Privacy & Cookies
ARADA PRIVACY STATEMENT
This Privacy Notice sets out what personal data we, Arada, hold about you and how we collect and use it. It applies to all our customers.
Please note that we will not necessarily hold, use or share all of the types of personal data described in this Privacy Notice in relation to you. The specific types of data about you that we will hold, use and share will depend on your individual circumstances, such as whether you visit our websites, whether you contact us by telephone, email or through our online contact form.
We are required by data protection law to give you the information in this Privacy Notice. It is important that you read the Privacy Notice carefully, together with any other information that we might give you from time to time about how we collect and use your personal data. You should also read our Data Protection Policy, which explains our obligations in relation to personal data and how we keep it secure.
This Privacy Notice applies from the 25 May 2018, when the General Data Protection Regulation (GDPR) comes into force. We reserve the right to update this Privacy Notice at any time, and we will provide you with a new Privacy Notice when there are any substantial changes.
Who is the controller?
Arada Limited, whose registered office is at The Fireworks, Weycroft Avenue, Axminster, Devon, EX13 5HU is the “controller” for the purposes of data protection law. This means that we are responsible for deciding how we hold and use personal data about you.
What information do we collect?
We collect data from you when you register on our site (whether as a guest to the site or from a personally created account), or if you place an order through our site.
What type of personal data do we hold about you?
We hold and use various types of personal data about you, including:
When placing an order we will record:
- Your name;
- Your billing address;
- Your billing address postcode;
- Your delivery address;
- Your delivery address postcode;
- Your telephone number;
- The items purchased;
- Any information volunteered to aid delivery of your order.
When using our online contact form, we will collect:
- Your name;
- email address
- telephone number,
- postal address; and
- any digital images for the purpose of aiding technical support
- any other information, that you might voluntarily disclose
You can, however, visit our site anonymously at any time.
What do we use your information for?
We may use your information in the following ways:
- To personalise your browsing experience by being able to respond to your individual requirements
- To improve our service to you by evaluating feedback and information from you
- To improve our customer service and technical support
- To send periodic emails to include email marketing – you can unsubscribe from any marketing contact from us through the link at the bottom of the email
- To assist you in the event of a problem when browsing our website
How long do we hold your data?
Personal data relating to transactions is anonymised after seven years and your account will be removed after seven years of inactivity.
Personal data that is used for marketing purposes will be retained indefinitely unless you choose to opt-out.
Data that is voluntarily disclosedvia our website contact form is securely held for up to 30 days or as long as is necessary to process any request for the purpose of a legitimate business interest.
Data that is submitted when an order is placed will be securely held for up to 8 years for the purpose of a legitimate business interest of holding records for tax purposes.
How do we protect and safeguard your personal information?
We have a variety of security measures in place to protect your personal information. These include electronic safeguards, such as encryption, and physical safeguards and security.
Your rights
You have a number of legal rights relating to your personal data, which are outlined here:
The right to make a subject access request. This enables you to receive certain information about how we use your personal data, as well as to receive a copy of it and to check that we are lawfully processing it.
The right to request that we correct incomplete or inaccurate personal data that we hold about you.
The right to request that we delete or remove personal data that we hold about you where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
The right to object to our processing your personal data where we are relying on our legitimate interest (or those of a third party), where we cannot show a compelling reason to continue the processing.
The right to request that we restrict our processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
The right to request that we transfer your personal data to you or to another party, in a structured format. This right applies in respect of data that you have provided where our legal ground for using the data is that it is necessary for the performance of a contract or that you have consented to us using it (this is known as the right to “data portability”).
If you would like to exercise any of the above rights, please contact the Data Protection Lead in writing at Arada Limited, The Fireworks, Weycroft Avenue, Axminster, Devon, EX13 5HU. Alternatively, please email gdpr@aradastoves.com.
Note that these rights are not absolute and, in some circumstances, we may be entitled to refuse some or all of your request.
Accessing and updating your personal information
We will not process your personal information for marketing purposes at any time.
If you have any questions or concerns about how your personal data is being used by us, you can contact the Data Protection Lead on 01297 632050.
Note too that you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. Details of how to contact the ICO can be found on their website: https://ico.org.uk
Your Consent
By using our site you consent to our Privacy Policy and Terms and conditions.
