Privacy Policy

Section 01Introduction

1.1We are committed to protecting the privacy of everyone who visits our website or uses our services. This policy explains what personal data we collect, why we collect it, and what rights you have over it.

1.2By using our website you agree to our use of cookies as set out in this policy. Where required, we will ask for your consent before setting non essential cookies.

1.3Our website includes privacy controls that affect how we process your personal data. You can use these to say whether you want to receive marketing communications and to limit what information about you is published.

Section 02How We Use Your Personal Data

2.1This section sets out the categories of personal data we may process, where that data comes from when we did not collect it directly from you, why we process it, and the legal basis we rely on.

2.2Usage data. This may include your IP address, location, browser type and version, operating system, referral source, and how you use our website, such as pages viewed, time on site and navigation paths. It comes from our analytics tracking system and is used to understand and improve our website and services. Legal basis: our legitimate interest in monitoring and improving our website.

2.3Account data. This may include your name and email address, from you or your employer. It is used to run our website and services, keep them secure, maintain backups, and communicate with you. Legal basis: our legitimate interest in properly administering our business.

2.4Profile data. This may include your name, business address, phone number and email address, used to enable and monitor your use of our website and services. Legal basis: our legitimate interest in properly administering our business.

2.5Service data. This may include your name, email address, contact number and address, provided by you or your employer in the course of using our services. It is used to deliver our services and communicate with you. Legal basis: our legitimate interest in administering our business, or performance of a contract with you.

2.6Publication data. Information you post for publication on our website or through our services, used to enable that publication. Legal basis: our legitimate interest in administering our business, or performance of a contract with you.

2.7Enquiry data. Information in any enquiry you send us about our products or services, used to offer, market and sell relevant products or services to you. Legal basis: consent.

2.8Transaction data. Details of purchases you make with us, including contact and payment details, used to fulfil orders and keep proper records. Legal basis: performance of a contract, and our legitimate interest in administering our business.

2.9Notification data. Information you give us to subscribe to email updates or newsletters, used to send you those updates. Legal basis: consent, or performance of a contract.

2.10Correspondence data. The content and metadata of any communication you send us, used to respond to you and keep proper records. Legal basis: our legitimate interest in administering our business and communicating with users.

2.11We may also process any personal data described in this policy where necessary to establish, exercise or defend legal claims. Legal basis: our legitimate interest in protecting our legal rights and those of others.

2.12We may process your personal data where necessary to comply with a legal obligation, or to protect your vital interests or those of another person.

Section 03Sharing Your Personal Data

3.1We may share your personal data with other companies in our group, where reasonably necessary for the purposes set out in this policy.

3.2We may share your personal data with our insurers and professional advisers, where reasonably necessary for obtaining insurance, managing risk, getting professional advice, and managing disputes.

3.3Payments are handled by our payment services provider, Square. We share transaction data with them only to the extent needed to process payments, refunds, and related queries. Their privacy policy is available at squareup.com.

3.4We may pass your enquiry data to selected third party suppliers so they can contact you about relevant goods or services. Each third party acts as its own data controller for that data, and will give you its own privacy policy when it contacts you.

3.5We may also disclose your personal data where necessary to comply with a legal obligation, or to protect your vital interests or those of another person.

Section 04Retaining and Deleting Personal Data

4.1We do not keep personal data for longer than necessary for the purpose it was collected for.

4.2Your name, email address and phone number are retained for as long as you remain a client, and deleted from our systems after that.

4.3Where we cannot set a fixed retention period in advance, we decide it based on our legitimate business needs.

4.4We may retain your personal data for longer where necessary to comply with a legal obligation, or to protect your vital interests or those of another person.

Section 05Security of Personal Data

5.1We take appropriate technical and organisational steps to protect your personal data against loss, misuse or unauthorised alteration.

5.2Your data is stored on secure servers, computers and mobile devices, and in secure manual filing systems where applicable.

5.3The following data is stored in encrypted form: your name, contact details, passwords, and cardholder data.

5.4Data you send us relating to enquiries or transactions is protected using encryption technology in transit.

5.5No transmission over the internet is completely secure, and we cannot guarantee the security of data sent this way.

5.6You are responsible for keeping your account password confidential. We will never ask for your password, other than when you log in to our website.

Section 06Amendments

6.1We may update this policy from time to time by publishing a new version on our website.

Section 07Your Rights

7.1In this section we summarise your rights under data protection law. Some of these rights are complex, so this is a summary rather than a full legal explanation. Your principal rights are:

• athe right to access your data;
• bthe right to have inaccurate data corrected;
• cthe right to have your data erased in certain circumstances;
• dthe right to restrict how we process your data;
• ethe right to object to our processing;
• fthe right to data portability;
• gthe right to withdraw consent; and
• hthe right to complain to a supervisory authority.

7.2Access. You can ask us to confirm whether we hold personal data about you and, if so, to provide a copy along with details of why we process it, what categories are involved, and who we share it with. The first copy is free and further copies may carry a reasonable fee. We may ask for proof of identity before releasing this information, and may withhold information to the extent the law allows.

7.3Correction. You can ask us to correct inaccurate data or complete incomplete data.

7.4Erasure. You can ask us to delete your data in certain circumstances, for example where it is no longer needed, you withdraw consent, or it was processed unlawfully. This right does not apply where we need to keep processing for reasons such as freedom of expression, legal compliance, or legal claims.

7.5Restriction. You can ask us to restrict processing while we resolve a dispute about accuracy, lawfulness, or an objection you have raised. Where processing is restricted, we may still store the data but will not otherwise process it without your consent, except for legal claims, protecting the rights of others, or important public interest reasons.

7.6Objection. You can object to processing based on our legitimate interests, or for direct marketing, including profiling for direct marketing. If you object to direct marketing, we will stop that processing. For other objections, we will stop unless we have compelling grounds that override your interests, or need to continue for legal claims.

7.7Portability. Where processing is based on consent and carried out by automated means, you can ask to receive your data in a structured, commonly used, machine readable format, except where this would adversely affect the rights of others.

7.8Withdrawing consent. Where processing is based on consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

7.9Complaints. If you believe our processing breaches data protection law, you can complain to the Information Commissioner's Office, the UK's supervisory authority for data protection.

7.10You can exercise any of these rights by giving us written notice.

Section 08Third Party Websites

8.1Our website contains links to third party websites.

8.2We have no control over, and are not responsible for, the privacy policies or practices of those third parties.

Section 09Personal Data of Children

9.1Our website and services are aimed at businesses, not individuals.

9.2If we become aware that we hold personal data belonging to someone under 18, we will delete it.

Section 10Updating Your Information

10.1Please let us know if any personal information we hold about you needs to be corrected or updated.

Section 11About Cookies

11.1A cookie is a small file, containing a unique identifier, that a website sends to your browser and that your browser stores. The identifier is sent back to the website each time you request a page.

11.2Cookies may be persistent, meaning they are stored until a set expiry date unless you delete them sooner, or session based, meaning they are deleted when you close your browser.

11.3Cookies do not usually identify you personally on their own, but any personal information we hold about you may be linked to data stored in cookies.

Section 12Cookies We Use

12.1We use cookies for the following purposes:

• aAuthentication. To recognise you as you move around our website.
• bSecurity. As part of the measures we use to protect accounts and prevent fraudulent use of login credentials.
• cAnalytics. To understand how our website is used, through Google Analytics.

Section 13Cookies Used by Our Service Providers

13.1Our service providers may also set cookies when you visit our website.

13.2We use Google Analytics to understand how our website is used. Google's privacy policy is available at google.com/policies/privacy.

Section 14Managing Cookies

14.1Most browsers let you view, block and delete cookies. How you do this varies by browser:

• aChrome
• bFirefox
• cSafari
• dEdge

14.2Blocking all cookies may affect how well parts of our website work.

Section 15Our Details

15.1This website is owned and operated by OJE Technology Limited.

15.2We are registered in England and Wales, company number 09943955.

15.3You can contact us:

• aby post, to our registered office;
• busing our website contact form;
• cby phone, on the number published on our website; or
• dby email, using the address published on our website.

Section 16Data Protection Registration

16.1We are registered as a data controller with the Information Commissioner's Office. Our registration number is ZB669107.

Section 17Data Protection Officer

17.1Our data protection officer is Oliver Kemp, contactable using the details in section 15.