Privacy Policy at The Stove House

Privacy Policy


 

Our Privacy Notice

Our Privacy & Security Policy outlines the information we collect about you, how we use, disclose and otherwise manage this information and the choices you have to restrict our usage of this information. For the purposes of this Privacy Policy, the “Site” means woodburning-stoves-west-sussex.myshopify.com, “we” and “us” means The Stove House Ltd and we are what’s known as a Data Controller. When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

You may interact with us in several different ways including via our website, our shop, our business representatives or our newsletters. You may be a residential customer who visits our shop or an enterprise customer (business, charity or local authority for example). Or you may be an employee or a prospective member of staff. This document covers the categories of personal information we collect through each of the ways you interact with us and the type of services you take from us.

The Stove House is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified you can be assured that it will only be used in accordance with this privacy statement.

In brief, the reasons for your data to be held/processed and for you to be contacted by us, falls under one of the following:

1) You have given us Consent

2) Contractual Obligation

3) Legal Obligation

4) Legitimate Interest

Please click below to learn more about the topic that is of interest to you:

Information collected about our Customers

Why do we collect your personal information?

Information collected via our website

Cookies

Making Contact via our website

Information collected for our Email Newsletter

Information collected about our Customers

Who we share your personal Information with

Retention of Personal Information

Information collected about Job Applicants, Current and Former Employees

Recruitment

Employment

Retention of employee personal information

Who we share our employees’ personal information with

Security of your Personal Information

Sale of our Business

Policy Changes

How to Contact Us about your personal information

Your rights

 

Information collected about our Customers

Why do we collect your personal information?

When asking for our professional services: on-line, in the showroom, or over the telephone you are giving consent (“opting-in”) to The Stove House to use that data to provide a quality of service for:

  • Delivering a high-quality professional service allowing us to help you with your enquiry you have.
  • To inform you of prices, product information, servicing, spares, updates and analytics. 
  • Internal record keeping.
  • If you have/do purchase/d a fire your details will be held to help the stove house obtain spares or further information on the product/s at a later date.
  • From time to time, we may also use your information to contact you for our own market research purposes on the products similar to the ones you have shown an interest in.
  • We will contact you by email, phone, text, messenger, or mail. Whichever you have submitted.
  • Certain data may be shared with 3rd parties for contractual and/or legal obligation, such as registering your appliance for a guarantee or with HETAS, delivery services, installation service, accountancy purposes. None of your data will be shared or sold to 3rd parties for further marketing or sales.
  • Delivery of products and services you have ordered from us;
  • Managing the services we provide to you;
  • Charging you for the products and services you have ordered from us;
  • Us to be able to answer questions you may have now and in the future about the services we have provided to you;
  • Us to help run and grow our business.

We will not collect any personal information from you we do not need.

Information collected via our website

You can visit our site www.thestovehouseltd.co.uk without telling us who you are or providing us with any personal information. However, we may collect the I.P. (Internet protocol) addresses of all our website visitors and other related information to be used to improve our website. We use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. 

Cookies

We use cookies and similar technologies to collect information about the pages you access or visit. Cookies are bits of information that are automatically stored on your computer, so we can recognise you when you return.  This enables us to understand your use of our website so that we can continue to improve and refine it for a better customer experience.  Cookies can be disabled via your browser; however, this may affect the quality of the features on our site.  The information collected through cookies may be combined with other identifiable personal information from our records and other sources. We may use this combined information for future marketing initiatives. To find our further information about cookies please visit a third-party information site, such as www.allaboutcookies.org. To view Shopify’s full cookie policy see here.

When you visit our website, you are presented with the option to “opt-in” to accept cookies. Our lawful basis for using cookies is your Consent via opting in. You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

We collect Device Information using additional technologies:

  • “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
  • “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

 

Making Contact via our website

You may choose to raise a query with us via the contact forms provided on our website. In this case we will collect and store your name and email address. As an alternative method of contact you may click on one of the email addresses on our website. In this case the link will open your own email application and you will not need to save your information on our website.

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over other websites. We are not responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the specific privacy statement applicable to the website in question.

MINORS

The Site is not intended for individuals under the age of 18.

 

Information collected for our Email Newsletter

You may choose to subscribe to our email newsletter from our website. If you subscribe to our newsletter we use a “double opt-in” method to verify you are who you say you are. In order to send you the newsletter we will collect your name and email address and your preferences. We gather statistics around email opening and clicks using industry standard technologies. 

Our lawful basis for holding this personal information is that you provide your Consent through opting in. You may withdraw your consent at any time by clicking the “unsubscribe” link contained in each newsletter.

Information collected about our Customers

When you make a purchase or attempt to make a purchase through the Site, in the showroom or over the telephone we collect certain information from you, including your name, billing address, shipping address, payment information (including credit and debit card numbers ) email address, and phone number and other location information required to perform the service.  .  We refer to this information as “Order Information.” Payment can also be made by PayPal and you can view their privacy policy here: https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev   We will retain this information to assist you while you remain a customer of The Stove House.

Our lawful basis for collecting this information is that we have a Legitimate Interest to enable us to provide products and services to you.

We use the Order Information that we collect generally to fulfil any orders placed (including processing your payment information, arranging for shipping, carrying out a survey, installation and providing you with invoices and/or order confirmations).  Additionally, we use this Order Information to:

  • Communicate with you;
  • Screen our orders for potential risk or fraud; and
  • When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
  • We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns.

