The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore the way this website processes, stores and protects user data and information will also be detailed within this policy.
This website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies to all UK national laws and requirements for user privacy.
Cookies are small files saved to the user’s computers hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website. Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors.
Contact & Communication
Users contacting this website and/or its owners do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use, as detailed in the Data Protection Act 1998. Every effort has been made to ensure a safe and secure form to email submission process but advise users using such form to email processes that they do so at their own risk.
This website and its owners use any information submitted to provide you with further information about the products / services they offer or to assist you in answering any questions or queries you may have submitted. This includes using your details to subscribe you to any email newsletter program the website operates but only if this was made clear to you and your express permission was granted when submitting any form to email process. Or whereby you the consumer have previously purchased from or enquired about purchasing from the company a product or service that the email newsletter relates to. This is by no means an entire list of your user rights in regard to receiving email marketing material. Your details are not passed on to any third parties.
This website operates an email newsletter program, used to inform subscribers about products and services supplied by this website. Users can subscribe through an online automated process should they wish to do so but do so at their own discretion. Some subscriptions may be manually processed through prior written agreement with the user.
Subscriptions are taken in compliance with UK Spam Laws detailed in the Privacy and Electronic Communications Regulations 2003. All personal details relating to subscriptions are held securely and in accordance with the Data Protection Act 1998. No personal details are passed on to third parties nor shared with companies / people outside of the company that operates this website. Under the Data Protection Act 1998 you may request a copy of personal information held about you by this website’s email newsletter program. A small fee will be payable. If you would like a copy of the information held on you please write to the business address at the bottom of this policy.
Email marketing campaigns published by this website or its owners may contain tracking facilities within the actual email. Subscriber activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include; the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity [this is by no far a comprehensive list].
This information is used to refine future email campaigns and supply the user with more relevant content based around their activity.
In compliance with UK Spam Laws and the Privacy and Electronic Communications Regulations 2003 subscribers are given the opportunity to un-subscribe at any time through an automated system. This process is detailed at the footer of each email campaign. If an automated un-subscription system is unavailable clear instructions on how to un-subscribe will by detailed instead.
Although this website only looks to include quality, safe and relevant external links, users are advised adopt a policy of caution before clicking any external web links mentioned throughout this website. (External links are clickable text / banner / image links to other websites, similar to; www.craftykingsboutique.co.uk or Kings Trains Models.)
The owners of this website cannot guarantee or verify the contents of any externally linked website despite their best efforts. Users should therefore note they click on external links at their own risk and this website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.
Adverts and Sponsored Links
This website may contain sponsored links and adverts. These will typically be served through our advertising partners, to whom may have detailed privacy policies relating directly to the adverts they serve.
Social Media Platforms
Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
Shortened Links in Social Media
This website and its owners through their social media platform accounts may share web links to relevant web pages. By default some social media platforms shorten lengthy urls [web addresses] (this is an example: http://bit.ly/zyVUBo). Users are advised to take caution and good judgement before clicking any shortened urls published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine urls are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.
Resources & Further Information
Data Protection Act 1998
Privacy and Electronic Communications Regulations 2003
Privacy and Electronic Communications Regulations 2003 – The Guide
Web Design Wales
v.1.0 February 2016. Edited and customised by: Lifesaver First Aid Services, 3 Monks Way, Dover, Kent, CT16 2DL.
(If you’d rather download a copy to read with a cuppa later, then you can find it below!)
How we use your data
LFAS uses your personal data:
- to provide goods and services to you
- to tailor our website to you and your preferences
- to manage any registered accounts that you hold with us
- to verify your identity
- for crime and fraud prevention, detection and related purposes
- with your agreement, to contact you electronically about promotional offers and products and services which we think may interest you
- for market research purposes – to better understand your needs
- to enable LFAS to manage customer service interactions with you and
- where we have a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute)
LFAS uses your personal data for electronic marketing purposes (with your consent) and may send you postal mail to update you on our latest offers.
LFAS aims to update you about products and services which are of interest and relevance to you as an individual.
You have the right to opt out of receiving promotional communications at any time, by:
- changing marketing preferences via your LFAS account
- informing a member of staff verbally (whether in person, on the phone or by virtual chat/video)
- making use of the “unsubscribe” link in our emails
- texting “STOP” number for texts; and/or
- contacting LFAS using the details in the ‘contact details’ section below
Sharing data with third parties
In order to make certain services available to you, we may need to share your personal data with some of our service partners. These include IT, delivery and marketing service providers.
LFAS only allows its service providers to handle your personal data when we have confirmed that they apply appropriate data protection and security controls. We also impose contractual obligations on service providers relating to data protection and security, which mean they can only use your data to provide services to LFAS and to you, and for no other purposes.
Other third parties
Aside from our service providers, M&S will not disclose your personal data to any third party, except as set out below. We will never sell or rent our customer data to other organisations for marketing purposes.
We may share your data with:
- credit reference agencies where necessary for card payments;
- governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so:
– to comply with our legal obligations;
– to exercise our legal rights (for example in court cases);
– for the prevention, detection, investigation of crime or prosecution of offenders; and
– for the protection of our employees and customers.
How long do we keep your data?
We will not retain your data for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of data, however the longest we will normally hold any personal data is 6 years. We will be happy to explain our retention policy
What personal data do we collect?
LFAS may collect the following information about you:
- your name, age, date of birth and gender
- your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address
- purchases and orders made by you
- your online browsing activities on M&S websites
- your password(s)
- when you make a purchase or place an order with us, your payment card details
- your communication and marketing preferences
- your interests, preferences, feedback and survey responses
- your location
- your correspondence and communications with LFAS; and
- other publicly available personal data, including any which you have shared via a public platform (such as a Twitter feed or public Facebook page)
Our website is not intended for children and we do not knowingly collect data relating to children.
This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the above personal data is collected directly, for example when you set up an online account on our websites, or send an email to our customer services team. Other personal data is collected indirectly, for example your browsing or shopping activity.
How we protect your data
LFAS is committed to keeping your personal data safe and secure.
Our security measures include: –
- encryption of data
- security controls which protect LFAS IT infrastructure from external attack and unauthorised access; and
- internal policies setting out our data security approach and training for employees
What you can do to help protect your data
LFAS will never ask you to confirm any bank account or credit card details via email. If you receive an email claiming to be from LFAS asking you to do so, please ignore it and do not respond.
If you are using a computing device in a public location, we recommend that you always log out and close the website browser when you complete an online session.
In addition, we recommend that you take the following security measures to enhance your online safety both in relation to LFAS and more generally:
- keep your account passwords private. Remember, anybody who knows your password may access your account.
- when creating a password, use at least 8 characters. A combination of letters and numbers is best. Do not use dictionary words, your name, email address, or other personal data that can be easily obtained. We also recommend that you frequently change your password.
- avoid using the same password for multiple online accounts.
You have the following rights:
- the right to ask what personal data that we hold about you at any time
- the right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you free of charge
- (as set out above) the right to opt out of any marketing communications that we may send you
- the right to restrict our processing of your data
If you wish to exercise any of the above rights, please contact us using the contact details set out below.
Legal basis for using your data
M&S collects and uses customers’ personal data because is it necessary for:
– the pursuit of our legitimate interests (as set out below);
– the purposes of complying with our duties and exercising our rights under a contract for the sale of goods to a customer; or
– complying with our legal obligations.
In general, we only rely on consent as a legal basis for processing in relation to sending direct marketing communications to customers via email or text message.
Customers have the right to withdraw consent at any time. Where consent is the only legal basis for processing, we will cease to process data after consent is withdrawn.
