Privacy Policy

 

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.hortiwool.com (the “Site”).

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

Cookies can be blocked using your browser’s settings. Please refer to the help section of your browser for details on how to do this. If you block all cookies from our site some functionality may be impaired.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

• Communicate with you;
• Screen our orders for potential risk or fraud; and
• When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

 

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/.
You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Your data will be transferred to our online store provider Shopify. Shopify are based in Canada which has been recognised by the EU as having an adequate level of data protection compatible with the UK GDPR. Where they use third-parties to process data this may be transferred to a third country – where this happens your data will be protected using standard contractual clauses.

 

BEHAVIOURAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by visiting that particular provider and opting out.

COMMON LINKS INCLUDE:
FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous
BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

You may at any point op-out from our Hortiwool’s direct marketing activities. The easiest way to do this is by clicking the unsubscribe link in marketing emails we may send you. Alternatively please contact us using the details below. Please note that opting out of marketing emails will not prevent you from receiving appropriate service information from us – such as order confirmations or delivery information for your orders.

 

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS

The following section provides a guide to some of the rights granted under the law as they apply to the data we hold. There may be other rights not listed here. More information on all of your rights can be found at: https://ico.org.uk/your-data-matters

All individuals for whom we hold data have a right to receive a copy of the data free of charge. Please see the subject access request section below.

If you find any data held is inaccurate or incomplete, please contact us using the details at the beginning of this policy and it will be rectified.

You may ask for your information to be deleted under the following circumstances:

• You believe the personal data is no longer necessary for the purpose for which it was collected
• You believe data has been unlawfully processed
• The data needs to be erased to comply with a legal obligation

Pending verification of the above Hortiwool will, when notified, suspend the processing of your data until a decision is made.

Hortiwool do not currently carry out automated decision making relating to individuals.

In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner’s Office (ICO) in the UK, at any time. The ICO’s contact details are available here: https://ico.org.uk/make-a-complaint

 

SPECIAL CATEGORIES OF DATA

Hortiwool will not process personal data revealing:

• Racial or ethnic origin;
• Political opinions;
• Religious or Philosophical beliefs;
• Trade union membership
• Genetic data
• Biometric data
• Data concerning health;
• Data concerning a person’s sex life or sexual orientation.

All data is processed in line with the Hortiwool Ethical Business Policy.

 

SUBJECT ACCESS REQUEST

All individuals have a legal right to a copy of the data Hortiwool holds relating to them under Article 15 of the UK GDPR. To receive this information you must make a Subject Access Request to us.

Your request must be made in writing. This may take any form you wish, either physical or electronic (letter, email, etc). If you wish to email your request, please send it to richard@Hortiwool.com

There is no charge to request and receive the personal data we hold on file for you. For repeated requests from the same individual we may charge a reasonable fee to cover administrative costs. Hortiwool will provide the relevant information within one calendar month of receiving your request.

The information we provide will contain at the least:

• The purpose for which Hortiwool hold your data.
• The categories of personal data concerned.
• The name and contact details for any third party (for example to a local agent or partner) your data has been shared with.
• Where possible the length of time Hortiwool expects the data to be stored or, where that length of time has yet to be determined, the criteria used to set that period.
• Your rights regarding the rectification or erasure of personal data, the restriction of processing that data, and your right to object to such processing.
• Your right to lodge a complaint with the Information Commissioner’s Office.
• The source of your information in the unlikely event Hortiwool did not obtain it directly from you.
• The existence of any automated decision-making and/or profiling, the logic involved in such automation and the envisaged consequences for you of such processing.

This information will be provided as much as possible in a ‘portable’ electronic format. This means that you should be able to access and/or open it with commonly available software. The most likely form the information will take is an .xls or .csv file which can be opened with various spreadsheet programs.

Some information provided to you may be edited or redacted where the law requires us to protect the data of other individuals.

 

SECURITY

Hortiwool will keep secure any personal data and control access by using one or more of the following methods as appropriate:

• Internal policy
• Internal IT measures (such as passwords, access rights)
• Preventing external access (firewall, virus-checking, anti-malware)
• Physical security (locks)
• Emergency preparedness (encryption)

 

DATA BREACHES

In the unlikely event of a data breach, whereby personal data held by Hortiwool is obtained by an unauthorised third party the subject of the data breach will be contacted with the following information:

• a description of the nature of the breach;
• the name and contact details of the data protection officer or other contact point from whom more information can be obtained;
• a description of the likely consequences of the personal data breach;
• a description of the measures taken or proposed to be taken by Hortiwool to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.

Hortiwool will, where feasible, contact the ICO not later than 72 hours after becoming aware of a Data Breach with the following information:

• a description of the nature of the personal data breach including, where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of personal data records concerned;
• a description of the likely consequences of the personal data breach;
• a description of the measures taken or proposed to be taken by Hortiwool to address the personal data breach, including, where appropriate, measures to mitigate its possible adverse effects.

Hortiwool will retain information relating to the breach:

• The facts relating to the breach.
• Its effects.
• The remedial action taken.

 

DATA RETENTION

Hortiwool will not retain information indefinitely.

Personal information relating to customers will be held for a maximum of 7 years after their last transaction and/or contact. For individuals who make an enquiry but do not become customers the data will be held for as long as is necessary to ensure effective communication, up to a maximum of 2 years from that individual’s last communication.

In some cases data will be deleted before these deadlines, in line with an individual’s rights under data protection law.

 

OTHER SITES

Where Hortiwool links to other companies, people or entities via our website, social media or other means please be aware that these third-parties will have their own privacy policies in place and Hortiwool does not have control of any data they may collect from you.

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

 

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hello@hortiwool.com or by mail using the details provided below:

Hortiwool
Units 1A & 1B, Tungsten Park,
Opal Way,
Stone Business Park,
Stone,
Staffordshire.
ST15 0SS
United Kingdom