Surrey Hills Print

Surrey Hills Print - Privacy Policy

Privacy Policy

This Privacy Policy relates specifically to Winford Micro Design Ltd t/as Surrey Hills Print, and is stored here for convenience. This Privacy Policy has no relationship to Careprint.UK whose Privacy Policy relating to this website is available via the global links at the footer of this page.  

This Policy works hand-in-hand with our Terms and Conditions of Use, a copy of which can be found here.

We are committed to protecting and processing your personal data in accordance with the General Data Protection Regulations and the Data Protection Act 2018 (the legislation).

By submitting your order by email, fax, post or other means, you consent to the collection, use and transfer of your information under the terms of this policy. We may also collect data that is in the public domain for businesses that we consider would benefit from using our services, and the processing of this personal data for direct marketing purposes is regarded as carried out for a legitimate interest. Since this is a growing business and because Internet technologies are constantly evolving, this Policy is subject to change at any time and any changes will be posted on this page.

For the purpose of the legislation Nick Winford is the Data Controller and the person responsible for Data Protection and he can be contacted at Winford Micro Design Ltd t/as Surrey Hills Print, Unit 4 Home Farm, Shere Road, Albury, Surrey GU5 9BL, or telephone 01483 616383, or email nick.winford@surreyhillsprint.uk.

Information Held

When you order products or services by email, fax, post or other means, you may be asked to provide certain information about yourself including your name, email address, home or business address and other information. Users may provide other information about themselves, in addition to the mandatory personal information (hereafter “Voluntary Information").

No financial or payment information is stored at any level.

The Company may use or disclose personally identifiable information to:
1. Provide products/services that have been requested by you;
2. Respond to other inquires or requests by you.
3. Provide you with information about specials, sales or new products or services that the Company will introduce in the future.
4. It’s partners and/or vendors in order to fulfil orders from you.

In order to provide the best services, the Company may disclose your name in communications by email, fax or post. We may also disclose personally identifiable information in the establishment or exercise of legal rights or defences against legal claims, to comply with applicable laws or regulations, to comply with a valid legal process, such as a search warrant, subpoena or court order or to investigate suspected fraud or a violation of our Terms and Conditions of Use. We will never sell user information to any 3rd-party not affiliated with the Company, without consent, except in connection with the sale or merger of the Company or the division responsible for such services provided.

The Company may also use such Voluntary Information for marketing its products and services to you unless you have ‘opted out’ of receiving such marketing information from us. User may ‘opt out’ by contacting customer service at orders@surreyhillsprint.uk. 

The Company may, from time to time, send notices about special offers, promotions or contests. If you sign up to participate in any of these, we will collect your email address. If you are chosen for a promotion or as a winner in a contest, you give the Company permission to use your name, image and other information about you, for marketing purposes.

To maintain customer service standards and to assist staff training, we may record and monitor incoming calls.

What non-personally identifiable information does the company collect and how is it used?

The Company collects and tracks certain non-personally identifiable information, including, but not limited to, IP numbers and browser type, access times, domain names, usage habits and other information which does not specifically identify any individual.

The Company may use and disclose non-personally identifiable information for any number of reasons, including but not limited to, working with business partners and improving our web site and services.

Lawful Basis of Processing

The Company processes your data in the ways and on the lawful basis listed below:

CONTRACT

The processing of personal data is necessary for the contract that exists between you and The Company, or because you have asked The Company to take specific steps before entering into a contract. A contract is deemed to exist whenever a client places an order with The Company. We rely on the following three lawful bases:

LEGAL OBLIGATION

HMRC requires The Company to hold your information for 3 years. The Limitations Act requires The Company to hold your information for 6 years.

LEGITIMATE INTEREST

Retention of client data is necessary for your legitimate interest and that of The Company.

Disclosure of your information

Your data is accessible to and used by employees of the company in the handling and administration of your account or managing orders placed. The information you provide to us may also be provided to third parties some of whom may be located outside the European Economic Area who act for us for the purposes set out in this policy or for other purposes approved by you. Those parties process information, fulfil and deliver orders, process credit card payments and provide support services on our behalf. We only work with third parties who have supplied us with evidence of GDPR compliance. We may also pass aggregate information on the usage of our website to third parties but this will not include information that can be used to identify you.

