Personal Data – Any information specifically relating to an individual identifiable person. For example name, address or age.
Process/processing of personal data – Any operation or procedure performed that uses Personal Data within the business. For example using an individual’s address to send them products they have purchased
We/Us – The Best E Cigarette Ltd
Your rights regarding your personal data:
· The right to be informed – you have the right to know how we are processing your personal data and the reason(s) we have for processing it.
· The right of access – you have the right to access the personal data we have collected from you. You can request a copy of the personal data we have collected from you at any time.
· The right to rectification – you have the right to have your personal data corrected if it is incorrect or have it completed if it is incomplete.
· The right to erasure – you have the right in certain circumstances to have your personal data erased from our records (within reason).
· The right to restrict processing – you have the right in certain circumstances to restrict/limit the extent your personal data is processed.
· The right to data portability – you have the right to have your personal data transmitted to either you or another business in a structured, commonly used and machine readable format.
· The right to object – you have the right in certain circumstances to object the processing of your personal data.
· Rights in relation to automated decision making and profiling – you have the right to have your personal data protected against any automatic decision making or profiling unless you have given consent, it is for a contract, or it is authorised by Union or Member state law.
How we honour your rights:
Our lawful basis for processing your personal data is for contractual purposes/obligations. We will only process your personal data when you purchase an item or items on our website as you are thereby entering a contract with us to provide a service to you. If you create an account on our website and input personal data but do not purchase anything, we will not process your personal data.
The only personal data we process is what you give to us in order for us to provide a service to you. This personal data includes Name, Address (Billing & Shipping), Date of Birth, Phone Number and Email Address. When you purchase something on our website, this personal data is processed to our payment processor Sagepay so they can conduct the necessary fraud checks to approve or reject the transaction. Your personal data is then processed to our courier service (our usual courier is DPD Local however we use via Royal Mail occasionally) so we can send your item(s) to you and fulfil our contract to you. We may use your personal data to contact you regarding your purchase or the delivery of your goods. Our website uses HTTPS hosting to establish a secure, encrypted connection to your web browser to ensure no personal data can be intercepted. If you phone us to purchase an item or items, we will record your personal data by hand and process it manually to our couriers to fulfil our contract to you. Your personal data will then be filed and stored for a minimum of 6 months in a secure building with shutter doors externally and CCTV and locked doors internally. After this time frame your personal data will be destroyed.
If you create an account on our website, you can log in and view your account to access the personal data we have about you. If you cannot find this or have purchased on our website as a guest so do not have an account, you can call (01773 687073) or email (firstname.lastname@example.org) us to request a copy of all the personal data we have related to you. We do not have any other personal data other than what you give us. We do not store Credit/Debit Card information.
If any of your personal data changes or is incorrect, to rectify it you can log into your account and amend it yourself or you can call or email us to request that we do it for you.
If you would like to have your personal data erased from our records then you can call us or email us to request this. If you have purchased anything on our website and request your personal data to be erased, we can erase all digital records of your personal data such as your account on our website (containing Name, Date of Birth, Address, Phone Number and Email Address) and your previous orders/invoices (containing all of the above personal data), however we are required by law to keep a hard copy of every order/invoice for a minimum of 6 years so this cannot be destroyed or erased. All hard copies of invoices containing your personal data are sent to our accountants to check over before being stored in a secure building with shutter doors on the exterior and CCTV cameras and locked doors on the interior. If you have not made a purchase on our website but have still created an account and given us your personal data, you can call or email us to have this all erased permanently.
If you would like to restrict the processing of your personal data, you can call or email us to request this. Once you have purchased on our website you cannot restrict the processing of your personal data because you have entered a contract with us to provide a service to you. You can request that the contract is terminated but there is no guarantee your personal data will not have already been processed in some way.
If you would like your personal data sending to you in a machine readable format then you can call or email us to request this.
We do not process your personal data for any other reason than when you make a purchase on our website and therefore enter a contract with us. You cannot object the processing of your personal data in this instance as we have a contractual obligation to process it. As above, you can request that the contract is terminated but there is no guarantee your personal data will not have already been processed in some way.
We do not use any automated decision making or profiling with your personal data.
We will not collect your personal data when you visit our website unless you choose to provide that information to us. We will never sell your personal data. We will never pass your personal data on to any person/organisation for any reason other than to fulfil our obligation or contract to you.
Information Collected and Stored Automatically
If you do nothing during your visit but browse through the website, read pages, or view information, we will still gather and store a small amount of information about your visit automatically. This information is not personal data so does not identify you personally. We automatically collect and store only the following information about your visit:
The Internet domain and IP address (an IP address is a number that is automatically assigned to your computer whenever you are surfing the Web) from which you access our website;
The type of browser and operating system used to access our site;
The date and time you access our site;
The pages you visit; and if you linked to our website from another website, the address of that website.
We use this information to help us make our site more useful to visitors, learn about the number of visitors to our site and the types of technology our visitors use. We do not track or record personal information about individuals and their visits. We do not store credit / debit card information.
If you send us Personal Data
If you choose to provide us with personal data by sending an e-mail to the management or staff, or by filling out a form with your personal data and submitting it through our website, we use that data to respond to your message and to help us provide you with information that you request.
If you choose to provide us with delivery details, make a purchase or pay electronically on our website (or our shop), this data is used in the strictest manner, we will only use this data to process your transaction and deliver your goods as requested.
If you are an existing customer who has an account with us, we will keep a record of your previous orders.
We may keep details that we receive from fraud detection agencies or credit references.
All data submitted via our website, company email addresses or via telephone will be treated as confidential under the General Data Protection Regulation (EU) 2016/679.
We do not collect personal data for any other purposes.
The information you provide is not given to any private organisations or private persons. We do not collect or use data for commercial marketing without consent.
If you submit personal data through a member of our team, this data will be shared only with employees involved in making decisions relative to that data.
We may disclose your personal data to any member of The Best E Cigarette.
We may disclose your personal data to a third party if we are under a duty to do so in order to comply with any legal obligations or to enforce our terms and conditions. We may also disclose any dealings with you to fraud prevention agencies.
Internet Security Policy
For site security purposes and to ensure that this service remains available to all users, this computer system employs software programs which monitors network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage.
Unauthorised attempts to upload information or change information on this service are strictly prohibited and may be punishable under the Computer Fraud and Abuse Act of 1986, the National Information Infrastructure Protection Act and the UK Computer Misuse Act 1990.