Introduction
Welcome to ollygraham.com (the "Website"). This Website is operated by Olly Graham, and Branding Brothers Ltd ("we", "our", "us"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, and protect your personal information in compliance with international data protection laws as of 2024.
Information We Collect
Personal Information
When you visit our Website, purchase products, or contact us, we may collect the following types of personal information:
- Contact Information: Name, email address, phone number, and postal address.
- Account Information: Username, password, and other authentication details.
- Payment Information: Credit card details, billing address, and other payment-related information.
- Transaction Information: Purchase history and order details.
- Technical Information: IP address, browser type, operating system, and other technical details about your device.
- Usage Information: Pages visited, time spent on the Website, and other usage data.
Non-Personal Information
We may also collect non-personal information that does not directly identify you. This can include aggregated data about how users interact with our Website.
How We Use Your Information
We use your personal information to:
- Process and fulfill your orders/service provision.
- Provide customer support.
- Manage your account with us.
To Improve Our Services
We use usage and technical information to:
- Enhance the functionality of our Website.
- Personalize your experience.
- Analyze and improve our products and services.
Marketing
With your consent, we may use your contact information to send you promotional materials and updates about our products and services. You can opt-out of receiving marketing communications at any time by following the unsubscribe instructions included in the email or by contacting us directly.
Legal Compliance
We may use your personal information to comply with legal obligations, such as tax and accounting requirements, and to protect our rights and the rights of others.
Sharing Your Information
We do not sell your personal information. However, we may share your information with:
- Service Providers: Third parties that provide services on our behalf, such as payment processors, shipping companies, and IT service providers. These service providers are bound by confidentiality agreements and are only allowed to use your information for the purposes we specify.
- Legal Authorities: Law enforcement or other governmental authorities if required by law or in response to legal proceedings.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.
International Data Transfers
Your personal information may be transferred to and processed in countries outside of your country of residence. These countries may have different data protection laws. We ensure that appropriate safeguards are in place to protect your information when it is transferred internationally, in compliance with applicable data protection laws.
GDPR Compliance (UK and EU)
We comply with the General Data Protection Regulation (GDPR) as applicable in the UK and the EU. This means we adhere to the following principles:
- Lawfulness, Fairness, and Transparency: We process personal data in a lawful, fair, and transparent manner.
- Purpose Limitation: We collect personal data for specified, explicit, and legitimate purposes and do not process it further in a manner that is incompatible with those purposes.
- Data Minimization: We ensure that personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
- Accuracy: We take all reasonable steps to ensure that personal data is accurate and kept up to date.
- Storage Limitation: We retain personal data only for as long as necessary for the purposes for which it is processed.
- Integrity and Confidentiality: We process personal data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
Your GDPR Rights
Under the GDPR, you have the following rights:
- Right to Access: You can request access to your personal data.
- Right to Rectification: You can request correction of inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your personal data.
- Right to Restriction of Processing: You can request the restriction of processing your personal data.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format and have it transferred to another controller.
- Right to Object: You can object to the processing of your personal data.
To exercise any of these rights, please contact us at legal@brandingbros.uk
CCPA Compliance (California)
We comply with the California Consumer Privacy Act (CCPA) and ensure that California residents have the following rights:
- Right to Know: You can request information about the categories and specific pieces of personal data we have collected about you, the sources from which the personal data is collected, the purpose for collecting the personal data, and the third parties with whom we share personal data.
- Right to Delete: You can request the deletion of your personal data that we have collected, subject to certain exceptions.
- Right to Opt-Out: You can opt-out of the sale of your personal data. We do not sell your personal data; however, if this policy changes, we will update this section and provide a method for you to opt-out.
- Right to Non-Discrimination: You have the right to not be discriminated against for exercising any of your CCPA rights.
Exercising Your CCPA Rights
To exercise any of your CCPA rights, please contact us at [legal@brandingbros.uk]. We will verify your identity before processing your request to ensure the security of your personal data.
Your Rights
You have the following rights regarding your personal information:
- Access: You can request a copy of the personal information we hold about you.
- Correction: You can request that we correct or update any inaccurate information.
- Deletion: You can request that we delete your personal information, subject to certain legal limitations.
- Objection: You can object to the processing of your personal information in certain circumstances.
- Portability: You can request a copy of your information in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact us at [legal@brandingbros.uk]. We will respond to your request within the timeframe required by applicable law.
Cookies and Tracking Technologies
Our Website uses cookies and similar tracking technologies to enhance your experience. Cookies are small data files that are placed on your device. You can control the use of cookies through your browser settings. Please note that disabling cookies may affect the functionality of our Website.
Chat FunctionALity
Our Website offers a chat function that allows you to communicate with us directly for support, inquiries, or feedback. We are committed to protecting the privacy and security of your messages and identity while using this feature.
How We Protect Your Messages
- Encryption: All messages sent through our chat function are encrypted in transit and at rest, ensuring that they are protected from unauthorised access. They are held by Brevo services. Please review https://www.brevo.com/legal/privacypolicy/ if you'd like further information.
- Access Controls: Access to your messages is strictly limited to authorised personnel who need it to provide customer support or address your inquiries. All personnel are trained on data protection best practices.
- Regular Audits: We regularly review and update our security practices and controls to ensure they are effective and comply with the latest security standards.
How We Protect Your Identity
- Data Minimisation: We only collect the minimum amount of personal information necessary to assist you during your interaction with our chat function. We will not collect more than is necessary.
- Usage: We monitor the use of the chat function to prevent unauthorised access and ensure it is not used for purposes other than intended. Only the data controller and limited customer response teams may have access to your name, email and chat transcription unless you give specific permission for it to be shared for a direct business purpose, such as booking in design work with us.
Retention of Messages
- Retention Period: We retain messages exchanged through our chat function for a limited period necessary for customer support and for record-keeping purposes tied to your account or order history, after which they are securely deleted after 30 days.
- Review and Deletion: You may request to review or delete any messages you have sent through our chat function by contacting us at [legal@brandingbros.uk].
By using the chat function on our Website, you agree to the processing of your messages and any personal information contained therein, in accordance with this Privacy Policy. We will continue to evaluate and improve our security measures to ensure the confidentiality and integrity of your communications.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the Website after any changes constitutes your acceptance of the updated Privacy Policy.
Security
We implement appropriate technical and organisational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the Website after any changes constitutes your acceptance of the updated Privacy Policy.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Branding Brothers Ltd
Email: legal@brandingbros.uk
Effective Date: July 3, 2024
By using our Website, you acknowledge that you have read and understood this Privacy Policy. Thank you for trusting Branding Brothers Ltd with your personal information.
