As you will undoubtedly be aware, the General Data Protection Regulation (“GDPR”) will be coming into force in the European Union on Friday 25th May 2018. We at Dr. Adam Elmegirab’s Bitters Ltd (“we”, “our”, “us”, or “The House of Botanicals”) do not knowingly collect data, however we are provided with information by our clients, consumers and fans which is automatically recorded so we can provide you with the high level of standards and service you have come to expect.
1. OUR CONTACT INFORMATION
2. HOW WE ARE PROVIDED WITH INFORMATION
– When you contact us via our telephone, email or through our website.
– Due to the nature of the products we manufacture we may legally request additional information from you as we have a legal obligation to verify age and identity where applicable.
3. THE INFORMATION WE ARE PROVIDED
– We only record data which you have chosen to give us and do not actively collect data. We are not Zuckerberg.
– When you purchase goods via our website we will automatically have a record of your name, email, contact telephone number, billing address and delivery address.
– Specific health information may be recorded, for example, if you have contacted us regarding allergies.
4. USE OF YOUR INFORMATION
– We shall only process information we are given about you should there be a reason to do so and it is permitted within data protection law.
- We will have a legal basis for processing your data if we need to use your information to provide you with a service you have directly requested or purchased from us.
- We will only send you information that you have requested, after you have provided consent to receive correspondence through our mailing lists.
– We may contact you to notify you of any service related changes that may affect your usage of our website and/or products.
5. HOW LONG WE KEEP RECORD OF YOUR INFORMATION
– We will not retain your information for any longer than we think is necessary taking into account a range of factors. In most cases it will be held indefinitely to cover all contractual and legal obligations, and as evidence in the unlikely event of a dispute.
– Should you wish to request deletion of any information we hold on you, and full details of how we will do so, please contact our DPO at the details provided above.
– The length of time may be liable to change dependent on guidance provided by data protection authorities as GDPR enforcement.
7 . DISCLOSURE OF YOUR INFORMATION
– We will not share your information with any party unless legally required to do so by relevant authorities.
– We will only share your information internally to provide you with a product or service you have requested from our team.
– We adopt robust technologies and policies to ensure the personal information we hold about you is securely protected on our website and email provider’s services.
– Unfortunately the transmission of information on the internet is not always secure though we can promise you we will take all relevant steps to ensure your information is safeguarded, and will immediately notify you in the unlikely event of a data breach.
9. YOUR RIGHTS
– Under EU Regulation 2016/679 of the European Parliament and the Council; the GDPR, you have a number of rights detailed below concerning the data we hold about you. If you wish to exercise these rights please contact our DPO using the contact details provided above.
– Further information and advice about your rights can be obtained from the data protection regulator in your country of residence within the EU.
– The right of access. If we are processing your information following a transaction initiated by you, you have the right to obtain access to your information. This is so you’re aware and can check that we’re using your information in accordance with data protection law. You can do this by writing to us on the email address above.
– The right to rectification. You are entitled to have your information corrected if it is inaccurate or incomplete. Likewise you can request that we rectify any errors in personal information that we hold by writing to us on the email address above.
– The right to erasure. This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. Please note this is not a general right to erasure and that legal exceptions do exist
– The right to restrict processing. You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We may need to keep details of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
– The right to object to processing. You have the right to object to certain types of processing, including processing for direct marketing, for example, receiving emails from us notifying you about other services we provide which we think may be of interest to you or being contacted with varying potential opportunities.
– The right to lodge a complaint. You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator.
– The right to withdraw consent. As we rely on your consent for processing your data, if you have given your consent to anything we do with your personal information you have the right to withdraw this consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful)
12. CHANGE LOG
– Any changes made to this notice after 24/05/2018 shall be recorded here