Nova Leathers (Bristol) Ltd – Privacy Policy

Last updated: May 2018

Nova Leathers (Bristol) Ltd (‘Nova’, ‘We’, ‘Us’, ‘Our’) is committed to your ongoing privacy. This privacy policy has been written to aid in your understanding of how personal data that we collect from you, or you provide to us, will be used.

Please read our Privacy Policy carefully as it describes how we collect and use your personal data. Where you provide us with your personal data in any of the ways described in section 3 below, you agree that we may collect, store and use it:

  1. in order to perform our contractual obligations to you,
  2. based on our legitimate interest for processing (i.e. for internal administrative purposes or for direct marketing)

Rights for individuals under the General Data Protection Regulation (“GDPR”)

  • Right to be informed about the collection and use of their personal data
  • Right to access their personal data
  • Right to have their inaccurate personal data rectified
  • Right to have their personal data erased
  • Right to request the restriction or suppression of their personal data
  • Right to data portability allows individuals to obtain and reuse their personal data for their own purposes
  • Right to object to the processing of their personal data in certain circumstances
  • Right in relation to automated decision making and profiling

If you would like more information on your rights please contact the Information Commissioners Office.

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

  1. Who we are

Nova Leathers (Bristol) Ltd is incorporated in England & Wales – company registration number 1304850. Registered address – Unit 1, Beanwood Farm, Shorthill Road, Westerleigh, Bristol, BS37 8QN.

Nova is the data processor and processes personal data on behalf of the data controller.

Nova’s customers are the data controllers for any personal data provided to, or collected by Nova (data processor) and remain the owners of the data.

  1. How we collect personal data

We collect data about you (and any other party whose details you provide to us) when you:

  • complete a new account form on opening an ‘account’ with Nova. This includes your name, business name, address(es) (home/invoice/delivery), email addresses and telephone numbers. We may also ask you to provide additional information about your business such as company registration number, VAT number, website address
  • register to use our website; this includes your name, Company name, email address
  • place an order using our website; this includes your name, Company name, address(es) (invoice/delivery), email address and telephone number. We may also ask you to provide additional information about your business
  • complete online contact forms ; this includes your name, Company name, email address
  • contact us directly other than through our website, for example by telephone, fax, SMS, email, social media or post.

We may enhance personal data we collect from you with information we obtain from third parties that are entitled to share that information; for example, information from credit agencies, search information providers or public sources (e.g. for customer due diligence purposes), but in each case as permitted by applicable laws.

If you intend giving us personal data about someone else, you are responsible for ensuring that you comply with any obligation and consent obligations under applicable data protections laws. In so far as required by applicable data protection laws, you must ensure that beforehand you have their explicit consent to do so and that you explain to them how we collect, use, disclose and retain their personal data or direct them to read our Privacy Policy.

  1. How we use personal data

All personal data is processed and stored securely and for no longer than was initially intended and only for the reason it was first obtained. All data is processed on a lawful basis.

Nova use Contract as the basis to lawfully process your data for fulfilling contractual obligations

We use your data to:

  • provide any information requested
  • provide; invoices, credits and account statements by email or post

Nova use Legitimate Interest as the basis to lawfully process your data for direct marketing purposes.

We use your data to:

  • provide any information requested
  • provide any information we feel is necessary for the purpose of our business relationship
  • deliver targeted advertising / marketing
  • manage our relationship with you (for example, customer services)
  • deliver joint content (for example, advertising exhibitions with trade show organisers – we never share personal data with these third parties)

You may opt out / unsubscribe from these marketing communications at any time.

We may monitor and record our communications with you, including e-mails and phone conversations. Information which we collect may then be used for training purposes and quality assurance.

  1. Sharing your personal data, security and data storage

We will not sell your personal data to any third parties for any purpose including marketing purposes.

We may share your data with a sub-processor. A sub-processor is a third party data processor that Nova engages with to help deliver our business activities.

We take reasonable measures to evaluate the security, privacy and confidentiality practices of proposed sub-processors that will or may have access to or process your personal data.

We may share your data with;

  • third parties used to facilitate payment transactions
  • credit reference agencies
  • any third party in the context of actual or threatened legal proceedings, provided we can do so lawfully (for example in response to a bad debt)
  • our approved courier (DPD) to help facilitate a better delivery service (for example providing email or mobile number to allow real time delivery updates)
  • Sage 50 cloud Accounts, syncing with Microsoft Office 365

Some of the third-party data processors used by Nova and listed below are located outside of the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein).

We will keep your information secure by taking appropriate technical and organisational measures against its unauthorised or unlawful processing and against its accidental loss, destruction or damage.

We will do our best to protect your personal data but we cannot guarantee the security of your data which is transmitted to our website, via an internet or similar connection. If we have given you (or you have chosen) a password to access our website please keep this password safe – we will not share this password with anyone.

All data submitted to our website is stored on our secure website database, which sits on a United Hosting server https://www.unitedhosting.co.uk/about/datacentre.

If you believe your account / personal data has been compromised, please contact us at; enquiries@novaleathers.co.uk

  1. Third Party websites and social media

If you follow a link from our website or from an email (marketing or otherwise) originating from Nova, this policy will no longer apply. We are not responsible for the data handling practices of third party sites or services and we encourage you to read the privacy notices appearing on those sites.

  1. Cookies

Cookies are small text files which are transferred from our website and stored on your computer or device. We use cookies to help us provide you with a personalised service, and to help make our website better for you.

Our cookies may be session cookies (temporary cookies that identify and track users within our website, which are deleted when you close your browser) or persistent cookies (cookies which enable our website to “remember” who you, which will stay on your computer or device after you close your browser).

We use the following different types of cookies:

Strictly necessary cookies

These are cookies which are needed for our website to function properly, for example, these cookies allow your login details to be remembered.

Performance cookies

These cookies are associated with Google Analytics. It stores and updates a unique value for each page visited.

Cookies we use:

 WooCommerce cookies:

  • woocommerce_cart_hash
  • woocommerce_items_in_cart
  • wp_woocommerce_session_

WordPress cookies:

  • wordpress_[hash]
  • wordpress_logged_in_  [hash]

Google Analytics cookies:

  • _ga

How to disable cookies

You can refuse cookies by adjusting your browser settings accordingly. Doing so may restrict your access to certain functionality within our site.

For more information about cookies and instructions on how to adjust your browser settings to accept, delete or reject cookies, see the www.allaboutcookies.org website.

  1. Changes to our privacy policy

We may change our Privacy Policy from time to time (for example; if the law changes). We will always update this Privacy Policy on our website, so please try to read it when you visit the website.

  1. Further information

If you have any queries about how we treat your information, the contents of this Policy, how to update your records or how to obtain a copy of the information that we hold about you, please email enquiries@novaleathers.co.uk.