Dormouse Dreams Privacy Policy
Effective as of: 3rd April 2023
By using our Site users agree that they consent to the conditions set out in this Privacy Policy.
www.dormousedreams.co.uk is owned and operated by Dormouse Dreams, registered as a sole trader with the HMRC. Dormouse Dreams is registered with the Information Commissioner’s Office (ICO).
Our contact details:
Dormouse Dreams is the data controller and can be contacted
by email: hello@dormousedreams.co.uk
The type of data that we collect and process:
Data collected automatically:
When you visit and use www.dormousedreams.co.uk, we automatically collect and store the following information:
· IP address
· Location
· Hardware and software details
· Which links you’ve clicked on
· Which content you’ve viewed on our Site
Personal Data collected non-automatically:
We also collect data when you perform certain functions on our Site. This includes some or all of:
· First and last name
· Age
· Date of birth
· Sex
· Email address
· Phone number
· Postal address
· Billing address
· Payment details
· Credit or debit card number or other payment method details.
How we get the Personal Data and why we have it:
The personal information we process is provided to us directly by you to:
enable us to fulfil your order
enable us to contact you regarding an order or other product enquiry
take payment
arrange delivery
enable marketing
to enable you to open an account
to enable you to enter a competition or prize draw
Your personal information is supplied to us by you. We collect the information electronically by letter, email, website order, or verbally.
We don’t keep your credit card details other than the card type and last four digits for reference.
We haven’t appointed a Data Protection Officer as we don’t fall into the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are that we have:
· a contractual obligation to fulfil your order
· a legitimate interest to be able to fulfil your order
· a legitimate interest in marketing our products to you by email
You won’t receive email marketing unless you’ve signed up to it. You can opt out of email marketing at any time by emailing us at hello@dormousedreams.co.uk
Who we share Personal Data with:
We may disclose user data to any member of our organisation who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.
Third parties:
We never pass your information on to third parties except for those listed below and for the specific reasons below:
Third parties that we might share user data with:
· Payment service providers
· Website data analytics service providers.
User data that we might share with third parties:
· Payment method information
· Anonymised automatically collected information
· Name and address details.
Purposes for sharing user data with third parties:
· To collect payment
· For marketing and website data analytics purposes
· To set up delivery
Third parties won’t be able to access user data beyond what’s needed to fulfil their purpose.
Other third parties:
We won’t sell or share your data with any other third parties, except:
· If required by law
· If required for any legal proceeding
· To prove or protect our legal rights
· To buyers or potential buyers of this business in the event of sale of the business
How we store your personal information:
· Your information is securely stored electronically and/or on paper.
· We keep the data for 6 years to help us comply with HMRC requirements.
· We’ll then dispose of your information by shredding of any paper records and secure deletion of all electronic records.
How We Protect Your Personal Data:
We store some of your electronic data on servers in secure facilities. Data on paper is kept in a locked cabinet, along with electronic business equipment that may contain data, both in a securely locked and alarmed building. We use constantly updated anti-virus and anti-hacking software. While we take all reasonable precautions to make sure user data is secure, and that users are protected, there always remains a risk of harm. The Internet in general can be insecure, and burglary cannot be completely prevented, so we can’t guarantee the security of your data beyond what is reasonably practical.
Your data protection rights:
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to correction - You have the right to ask us to correct personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at hello@dormousedreams.co.uk if you wish to make a request.
Children:
The minimum age to use our website is 18 years of age. We don’t knowingly collect or use personal data from children under 16. If we should discover that we have collected personal data from a child under 16, the personal data will be deleted as soon as possible. If a child under 16 has given us personal data their parent or guardian can contact our privacy officer.
Do Not Track Notice:
Do Not Track ("DNT") is a privacy preference that you can set in certain web browsers. We don’t track our Site visitors so we don’t respond to DNT signals from visitor browsers. We are not responsible for and cannot guarantee how any third parties who interact with our Site and your data will respond to DNT signals.
Cookie Policy:
A cookie is a small file, stored on a user's hard drive by a website. Its collects data about the user's browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this might degrade the quality of your experience.
We may use the following types of cookies on our Site:
· Functional cookies: these are used to remember the selections you make so they are saved for your next visit
· Analytical cookies: these allow us to improve our Site’s function and design by collecting data on how users access our Site, for example data on the Site content accessed, length of stay on our Site or specific pages.
Hyperlinks:
If you follow hyperlinks from our Site to another Site, please be aware that we are not responsible for and have no control over their safety, content, privacy policies or practices.
Modifications:
This Privacy Policy may be amended periodically to comply with the law and to update any changes to our data collection process. The date at the start of this Privacy Policy will be updated. We advise our users to read our Privacy Policy again from time to time so they can see any changes. We may inform users of changes to this Privacy Policy by email or a News notice on the Site.
How to complain:
If you have any concerns about our use of your personal information, you can make a complaint to us at hello@dormousedreams.co.uk
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk