POLICY

Privacy & Cookies

Introduction

At Old Whyly, we value and respect your privacy. This Privacy and Cookie Policy explains how we collect, use, share, and protect your personal data when you visit our website (www.oldwhyly.co.uk) or engage with our services. We are committed to ensuring that your privacy is protected and that we process your personal data in compliance with applicable data protection laws.

By using our website or providing us with your personal data, you agree to the terms outlined in this policy. If you do not agree with the terms, please do not use our services.

1. Who We Are

Mrs. S.M.A. Burgoyne, trading as Old Whyly, is the data controller responsible for the collection and processing of your personal data.

Contact Details:

•Name: Mrs. S.M.A. Burgoyne (Old Whyly)

•Email: [email protected]

•Address: Old Whyly, East Hoathly, East Sussex, BN8 6EL

2. What Data We Collect and Why

We collect various types of personal data to provide and improve our services. Below is an overview of the categories of data we process, the purposes for processing, and the legal grounds for processing:

Communication Data: This includes any communication that you send to us, such as emails, phone calls, social media messages, or online forms. We use this data to respond to inquiries, maintain records, and protect our legal rights. The legal basis for this processing is our legitimate interests in communication and record-keeping.

Customer Data: This includes personal details like your name, contact information, purchase history, and payment details. We use this data to process orders, deliver services, and maintain financial records. The legal basis for this processing is the performance of a contract with you.

User Data: This includes data about how you interact with our website, such as browsing activity, the pages you visit, and any content you post. We use this data to improve the website experience and ensure its functionality. The legal basis for this processing is our legitimate interests in maintaining and optimising our website.

Technical Data: This includes technical information like your IP address, device type, browser type, and location data. We use this data to improve website security, enhance functionality, and provide tailored content. The legal basis for this processing is our legitimate interests in maintaining website performance and security.

Marketing Data: This includes your preferences for receiving marketing communications. We process this data to send you relevant offers, promotions, and advertisements based on your preferences. The legal basis for this processing is your consent or our legitimate interest in growing our business.

3. How We Collect Your Data

We collect your personal data in several ways:

•Directly from you: When you complete forms on our website, send us emails, or engage with us over the phone.

•Automatically: Through cookies and similar tracking technologies that collect data about your interactions with our website.

•From third parties: We may receive data from service providers, such as payment processors or social media platforms, to complete transactions and improve your experience.

For more information on how we use cookies, please refer to our Cookie Policy section below.

4. Marketing Communications

We may send you marketing communications related to our services and products. The legal grounds for processing your data for marketing purposes are either your consent or our legitimate interest in growing our business.

•If you have made a purchase or requested information from us, we may contact you about similar products or services unless you opt out.

•You can opt-out of receiving marketing emails at any time by following the unsubscribe instructions in our communications or contacting us directly at [email protected].

•We will not share your data with third parties for marketing purposes without your explicit consent.

5. Sharing Your Data

We may share your personal data with third parties in the following circumstances:

Service Providers: We may share your data with third-party service providers who help us operate our website and provide services to you, such as IT support, payment processors, or delivery services.

Professional Advisers: We may share your data with lawyers, accountants, or other professionals who provide us with advice and support.

Government Authorities: We may share your data with regulatory bodies or government agencies if required by law.

Business Transfers: In the event of a business merger, acquisition, or sale, your personal data may be transferred to the relevant third party.

We ensure that all third parties who process your data are compliant with data protection laws and have appropriate safeguards in place.

6. International Transfers

Some of our third-party service providers may be based outside the European Economic Area (EEA), meaning that your personal data could be transferred internationally. We take steps to ensure that any data transfers outside the EEA comply with data protection laws and offer an adequate level of protection for your personal data.

We may use safeguards such as Standard Contractual Clauses or rely on services certified under the EU-US Privacy Shield Framework when transferring your data internationally.

7. Data Security

We implement technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These measures include encryption, secure servers, and access controls. Only authorised personnel who need the data to perform their duties can access your information.

In the event of a data breach, we will notify you and any relevant authorities as required by law.

8. Data Retention

We will retain your personal data only for as long as necessary to fullfill the purposes for which it was collected, including legal, regulatory, or reporting requirements. For example, we may need to keep customer data for up to six years for tax purposes.

Once the data is no longer required, we will securely delete or anonymise it.

9. Your Rights

You have several rights regarding your personal data under data protection laws. These include:

•The right to access your personal data.

•The right to correct any inaccurate or incomplete data.

•The right to request the deletion of your data.

•The right to restrict or object to processing.

•The right to request data portability.

•The right to withdraw consent (where applicable).

If you would like to exercise any of these rights, please contact us at [email protected].

We aim to respond to all requests within one month, but if the request is complex, we may extend this period and notify you accordingly.

10. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or applications. We do not control these external sites and are not responsible for their privacy practices. We encourage you to review their privacy policies before interacting with them.

11. Cookies

We use cookies to enhance your experience on our website, analyse usage patterns, and deliver tailored content. Cookies are small text files stored on your device when you visit a website.

There are two main types of cookies:

Session Cookies: Temporary cookies that are deleted when you close your browser. These cookies are used to track your movements across pages and ensure you stay logged in during your visit.

Persistent Cookies: These cookies remain on your device after your session ends and are used to remember your preferences and actions when you return to the website.

We also use cookies to track website performance and gather statistical data (e.g., Google Analytics). You can manage your cookie preferences through your browser settings. However, if you block certain cookies, some parts of our website may not function correctly.

For more detailed information on the types of cookies we use and how to manage your preferences, please refer to our Cookie Policy.

12. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website and notify you of any significant changes. Please review this policy periodically.

13. Contact Us

If you have any questions or concerns about how we handle your personal data, please contact us at:

•Email: [email protected]

•Address: Old Whyly, East Hoathly, East Sussex, BN8 6EL

By using our website or providing your personal data, you acknowledge that you have read and understood this Privacy and Cookie Policy.