of My Site.
7. Children’s Online Privacy Protection Act Compliance (US Federal law)
7.1 The books and similar products sold on this website are all intended for people who are at least 13 years old. Since a user's name, address, telephone number and banking details are stored only when an item is ordered and paid for it is not anticipated that any such personal data relating to a child will be stored.
7.2 Users may also be given an option to receive occasional emails about the books and other products sold on this site by providing their email address. The option to do this is accompanied by a warning that children under the age of 13 are not allowed to do this.
7.3 For your reassurance, book extracts which can be read on the website do not contain any material which is unsuitable for minors.
8. How Do I Use Your Personal Data?
9. For How Long Will I Store Your Personal Data?8.1 Any personal data that My Site collects will be processed and stored securely for no longer than is necessary in the light of the reason(s) for which it was first collected. I will comply with my obligations and safeguard your rights under the Data Protection Legislation at all times. For more details on security see Part 10 below.8.2 When you order an item I shall use the information you provide to supply the item or items you order. If you sign up for occasional emails about me and my books I shall use your email address to deliver such emails to you.8.3 When you pay for an order your relevant personal data and order value will be transferred to your PayPal or Debit/Credit card account for payment.8.4 If you contact me by email I may use your email address to reply to you.
9.1 Data related to physical orders (paperback or hard cover books) will be retained for a year in order to fulfil my commitment to replace any books which do not remain reasonably serviceable for a year. (For further information see Clause 9 of Sales Terms and Conditions.)9.2 Data related to digital orders (Ebooks or PDFs) will be retained for 14 to 30 calendar days to allow for any necessary rectification if the product does not meet statutory requirements. (For further information see Clause 7 of Sales Terms and Conditions.)
9.3 Email addresses provided for the receipt of occasional emails from me will be retained until you request their cancellation. A cancellation link will be included at the foot of all such emails.9.4 Email addresses received for any other reason will be deleted once their purpose has been completed.
10. How and Where Will I Store Your Data?
10.1 I shall store your personal data in the UK. This means that they will be fully protected under the Data Protection Legislation.
10.2 All the data I receive from My Site are stored off line on equipment in a building without public access at my business address. I am the only person who has access to these data.10.3 Data connected with orders made from this website are also stored securely on a server managed by My Site’s web hosting company, NetNerd.com. The server is located at County Gates House, 300 Poole Road, Westbourne, Poole, Dorset, BH12 1AZ, UK.10.4 If I become aware of any data breaches (the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, your personal data) I will notify you and will take whatever other measures I can to rectify the situation, if necessary notifying the UK Information Commissioner’s Office.
11. Do I Share Your Personal Data?
I will not share your personal data with any third parties, subject to the following exceptions:
- Data you enter in connection with an order for a book or a similar product from My Site will be stored in a database managed by My Site’s hosting company, as detailed in Part 10.
- In some limited circumstances, I may be legally required to share certain personal data, which might include yours. This could occur if I were involved in legal proceedings or had to comply with some legal obligation, a court order, or the instructions of a government authority.
12. How Can You Review Your Personal Data?
12.1 If you want to review the personal data I hold about you, you can ask me for a copy of them. This is known as a “subject access request” (SAR). All SARs should be made in writing and sent to the email or postal address shown on the Contact Page. Normally there is no charge for a SAR, but if your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover my administrative costs in responding.12.2 Normally I will respond to your SAR within three weeks and in any case not more than one month after receiving it. If your request is complex or if for any other reason I need more than one month up to a maximum of three months to respond I will inform you and explain why.
13. How Can You Contact me?
To contact me about anything to do with your personal data and data protection, including an SAR, please use one of the following methods, in order of preference:
© Based on a document provided by Simply-Docs.co.uk.