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above.  For example, we use Shopify to power our online store, you can read more about how Shopify uses your Personal Information here:  https://www.shopify.com/legal/privacy . We also use Google Analytics to help us understand how our customers use the Site, you can read more about how Google uses your Personal Information here:  https://www.google.com/intl/en/policies/privacy/ . You can also opt-out of Google Analytics here:  https://tools.google.com/dlpage/gaoptout

 

Who we share your personal Information with

We use a number of service providers to assist us deliver products and services to you and share necessary portions of your personal information with them:

  • Our website host is, Shopify which is hosted outside of the EU and your information will be transferred outside of Europe, including Canada and the United States but Shopify complies with the EU’s data privacy regulations; Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example if you place an order with us via our site), or otherwise to pursue our legitimate business interests listed above. 
  • Our email newsletter provider, Mailchimp, holds the personal information you provide that enables us to send you the newsletter. The information is only used for email newsletter subscriptions and product updates and no other purpose. The provider hosts your information outside of the EU but is an organisation that complies with the EU’s data privacy regulations;
  • Our point of sale systems, Shopify, Paypal and Barclaycard, holds personal and transaction information about our residential customers. The information is hosted in the UK other than Shopify which is hosted outside of the EU but complies with the EU’s data privacy regulations;
  • Contract documents, records and invoices of our customers are held on our intranet system and hosted by our computer programmers based in the UK.
  • Our accountants are based in the EU and our accounting system, Sage, both hold your personal information related to invoices and payments. If you are a staff member, the same systems holds information about your pay, tax and pensions. The providers host your information inside and outside of the EU and comply with the EU’s data privacy regulations;

All of our service providers are required to maintain the confidentiality and security of your personal information and to use it only in compliance with applicable privacy laws. These companies are not authorised to use your information in any manner, other than in helping us to provide you with products and services or as otherwise required by applicable law.

We may also disclose specific personal information about you if required by law, governmental request or court order if, based on our good faith belief, it is necessary to conform or comply with such law, request or court order.

BEHAVIOURAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.  For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

 

Retention of Personal Information

We only keep your personal information as long as necessary for the purposes we collected it, or as otherwise required by law.

 

Information collected about Job Applicants, Current and Former Employees

Recruitment

All of the information you provide during the recruitment process will only be used for the purpose of progressing your application and we will not share any of the information you provide during the recruitment process with any third parties.  The information you provide will be held securely by us and/or our data processors whether the information is in electronic or physical format.

We will use the contact details you provide to us to contact you to progress your application. We will also ask you about your previous experience, education, referees and for answers to questions relevant to the role you have applied for.  We will use the information you provide to assess your suitability for the role you have applied for. 

If you are unsuccessful following assessment for the position you have applied for, we may ask if you would like your details to be retained for up to a period of six months.

Employment

If we make a conditional offer of employment we will ask you for information so that we can carry out pre-employment checks. We need to confirm the identity of our staff, their right to work in the United Kingdom and seek assurance as to their trustworthiness, integrity and reliability. 

You will therefore be required to provide proof of your identity and proof of your qualifications. We will contact your referees, using the details you provide in your application, directly to obtain references.

If we make a final offer, we will also ask you for the following:

  • Bank details – to process salary payments;
  • National Insurance number and tax codes for use with HMRC; and
  • Emergency contact details – so we know who to contact in case you have an emergency at work.

During your employment with us we will collect and store information in your personnel file such as performance reviews and leave records.

Retention of employee personal information

If you become a member of staff the information you provide during the application process will be retained by us as part of your employee file for the duration of your employment plus 6 years following the end of your employment.

If you are unsuccessful at any stage of the process, the information you have provided until that point, and our interview notes will be retained for 6 months from your application.

Who we share our employees’ personal information with

We share our employees’ personal information with our accountant for preparing payroll, with HMRC and with our pensions provider. We may also disclose specific personal information about you if required by law, governmental request or court order if, based on our good faith belief, it is necessary to conform or comply with such law, request or court order.

Security of your Personal Information

We maintain reasonable administrative, technical and physical safeguards in an effort to protect against the loss, theft, unauthorised access, use, modification and disclosure of personal information in our custody and control. We only provide access to personal information to employees and authorised service providers who require such information for the purposes described in this Privacy & Security Policy.

To provide you with an increased level of security, online access to certain personal information may be protected with a password you select. We strongly recommend that you do not disclose your password to anyone. We will never ask you for your password in any unsolicited communication.

Sale of our Business

In the event of a merger or transfer of our business to a new owner we may transfer or share information we have about you to a third-party acquirer.

Policy Changes

We may periodically update this Privacy Policy for new, unanticipated uses not previously disclosed. Any changes made will be posted here. We will treat your personal information in accordance with the Privacy Policy in place at the time your information was collected.

This policy was last updated in May 2018.

How to Contact Us about your personal information

Please do contact us with any questions or concerns about our Privacy Policy.

If you wish to access or update the personal information we have about you, or to correct factual errors in our records, please email us or write to us at the addresses below. To protect your privacy, we will take reasonable steps to help verify your identity before granting access or making corrections.

The Stove House, Bepton Road, Midhurst, West Sussex GU29 9LU

Email: info@thestovehouseltd.co.uk  /  Telephone:01730 810931

 

 Your rights

You can request a copy of the personal information we hold on you at any time.  If you believe the information we process on you is incorrect you can request to see this information, and have it corrected or deleted. If we are providing a service to you under contract, then it may not be possible to delete your information.  We may also be required to retain some parts of your personal information for legal reasons – such as invoice and payment records. Please make such a request in writing. There will be no charge for reasonable requests for information and we will respond within 30 days. If it will take longer than 30 days to meet your request we will advise you accordingly.

Some subscription choices can also be amended by clicking the links found on the footer of some of our marketing emails.

If you wish to raise a request regarding your personal information or to register a complaint on how we have handled your personal data, please contact us at info@thestovehouseltd.co.uk  

 If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s  Office at  https://ico.org.uk/