Privacy and Security

Discount Displays Limited is the data controller of the information you provide. Discount Displays Limited is a company registered in England and Wales with registration number 3927116. Our registered office address is 31-35 Wortley Road, Croydon, Surrey, CR0 3EB.

When you provide us with your personal data you are showing that you trust us with your data and to use it responsibly and safely. Our commitment to keeping this trust is of utmost importance and this Privacy Policy outlines just how seriously we take this responsibility, the processes we have in place when collecting and handling your data and most importantly your rights regarding this data.

Our privacy policy may change from time to time, this policy was last updated on 21st May 2018.

We collect certain information from you when you use our website, contact us by telephone, our social media channels or email us. Some of this information is collected automatically, such as IP address and data stored in cookies. Other information is given to us by you, such as a delivery address when placing an order.

We only collect and process your information for legitimate business interests, legal requirements or contractual obligations. More information on what grounds we collect your data can be found in the Basis For Collecting Your Personal Information section below.

Here you can find a rundown of the different types of personal information we process and how we use it.

• Personal information such as name, address, phone number and email address. This could be given when registering for an account, purchasing a product, filling out a contact form or entering a competition. We will only use this data to send marketing emails to users that purchase a product or sign up to our mailing list. If giving your email address at the checkout, we may use this to send you an email enabling you to checkout easily if you leave the site.
• Payment details. These are used when purchasing a product. We use secure payment processors and security measures throughout our site and server.
• Your contact history such as emails, messages via social media and live chat transcripts. These are used to help resolve your problems, to be able to follow up at a later time if necessary and to help optimise our customer services.
• Other. Such as leaving a review, completing a survey or requesting a quote for a product. We keep this data to a minimum in order to contact you where applicable and analyse the results of our marketing efforts.

We collect this information to ensure we can carry out the functional and legal requirements of our business operations. This includes creating an account for you where requested, engaging in you with communications you have initiated, processing payment information and working with our couriers to ensure your orders get to the right destination.

We also use it to improve the user experience of the site, to offer a personalised user experience and to deliver more relevant marketing communications where applicable.

• Device information such as your IP address, log data and cookie data. We use both internal tracking technology and third party vendors to handle this information.
• On page information such as which products you have looked at, what search terms you have used and which products you have added to the basket. This data is linked to the device information listed above and not to any identifiers such as name or physical address.

We use this data in order to be able to deliver the best possible shopping environment in a safe and easy to use environment. Device and page information is used to help us identify issues with the website, analyse what type of devices are using our website and look at data on the individual page level.

With this information we then screen for potential fraud, make improvements to the site, help train our staff and offer a personalised shopping experience to our users.

In terms of using this data to offer a personalised experience this could include showing relevant promotions or products based on the previous pages that have been looked at and showing prices including or excluding tax based on your previous selection. We also use third party vendors to present targeted advertising when browsing other websites.

This information also helps us comply with certain legal requirements and ensure any contractual obligations between us and the user are being met.

Under GDPR we must have a legal basis for doing so and the language in the regulations describes what these are. Below are some of the different bases we use to determine what personal information to process and what these mean in context.

Legitimate Interests. This is the main basis we use when processing your personal information. Legitimate interests means processing data that is necessary to achieve the commercial, individual or societal interests of the parties involved. It only applies when the same result could not be achieved in a less intrusive way, and we do everything we can to ensure this is the case.

When weighing up if a certain type of data processing is a legitimate interest we perform a balance test that compares our interests against your interests to decide if it is something you would reasonably expect us to do in a commercial operation.

If you do not want us to process your data under the legitimate interests listed below, you have the right to object. Please take a look at Your Rights section for more information. Please note that if we can't process your personal information, we may not be able to fulfill some aspects of our operations.

During our assessments, we identified the following as legitimate interests for processing your personal information:

• Core services such as taking payment details.
• Being able to deliver purchased products to the correct address.
• Being able to contact you if there are any problems with your order.
• Sending you a marketing email if you have purchased something from us.
• The ability to engage in a live chat with you.
• Promoting our products on our website and elsewhere on the internet.
• Giving you the ability to restore a shopping cart easily.
• Personalisation of your shopping experience.
• Tracking user behaviour and site traffic to enhance the customer experience.

Contractual. As an ecommerce store, when you purchase a product from us we enter a contract between buyer and seller. This contract ensures you are protected by various safeguards and legislations regarding buying goods. In order for us to keep up the side of our contract, namely delivering the products to you, we need to process certain personal information that you provide to us when purchasing. An obvious example of this is using your address to deliver the product to you.

Legal. There are certain laws that mean personal information would have to be kept in order to adhere to them. An example of this is to investigate any warranty claims or to notify you of a product recall.

