Our contact details:
Dunkeld Whisky Box Ltd, 2 High Street, Dunkeld, PH8 0AJ
Company Registered in Scotland with number SC611087
The type of personal information we collect
We currently collect and process the following information:
- Personal details used in the purchase of products from the online shop
- Any other personal data in connection with your choice to pay for the products and/or services that you purchase from us through our website.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- to provide our services and products
- to fulfil relevant agreements with you
- to fulfil our contractual obligations towards you
- to comply with applicable laws
We may share your personal data with our service providers (e.g. those storing your personal data or processing the payment of your payment link) in connection with the above purposes. This will be done confidentially and only to the extent permitted by applicable laws. We do not process personal data obtained from third parties.
We share personal data with iZettle AB, Regeringsgatan 59, 111 56, Stockholm, Sweden and Stripe Payments Europe, Limited, The One Building, Lower Grand Canal St, Dublin 2, Ireland
If we share your personal data with data processors we only share them for purposes compatible with the purposes for which we have collected the data.
Third country transfer
Some of the service providers we use may be located outside of the EEA, including the US. Some of these countries may not have equivalent data protection laws to those which apply in your country.
However, when we transfer your data, we will comply with all applicable laws in respect of such transfer, including taking steps to keep it secure, and ensure that appropriate safeguards are in place to ensure there is adequate protection.
If we sell all or part of our business, or make a sale or transfer of assets, including a sale in bankruptcy or are otherwise involved in a merger or business transfer, we may transfer your personal data to a third party as part of that transaction.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting email@example.com
(b) We have a contractual obligation
(c) We have a legal obligation
(d) We have a legitimate interest
How we store your personal information
We process your personal data to provide our services and products, to fulfil relevant agreements with you and to otherwise administer our business relationship with you. The legal basis we rely on is to fulfil our contractual obligations towards you, to comply with applicable laws and to pursue our legitimate interests.
We always process personal data in accordance with applicable law, and we have implemented appropriate security measures compliant with local information security requirements to protect your personal data from misuse, unauthorised access or disclosure, loss, alteration or destruction.
We will retain your personal data for no longer than permitted under applicable law after which time your personal data will be destroyed or deleted. We only retain your personal data to allow us to process the payment link and ensure compliance with our legal requirements.
We do not carry out any such processing that is defined as solely automated decision making, including profiling, under the General Data Protection Regulation (“GDPR”) that has legal effects or otherwise similarly significantly affects you.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.Please contact us at firstname.lastname@example.org if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at email@example.com
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe HouseWater Lane
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk