1. Who we are
We are Riaflex Limited registered in England with company number 7938681. We are a manufacturer of quality, natural pet, horse & human supplements.
Our registered office address is: Riaflex, Prospero House, 46 - 48 Rothesay Road, Luton, LU1 1QZ. Please do not write to us at this address. You can write to us at: Riaflex Ltd, PO Box 202, Bristol, BS20 1DB
Our website address is www.riaflex.co.uk.
You can also contact us by email on firstname.lastname@example.org and by ‘phone on +44 (0) 1275 390092.
We are committed to:
- protecting your privacy when you visit our site;
- protecting the confidentiality of any information that you provide to us; and
- being transparent about our collection and use of your personal data.
Personal data’ is any information that identifies you or can be used to help identify you; for example, your name, email address, IP address or location data.
We do our very best to keep your personal data secure by the implementation of appropriate technical and organisational security measures. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Riaflex makes every effort to make sure your information is secure. Only authorized employees within Riaflex are permitted access to your information.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
This policy explains what we do with your personal data, specifically:
- What personal data we collect from you and how we collect it.
- Why we collect it and our legal basis for doing so.
- How we use it.
- Who we share it with.
- Where we store it.
- How long we keep it.
It also explains what your rights are with regard to your personal data.
References to the “GDPR” are to the General Data Protection Regulation.
The Riaflex data protection representative is Kate Williams who can be contacted by email at email@example.com by ‘phone on +44 (0) 1275 390092.
2. What personal data do we collect and how do we collect it?
We only ever collect the personal data that we need from you and keep to a minimum the personal data we hold on an ongoing basis.
We collect and process your personal data when you use our website and services. This may be personal data you provide to us, that we collect about you and/or information we receive from other sources.
Information you give us.
The personal data you give to us may include:
- your name, postal and email addresses and telephone numbers
- information about your pet(s)
- financial and credit card information
We ask you to ensure that the personal data you provide to us is kept up-to-date and therefore please contact us if you need to amend any records we hold of your personal data.
Information we collect about you. Each time you visit our website we may automatically collect the following information: the details of the device you use to access our site;
- your user activity details and preferences;
- your browser history details;
- your location details; and
- your electronic identification data including IP address and information collected through cookies;
Information we receive from other sources.
We use approved third parties to provide services to us (for example, sub-contractors in payment and delivery services) and may receive information about you from them.
Under no circumstances will we hold sensitive payment details such as your card number, expiry date and security code. All transactions are handled through our accredited payment bureaus, SagePay. For more information on SagePay policies please refer to thier websites SagePay.
We sometimes combine information that we receive from other sources with information you give to us and information that we collect about you. We may use this information and the combined information for the purposes set out below.
3. Why do we collect your personal data and what is our legal basis for doing so?
The GDPR requires us to have a legal basis for collecting and using your personal data. The legal basis that we rely on in each case is one of the following:
- you have given us your consent to process your personal data (consent);
- processing your personal data is necessary for us to fulfil a contract entered into with you, or is necessary for us to do things (at your request) prior to us entering into a contract (contract); or
- we have a legitimate organisational interest where we use your personal data in a way that you would reasonably expect, and which has a minimal impact on your privacy (legitimate interests).
The purposes for which we collect and use your personal data are as follows. In each case we have confirmed which legal basis we rely on:
5. Sharing your information
We share your information with the following third parties to enable us to provide our services to you.
- Courier and postal services – to deliver your order
- Email software provider- to send you educational information and promotions via e mail
- Payment gateway provider – To process customer orders on our website or over the phone
- Web developers – to maintain riaflex.co.u
We also share your information with the organisations detailed in the Cookies section.
Our selected third parties are required by us to treat your personal data as carefully as we would and can only act on our instructions with regard to their use of your personal data.
We may disclose your personal information to third parties:
- in the event that we sell or buy any business or assets, we will be obliged to disclose your personal data to the prospective seller or buyer of such business or assets;
- if Riaflex or substantially all of its assets are acquired by a third party, in which case our customers’ personal data will be one of the transferred assets;
- if we are under a duty to comply with any legal obligation;
We will never sell your personal data and will never share it with a company for marketing purposes.
The data that we collect from you will be stored within the European Economic Area (EEA). Your personal data will sometimes be processed by staff operating outside the EEA who work for our third-party web developers.
However, your personal data does not leave the EEA and we have put in place adequate contractual safeguards to protect your personal data in this situation.
6. Keeping your personal data
We keep personal data for no longer than the following time periods:
- Enquiries to our site - duration of enquiry + 2 years
- Customers personal data -duration of relationship + 5 years
- Suppliers personal data – duration of relationship + 5 years
When we no longer need to keep your personal data, we will delete it and dispose of it securely.
7. Your rights
You have the following rights in connection with your personal data:
- To withdraw your consent at any time. You can do this by e mailing us at firstname.lastname@example.org
- To object to us processing your personal data for marketing purposes
- To obtain a copy of your personal data which we hold about you
- The right in certain circumstances to:
- have your personal data erased
- restrict processing of your personal data
- object to the processing of your personal data
- have your personal data transferred to a third party.
If you wish to withdraw your consent, then please follow the steps as outlined above.
If you wish to exercise any of your other rights listed in this policy, or that you have in law, then please contact our data protection representative Kate Williams by emailing her at email@example.com or calling her on +44 (0) 1275 390092.
If you have an issue or complaint arising under this Policy, then in the first instance please contact our data protection representative Kate Williams by emailing her at firstname.lastname@example.org or calling her on +44 (0) 1275 390092.
If you are not satisfied with our handling of your issue or complaint then you have the right, under Article 77 of the GDPR, to lodge a complaint with the Information Commissioner’s Office (https://ico.org.uk/concerns/).
Our website may contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
9. Governing law and jurisdiction
However, if you are a resident of Northern Ireland you may also bring proceedings in Northern Ireland, and if you are resident of Scotland, you may also bring proceedings in Scotland.
We both agree to the exclusive jurisdiction of the courts of England.