Privacy
INTRODUCTION
1.1 At Copper Bath Company, we hold a firm commitment to safeguarding the privacy of our esteemed website visitors and valued customers. This policy outlines how we handle your personal data in a transparent and responsible manner.
1.2 This policy applies when we act as the data controller for the personal data of our website visitors, meaning we determine how and why such data is processed.
1.3 Our website employs cookies, and we will request your consent for their usage when you first visit our site.
1.4 To give you control over your personal data, our website includes privacy controls. By utilizing these controls, you can indicate your preferences for receiving direct marketing communications.
1.5 Throughout this policy, “we,” “us,” and “our” refer to Copper Bath Company. You can find more information about us in Section 15.
HOW WE UTILISE YOUR PERSONAL DATA
2.1 In this section, we provide detailed insights into:
(a) the broad categories of personal data we may process;
(b) the reasons behind processing personal data; and
(c) the legal bases for such processing.
2.2 We may process data related to your usage of our website and services, known as “usage data.” This may encompass your IP address, geographical location, browser details, operating system, referral source, duration of visit, page views, website navigation paths, and information concerning the timing, frequency, and pattern of your service use. Our analytics tracking system is the source of this usage data. We process this information to analyze website and service usage, with our legitimate interests as the legal basis. This serves the purpose of enhancing our website and services.
2.3 “Account data” may be processed, including your name and email address. You provide this account data, and we process it for purposes such as website operation, service provision, security maintenance, database backups, and communication with you. Our legitimate interests support this processing, ensuring the proper administration of our website and business.
2.4 We may process information you post for publication on our website, referred to as “publication data.” This is processed to facilitate publication and administer our website and services, with our legitimate interests underpinning this processing.
2.5 Information related to inquiries about goods and/or services, known as “enquiry data,” may be processed. We use enquiry data to offer, market, and sell relevant goods and/or services to you, with your consent as the legal basis.
2.6 “Customer relationship data” includes information about our customer relationships, such as customer contact details. This data, sourced from you, supports managing customer relationships, communication, record-keeping, and promoting our products and services. We rely on our legitimate interests for processing this data.
2.7 “Transaction data” involves information concerning transactions, including purchases of goods and services from us or through our website. This data, which may include your contact details and transaction details, is processed to fulfill purchased orders, maintain transaction records, and properly administer our website and business. The processing is based on the performance of a contract between you and us, steps taken at your request to enter such a contract, and our legitimate interests.
2.8 You may provide “notification data” for subscribing to our email notifications and/or newsletters. We process this data to send you relevant notifications and newsletters, relying on your consent.
2.9 “Correspondence data” comprises information found in communications you send to us, including communication content and associated metadata. This includes data generated by our website’s contact forms. We process correspondence data for communication, record-keeping, and proper website and business administration. Our legitimate interests support this processing.
2.10 We may process any of your personal data identified in this policy when necessary for establishing, exercising, or defending legal claims. This can occur in court proceedings or administrative or out-of-court procedures, with our legitimate interests, protecting and asserting our legal rights, and the legal rights of others, as the legal basis.
2.11 Processing may occur for the purpose of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. Our legitimate interests, ensuring the proper protection of our business against risks, support this processing.
2.12 In addition to the specific purposes outlined in this Section 2, we may process your personal data when required to comply with a legal obligation, protect your vital interests, or the vital interests of another natural person.
2.13 We kindly request that you do not provide any other person’s personal data to us unless specifically prompted to do so.
SHARING YOUR PERSONAL DATA WITH OTHERS
3.1 We may disclose your personal data to any member of our corporate group, including subsidiaries, our ultimate parent company, and all its subsidiaries. We do so only to the extent reasonably necessary for the purposes explained in this policy.
3.2 Your personal data may be disclosed to our insurers and professional advisers when reasonably necessary for purposes such as obtaining or maintaining insurance, risk management, professional advice, and legal claims, both in court and administrative settings.
3.3 We may disclose your personal data to our suppliers or subcontractors when reasonably necessary for monitoring, maintaining, and analyzing website and service usage. This processing aligns with our legitimate interests in enhancing our website and services.
3.4 Financial transactions on our website are managed by Sage Pay Europe Ltd, our payment services provider. We share transaction data with them only to the extent necessary for processing payments, issuing refunds, and addressing payment-related inquiries or complaints. You can find information on the payment services provider’s privacy policies and practices at Sage Pay Privacy Policy.
3.5 Your enquiry data may be disclosed to selected third-party suppliers of goods and services listed on our website. This enables them to contact you with relevant offers, marketing, and sales information. Each third party acts as a data controller for the enquiry data we supply to them. They will provide you with their privacy policy when contacting you, governing their use of your personal data.
3.6 Additionally, we may disclose your personal data when necessary to comply with a legal obligation, protect your vital interests, or the vital interests of another natural person. Disclosure may also be required to establish, exercise, or defend legal claims, both in court and administrative settings.
INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA
4.1 In this Section 4, we provide information about circumstances in which your personal data may be transferred to countries outside the European Economic Area (EEA).
4.2 When transferring your personal data, we ensure that adequate safeguards are in place to protect your privacy and rights.
4.3 Our website’s hosting facilities are located in the UK. Transfers of data to these facilities are protected by appropriate safeguards.
4.4 Please be aware that personal data you submit for publication on our website or services may be accessible worldwide via the internet. We cannot prevent the use or misuse of such personal data by others.
RETAINING AND DELETING PERSONAL DATA
5.1 This Section 5 outlines our data retention policies and procedures, designed to ensure compliance with legal obligations regarding the retention and deletion of personal data.
5.2 Personal data processed for any purpose will not be kept longer than necessary for that purpose.
5.3 In some cases, we cannot specify in advance the retention periods for your personal data.
5.4 We will retain your personal data for the duration necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
5.5 Despite the provisions of this Section 5, we may retain your personal data if necessary to comply with a legal obligation, protect vital interests, or the vital interests of another natural person.
SECURITY OF PERSONAL DATA
6.1 We take appropriate technical and organizational measures to secure your personal data and prevent its loss, misuse, or alteration.
6.2 Your personal data is stored on secure servers, personal computers, mobile devices, and secure manual record-keeping systems.
6.3 Encryption technology protects data transmitted between your web browser and our web server or vice versa, enhancing the security of data related to your inquiries.
6.4 While we employ security measures, it’s important to note that the transmission of unencrypted (or inadequately encrypted) data over the internet inherently carries some risk. We cannot guarantee the security of data sent over the internet.
6.5 It is your responsibility to maintain a secure password. Please ensure your password cannot be easily guessed. We will never ask for your password, except during login to our website.
AMENDMENTS
7.1 We may periodically update this policy by publishing a new version on our website.
7.2 We recommend checking this page periodically to stay informed about any changes to this policy.
YOUR RIGHTS
8.1 In Section 8, we provide a summary of your rights under data protection law. While some rights are complex, please refer to relevant laws and regulatory guidance for a comprehensive explanation.
8.2 Your primary rights under data protection law include:
(a) the right to access;
(b) the right to rectification;
(c) the right to erasure;
(d) the right to restrict processing;
(e) the right to object to processing;
(f) the right to data portability;
(g) the right to complain to a supervisory authority; and
(h) the right to withdraw consent.
8.3 You have the right to confirmation about whether we process your personal data, and if so, access to your personal data along with specific additional information. This information includes details about the purposes of processing, the categories of personal data involved, and recipients of the data. We will provide the first copy free of charge, with additional copies subject to a reasonable fee.
8.4 You have the right to rectify any inaccurate personal data about you and complete any incomplete personal data concerning you, taking into account the purposes of processing.
8.5 In certain circumstances, you have the right to the erasure of your personal data without undue delay. Such circumstances include when personal data is no longer necessary for its initial purposes, consent is withdrawn, or the data was processed unlawfully.
8.6 You may have the right to restrict the processing of your personal data in certain situations, such as when the accuracy of personal data is contested, processing is unlawful, we no longer need the data for our purposes, or you have objected to processing.
