Privacy

 

Brad Quarless.com Privacy Policy

Last updated: 24 May 2018

1) What this Privacy Policy covers

This privacy policy sets out how “Brad Quarless” uses and protects any information that you give Bradquarless.com  when you use this website (the "Site").

The data controller is Brad Quarless (referred to in this policy as "we", "us" or "our"). We want you to be confident that the personal information you give us is safe and secure with us, and understand how we use it to offer you a better and more personalised experience on our Site.

Should we ask you to provide certain information by which you can be identified when using this Site, then you can be assured that it will only be used in accordance with this privacy policy.

We may change this policy from time to time by updating this page. If a change in our privacy policy should become necessary you will always find the current version on this page.

2) What personal information we collect

We may collect, store, and use the following categories of personal information about you:

Identity Data

Title, first name, last name, username or similar identifier and company name.

Contact Data

Billing address, delivery address, email address and telephone numbers.

Financial Data

Bank account and payment card details.

Transaction Data

Details about payments to and from you and other details of products and services you have purchased from us. These include:

• the time, date and location of purchase;
• the products you buy from us;
• any relevant delivery address;
• any vouchers, coupons or other alternative means of payment you may use, as well as relevant payment cards such as a credit or debit card.

Technical Data

• Internet protocol (IP) address;
• MAC address;
• your login data;
• browser type and version;
• time zone setting and geographical location;
• browser plug-in types and versions;
• device model;
• device name;
• operating system and platform and other technology on the devices you use to access this Site;
• information where you came to our site from, and where you went when you left it;
• length of visit on our Site;
• We also track how often you visit and use our Site. We do this via email and website cookies. We make our cookie policy available on our Site to give you more detailed information on how we use them. For more information, please visit our Cookie Policy page.

Profile Data

• your username and password;
• purchases or orders made by you;
• your interests, preferences, feedback and survey responses;

Usage Data

• Information about how you use our Site, products and services;
• Information on what you view and click on our Site and access by way of our marketing emails.

Marketing and Communications Data

Your preferences in receiving marketing from us, our third parties, and your communication preferences.

3) Using your personal information

We will only use your personal information when the law allows us to. We will use your personal information in the following circumstances:

• when you consent to us doing so;
• where we need to perform the contract we have entered into with you;
• where we need to comply with a legal obligation;
• where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

Legitimate Interest

• means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience;
• we make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests;
• we do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Purpose/activity, type of data and lawful basis for processing

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us at info@bradquarless.com  if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

Some of the grounds for processing will overlap and there may be several grounds which justify our use of your personal information.

Purpose/Activity

Type of data

Lawful basis for processing including basis of legitimate interest

To register you as a new customer

(a) Identity

(b) Contact

(a) Performance of a contract with you

(b) Your consent

(c) Necessary for our legitimate interest to set up and manage your account

To process and deliver your order including:

(a) Manage payments, fees and charges

(b) Collect and recover money owed to us

(a) Identity

(b) Contact

(c) Financial

(d) Transaction

(e) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary for our legitimate interests (to fulfil your order or recover debts due to us)

To manage our relationship with you which will include:

(a) Notifying you about changes to our terms or privacy policy

(b) Asking you to leave a review or take a survey

(c) Responding to your queries and comments, social media posts and questions.

(a) Identity

(b) Contact

(c) Profile

(d) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary to comply with a legal obligation

(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)

(d) Your consent

To enable you to partake in a prize draw, competition or complete a survey

(a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)

To administer and protect our business and this Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identity

(b) Contact

(c) Technical

(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)

(b) Necessary to comply with a legal obligation

To deliver relevant Site content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

(a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

(f) Technical

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)

To use data analytics gathered from our Site in order to improve our Site, products/services, marketing, customer relationships and experiences

(a) Technical

(b) Usage

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our Site updated and relevant, to develop our business and to inform our marketing strategy)

To make suggestions and recommendations to you about goods or services that may be of interest to you

(a) Identity

(b) Contact

(c) Technical

(d) Usage

(e) Profile

Necessary for our legitimate interests (to develop our products/services and grow our business)

Marketing

We strive to provide you with choices regarding certain personal data uses, particulary around marketing and advertsing.

Promotional Offers

If you have expressly opted-in to receive marketing from us we may use your Identity, Contact, Technical, Usage and Profile Data. You will receive marketing communications from us if you have requested information from us or purchased goods or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing.

Third-party Websites

We will get your express opt-in consent before we share your personal data with any company outside Britsh Hardwoods for marketing purposes.

Email Marketing

We use a third-party email service, MailChimp to manage our regular email communications to customers for our company newsletters, announcements and updates, promotional offers and MailChimp act as a data-processor on behalf of Brad Quarless.

MailChimp is a US company and has staff based outside the EEA, and stores your data in the US. MailChimp is certified under the EU-US Privacy Shield framework. When you sign up to our email alerts, you agree to your data being stored in this way.

As a subscriber to our email alerts, we may contact you from time to time to ask for your feedback on how to improve our email alert service.

As a data processor on behalf of Brad Quarless, MailChimp will use your information to send you email alerts if you request them. You can find out more about how MailChimp collects and stores your information.

Google Analytics

We use Google Analytics to help us to understand how you make use of our content and work out how we can make things better. These cookies follow your progress through our Site, collecting anonymous data on where you have come from, which pages you visit, and how long you spend on the site. This data is then stored by Google in order to create reports. These cookies do not store your personal data.

The information generated by the cookie about your use of the Site, including your IP address, may be transmitted to and stored by Google on servers in the United States. Google may use this information for the purpose of evaluating your use of the Site, compiling reports on Site activity for us and providing other services relating to Site activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. By using this Site, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

The Google website contains further information about Analytics and a copy of Google's privacy policy pages.

Social Media

If you share our content through social media, for example by liking us on Facebook, following us on Twitter, Instagram or YouTube, those social networks will record that you have done so and may set a cookie for this purpose.

In some cases, where a page on our Site includes content from a social network, such as a Twitter feed, or Facebook comments box, those services may set a cookie even where you do not click a button. As is the case for all cookies, we cannot access those set by social networks, just as those social networks cannot access cookies we set ourselves.

Other Websites

Our Site may contain links to other websites of interest. However, once you have used these links to leave our Site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Opting out

You can ask us to stop sending you marketing messages at any time by contacting us at stop@bradquarless.com

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Site may become inaccessible or not function properly. For more information, please visit our Cookie Policy page.

4) Disclosures

The personal information that we collect when you use our Site is confidential. We may disclose your personal information in the following circumstances:

We may disclose information about you to any of our employees, officers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes as set out in this privacy policy.

• to employees and/or subcontractors, i.e. freight suppliers, to process your order/s placed through our Site;
• if we are required to do so by law;
• if required to do so by any court or any other applicable regulatory, compliance, governmental or law enforcement agency;
• if necessary, in connection with any legal proceedings or prospective legal proceedings;
• in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
• to the purchaser (or prospective purchaser) of any business or asset which we are (or are contemplating) selling; and
• except as provided in this privacy policy, we will not provide your information to third parties.

5) Your rights

You already have certain rights under the Data Protection Act 1998 legislation, including a right to request a copy of the personal information we hold on you, if you request it in writing. From 25 May 2018 you will have the following rights:

• Right to be informed: of the reasons for collecting and processing your personal data;
• Right of access: to your personal information (commonly known as a 'data subject access request'); this enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it;
• Right to rectify: your personal information if it is inaccurate or incomplete;
• Right to erase: your personal information from our systems (commonly known as 'the right to be forgotten');
• Right to restrict our use of your information: the right to 'block' us from using your personal information or limit the way in which we can use it;
• Right to data portability: to request that we move, copy or transfer your personal information;
• Right to object: to our use of your personal information including where we use it for our legitimate interests (or those of a third party). You also have the right to object where we are processing your personal information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which means we can continue to process your personal information.

We will use reasonable efforts consistent with our legal duty to provide you with your rights in accordance with data protection legislation.

To make enquiries, exercise any of your rights set out in this Privacy Policy and/or make a complaint please contact info@bradquarless.com  or write to Brad Quarless, 54 Rue De Bel Air, Poitiers, 86000, France.
If you're not satisfied with the way any complaint you make in relation to your personal information is handled by us, then you may be able to refer your complaint to the relevant data protection regulator.

6) Security of your personal information

We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

We will store all the personal information you provide on our secure (password and firewall protected) servers. All electronic transactions you make to or receive from us will be encrypted using Secure Socket Later (SSL) technology. Payment details for orders placed on our Site are collected by third party organisations, i.e. Stripe and PayPal using SSL to encrypt personal data.

Customer payment and bank details (card number etc.) are neither received nor stored by the seller.

Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. You are responsible for keeping your password and user details confidential. We will not ask you for your password (except when you log into your account on our Site). By using our Site you accept the inherent risks of providing information online and will not hold us responsible for any breach of security.

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

7) Contact

If you have any questions about this privacy policy or our treatment of your personal information, please write to us by email to info@bradquarless.com or by post to Brad Quarless, 54 Rue De Bel Air, Poitiers, France 86000

8) Policy amendments

We may update this privacy policy from time-to-time by posting a new version on our Site. You should check this page occasionally to ensure you are happy with any changes.

We will also notify you of changes to our privacy policy by email if you have provided us with an email address and consent to receive changes to our policy.

Brad Quarless

www.bradquarless.com