GDPR
GDPR Policy for Black Isle Silver Jewellery
Black Isle Silver is committed to protecting the privacy and personal data of its website users and customers. This GDPR policy outlines our approach to data protection in compliance with the General Data Protection Regulation (GDPR) and applies to all personal data collected, processed, and stored by Black Isle Silver. This policy explains how we collect, use, disclose, and protect personal data in accordance with applicable data protection laws and regulations.
-
Data Controller
The data controller responsible for the collection, processing, and storage of personal data on the Black Isle Silver Jewellery website is: Email: info@blackislesilver.com Tel: 01381 620046 Mobile: 07515006874
.Lawful Basis for Data Processing
We will only process personal data when we have a lawful basis to do so. The lawful bases for processing personal data may include:
a. Consent: We may process personal data based on the consent provided by the individual for one or more specific purposes. b. Contractual Necessity: We may process personal data to fulfil a contract or take steps requested by the individual prior to entering into a contract. c. Legal Obligation: We may process personal data to comply with legal obligations imposed on us. d. Legitimate Interests: We may process personal data based on legitimate interests pursued by us or a third party, provided that these interests are not overridden by the individual's rights and interests.
-
Personal Data Collection and Use
We collect and process personal data for specific purposes, which may include:
a. Account Registration: Order Processing: When you place an order, we collect personal data necessary for processing, fulfilling, and delivering your order, including your name, billing address, shipping address, contact information, and payment details. c. Communication: We may collect personal data when you contact us via email, contact forms, or other means of communication, and use it to respond to your inquiries, provide support, or address any concerns. d. Marketing and Promotions: With your consent, we may use your personal data to send you marketing communications, including newsletters, special offers, and promotions. You can opt-out of receiving marketing communications at any time. e. Analytics: We may collect non-personal data, such as website usage statistics and analytics, to improve our website, products, and services.
-
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected unless a longer retention period is required by law. The retention period may vary depending on the type of personal data and the purposes of processing.
-
Data Security
We implement appropriate technical and organizational measures to ensure the security of personal data and protect it against unauthorised access, loss, or alteration. These measures include, but are not limited to, encryption, access controls, secure server infrastructure, and regular security assessments.
-
Data Disclosure and Transfer
We may disclose personal data to third parties in the following circumstances:
a. Service Providers: We may engage third-party service providers to perform certain functions on our behalf, such as payment processing, shipping, and marketing. These service providers have access to personal data necessary to perform their functions and are obligated to maintain the confidentiality and security of the data. b. Legal Compliance: We may disclose personal data if required to do so by law or in response to valid legal requests, such as court orders or government regulations.
-
Individual Rights
Under the GDPR, individuals have certain rights regarding their personal data. Black Isle Silver is committed to respecting these rights, which may include:
a. Right to Access: Individuals have the right to request access to their personal data and receive information about how it is processed. b. Right to Rectification: Individuals have the right to request the correction or updating of inaccurate or incomplete personal data. c. Right to Erasure: Individuals have the right to request the deletion of their personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected. d. Right to Restriction of Processing: Individuals have the right to request the restriction of processing their personal data in certain circumstances. e. Right to Data Portability: Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format and transmit it to another data controller. f. Right to Object: Individuals have the right to object to the processing of their personal data in certain circumstances, including direct marketing. g. Right to Withdraw Consent: Individuals have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights or for any inquiries regarding the processing of personal data, individuals should contact Black Isle Silver using the contact information provided in Section 1.
-
Changes to the GDPR Policy
Black Isle Silver may update this GDPR policy from time to time to reflect changes in applicable laws, regulations, or business practices. We will notify individuals of any material changes through our website or other appropriate means.
​
This GDPR policy for Black Isle Silver Jewellery Website is intended to provide an overview of how personal data is collected, used, and protected. It is important to read the full privacy policy available on our website to understand all the details regarding data processing and individual rights.
​
​
​
​