Wooden House Miniatures takes your privacy, and the security of your information very seriously. We’ve done everything we can to ensure your information is collected, stored, and used in a safe and fair manner.
This document sets out how and why we collect information, how it is used and stored, and in what circumstances we may pass that information on to others.
WHO ARE WE?
Wooden House Miniatures is a registered trade mark and trading name of Vanessa Beckett, 124 Larkspur Drive, BN23 8EH.
WHAT INFORMATION DO WE COLLECT AND WHY?
While using our website, there may be times when we ask you to provide us with your information such as:
- When you checkout – so that we can take your payment, and deliver your items.
- When you register an account – so that you don’t need to enter your details every time you use our site.
- When you fill in a contact request form – so that we can reply to your request.
- When you contact us in connection with a previous order – so that we can verify your identity and match that to our order records.
When placing an order, or registering an account, we will ask you to enter your name, address, email address, contact number and where required your payment details, such as card number and billing address. This information will be required for us to take your payment and to fulfil your order by delivering your item(s). Your name, address, email, and contact number will be stored on our system along with your order details as part of our sales records. However, like most online stores we don’t handle your payment details directly. These are passed by encrypted communication straight to our third party payment processor. At no time during the transaction do we have access to, or record your payment or card details.
More information about this and links to our payment processors privacy statements can be found further down this page.
VISITOR TRACKING AND SECURITY MONITORING
When you access our website from any computer, mobile phone, or similar device we automatically receive your internet protocol (IP) address. This information is used to gain a basic understanding of the number of visitors we receive and most importantly it’s used by our website’s built in security to monitor and record access to our site and prevent malicious activity. This is an important step in ensuring both the security of our site and the information it contains. All security logs are kept for a period of 30 days when they are automatically deleted. IP addresses which have been flagged as causing malicious behaviour may be processed further and stored for longer to prevent any future malicious activity. In these cases we may request further details about an IP address to enable us to report abuse and further protect our systems. Information will only be obtained from ICANN registered sources, and will be in the form of readily available public domain details about the network origin of the IP. For home users this would normally only give the name and details of the internet services provider the address belongs to.
We may also record your IP address when you carry out certain actions on our site, such as: placing an order, filling in a contact form, or leaving a comment or review. This helps us to prevent fraud and improves the security of our website and its information.
More information on IP addresses and internet privacy can be obtain by visiting the following website https://www.out-law.com/page-8060
WHAT IS MY INFORMATION USED FOR?
In the first instance we will use your information to fulfil your order, answer your query or in the case of security logs to protect our systems and the information they contain. As part of the ordering process you may receive a number of emails from us updating you on the status of your order and giving important information about your customer account. However at no point will we use your information to send you marketing communications unless you have specifically requested that we do so.
WHERE IS MY INFORMATION STORED AND WHO HAS ACCESS TO IT?
All information is stored on our secure web servers or computer systems, and all connections to our site are transmitted through the HTTPS protocol to help protect your information from being intercepted. You can check this is working at anytime by looking for the padlock symbol in your browser address bar. While no internet security is 100% secure we do our best to ensure your information is transmitted and stored securely. All sensitive information is encrypted and we are currently working on a solution to encrypt all information stored in our database. In the mean time our systems are secured by several layers of protection to prevent unauthorised access.
We will never pass or sell your information to a third party for the purpose of marketing or data collection. However, in order to fulfil our obligations to you as a customer we may be required to share some information with our third party providers. These include our payment processor, delivery service, website hosting company, and data backup provider. A list of our third party data processors can be found below. These have been carefully selected and all comply with the relevant data protection regulations.
- Stripe – Payment gateway (Privacy policy)
- PayPal – Payment gateway (Privacy policy)
- Krystal Hosting – Web Server and hosting Provider (Privacy Policy)
- Google – Data backup & spam prevention (Privacy policy)
- Backblaze – Encrypted data backup (Privacy policy)
- Royal Mail – Parcel delivery service. (Privacy policy)
We may under certain circumstances be required to transfer your information to another third party when required to do so due to; obligation or duty under law, to fulfil our obligations under our terms and conditions, or due to sale or substantial restructuring of our business.
WHAT HAPPENS IF OUR SECURITY IS BREACHED?
In the unlikely event that our system security is breached we will mount a thorough investigation as soon as the breach is discovered. Where personal identifiable information has been accessed this must be reported to the UK Information Commissioners office (ICO) within 72hrs. Where necessary we will also notify all affected users and advise them of the best course of action.
WILL MY INFORMATION BE TRANSFERRED OUTSIDE THE EUROPEAN UNION (EU)?
Wooden House Miniatures is entirely based in the United Kingdom and so is our main website server and database storage. However, some of our third party processor, as detailed above, are based internationally. This means there will be times when your information is transferred outside the European Union. All our our third party processors comply with the relevant UK and EU regulations concerning data privacy and security.
LINKS
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
YOUR RIGHTS
You have the right to opt out of communications, and or storage and recording of your data at any time, even if you have previously opted in or given consent for data collection.
This gives you the right to:
- Request a copy of any identifiable information we hold about you.
- Request the deletion or alteration of any identifiable information we hold about you.
- Remove your consent to the recording and or storage of your information in the future.
If you wish to enact your rights to any of the above, please click here to be taken to our privacy policy request form.
COOKIES
Just like most websites we use cookies to help provide you with the best experience we can. Cookies are small text files that are placed on your computer or mobile phone when you browse websites.
Our cookies help us:
- Make our website work as you’d expect
- Save you having to login every time you visit the site
- Remember your settings during and between visits
- Improve the speed/security of the site
We use a number of different cookies on our site. If you do not know what cookies are, or how to control or delete them, then we recommend you visit http://www.aboutcookies.org for detailed guidance.
For full details on the cookies we use please visit our Cookie Policy
CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
This policy was last updated on: 30th June 2019
DATA CONTROLLER
The data controller of this website is:
Vanessa Beckett trading as Wooden House Miniatures
124 Larkspur Drive
Eastbourne
BN23 8EH
email:
—-
The company, product and service names used in this web site are for identification purposes only. All trademarks and registered trademarks are the property of their respective owners, and their use in no way implies endorsement of our services by those companies.