At A.E.Spink Ltd (“A.E.Spink” or “us” or “we” or “our”), we understand that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the personal data of everyone who visits our website and will only collect and use personal data in the ways that are described below, and in a manner that is consistent with our obligations and your rights under the relevant data protection legislation.
This policy (together with our Terms and Conditions and any other documents referred to in it) sets the basis on which we, A.E.Spink Ltd, company number 00214637 with registered address of Kelham Street, Doncaster, South Yorkshire, DN1 3RA and email address of firstname.lastname@example.org will process any personal data we collect from you, or which you provide to us, in the course of using our website (https://aespink.com/).
For the purposes of the Data Protection Act 2018 (“DPA’18”) we are the data controller.
2. Your information:
When you use our site, there are a number of ways in which you provide information and other data to us. By using this site, you consent to us processing and collecting this data, on the terms and for the reasons which are explained below.
The personal data of users of this site is processed under the General Data Protection Regulation (“GDPR”) and DPA’18 on the lawful bases of legitimate business interest. The legitimate interests pursued by us are to be able to provide a service to all of our website users and broader customers.
The provision of personal data is necessary to facilitate the provision of our services.
3. Information we may collect about you:
During the process of using our site, we may collect the following information about you:
- Your first name, last name, email address, phone number or any other information you provide whilst filling in any of our forms on our site.
- Your IP address.
- Your Internet Service Provider (“ISP”).
- Any referring or exit pages taking you to and from our site.
- Your web browser type and version.
- Date/time stamp.
- Click stream data.
- Any browser plug-ins.
- Your operating system.
4. How your personal data is used:
Our purposes for collecting your data are:
- To provide you with information or services you have requested via our website.
- To inform you of news and offers regarding our services.
- To personalise and tailor your experience on our website.
- To respond to your enquiries.
- To send you marketing and promotional emails from time to time if you have signed up receive them
- To diagnose and fix technology problems.
- To control unauthorised use or abuse of our site.
- To administer the site including for data analysis, testing, traffic monitoring, research, statistical and survey purposes.
If you do not wish to be contacted for marketing and promotional purposes please tick the relevant box on which you submit your data or unsubscribe using the unsubscribe function in the footer of the email. You can also unsubscribe at any time by sending an email to email@example.com.
5. How your data may be disclosed:
Third parties in which your personally identifiable information may be disclosed to include, but are not limited to:
- Google – https://policies.google.com/privacy?gl=uk
- MailChimp – https://mailchimp.com/legal/privacy/.
- Krystal – https://krystal.uk/terms#termsd
- Facebook – https://www.facebook.com/about/privacy.
- Talk to Media Ltd – https://talktomedia.co.uk/privacy-policy/.
- FastMail Pty Ltd – https://www.fastmail.com/about/privacy/.
- Instagram – https://help.instagram.com/519522125107875.
- YouTube – https://policies.google.com/privacy?hl=en.
- Twitter – https://twitter.com/en/privacy.
- LinkedIn – https://www.linkedin.com/legal/privacy-policy.
In order to learn how each of these third parties process your personal data please follow the relevant links above.
6. Data storage:
Our website is encrypted to RSA 256 bit.
All information you provide via this site is stored on our UK based secure servers and encrypted using TLS v1.2 and v1.3 with AES, ECDSA and RSA.
We take your privacy very seriously and will take all reasonable steps to protect your personal data, but please be aware that any data which you send to our site is sent at your own risk. No method of transmission over the interest or method of storage are 100% secure. Whilst we strive to use commercially acceptable means such as firewalls, password protected databases and encryption to protect your personal data against unauthorised use, disclosure or modification, it cannot be guaranteed that your data is absolutely secure.
Third party service providers may be used who may store or have access to your data.
In line with our internal procedures, and applicable laws and regulations, we operate a data retention period of 10 years from the date of last interaction.
After this period have passed, all personal data relating to the user will be reviewed and securely deleted/destroyed.
7. Processing of personal data of those below 13 years of age:
This site is not intended for use by anyone below the age of 13 years nor do we knowingly collect or solicit personally identifiable information from anyone under the age of 13. If you are under the age of 13, you may not attempt to use this site or send any information about yourself to A.E.Spink via this site or any other means.
In the event that we discover that we have unknowingly and unintentionally collected the personal data of a data subject under the age of 13, all information will be deleted/destroyed promptly. If you are a parent or legal guardian or a child under the age of 13 and believe that we hold any information from or about such child, please send us an email to firstname.lastname@example.org.
8. Data subject’s rights:
As a data subject, you have the following rights under GDPR and DPA’18:
a. The right of access.
You have the right under DPA’18 to access the information we hold about you. If you wish to exercise this right, please send your request to email@example.com.
b. The right to be forgotten.
You have the right under DPA’18 to have all of the information that we hold about you deleted in line with our statutory and legal responsibilities. If you wish to exercise this right, please send your request to firstname.lastname@example.org.
c. Right to rectification.
You have the right under DPA’18 to obtain the rectification of any inaccurate personal data that we store about you. If you wish to exercise this right, please send your request to email@example.com.
d. The right to data portability.
Under limited circumstances, you may have right under DPA’18 to request a copy of all the information we hold about you in a portable form. If you wish to exercise this right, please send your request to firstname.lastname@example.org.
e. The right to restriction of processing.
Under limited circumstances, you may have the right under DPA’18 to obtain the restriction of processing of your personal data. If you wish to exercise this right, please send your request to email@example.com.
We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the collection, processing, storage, or transmission of personally identifiable information that cannot be resolved between us and the individual.
10. Notices and provisions:
We may change this Policy from time to time. Any changes will be immediately posted on our website and you will be deemed to have accepted the terms of this Policy upon your first use of the site following the changes.
11. Contact us:
Should you not be satisfied with the process, conduct or response to a request you have made, or should you not be satisfied with our data protection practices in general, you have the right to complain directly to us or to the Information Commissioners Office (“ICO”) using the mailing address below:
Information Commissioner’s Office.