We share your personal information in limited ways with partners who have been subjected to our rigorous screening methods to ensure they have the same high level of data processing standards as we do. We only share data that helps to provide a better customer experience and this information can not be used by the third party for their own promotional activities.

Here are the ways your personal information may be shared with third parties:

• Delivery information provided to our couriers and suppliers to ensure that any product you purchase can be delivered to you.
• Our live chat provider when you engage in a chat with one of our representatives.
• When we are legally obliged to do so e.g legal request.
• For email marketing campaigns. This data is strictly limited to as few pieces of data as possible to deliver an effective marketing campaign.
• For web traffic analytics, such as Google Analytics, to help us understand how our customers use the site. This includes, but isn't limited to your IP address and demographic information. You can opt out of Google Analytics via the following link: https://tools.google.com/dlpage/gaoptout
• For targeted advertising on other websites, currently the third parties we use are Google's DoubleClick and Bing Ads. You can opt out of these services by going to the providers website.
• Payment providers such as PayPal and SagePay. This is used when a payment has been made for a purchase. In the case of PayPal, you will be directed to their website to provide payment details. Your use of their service is subject to their own privacy policy.
• We may anonymise your data and share it with third parties, such as analytics companies. You will not be able to be identified in any way by this type of data sharing.

We will never sell your information or otherwise provide it to a third party that doesn't fall under the uses listed above. We will always ensure we comply with any and all applicable data protection laws including the General Data Protection Regulation (GDPR).

From time to time your personal information may be transferred outside of the European Economic Area (EEA). An example of this would be Google Analytics data that was sent to a server in the United States.

If your personal information is transferred outside of the EEA it will be subject to any applicable laws of the country it resides in. We will always ensure to the best of our ability that any country outside the EEA it is transferred to has laws that offer the same level of protection as if it were inside the EEA as outlined by the European Commission.

We will keep your personal records as long as you have an account with us, or if you have made a purchase with us as long as is necessary to ensure we can fulfill the purpose it was collected for. This would be one of the ways outlined in the Your Personal Information & How We Use It section.

If you call our phone line but do not make a purchase and have not requested a call back or further information we will not keep your data on record.

If you email us, we will retain your email for a period of three years. This will be to respond to any questions or complaints you may have. We will not store your data for other marketing purposes unless you have requested to do so, e.g to be part of our marketing list.

For data kept on our marketing mailing lists, we will remove any personal information where there has been no interaction with an email for two years. You may unsubscribe or ask us to be removed from this list at any time. We will keep your email address on record when unsubscribing in order to prevent us emailing you again.

We may also keep some parts of your information in order to meet certain legal or regulatory requirements.

Once the retention period for your data has ended we will delete the information from the necessary sources or anonymise it so you can not be identified in any way.

You have rights relating to the personal information we hold about you. These rights are designed to put you in control of your personal information, enabling you to access it, update it and remove it quickly and easily. You can find an overview of your rights listed below:

• You have the right to know what personal information we store in relation to you and the right to access this information. This is known as a 'Data Subject Access Request'. If your request falls under our obligations we will provide it to you within 30 days from your request. We may ask for proof of identity or information about your interaction with us to ensure we are giving information to the correct party.
• You have the right to know how your personal information is being used. This is covered within this Privacy Policy.
• You have the right to correct any information that is not incorrect, such as an old address.
• You have the right to ask us to delete any personal information where it is no longer required for the function it was intended to carry out.
• You have the right to stop your personal data from being used to send direct marketing. In regards to email marketing, the quickest way to do so if by clicking the unsubscribe button in the footer of an email. Please note we will continue to store your email address to ensure no more emails are sent to that address.
• You have the right to withdraw any consent you have given us in relation to processing your data at any time.
• You have the right to ask us to stop processing your personal information on the basis of our listed legitimate interests.
• You have the right to complain to the data protection regulator regarding how we process your personal information. You can find details on how to do so in the How To Contact the The Information Commissioner's Office section of this policy.

To exercise any of these rights please get in contact with us using the details listed in the How To Contact Us section below.

If you are unhappy with the way in which your data has been processed by us or the way we have dealt with your requests regarding that data, it is your right to be able to make a complaint to the Information Commissioner's Office (ICO). For more information please visit: https://ico.org.uk/

Our customers, and anybody who uses our website in fact, are at the heart of every decision we make. Your feedback helps us to make sure we are delivering the best possible customer service. If you have any questions or comments about our privacy policy or anything else relating to how we use your personal data, please don't hesitate to get in touch.

You can do so by emailing us at sales@discountdisplays.co.uk, calling us on 020 8664 5660 or writing to us at 31-35 Wortley Road, Croydon, Surrey, CR0 3EB.