Privacy Policy

Last updated September 2021

Introduction

This is the privacy policy of The Candle Bothy of Double Door Studios, 7 Ward Road, Dundee DD1 1LP (“we” or “us”).
This privacy policy applies whether you use our website, https://thecandlebothy.co.uk (“Website”) or purchase goods from us (“Products”) and explains how we use the personal data we collect from you.
We comply with the EU law retained version of the General Data Protection Regulation (2016/679), and the UK Data Protection Act 2018 (the “Data Protection Legislation”). If any of these laws are replaced or superseded, we will also comply with that.
Our Website may contain links to third party websites that are not covered by this privacy policy. We therefore ask you to review the privacy statements of other websites and applications to understand their information practices.
We can update this privacy policy from time to time as laws change or as our Website changes. If we make material changes to this privacy policy, and we need your consent to those changes, we will contact you by email to do so.
If you do not accept this privacy policy, please do not use our Website or purchase Products from us.

What data we may collect

Personal data, or personal information, is any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). Most of the personal data we collect is provided by you. We may collect, use, store and transfer different kinds of personal data about you when you engage with us. Whenever we collect personal data about you, we must have a legal ground to do so.

Identity and contact information when you contact us (personal data)

Includes:
• Name
• Email address
• Telephone number
We collect this information when you contact us in respect of your order or through our contact form and allows us to contact you in respect of your order or your contact form submission.
Our lawful basis for this is to perform our contract with you and that you have consented to the collection of this information.
If you choose not to provide this information, we will be unable to discuss your order with you or get back to you on your query.

Identity and contact information when you sign up to our newsletter, enter a competition/ promotion/ survey or engage with us by social media
(personal data)

Includes:
• Name
• Email address
• Telephone number
We collect this information when engage with us so we can contact you.
Our lawful basis for this is that you have consented to the collection of this information.
Our lawful basis for this is that you have provided your consent. You can withdraw your consent at any time by contacting us at hello@thecandlebothy.co.uk

Technical data

Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our Website. This information is necessary for us to perform our contract with you, i.e. to give you access to the service our Website provides.

Analytics

Includes third-party analytics services (such as Google Analytics) to evaluate your use of our Website, compile reports on activity, collect demographic data, analyse performance metrics, and collect and evaluate other information relating to our Website and internet usage. These third parties use cookies and other technologies to help analyse and provide us the data. By accessing and using our Website, you consent to the processing of data about you by these analytics providers in the manner and for the purposes set out in this privacy policy. This information is necessary for our legitimate interest to present relevant content, products and services to you.

How we store your data

We store all of your personal data on our servers within the United Kingdom.
We may transfer your collected data to storage outside the European Economic Area (EEA) or the United Kingdom. It may be processed outside the EEA or the United Kingdom to fulfil your order and to receive Our Services and deal with payment. If we do store or transfer data outside the EEA or the United Kingdom, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA or the United Kingdom.

This means that sometimes we may need to use legally binding contractual terms between us and any third parties we engage with and the use of the EU-approved Model Contractual Arrangements.
Data security is of great importance to us, and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected through our Website. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We will still be responsible for protection of your personal data, even where we have transferred it outside the EEA or the United Kingdom.
We regularly review our data retention obligations to ensure we are not retaining data for longer than we are legally obliged to.

Your data protection rights

We would like to make sure you are aware of your data protection rights. Every user is entitled to the following:

The right to access

– You have the right to request for copies of your personal data. We may charge you a small fee for this service.

The right to rectification

– You have the right to request that we correct any information you believe is inaccurate. You also have the right to request for us to complete the information you believe is incomplete.

The right to erasure

– You have the right to request that we erase your personal data, under certain conditions.

The right to object to processing

– You have the right to object to us processing of your personal data, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us by emailing: hello@thecandlebothy.co.uk

Privacy policies of other websites

Our Website contains links to other websites. Our privacy policy applies only to our Website, so if you click on a link to another website, you should read their privacy policy.

How to contact us

If you have any questions about our privacy policy, the data we hold about you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email us at: hello@thecandlebothy.co.uk
Or write to us at: The Candle Bothy, Double Door Studios, 7 Ward Road, Dundee, DD1 1LP

How to contact the appropriate authority

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so we ask you please contact us in the first instance.