Our legitimate interests
The normal legal basis for processing customer data, is that it is necessary for the legitimate interests of M&S, including:-
– selling and supplying goods and services to our customers;
– protecting customers, employees and other individuals and maintaining their safety, health and welfare;
– promoting, marketing and advertising our products and services;
– sending promotional communications which are relevant and tailored to individual customers (including administering the Sparks loyalty scheme);
– understanding our customers’ behaviour, activities, preferences, and needs;
– improving existing products and services and developing new products and services;
– complying with our legal and regulatory obligations;
– preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies;
– handling customer contacts, queries, complaints or disputes;
– managing insurance claims by customers;
– protecting M&S, its employees and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to M&S;
– effectively handling any legal claims or regulatory enforcement actions taken against M&S; and
– fulfilling our duties to our customers, colleagues, shareholders and other stakeholders.
ON SEPERATE PAGE:
What are cookies?
How are cookies managed?
The cookies stored on your computer or other device when you access our websites are designed by:
– M&S, or on behalf of M&S, and are necessary to enable you to a make purchases on our website;
– third parties who participate with us in marketing programmes; and
– third parties who broadcast web banner advertisements on behalf of M&S.
What are cookies used for?
The main purposes for which cookies are used are: –
1. For technical purposes essential to effective operation of our websites, particularly in relation to on-line transactions and site navigation.
2. For M&S to market to you, particularly web banner advertisements and targeted updates.
3. To enable M&S to collect information about your browsing and shopping patterns, including to monitor the success of campaigns, competitions etc.
4. To enable M&S meet its contractual obligations to make payments to third parties when a product is purchased by someone who has visited our website from a site operated by those parties.
How do I disable cookies?
If you want to disable cookies you need to change your website browser settings to reject cookies. How you can do this will depend on the browser you use. Further details on how to disable cookies for the most popular browsers are set out below: –
For Microsoft Internet Explorer:
1. Choose the menu “tools” then “Internet Options”
2. Click on the “privacy” tab
3. Select the setting the appropriate setting
For Google Chrome:
1. Choose Settings> Advanced
2. Under “Privacy and security,” click “Content settings”.
3. Click “Cookies”
1. Choose Preferences > Privacy
2. Click on “Remove all Website Data”
For Mozilla firefox:
1. Choose the menu “tools” then “Options”
2. Click on the icon “privacy”
3. Find the menu “cookie” and select the relevant options
For Opera 6.0 and further:
1. Choose the menu Files”> “Preferences”
What happens if I disable cookies?
This depends on which cookies you disable, but in general the website may not operate properly if cookies are switched off. If you only disable third party cookies, you will not be prevented from making purchases on our sites. If you disable all cookies, you will be unable to complete a purchase on our sites.
Third party sites
M&S has partnered with certain trusted third parties to make additional products and services available to you, including:
– M&S Bank (previously M&S Money) accessible by clicking here
– M&S Energy (under partnering arrangements with SSE Energy Supply Limited) accessible by clicking here
– M&S Lunch to You on our M&S for Business site (under partnering arrangements with EWA Ltd) accessible by clicking here
– M&S Made-to-Measure Shirts (under partnering arrangements with Bivolino) accessible by clicking here
– M&S Personalised (under partnering arrangements with Hallmark Cards PLC) accessible by clicking here
These products and services can be accessed online through the relevant third party’s “microsite”. These websites, and others linked to from this Policy, are owned and operated by a third party and they are responsible for processing personal data in accordance with their own privacy policies.
If you have any questions about how LFAS uses your personal data that are not answered here, or if you want to exercise your rights regarding your personal data, please contact us by any of the following means:
Phone us on: 07925 237 352
Email us at: email@example.com
Write to us at: Data Protection Officer, Lifesaver First Aid Services, 43 Oswald Road, Dover, Kent, CT17 0JP
You also have the right to lodge a complaint with the Information Commissioner’s Office. Further information, including contact details, is available at https://ico.org.uk.
Updates and version history
This policy is version 2.0, and was adopted in May 2018.
Archived versions of the policy can be accessed here: