Privacy Policy
Last updated September 2021.
Introduction
This is the privacy policy of The Candle Bothy of Double Door Studios, 7 Ward Road, Dundee DD1 1LP (“we” or “us”).
This privacy policy applies whether you use our website, https://thecandlebothy.co.uk (“Website”) or purchase goods from us (“Products”) and explains how we use the personal data we collect from you.
We comply with the EU law retained version of the General Data Protection Regulation (2016/679), and the UK Data Protection Act 2018 (the “Data Protection Legislation”). If any of these laws are replaced or superseded, we will also comply with that.
Our Website may contain links to third party websites that are not covered by this privacy policy. We therefore ask you to review the privacy statements of other websites and applications to understand their information practices.
We can update this privacy policy from time to time as laws change or as our Website changes. If we make material changes to this privacy policy, and we need your consent to those changes, we will contact you by email to do so.
If you do not accept this privacy policy, please do not use our Website or purchase Products from us.
What data we may collect
Personal data, or personal information, is any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). Most of the personal data we collect is provided by you. We may collect, use, store and transfer different kinds of personal data about you when you engage with us. Whenever we collect personal data about you, we must have a legal ground to do so.
Type of data
Purpose/Activity
Lawful Basis
Identity and contact information when you contact us
(personal data)
Includes:
Name
Email address
Telephone number
We collect this information when contact us in respect of your order and allows us to contact you in respect of your order.
Our lawful basis for this is to perform our contract with you and that you have consented to the collection of this information.
If you choose not to provide this information, we will be unable to grant you discuss your order with you.
Information provided when you place an order on our Website (order and payment details)
Includes:
Name
Email address
Telephone number
Delivery address
Billing address
When you place an order on our Website, we collect payment card details through our third party payment provider, currently Stripe and Stripe’s privacy policy will apply to the payment you make. We do not have sight of your payment card details.
Our lawful basis is to fulfil our contract with you.
When we process your order, we may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases.
Our lawful basis is that we have a legal obligation or legitimate interest in doing so.
Identity and contact information when you sign up to our newsletter, enter a competition/ promotion/ survey or engage with us by social media
(personal data)
Includes:
Name
Email address
Telephone number
We collect this information when engage with us so we can contact you.
Our lawful basis for this is that you have consented to the collection of this information.
Our lawful basis for this is that you have provided your consent. You can withdraw your consent at any time by contacting us at hello@thecandlebothy.co.uk
Technical data
Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our Website.
This information is necessary for us to perform our contract with you, i.e. to give you access to the service our Website provides.
Cookies data
Like many websites, we use "cookies" to enhance your experience and gather information about visitors and visits to our Website. Please refer to the "Do we use 'cookies'?" section below for information about cookies and how we use them and what kind.
This information is necessary for us to perform our contract with you, i.e. to give you access to the service our Website provides.
We also need this information to study how you use our Website, in order to improve and develop the services we provide, and better inform our marketing strategies.
Marketing and communications data
Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
This information is necessary for our legitimate interest to present relevant content, products and services to you (only where you have provided your consent that we do so).
Analytics
Includes third-party analytics services (such as Google Analytics) to evaluate your use of our Website, compile reports on activity, collect demographic data, analyse performance metrics, and collect and evaluate other information relating to our Website and internet usage. These third parties use cookies and other technologies to help analyse and provide us the data. By accessing and using our Website, you consent to the processing of data about you by these analytics providers in the manner and for the purposes set out in this privacy policy.
This information is necessary for our legitimate interest to present relevant content, products and services to you.
How we store your data
We store all of your personal data on our servers within the United Kingdom.
We may transfer your collected data to storage outside the European Economic Area (EEA) or the United Kingdom. It may be processed outside the EEA or the United Kingdom to fulfil your order and to receive Our Services and deal with payment. If we do store or transfer data outside the EEA or the United Kingdom, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA or the United Kingdom.
This means that sometimes we may need to use legally binding contractual terms between us and any third parties we engage with and the use of the EU-approved Model Contractual Arrangements.
Data security is of great importance to us, and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected through our Website. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We will still be responsible for protection of your personal data, even where we have transferred it outside the EEA or the United Kingdom.
We regularly review our data retention obligations to ensure we are not retaining data for longer than we are legally obliged to.
Your data protection rights
We would like to make sure you are aware of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request for copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request for us to complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to object to processing – You have the right to object to us processing of your personal data, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us by emailing: hello@thecandlebothy.co.uk
Cookies
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our Website, we may collect information from you automatically through cookies or similar technology.
How do we use cookies?
We cookies in a range of ways to improve your experience on our Website, including:
- Keeping you signed in
- Understanding how you use our Website
- To store information about your preferences, and so allow us to customise our site according to your individual interests.
- To speed up your searches.
What types of cookies do we use?
There are a number of different types of cookies, however, our Website uses:
- Functionality – We use these cookies so that we recognise you on our Website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
- Advertising – We use these cookies to collect information about your visit to our Website, the content you viewed, the links you followed and information about your browser, device, and your IP address. We sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our Website.
How to manage cookies
You can set your browser not to accept certain cookies. However, in a few cases, some of our Website features may not function as a result.
Privacy policies of other websites
Our Website contains links to other websites. Our privacy policy applies only to our Website, so if you click on a link to another website, you should read their privacy policy.
How to contact us
If you have any questions about our privacy policy, the data we hold about you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email us at: hello@thecandlebothy.co.uk
Or write to us at: The Candle Bothy, Double Door Studios, 7 Ward Road, Dundee, DD1 1LP
How to contact the appropriate authority
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so we ask you please contact us in the first instance.