Date: 16th July 2019
The Data Protection Act 2019 incorporating the GDPR (General Data Protection Regulation) obliges any organisation that stores personal data about natural living persons to ensure that those people understand: what data is being stored about them; why it is being stored and what is done with it.
This privacy notice explains what our data processing activities are. It explains what information is stored about you and for what that data is used for.
Loud Shirt only collects and store data for which we have a legitimate and proportional use.
We will undertake to store personal data securely in accordance with UK Law and EU data security principles.
Data controller and data processors
Loud Shirt Brewing Co Ltd is the Data Controller of data pertaining to customers, suppliers, subscribers to our newsletters and staff (hereafter “you”, “your”). Loud Shirt Brewing Co Ltd (hereafter “we”, “our”) may make use of third-party service providers (processors) such as online databases, online forums, e-commerce solutions, email management services, financial systems, couriers and online backup/storage facilities.
Using these processors may require the transfer your personal information outside of the UK or EU. We are required to ensure that when we need to do this we comply fully with all aspects of the GDPR to ensure your data is suitably protected.
Information Commissioners Office
We recognise the Information Commissioner’s Office (ICO) in the UK as our regulatory body. We are registered with the ICO as a data controller reg No: ZA534244
Our legal bases for processing your data are:
1) Fulfilment of contract. By purchasing any of our goods and services, you have entered into a contract with us. We may store relevant data prior to this in the process of negotiating a contract.
2) Legal Obligation. As a UK Limited company and VAT registered entity, we are bound by law to hold suitable records of transactions, and make these available to relevant authorities on request.
3) Consent. You will be asked to consent to us storing your data if you sign up to our newsletter. We do not sell on or share this data with 3rd parties other than as processors.
4) Legitimate interest. We may share your details with 3rd parties should we need to recover monies or goods etc., or to defend any legal action.
You have the following rights:
- The right to be informed (this is the purpose of this document along with any consent you give).
- The right of access (you may request a copy of your data. We will deliver this within one calendar month unless your request is very complex. We will inform you if this is the case).
- The right to rectification (you may ask us to correct your data at any time).
- The right to erasure (where consent is the legal basis of processing).
- The right to restrict processing (you may ask us not to process your data but not erase it).
- The right to data portability (you may ask us for a copy of the data in an appropriate format).
- The right to object (where data is not being processed for legal obligation or legitimate interests).
- Rights in relation to automated decision making and profiling. (We do not engage in this).
We will erase your data in a timely fashion, subject to UK legislation and guidance from UK government agencies in respect of company record retention.
Why we need your data
We use data collected to deliver goods and services, place orders, collect monies due and maintain contact electronically.
We may, on occasion, process and produce anonymised data for the purposes of statistical analysis for our own uses or to make public.
Sources of data
Most of the data we collect will be given by you, but we may also record data such as event attendances.
Who we share data with
Mailchimp Inc email marketing platform – We use this platform to store marketing contact details manage our emails to you. We receive performance information based on you opening or forwarding any emails sent via this method.
WooCommerce (Automattic Inc) We use WooCommerce to store and process online purchases of goods, services and events from us.
PayPal Inc: We offer the opportunity to pay for goods and services by PayPal. We do not store any data in relation to this except information related to the payment status of your account
Carriers: If we are sending your goods via a carrier, we will share your address details with them so they can deliver the goods to you.
Legal representatives and collections agencies: We may on occasion share specific and proportional data in order to pursue our legitimate interests.
Your right to complain
If we fail to comply with any of your requests within the prescribed time limits you may complain to the ICO.
We have appointed a person to be responsible for data privacy who will be the point of contact for data privacy related enquiries. We can be reached at firstname.lastname@example.org or by writing to us at: Data Privacy, Loud Shirt Brewing Co Ltd. Unit 5, Bell Tower Industrial Estate, Roedean Road, Brighton. BN2 5RU. We may take steps to ensure your identity before responding to you. Normal updates and requests may still be directed to the relevant contacts.