BorrowBay Limited ('we’, 'us’ or 'our’) is committed to ensuring that your privacy is protected. We are what is known as a 'data controller’. This means that we are responsible for deciding how we hold and use personal information about you. This Privacy Notice sets out how we gather, use and protect any information that you give to us when you use this website. We may make changes to this notice from time to time by updating this page, so please check back occasionally to ensure that you are happy. In dealing with your personal data, we will comply with relevant legislation in force in England and Wales. This notice is effective from 3rd September 2019.
What personal information do we collect?
Depending on the type of contact we have with you (for example, whether you are registering with us, or you're just browsing) we might collect the following types of information:
- Identification of your past and current visits by finding and using cookies residing on your machine.
- Your name.
- Your contact information including an email address.
- Demographic information such as postcode, preferences and interests.
- Other information relevant to customer surveys and/or offers.
Why do we collect personal information?
We endeavour to keep the amount of personal information we request to a minimum at all times. Any data that's shared with us is used only to deliver an expected service. The specific situations in which we will process your personal information are listed below.
How we will use your personal information
Reasons for using your personal information
Contact details to speak with you, to arrange pick up, for example.
We cannot process your order without knowing where you will be staying and need a contact number for a smooth delivery.
Use your payment card details to charge you for your order.
To take payment for your order.
We will use technical information about you and your computer or device for the purpose of maintaining and improving our website and the quality and efficiency of our services.
To achieve our aim of ensuring our website and services are operated as effectively as possible.
We will retain records and details of our transactions with you including orders, returns and refunds and related information.
To allow us to comply with our legal and regulatory obligations in relation to record keeping and accounting.
Using your contact details for electronic direct marketing purposes.
If you are not an existing customer, we will only carry out this processing if you have provided opt-in consent as set out in more detail below.
Using your contact details for direct mailing marketing purposes.
The basis for this processing will be that it is necessary for our legitimate interest in ensuring that you are aware of the full range of products and services which we offer.
In respect of using your personal information for the purposes of direct marketing, we will give you the choice of providing your consent to this by opting in. If you have opted in, you have the right to later withdraw your consent at any time.
Understanding the types of personal information we collect
Depending on the contact we have with you we may collect one or more of the following types of information:
- Indirect Data
- Direct Data
Indirect Information Gathering
In no way does such a cookie give us access to your computer, or any information about you, other than the data you choose to share with us.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and it does not identify you individually.
Note also that third party cookies might be downloaded onto your device as a result of your use of this website. For example if you were to send information from this website to your social media account, your account may require the use of such cookies to enable this transfer to take place. These cookies are not under our control and we disclaim any responsibility for the acts of third party cookies.
Direct Information Gathering
Direct information gathering is done via registration records or direct contact via email or telephone or cookies. When you make a purchase, register with us, log in, or post comments on this website there is a minimum amount of information required for the website to function and to deliver the expected service. For example, for us to be able to create a customer account we require personal information as means of identification, e.g. an email address and password. Some of the cookies we use are non-essential, but allow the website to be personalised to you, for example remembering your information when you come to login and thereby increase the efficiency of your next visit.
How do we use the personal information we collect?
We use the information we collect to understand your needs and provide you with a better service, in particular for the following reasons:
- Internal record keeping.
- We may use the information to improve our products and services.
- To manage promotional offers available to you, offered by us.
- Where you have opted in to this, we may periodically send promotional emails about new products, special offers or other information which we think you may find interesting, using the email address which you have provided.
- Where you have opted in to this, from time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone or mail.
- We may use the information to customise the website according to your interests.
Our website may contain links to enable you to visit other websites of interest easily, for example, from our blog. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites, and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Who do we share your personal information with?
We don't sell, distribute or lease your personal information to third parties. We may use your personal information to send you promotional information about third parties which we think you may find interesting, if you have consented to this.
We may also share your data with the following categories of third-parties (who may process your data on our behalf or as data controllers in their own right) in order to allow us to provide our services to you. This will include, but may not be limited to, the following:
- Processors who we need to use in order to process and fulfill your orders such as payment services providers.
- Website hosting companies and other service providers who we need to use in order to run our business;
- Credit reference agencies, law enforcement and fraud prevention agencies for the prevention and detection of fraud;
- Other processors approved by you such as social media services (if you choose to link your accounts to us).
How you can control your personal information
Depending on your individual settings, many web browsers automatically accept some cookies, but you can modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the website. You are able to control our processing of this data by using the facility at YourOnlineChoices.
You may choose to restrict the collection, or use of your personal information in the following ways:
- If you are asked to supply your personal information on this website, look for the box that you can click to indicate that you want the information to be used by us for direct marketing purposes.
- If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to usor emailing us at firstname.lastname@example.org
How do we keep your personal information secure?
We take personal data security seriously and have both physical, electronic and procedural safeguards in place to protect the confidentiality and security of any information transmitted to us.
To safeguard the information delivered to us electronically, our website uses Secure Sockets Layer (SSL). SSL encrypts your credit/debit card number, name and address, which means that only we are able to decode your personal information. However, unfortunately, no data transmission over the Internet can be 100% secure. So whilst we will take all steps reasonably necessary to protect the security of your personal information, we cannot 100% guarantee it. Any information transmitted to our website is done at your own risk.
How to request or change the personal information we have stored
You have the right to request details of personal information which we hold about you under the relevant Data Protection legislation in force at the time. In the first instance we will happily provide a copy of the personal information we hold free of charge. We will try to respond to your request within one month, although it might take us longer if your request is complex.
When requested, we will provide the following:
- Confirm the personal data we hold about you
- Provide any supporting materials required
If you believe that any information we are currently holding about you is incorrect or incomplete, please write to us as soon as possible. We will promptly correct any information found to be incorrect.
Under the Rights of Rectification and Erasure (the right to be forgotten), you may ask us at any time to remove information you think is inaccurate or no longer necessary.
If you would like a copy of the information held about you, or to correct any personal information held, please write to email@example.com
How long do we keep personal information we have stored
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
This means that we retain your data for 5 years from the last date on which you logged onto our website unless we believe it is necessary to apply a different retention period as set out below.
We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. If, for any reason, you cease to be a customer of the company, we will retain and securely destroy your personal information in accordance with applicable laws and regulations in accordance with the timescales above.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
How to refine or unsubscribe from communications
You can choose to refine, or opt out of receiving marketing communications from us. If you'd like to refine the communications you receive then you can set your preferences by logging into your account.
If you no longer want to hear from us, you can click the 'Unsubscribe' link at the bottom of any email, or login and set your preferences in your account.
If you have questions about your personal data or our Privacy Notice, please contact us at firstname.lastname@example.org
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.