Privacy Notice for Customers
In accordance with the General Data Protection Regulation (GDPR), we have implemented this privacy notice to inform you, our customers, of the types of data we process about you. We also include within this notice the reasons for processing your data, the lawful basis that permits us to process it, how long we keep your data for and your rights regarding your data.
Chinasearch is fully committed to the correct, lawful and fair handling of all personal data, respecting the legal rights, privacy and trust of all individuals with whom it deals.
This Privacy Notice sets out in detail our obligations regarding the personal data we may collect when you interact with us, and your rights in respect to personal data under the General Data Protection Regulation (GDPR). It also explains how we will use, store and keep that data safe.
B. Information About Us
Chinasearch Ltd is registered in England under company number 04320273 whose registered address is Apley Lodge, Norton, Shifnal, Shropshire. TF11 9EL.
Our trading address is 4 Princes Drive, Kenilworth, Warwickshire, CV8 2FD and our primary website is www.chinasearch.co.uk. Our VAT number is 974 8222 88
For simplicity throughout this Privacy Notice ‘we’ and ‘us’ refers to Chinasearch Ltd.
C. Lawful Basis of Processing Customer Data
To ensure personal data is processed lawfully and fairly without affecting your rights, the GDPR states a number of reasons for which a company may collect and process your personal data, including;
- Consent - Personal Data can be collected and processed with your consent. For example when signing up to newsletters.
- Contractual - Personal Data may be required for us to meet our contractual obligations. For example when your order through our website we will collect your delivery address and pass that on to our courier.
- Legal Obligation - If required by law we may need to collect and process personal data. For example in the case of fraud.
- Legitimate interest - Personal data may be processed for the purposes of the legitimate interests of the business. This has to be done in a way which does not affect your fundamental rights and freedoms and is reasonable as part of running our business. For example we will use your purchase history to offer a personalised service and combine the purchase history of all customers to monitor demand and trends.
D. Your Rights
The GDPR sets out a number of principles with which a company handling your personal data must comply; these principles define your rights. You have the right to request:
- Information about our collection and use of personal data.
- Access to the personal data we hold about you. To make a request please contact us using the details provided in section N.
- The correction of your personal data when inaccurate, incomplete or out of date. To request correction of data please contact our Customer Service Team.
- That the processing of personal data by consent is stopped after you remove consent. Consent can be withdrawn at any time.
- That personal data is not used for direct marketing.
- That any automated decision making and profiling is reviewed.
- That the processing personal data on the basis of legitimate interests is stopped. We must do so unless there is an overriding legitimate interest to continue processing your personal data.
If you have any cause for complaint about our use of your personal data, please contact us using the details provided in section N and we will do our best to solve the problem for you.
To protect your personal data, we will ask you to verify your identity before proceeding with any request under this Privacy Notice.
If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office. For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.
E. When Do We Collect Your Data?
- When you contact us online, in-store or by telephone.
- When you leave a review.
- When you make a purchase online, in-store or on the telephone.
- When you visit our website or shop.
- When you choose to use social media.
- When you have given a third party permission to share with us information they hold on you.
F. The Type of Data We Collect
- Your name, billing/delivery address, telephone number, email address.
- Order details and Search line requests.
- Details of interactions with our staff, which could be email, telephone or in store.
- Details of your visits to our website, including technical details of your connection, location, pages viewed and which site you came from.
- Payment card information, end to end encryption with payment provider. Payment card details are not stored.
- Comments and reviews.
- CCTV footage from inside and outside our shop.
- Social media communications and ID.
- Website password, though this is not directly stored. Instead, we store a salted cryptographic hash of your password so that even if our database is compromised, all passwords will be secure.
G. Why Do We Collect Your Data
- To administer the purchasing of second hand product, as a legitimate interest.
- To build a picture of our customers so to inform our business decisions. We may also combine data captured from across third parties to whom you have given your consent and data from publicly-available lists, as a legitimate interest.
- To comply with our contractual or legal obligations to share data with law enforcement.
- To develop, test and improve the systems, services and products we provide to you, as a legitimate interest. For example, we’ll record your browser’s Session ID to help us understand more when you leave us online feedback about any problems you’re having.
- With your consent we’ll use data we hold about your favourite brands or products, to display the most interesting content to you on our websites.
- To process and advise of any updated pattern information, as a legitimate interest.
- To process and fulfil any orders and meet our contractual and legal obligations.
- To process payments and to prevent fraudulent transactions, as a legitimate interest.
- To protect our business and your account from fraud and other illegal activities, as a legitimate interest.
- To protect our customers, staff, premises and assets from crime we operate a CCTV system in and outside our premises, as a legitimate interest.
- To respond to your questions, requests and complaints, as a legitimate interest and to meet any legal or contractual obligations.
- To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, updates to this Privacy Notice, product recall notices, and legally required information relating to your orders.
- To send you relevant, personalised communications by post in relation to updates, offers, services and products, as a legitimate interest.
- To send you survey and feedback requests to help improve our services, as a legitimate interest.
- With your consent we'll use your data, preferences and details of your transactions to keep you informed by email, web, telephone about relevant products and services including tailored special offers, discounts, promotions, events, competitions and so on.
H. How We Protect Your Personal Data
- We secure our website using ‘https’ technology.
- Payment card information is not stored on our systems.
- Personal data is password protected.
I. How Long Is Data Kept?
We only keep your personal data for as long as we need to in order to use it as described above in section G, and/or for as long as we have your permission to keep it.
At the end of this period your data will either be deleted or anonymised to be used for business planning in a non-identifiable way
J. Who Do We Share Your Data With?
We may sometimes contract with third parties to supply products and services to you on our behalf. These may include payment processing, delivery of goods, search engine and internet (see our Cookie Notice), advertising, business services and marketing. For further information please contact us using the details in section N.
In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, we will only provide the specific information needed, and take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.
In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority.
We may compile anonymized statistical data about our business, including data on traffic, usage patterns, user numbers, sales, and other information, to share with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law.
K. Where Is Your Data Processed
We process your data within The British Isles.
To fulfil an order and process your payment we may sometimes use third party data processors that are located outside of the European Economic Area (EEA). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. Where we transfer any personal data outside the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK.
L. What Happens If Our Business Changes Hands
In the event that any of your data is to be transferred in such a manner, you do not have to be contacted in advance and informed of the changes.
M. How Can You Stop The Use of Your Data for Direct Marketing?
You can stop receiving direct marketing communications from us by clicking the ‘unsubscribe’ link in any email we send you or contact us using the details in section N.
N. Contacting Us
Please ensure that your query is clear, particularly if it is a request for information about the data we hold about you.
O. Changes To Our Privacy Notice
We may change this Privacy Notice from time to time (for example, if the law changes). Any changes we may make to our privacy notice in the future will be posted on this page and, where appropriate, notified to you by e-mail.