8.7 You can object to our processing of your personal data when the legal basis is either the performance of a task carried out in the public interest or legitimate interests pursued by us or a third party. If you object, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.
8.8 You can object to our processing of your personal data for direct marketing purposes, including profiling for direct marketing. Upon objection, we will cease processing your data for this purpose.
8.9 In specific situations, you can object to our processing of your personal data for scientific or historical research purposes or statistical purposes, unless processing is necessary for public interest reasons.
8.10 If the legal basis for processing your personal data is consent or the performance of a contract, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used, and machine-readable format. However, this right does not apply if it adversely affects the rights and freedoms of others.
8.11 If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority responsible for data protection in your EU member state of habitual residence, place of work, or where the alleged infringement occurred.
8.12 If our processing of your personal information relies on consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing prior to withdrawal.
8.13 To exercise your rights concerning personal data, please provide written notice to us.
THIRD PARTY WEBSITES
9.1 Our website includes links to third-party websites.
9.2 We have no control over the privacy policies and practices of these third parties.
UPDATING INFORMATION
10.1 If your personal information held by us requires correction or updating, please inform us promptly.
ABOUT COOKIES
11.1 A cookie is a file comprising an identifier (a string of letters and numbers) sent from a web server to a web browser, stored by the browser, and sent back to the server each time the browser requests a page.
11.2 Cookies may be “persistent” or “session” cookies. Persistent cookies remain valid until their set expiry date or until deleted by the user. In contrast, session cookies expire at the end of the user’s session or when the web browser is closed.
11.3 Cookies typically do not contain personally identifying information, but personal data we store may be linked to information derived from cookies.
COOKIES WE USE
12.1 We employ cookies for various purposes, including:
(a) authentication – to identify you when visiting our website and as you navigate it;
(b) status – to help determine if you are logged into our website;
(c) shopping cart – to maintain your shopping cart’s state as you browse our website;
(d) security – as part of security measures, including preventing fraudulent use of login credentials and protecting our website and services;
(e) analysis – to aid in analyzing the use and performance of our website and services; and
(f) cookie consent – to store your preferences regarding cookie usage.
COOKIES USED BY OUR SERVICE PROVIDERS
13.1 Our service providers use cookies, and these cookies may be stored on your computer during your visit to our website.
13.2 We employ Google Analytics to analyze website usage. Google Analytics collects information about website use via cookies, and the gathered data is used to create reports about our website’s usage. Please refer to Google’s privacy policy at Google’s Privacy Policy for further details.
13.3 We may process your data and information related to your site usage for advertising purposes, including remarketing services like Google Ads. This allows us to serve you ads based on your activity on our site. Any data collected will be used in accordance with Google’s privacy policy and our own privacy policy.
MANAGING COOKIES
14.1 Most web browsers offer options to refuse and delete cookies. Methods may vary depending on the browser and its version. For up-to-date information on blocking and deleting cookies, please consult the following links:
(a) Chrome – Blocking and Deleting Cookies
(b) Firefox – Blocking and Deleting Cookies
(c) Opera – Blocking and Deleting Cookies
(d) Edge – Blocking and Deleting Cookies
(e) Safari – Blocking and Deleting Cookies
14.2 Please note that blocking cookies may impact your user experience when using our website.
OUR DETAILS
15.1 This website is owned and operated by Copper Bath Company Ltd.
15.2 We are registered in England and Wales under registration number [Company Registration Number] and our registered office is at [Registered Office Address].
15.3 You can contact us:
(a) by post, using the postal address provided on our website;
(b) by using our website contact form;
(c) by telephone, on the contact number published on our website; or
(d) by email, using the email address published on our website.
DATA PROTECTION OFFICER
16.1 Our data protection officer’s contact details are:
Mr Harvey
info@copperbathcompany.com
CONCLUSION
17.1 We appreciate the trust you place in us regarding your personal data. Our commitment to safeguarding your privacy remains unwavering, and we will continue to update our policies and practices to protect your information effectively.
17.2 Should you have any questions or concerns about this policy or how we handle your personal data, please do not hesitate to get in touch.