Withdrawing your consent
If you would like to withdraw your consent, please contact us directly.
Once you notify us of your request, we will respond to you as soon as possible.
Wherever possible, we will anonymise all records relating to you and to your account, including all communication.
Who has access to your data?
Access to your personal data is restricted at all times. Only our employees or trusted agents will be able to access your data. Their access and activities are restricted to the purposes outlined above. These parties are:
Us; we have direct access to your data.
Our webdesigners, Iconography Ltd, can act on our behalf as Data Processors. This means they host our website and have access to ensure its correct function.
Changes to our privacy policy
If we decide to change or update our privacy policy, we will do so on this page.
Please contact us if you have any questions regarding our Privacy Policy.
UNSOLICITED EMAIL POLICY
Internet user privacy is of upmost importance to us and our customers. Our success depends on our ability to maintain the trust of our customers. To this end, we have two overriding policies:
Message recipient policy
Before customers can receive email messages, advertising or promotions, customers must have agreed to receive such messages, by either purchasing from us or by opting into one of our mailing lists. Any recipient may request at any time to be removed from our list, and we will comply with that request. In addition, we will thoroughly investigate any allegations made by recipients relating to unsolicited messages.
Policy against advertising our website using unsolicited email messages
We require that all e-mails promoting our business or its products are sent only to customers who have agreed to receive such messages. We prohibit any advertising of our brand and Web site using unsolicited email messages. If you feel you've been sent unsolicited emails promoting our brand or website and would like to register a complaint, please email us using our contact page. We will immediately investigate all allegations made related to unsolicited messages.
Your email address is safe with us.
We never sell or share your email addresses with other companies.
You can unsubscribe at any time.
We require that each email message sent out from us includes an easy way for subscribers to remove themselves via an unsubscribe link.
If you receive a newsletter or email and decide you don't like it, simply click the unsubscribe link at the bottom of the email.
If you feel you've been sent unsolicited email and would like to register a complaint, please email us using our contact page.
Definition of Spam
Spam is unsolicited email sent in bulk. Any promotion, information or solicitation that is sent to a person via email without their prior consent, where there is no pre-existing relationship between the sender and the recipient, is spam.
COOKIES
We provide online services that are easy to use, useful and reliable. These can involve placing small amounts of information on your computer or mobile phone or other devices. These include small files known as cookies. There's a link to general advice about managing cookies at the end of this page. Cookies cannot be used to identify you personally.
You can opt out of non-essential cookies at any time by clicking this link...
Below is a list of cookies that are used on this Website.
Arada Cookies
Name: PHPSESSID
Typical content: randomly generated number
Expires: when user exits browser
Name: style
Typical content: stores the user's preference to whether they wish to view products in a list or a grid
Expires: 1 year
Name: key
Typical content: randomly generated number to remember the user for their next visit
Expires: 4 weeks
Name: facebookLike
Typical content: used for promotional offers, stores whether the customer has "liked" the website on Facebook
Expires: 4 weeks
Name: allowAllCookies
Typical content: stores the user's preference to whether they wish to allow all Cookies on this Website or not
Expires: 1 year
Google Analytics Cookies
Name: _utma
Typical content: randomly generated number
Expires: 2 years
Name: _utmb
Typical content: randomly generated number
Expires: 30 minutes
Name: _utmc
Typical content: randomly generated number
Expires: when user exits browser
Name: _utmv
Typical content: randomly generated number
Expires: 2 years
Name: _utmz
Typical content: randomly generated number and information about how the page was reached (eg directly or via a link, organic search or paid search)
Expires: 6 months
For further details on the cookies set by Google Analytics, see the link below.
Cookies set by Google Analytics
Add-this Cookie
Name: _atuvc
Typical content: numeric content (e.g. 8|21) that helps you share content through social networks
Expires: 2 years
Social Networking Websites
Social networking websites may place cookies on your computer. Social bookmarks are a way of saving links to web pages that interest you, and sharing those links with other people. You should read their respective privacy policies carefully to find out what happens to any data that these services collect when you use them.
Read the Facebook privacy policy
Read the Twitter privacy policy
More About Cookies
For more information about how to manage your cookies, visit aboutcookies.org.
LAST UPDATED: 19/03/20