You agree that we may disclose your identity and contact details to (1) any third party who claims to us that any material posted or uploaded by you to our site constitutes a violation of their intellectual property rights or their rights of privacy, and (2) to other companies and organisations for the purposes of fraud protection and credit risk reduction.

Finally, if our business enters into a joint venture with or is sold to or merged with another business entity, your information may be disclosed to our new business partners or owners.

Unless required to do so by law, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.

Countries outside the European Economic Area do not always have strong data protection laws. However, we will always take steps to ensure, so far as reasonably possible, that your information is used by third parties in accordance with this policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us; any transmission is at your own risk.

Where is the Data Stored?

Personal data is stored in an enterprise-grade, security, privacy and compliance-capable software system that complies with the General Data Protection Regulations.

What about data security?

We employ security measures to protect, so far as reasonably possible, your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. We will retain your information for a reasonable period or as long as the law requires or permits.

The Company requires that our advertisers and partners ensure the security of the data that users provide to them, however, in the event of a breach of their security measures, you agree that the Company will not be liable for any losses or damages.

The Company limits access to personal information about users to employees, for whom we reasonably believe it is necessary, in order to provide products or services.

Do we have a newsletter?

The Company regularly sends out a Newsletter via email (hereinafter "Newsletter") to all Users (unless they have ‘opted-out’). In these Newsletters, we may inform you about new features and about the upcoming week’s events or special promotions.

User may choose to unsubscribe from the Newsletter at any time by sending an email to Customer Service at orders@surreyhillsprint.uk. 

Section Titles

The section titles used in this Policy are purely for convenience and carry with them no legal or contractual effect.

Payment Partners

The Company accepts Worldpay and Paypal as payment options, and all users are subject to their individual terms of use, privacy policies and other legal requirements, which users can review at the following links: https://www.worldpay.com/uk/privacy-policy and https://www.paypal.com/uk/webapps/mpp/ua/privacy-full. Users are encouraged to review the Terms of Use, Privacy Policy and other legal disclosures of payment partners.

Your Rights

You have a right of access to check your personal data to verify the lawful basis of processing. The Company is obliged to respond to an access request within 30 days and may not charge a fee unless the request is unfounded, excessive or repetitive. If a fee is charged it is to be a reasonable fee based upon the administrative cost of providing the information.

You have a right to rectification if the data I hold is either inaccurate or incomplete. If your data has been disclosed to third parties then The Company must inform them of the rectification, where possible.

You may request that your personal data be erased, for example, where there is no compelling reason for its continued processing. I will comply with your request unless I have another basis of processing justifying my retaining the data (for example a legal requirement or the defence of a legal claim).

You have some rights to ask The Company to restrict processing i.e. to block or suppress processing where, for example, the data may be incorrect and whilst the accuracy is verified. I am permitted to store the data.

The Company gives users the option to remove personally identifiable information from our list of active users. You may also choose to opt-out of certain communications from the Company, such as our Newsletter. If you want to unsubscribe or opt-out of communications from us, send an email to Customer Service at orders@surreyhillsprint.uk. We will respond within 48 hours.

The Company is not responsible for removing personally identifiable information from the lists of any 3rd-party partner or advertiser who has previously been provided your information in accordance with this Policy.

Your right to object

You have a right to object to further processing of your personal data. I may be required to stop processing unless there is some other legitimate basis of processing such as a legitimate interest or a requirement for the exercise or defence of a legal claim.

How to lodge a complaint with the supervisory authority

The supervisory authority responsible for data protection is the Information Commissioners Office (ICO) to whom concerns may be reported by phone on 0303 123 1113 or +44 1625 545 700 if calling from outside the UK, by email using the form on the website ico.org.uk or the live chat function.

Will there be changes to this Privacy Policy?

The Company reserves the right to amend this Policy at any time, in the event that this becomes necessary after initial release, or in the event that it becomes necessary with respect to additional, deleted, modified or amended services provided by Company.

The Company will not personally notify you of any amendments to this Policy. Users are urged to check this Policy frequently in order to determine whether any changes have been made. Users understand and agree that continued use of the Company web site assumes that they have read and accepted this Policy, as it may be amended from time to time.

Where can I access this policy?

A copy of this Privacy Policy is available to view at our premises in Albury.