River Bespoke Privacy Policy
Version 1.0 Release date March 2020
River Bespoke is a company dedicated to providing our customers with simply stunning furniture and service, as part of this we take all of our customers information seriously and are committed to safeguard their privacy and respect their wishes.
We use personal data that relates to two key categories of individuals (or “data subjects”):
- People who use our website site www.riverbespoke.com (Our Site);
- Our customers, partners and people we work with (this includes employees of our customers, partners and service providers)
For the purpose of the Data Protection Act 2018 (the Act) and the General Data Protection Regulation (GDPR), the data controller is Kitaki Ltd operating under the River Bespoke brand.
INFORMATION WE COLLECT AND USE
People who use Our Site
We will collect any personal data provided via the webforms on Our Site.
We will also automatically collect the following information, this will always be anonymised and cannot be traced back to you and will only be used for the purposes of improving our website and understanding how users interact with it:
- Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
- Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from Our Site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page.
Our customers and people we work with
We collect personal data relating to our customers, the employees of our customers and other individuals we work with. This personal data includes:
- Name, address, contact details;
- Position and company;
- Professional social media (for example, LinkedIn and Twitter);
- Order history and payment details;
- Records of contact and correspondence; and
- Applications and CVs.
We receive this information directly from individuals or from their companies or the companies we work with.
OUR PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
People who use Our Site
We use personal data relating to people who use Our Site for the purposes of administering, developing and promoting our business.
Our legal grounds for using the personal data we collect relating to people who visit Our Site is that doing so is necessary for the legitimate interests of our business. We will not use personal data for the purposes of our legitimate interests where an individual’s interests and rights override our business interests.
Our customers and people we work with
We use personal data relating to our customers and people we work with for the purposes of administering, developing and promoting our business.
If you are an individual who has a contract or an agreement (Contract) with us, our primary ground for using personal data relating to you will be for the performance of the Contract. If you do not provide the personal data we need to perform the Contract, we may not be able to fulfil that Contract.
We may also use personal data relating to you separately from the performance of the Contract where doing so is necessary for the legitimate interests of our business or the legitimate interests of a third party such as our customers. We will not use personal data for the purposes of our legitimate interests where your interests and rights override the legitimate interests we have identified.
If you are an individual who we work with but do not have a direct Contract with (for example, employees of our customers or services providers), our legal ground for using personal data relating to you is that doing so is necessary for legitimate interests of our business or the legitimate interests of a third party such as our customers. We will not use personal data for the purposes of our legitimate interests where your interests and rights override the legitimate interests we have identified.
Legal obligations
Separately from the legitimate interests of our business and the performance of contracts we have with individuals, we will also use personal information when we are required to do so by law. Where that is the case, our legal ground is that the use of personal data is necessary to comply with a legal obligation.
DATA RETENTION
Our site
We only store personal data collected via Our Site while it is needed for our business purposes up to a maximum of 24 months. We will only keep personal data collected via Our Site for longer where necessary to comply with our legal obligations or to safeguard are legal rights.
Our customers and people we work with
We will generally store personal data that is related to our customers or other people we work with for a maximum of 24 months from our last relevant contact. We will only keep personal data relating to customers or other people we work with for longer where necessary to comply with our legal obligations or to safeguard our legal rights.
DISCLOSURE OF PERSONAL DATA
Service providers
To help administer, develop and promote our business, we share personal data with and receive personal data from the following service providers:
- Analytics service providers: Google Analytics
- IT providers: Fluffyegg Ltd
- Email database management: Zoho
- Consumer relationship management: Zoho
- Professional services (for example, accountants and lawyers)
We have contracts in place with these service providers that strictly govern how they may use the personal data we share with them.
WHERE WE STORE PERSONAL DATA
We store personal data within the European Economic Area. However, the personal data we hold may be transferred to service providers or others based outside the EEA. Where we transfer personal data outsider the EEA we will implement safeguards such as standard contractual clauses approved by the European Commission or the US-EU Privacy Shield.
RIGHTS
You have the rights to:
- Information about how we use personal data (which is what this policy is for);
- Access to personal data;
- Object to direct marketing and the use of personal data based on the grounds of legitimate interest;
- Erasure of personal data;
- Portability of personal data;
- Withdraw consent where our use of personal data is based on consent;
- Rectification of personal data;
- Restriction of personal data; and
- Complain to the Information Commissioner’s Office.
Please be aware that these are not absolute and there may be some situations in which they cannot be exercised or they are not relevant. You can find out more detail about these rights on the website of the Information Commissioner’s Office – www.ico.org.uk.
Should we send you information and you no longer wish to be contacted please unsubscribe or contact us by email ([email protected]). This process should be completed within 28 days.
SITES REFERENCED ON WWW.RIVERBESPOKE.COM
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
CHANGES TO OUR PRIVACY POLICY
Any changes we make to our privacy policy in the future will be posted on this page. Where this affects the consents needed from you then we will seek your renewed permission the next time you visit the website.
CONTACT
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [email protected].
COOKIE POLICY
Information about our use of Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
We may use the following cookies:
Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website more relevant to your interests.
You can find more information about the individual cookies we use and the purposes for which we use them below:
_ga
This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site’s analytics report.
The cookies store information anonymously and assign a randomly generated number to identify unique visitors. 2 years. Analytics.
_gid
This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the wbsite is doing. The data collected including the number visitors, the source where they have come from, and the pages visted in an anonymous form. 1 day. Analytics
_gat
This cookies is installed by Google Universal Analytics to throttle the request rate to limit the collection of data on high traffic sites. 1 minute. Performance