General Data Protection Regulations - Privacy Policy

Privacy Policy

Your Data - Our Privacy Policy

This policy covers the treatment of personally identifiable information that Norvic Philatelics collects when you are in the norvic-philatelics.co.uk or norphil.co.uk domains, and in this e-commerce site. Links within this domain to other web sites are not covered by this policy.

We may modify or update this Privacy Policy from time to time to reflect changes in our business and practices and so you should review this page periodically.  When we change the policy in a material manenr will will record this on the welcome/home page and in our blog (blog.norphil.co.uk)

This Privacy Policy was last amended on 25 May 2018.

1 General Information
Norvic Philatelics ("we", "us", "our") take security and privacy seriously.  This Privacy Policy explains how we collect, store, and use personal data when you browse shop.norphil.co.uk or otherwise provide your personal data to us.  Please read this carefully to understand how we will treat your personal data.


2. What information we collect about you

Your personal data
When we refer to "your personal data" we mean any information that you provide to us that identifies any person.

Your "personal data" may be contained in informaiton that we collect about you in connection with your order or otherwise interact with us, for example by email.

We comply with our obligations under the EU General Data Protection Regulation and and other applicable data protection legislation from time to time enacted.

Your personal data includes the information your provide on the Norvic Philatelics website (including any forms you complete) or during an email enquiry.

Examples of this personal data include your name, email address, postal address, telephone number, which you provide to us when you set up an account and subsequently amend in the My Account section when you go to checkout; and any correspondence when you contact us.   It also includes similar information about third parties to whom you have asked for goods to be sent on your behalf as part of an order from us.

We do not knowingly collect or solicit any personal data from anyone under the age of sixteen or knowingly allow such people to purchase goods from us.  In the event that we learn that we have collected personal data from a child under age 16 without verification of parental coonsent we will delete that information as quickly as possible.


Information collection
You can visit our sites and use many of the services without telling us who you are or giving us any personally identifiable information.  We collect information about your website usage, to improve our service and to understand trends to enhance and customize our website . When we do collect "personal data" this is what we collect and how we use it:

- We monitor patterns of usage, such as abandoned cart data, so that we can follow this up to assist you in completing the purchase, and to determine if anything in our systems prevented you from doing so.

- Norvic Philatelics does not store any credit card date.  When payments are processed via credit card or debit card, we use third-party processors that are PCI-DSS compliant.  At no point do we have access to your card information.  For further information on how we meet indsutry standards for card security visit https://freewebstore.com/PCI_compliance.html


3. How we use the information we collect.

We use your personal data for legitimate business reasons, for example, email you when your order has been received, and when despatched.  It also enables us to contact you by email, post, SMS, or telephone where nexessary, concerning an order you have placed; to record your personal preferences; to personalise services to you (such as by pre-populating fields to make it easier for you when you return to our store.

Contacting you for Marketing Purposes.  We do not undertaking any marketing activity by email, post, SMS, social media* or telephone.  We inform you about new products by adding them to this store and writing about them on our blog (blog.norphil.co.uk) and in our main website (www.norphil.co.uk). 
*We also use Twitter.com to write about new additions to our store.  If you follow us you may see these messages but they are not directed at you personally and we hold no personal data about our social media followers unless it is provided as part of our order process or email.

Cookies - This webstore does not use cookies.

Legal Requirements - we may use your personal data to comply with any legal obligations to which we are subject.


4.  Why do we use your personal data?

We collect and use your personal data for a variety of reasons.  We need some data to enter into and perform our contract with you.  The lawful basis for processing your personal data is COnsent as you have consented to provide your personal details to allow us to provide a service to you.  If you fail to provide such data we will be unable to provide our service to you.

Other information we collect because we have legitimate business interest, for example in:

- Fulfilling your order and providing despatch updates;
- Understanding and responding to customer feedback.


