Privacy policy
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from odysseyboxuk.com (the “Site”). This personal information may be held by ODYSSEY BOX UK in electronic format or on paper.
ODYSSEY BOX UK is committed to being transparent about how it handles your personal information, to protecting the privacy and security of your personal information and to meet its data protection obligations under the General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018. The purpose of this privacy notice is to make you aware of how and why we will collect and use your personal information both during and after your working relationship with ODYSSEY BOX UK. We are required under the GDPR to notify you of the information contained in this privacy notice.
ODYSSEY BOX UK has appointed data protection to lead to oversee compliance with this privacy notice. If you have any questions about this privacy notice or about how we handle your personal information, please contact Chloé at hello@odysseyboxuk.com.
PERSONAL INFORMATION WE COLLECT
Personal information is any information about an individual from which that person can be directly or indirectly identified. It doesn’t include anonymised data, i.e. where all identifying particulars have been removed
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.
We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, postal address, payment information (including credit card numbers, email address, and phone number. We refer to this information as “Order Information”.
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information that we collect to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
- Communicate with you;
- Screen our orders for potential risk or fraud; and
- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
-where it is necessary for our legitimate interests (or those of a third party), and your interests or your fundamental rights and freedoms do not override our interests.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
CONSENT
By visiting the site, we imply that you consent to the automatic collection of device information and how we use it. When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, or sign up to odysseyboxuk.com, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent when you sign up to our newsletter or provide you with an opportunity to decline. If, after you opt-in, you change your mind, you may withdraw your consent at any time.
If you fail to provide certain personal information when requested or required, we may not be able to perform the contract we have entered into with you, or we may be prevented from complying with our legal obligations.
SHARING YOUR PERSONAL INFORMATION
Your personal information may be shared internally within ODYSSEY BOX UK, including with members of the marketing team.
We may share your personal information with third parties where it is necessary to administer the contract we have entered into with you, where we need to comply with a legal obligation, or where it is necessary for our legitimate interests (or those of a third party), including with professional advisers, such as lawyers and accountants, or external auditors or regulators.
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Squarespace to power our online store--you can read more about how Squarespace uses your Personal Information here: https://www.squarespace.com/privacy/.
We use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We also use MailerLite for email marketing - you can read more about how MailerLite uses your Personal Information here: https://www.mailerlite.com/legal/privacy-policy
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.
HOW DOES ODYSSEY BOX UK PROTECT YOUR PERSONAL INFORMATION?
ODYSSEY BOX UK has put in place measures to protect the security of your personal information. It has internal policies, procedures and controls in place to try and prevent your personal information from being accidentally lost or destroyed, altered, disclosed or used or accessed in an unauthorised way. In addition, we limit access to your personal information to those designated staff and other third parties who have a business need to know in order to perform their job duties and responsibilities.
Where your personal information is shared with third-party service providers, we require all third parties to take appropriate technical and organisational security measures to protect your personal information and to treat it subject to a duty of confidentiality and in accordance with data protection law.
DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from a Chrome browsers.
If you have enabled this option enabled when you visit our Site, every page you view is tracked as a new visitor.
YOUR RIGHTS
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below. ODYSSEY BOX UK cannot be held responsible for any errors in your personal information in this regard unless you have notified ODYSSEY BOX UK of the relevant change.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
As a data subject, you have a number of statutory rights. Subject to certain conditions, and in certain circumstances, you have the right to:
- request access to your personal information – this is usually known as making a data subject access request and it enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- request rectification of your personal information – this enables you to have any inaccurate or incomplete personal information we hold about you corrected
- request the erasure of your personal information – this enables you to ask us to delete or remove your personal information where there’s no compelling reason for its continued processing, e.g. it’s no longer necessary in relation to the purpose for which it was originally collected.
- restrict the processing of your personal information – this enables you to ask us to suspend the processing of your personal information, e.g. if you contest its accuracy and so want us to verify its accuracy.
- object to the processing of your personal information – this enables you to ask us to stop processing your personal information where we are relying on the legitimate interests of the business as our legal basis for processing and there is something relating to your particular situation which makes you decide to object to processing on this ground.
- data portability – this gives you the right to request the transfer of your personal information to another party so that you can reuse it across different services for your own purposes.
If you wish to exercise any of these rights, please contact us. We may need to check your right to access the personal information or to exercise any of your other rights. This is a security measure to ensure that your personal information is not disclosed to any person who has no right to receive it.
In the limited circumstances where you have provided your consent to the processing of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. This will not, however, affect the lawfulness of processing based on your consent before its withdrawal. If you wish to withdraw your consent, please contact us. Once we have received notification that you have withdrawn your consent, we will no longer process your personal information for the purpose you originally agreed to, unless we have another legal basis for processing.
If you believe that ODYSSEY BOX UK has not complied with your data protection rights, you have the right to make a complaint to the Information Commissioner’s Office (ICO) at any time. The ICO is the UK supervisory authority for data protection issues.
DATA RETENTION
ODYSSEY BOX UK will only retain your personal information for as long as is necessary to fulfill the purposes for which it was collected and processed, including for the purposes of satisfying any legal or accounting requirements.
ODYSSEY BOX UK will generally hold your personal information for the duration of your engagement but data will be minimised.
Once you have unsubscribed or your engagement with us has been terminated, we will generally hold your personal information for one year after the termination of your subscription or engagement.
Personal information that is no longer to be retained will be securely and effectively destroyed or permanently erased from our IT systems and we will also require third parties to destroy or erase such personal information where applicable.
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
ODYSSEY BOX UK reserves the right to update or amend this privacy notice at any time, including where ODYSSEY BOX UK intends to further process your personal information for a purpose other than that for which the personal information was collected or where we intend to process new types of personal information. We will issue you with a new privacy notice when we make significant updates or amendments. We may also notify you about the processing of your personal information in other ways.
MINORS
The Site is not intended for individuals under the age of 16.
If you have any questions about this privacy notice or how we handle your personal information, please contact our data protection lead, Chloé at hello@odysseyboxuk.com.
ODYSSEY BOX
[Re: Privacy Compliance Officer]
hello@odysseyboxuk.com