This policy about the handling of personal data (”Personal Data Policy”) describes how Luxreaders (”Luxreaders”, ”us”, ”our”, ”we”) gathers and handles information about you.
This Personal Data Policy regards the information that you provide us, or information that we gather through Luxreaders’ website,www.luxreaders.co.uk (”website”).
Luxreaders is a Data Controller for your personal information. All contact with Luxreaders must happen through the contact information provided in paragraph 8.
GATHERING OF YOUR PERSONAL INFORMATION BY LUXREADERS
What personal information do we gather and for which purpose?
When you visit the website, we will automatically gather information about you such as, what type of browser you are using, what search queries you use, your IP address and information about your computer. This process is orchestrated with the intent of optimising conversion on the website, improving it and conducting targeted marketing.
When you buy a product on the website, we gather information about you such as name, address, e-mail address, phone number, information about what products you buy or if you have returned any products, all to be able to effectively deliver products to you that comply with our accounting obligations.
When you create your user profile or make a purchase, you have the option to give consent to Luxreaders to send you e-mail marketing. At any point, you are entitled to withdraw your consent either by logging into your user account or by clicking the unsubscribe link at the bottom of the e-mails you receive.
What is the basis for gathering the information?
The gathering of information, as mentioned in paragraph 2.1.1, is necessary for us to maintain our interests in improving the functionalities and structure of the website, and to be able to offer you relevant content.
The gathering of information, as mentioned in paragraph 2.1.2, is necessary for us to fulfil our part of agreements with you.
USE OF DATA PROCESSORS
We are using external companies to perform the technical operation of the website. For example, our suppliers assist us with targeted marketing, retargeting and analysing reviews of our products all to improve the functionality of the website. Since these companies are data processors, they are subject to our instructions and handle information that we are responsible for. Data processors are prohibited from using the information for any other purpose or to a degree other than what is contractually agreed between us. Therefore, these data processors are subject to confidentiality of data and information.
One of these data processors, Google Analytics (Google Inc.), is established in the USA. The necessary guarantees of secure transfer of information to the USA have been made through the data processors certificate under EU-U.S. Privacy Shield. A copy of this certificate can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
For the purpose of creating transparency about the handling of your personal data, we, as data controllers, must inform you of your rights.
Right to insight
You have the right, at all times, to submit a written request to have us inform you about which information we have stored regarding you, and for what purpose this information is used for, as well as which categories of personal data and recipients (if any) of this data there might be, and lastly the manner in which how the information was gathered.
Right to rectification
You have the right demand that incorrect information concerning you be changed and corrected by us. In case you notice any error in the information that we have gathered about you, we encourage you to reach out to us about having the information corrected.
You have the ability to edit all information that we have collected in junction with a signup to our customer club by logging into your user profile.
Right to be forgotten
In some situations, you have the right to have all or some of the personal data deleted by us, if you, for example, withdraw the consent of your registration to our customer club. The extent to which the information is necessary for us to comply with accounting obligations etc. means that we are not obliged to delete your personal data.
Right to restriction processing
You only have the right, in certain situations, to restrict the processing of your personal data (so that it is stored and not processed) if you claim that the information we are processing is not correct.
Right to data portability
You have the right to receive the personal data that you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller, when we gather your information in junction with: - You make a purchase through us, see paragraph 2.1.2
Right to object
You have the right to object, on the grounds relating to your particular situation at any time during the processing of your personal data, in which we gather to improve functionality and structure of our website. See paragraph 2.1.1
If you object to the processing, we are no longer at liberty to process your personal data, unless a valid legal reason for continuing the processing is provided by us.
Right to complain
You have the right, at any time, to submit a complaint to the Information Commissioner’s Office (ICO), about our processing of your personal data.
THE DELETION OF PERSONAL DATA
If you do not use our website within 1 year, we will automatically delete the information that we have gathered about you. However, to comply with the laws, including the accounting legislation (5 years from the start of the accounting year) and the consumer law (2 years of warranty), we can keep this personal data for extended periods.
Any information you have given in junction with your consent of newsletter, marketing emails, SMS and letters will be deleted at the time you withdraw your consent, unless continued processing is justified, see paragraph 2.
We have enforced technical and organisational security-measures to ensure that personal data does not accidentally or illegally get destroyed, lost, changed, impaired or end up in unauthorized hands and be abused in any way.
Only employees, who have a justified reason to gain access to your personal information to fulfill their task, will have access to these.
Luxreaders is a Data controller of all Personal Data collected through the website.