5. Information Sharing and Disclosure
Except as described in this policy, Norvic Philatelics does not divulge any personal information gathered to third parties.

We may share your personal data with third parties in certain circumstances:

- In the event that we, our business, or substantially all of its assets are acquired by a third party (in which case personal information about customers will be one of the transferred assets);

- if we are under a duty to disclose or share your personal information in order to comply with any legal obligation; to cooperate with law enforcement officials in the investigation of unlawful activities of Norvic Philatelics' website users or relating to users; in order to enforce or apply any contract with you; to protect us, our rights, property, customers or others.  This includes exchanging information with other companies and organisations for the purposes of fraud protection of unlawful activity.

We also utilize a number of third parties to help provide services to you. Example of these functions include handling credit and debit card transactions and providing customer service.

Sub-processors we use:

Name	Service Provided	Link
freewebstore	eCommerce provider for website design, hosting and data storage	https://freewebstore.com/privacy.html
Google	email handling; blog hosting and data analytics; image hosting;	http://tiny.cc/afwwty
PayPal	Payment processor	https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev

6. How long do we store your data for?

We store your data for as long as necessary for the purposes of processing set out in this policy. 
Name, email address, address - Active until user makes an individual request for deletion.   


7. How to access and control your data

You may change your personal details in the My Account section of your account at any time.

You can also ask us for a copy of your personal data that we hold.  We may ask for proof of your identity before providing any information and we reserve the right to refuse to provide the informaiton requested if identity is not established.  Please see "Your Individual Rights" below.  Generally, we will retain your data for a reasonable period or for as long as the law requires.

Your individual rights

1. Access to your personal data: You can ask us to confirm if we are processing your personal data and you may request a copy of your personal data by contacting us.  (see "How to Contact Us" at the end of this policy.
2. Right to change or withdraw your consent: Where you have given us consent to make use of your personal data for any of the purposes outlined in this policy, youmay withdraw that consent at any time by contacting us using the details located at Section “How to Contact Us” at the end of this policy. If you wish to change yourcontact preferences or no longer wish to be contacted for marketing purposes, usethe Unsubscribe link in the email orget in touch. See Section “How to Contact Us” at the end of this policy.
3. Right to Rectification: You may ask us to update out of date or inaccurate information we hold about you. To do so, please log on to your Norvic Philatelics account and update your information or get in touch using the details at Section “How to Contact Us” at the end of this policy. 
4. Right to Erasure:  In certain circumstances you may ask us to erase your Personal Data. If you would like us to erase the personal data we hold about you, please get in touch using the details at Section “How to Contact Us” at the end of this policy.
5. Right to Data Portability:  In certain circumstances you may ask us to provide you with the personal data that we hold about you in a structured, commonly used, machine readable form, or ask for us to send such personal data to another data controller.
6. Right to object: In certain circumstances you may object to our processing of your personal data. Please get in touch using the details at Section “How to Contact Us” at the end of this policy. 
7. Right to restrict processing:  You can ask us to restrict the processing of personal data we hold about you in certain circumstances. Please get in touch using the details at Section “How to Contact Us” at the end of this policy
8. Make a complaint. You may make a complaint about our data processing activities, please contact us. See Section “How to Contact Us” at the end of this policy.
9. Getting in touch. To make enquiries and/or to exercise any of your rights in this privacy policy please contact us. See “How to Contact Us” at the end of this policy.
   

10. Data security We take security and privacy seriously. We will endeavour to take all reasonable steps to keep your personal data secure once it has been transferred to our systems. We adopt appropriate, industry standard data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction. For more information how we keep our online data safe, visit https://freewebstore.com/privacy.html .

How to Contact Us
11. Getting in touch If you have any queries relating to this Privacy Policy or Norvic Philatelics' use of your personal or financial data, please contact ian@norphil.co.uk or alternatively write to: Norvic Philatelics
PO Box 119
Dereham
NR20 3YN
United Kingdom