Summary
Waterloo House Eryri (‘Waterloo House’, ‘we’, ‘us’) is the controller and responsible for protecting your personal data and handling it responsibly.
This policy covers the personal data that Waterloo House processes whenever you interact with us, including when you purchase items through the website and when you correspond with us (such as by email). It also covers personal data that we may receive from third parties.
The sections below explain in more detail:
- the types of personal data we collect from you
- the types of personal data we receive from third parties
- why we process your personal data
- who we share your personal data with
- personal data transfers outside of the UK
- how long we retain your personal data
- your rights to withdraw your consent and to object (including to direct marketing)
- your other personal data rights
- how to contact us and exercise your rights
- how we collect information about your use of our website – our Cookies Policy
——
Personal data Waterloo House collects from you
We collect personal data from your interactions with us, such as when you engage with us online (such as by using our website), or when you email or phone us.
The personal data we collect from you includes:
- the name and contact details that you provide when you create an account
- your purchase, payment and address details
- your marketing preferences, including any consents you have given us
- your browser or device information
- information about your use of our website
- information about your engagement on social media, including on accounts belonging to Waterloo House
- your communications with us
——
Personal data Waterloo House receives from third parties
Sometimes we receive personal data from third parties, in particular:
- data specialists provide us with insights about our users
- government and law enforcement authorities provide us with personal identification and background information when they are involved in official inquiries
- finance providers may inform us about a credit arrangement you have with them
——
Why Waterloo House processes your personal data
This section explains the reasons why we process your personal data and our legal bases for doing so.
Consent
If you’ve opted-in to receive information and offers relating to the shop (for example by ticking a box on our website), then we’ll provide this information to you by email.
We also rely on your consent to process information about your use of our website and social media site. For more information, please read our Cookies Policy.
Wherever we rely on your consent to process personal data, you have a right to withdraw that consent.
Legitimate interests
We process your personal data when necessary to pursue our legitimate interests in the following:
- tailoring our website and communications for you. We collect information about your engagement with us online (such as pages that you have visited on our website) and combine that with aggregated insights we have about our customer base, to build a fuller understanding of your individual preferences
- monitoring, improving and protecting our products, content and services
- preventing abusive, discriminatory or otherwise inappropriate or offensive behaviour, whether in person or online, that is directed towards any member of staff
- checking the credit or debit card details you provide (to process your payments and prevent fraudulent transactions)
- responding to your comments or complaints
- undertaking, or inviting you to take part in, market research or surveys
- querying whether you have had an issue completing an online form
- preventing, investigating and/or reporting fraud, terrorism, misrepresentation, security incidents or crime
- managing legal claims, compliance, regulatory and investigative matters
You have a right to object to any processing that we undertake for our legitimate interests.
Contract
We process your personal data when necessary for contractual reasons, such as to administer your account registration and to provide products and services that you have requested.
Legal obligation
We are legally required to process your personal data in cases where we need to respond to certain requests by government or law enforcement authorities .
——
Who Waterloo House shares personal data with
We may share your personal data with the following recipients:
- third party suppliers involved in: data insights; website hosting; online personalisation; advertising; tracking online abuse; systems maintenance; database management; identity checking; payment processing; delivery logistics; facilities management; and credit and debt management
- our advisers, any prospective purchaser’s advisers, and any new owners of the business (in the event our business is sold or integrated with another business)
——
How long Waterloo House retains personal data
We retain personal data about your membership for as long as your account remains active, and for a limited period of time afterwards (in case you decide to reactivate your account or have queries about it).
We retain personal data relating to your purchases for several years from the date of the relevant transaction. This is to understand your purchasing preferences and to meet our legal and contractual obligations.
Where you have asked us not to send you direct marketing, we keep a record of that fact to ensure we respect your request in future.
——
Your rights to withdraw consent and to object (including to direct marketing)
Wherever we rely on your consent to process personal data, you always have a right to withdraw that consent.
You also have the right to object to any use of your personal data for direct marketing purposes, as well as to processing that we undertake based on our legitimate interests.
——
Your other personal data rights
In addition to your rights to withdraw your consent and to object, you have the right to ask us:
- for access to information about your personal data or for a copy of your personal data
- to correct or delete your personal data
- to restrict (i.e. stop any active) processing of your personal data
- to provide you with certain personal data in a structured, machine readable format and to transmit that data to another organisation
These rights may not always apply, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have a legitimate interest in keeping. If this is the case then we’ll let you know when we respond to your request.
——
How to contact us and exercise your rights
The easiest way to stop receiving information from us is by opting out of communications through your online account.
We will do our best to assist with any queries you have about your personal data within 30 days of receipt.
We suggest that you check back here for updates, as we will update this policy from time to time.
——
Cookie Policy
The key reasons we use Cookies are to:
remember your log-in details;
provide you with services you have requested;
show you relevant content, including personalised advertisements;
ensure that our website functions properly; and
understand how you use our website.
The following types of Cookies are set when you access our website:
1. Necessary Cookies
These cookies are essential for the website to operate. Without these cookies, services you have asked for, like shopping baskets, cannot be provided.
2. Functional Cookies
These cookies recognise you when you return to the website. They remember information (such as your username and region), enabling us to remember your preferences and display relevant content when you return.
3. Analytical Cookies
These cookies collect information about how visitors use and engage with the website (such as the most visited pages), helping us to make improvements to the website.
4. Targeting Cookies
These cookies collect information about your browsing habits (such as products you have purchased or content you have engaged with) as well as information about your browser, device and IP address. We use this information to display more relevant content and advertisements to you, as well as to limit the number of times you see an advertisement and measure the effectiveness of a campaign. Occasionally we share this information with partners, including other advertising organisations. Targeting Cookies help us to connect with you on our website and on other websites, including Facebook. If you disable these Cookies, you may still see the same number of advertisements although they may be less relevant to you
How to manage Cookies
You can manage Cookies through your browser settings. Information about how to do this on key browsers is available at www.allaboutcookies.org. Please note that changes to your Browser settings will apply to all websites that you visit on your device (not just the Waterloo House website). However, these changes will only apply to the device on which you make them, so if you want to manage Cookies on other devices then you will need to update the settings on those devices separately.
