Privacy Notice

This is the privacy notice of Shapes by Lolo. In this document, “we”, “our”, or “us” refer to Shapes by Lolo.

This privacy notice aims to inform you about how we collect and process any information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information. It tells you about your privacy rights and how the law protects you.

We are committed to protecting your privacy and the confidentiality of your personal information. Our policy is not just an exercise in complying with the law, but a continuation of our respect for you and your personal information.

We undertake to preserve the confidentiality of all information you provide to us, and hope that you reciprocate.

Our policy complies with the Data Protection Act 2018 (Act).

The law requires us to tell you about your rights and our obligations to you in regard to the processing and control of your personal data. We do this now, by requesting that you read the information provided at http://www.knowyourprivacyrights.org

We do not share, or sell, or disclose to a third party, any information collected through our website.

1. Data Protection Officer

We have appointed a data protection officer (DPO) who is responsible for ensuring that our policy is followed.

2. Data we process

We may collect, use, store and transfer different kinds of personal data about you. We have collated these into groups as follows:

Your identity includes information such as first name and last name that you may have provided at some time.

Your contact information includes information such as billing address, delivery address, email address, telephone numbers and any other information you have given to us for the purpose of communication or meeting.

3. Complaints regarding content on our website

If you complain about any of the content on our website, we shall investigate your complaint.

If we feel it is justified or if we believe the law requires us to do so, we shall remove the content while we investigate.

Free speech is a fundamental right, so we have to make a judgment as to whose right will be obstructed: yours, or that of the person who posted the content that offends you.

If we think your complaint is vexatious or without any basis, we shall not correspond with you about it.

4. Job application and employment

If you send us information in connection with a job application, we may keep it for up to three years in case we decide to contact you at a later date.

If we employ you, we collect information about you and your work from time to time throughout the period of your employment. This information will be used only for purposes directly relevant to your employment. After your employment has ended, we will keep your file for six years before destroying or deleting it.

5. Communicating with us

When you contact us, whether by telephone, through our website or by e-mail, we collect the data you have given to us in order to reply with the information you need.

We keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications with you to provide a high quality service.

6. Complaining

When we receive a complaint, we record all the information you have given to us.

We use that information to resolve your complaint.

We may also compile statistics showing information obtained from this source to assess the level of service we provide, but not in a way that could identify you or any other person.

7. Affiliate and business partner information

This is information given to us by you in your capacity as an affiliate of us or as a business partner.

It allows us to recognise visitors that you have referred to us, and to credit to you commission due for such referrals. It also includes information that allows us to transfer commission to you.

The information is not used for any other purpose.

We undertake to preserve the confidentiality of the information and of the terms of our relationship. 

We expect any affiliate or partner to agree to reciprocate this policy.

8. Information we obtain from third parties

Although we do not disclose your personal information to any third party we sometimes receive data that is indirectly made up from your personal information from third parties whose services we use.

9. Data may be processed outside the European Union

Our websites are hosted in the United Kingdom.

We may also use outsourced services in countries outside the European Union from time to time in other aspects of our business.

Accordingly data obtained within the UK or any other country could be processed outside the European Union.

10. Verification of your information

When we receive any request to access, edit or delete personal identifiable information we shall first take reasonable steps to verify your identity before granting you access or otherwise taking any action. This is important to safeguard your information.

11. Use of site by children

We do not sell products or provide services for purchase by children, nor do we market to children.

If you are under 18, you may use our website only with consent from a parent or guardian.

12. Encryption of data sent between us

We use Secure Sockets Layer (SSL) certificates to verify our identity to your browser and to encrypt any data you give us.

Whenever information is transferred between us, you can check that it is done so using SSL by looking for a closed padlock symbol or other trust mark in your browser’s URL bar or toolbar.

13. How you can complain

If you are not happy with our privacy policy or if you have any complaint then you should tell us.

If a dispute is not settled then we hope you will agree to attempt to resolve it by engaging in good faith with us in a process of mediation or arbitration. 

If you are in any way dissatisfied about how we process your personal information, you have a right to lodge a complaint with the Information Commissioner’s Office (ICO). This can be done at https://ico.org.uk/make-a-complaint/. We would, however, appreciate the opportunity to talk to you about your concern before you approach the ICO.

14. Retention period for personal data

Except as otherwise mentioned in this privacy notice, we keep your personal information only for as long as required by us:

• to provide you with the services you have requested;

• to comply with other law, including for the period demanded by our tax authorities;

•to support a claim or defence in court.

15. Compliance with the law

Our privacy policy has been compiled so as to comply with the law of every country or legal jurisdiction in which we aim to do business. If you think it fails to satisfy the law of your jurisdiction, we should like to hear from you.

However, ultimately it is your choice as to whether you wish to use our website.

16. Review of this privacy policy

We may update this privacy notice from time to time as necessary. The terms that apply to you are those posted here on our website on the day you use our website. We advise you to print a copy for your records.

If you have any question regarding our privacy policy, please contact us.

 

GDPR and Privacy Policy

European Union GDPR (General Data Protection Regulations)

The EU GDPR is designed to help all of us have more control over our personal data, and how is it used.

Who does the information GDPR apply to?

Data subjects, being all visitors and users of any website who are members of the European Union, and therefore who submit personal data. [replace name]  is the data processor and data controller of this site. You can find out more about this law here.

Privacy Policy

Effective from 25th May, 2018

This Privacy Policy sets out how we use and protect information that you may provide when you use this website.  Your privacy is protected and important to us. If you provide identifiable personal information it will only be used to help us fulfil your project requirements.

[replace name]  is the company who collects any personal data submitted through [replace url] 

We may update this policy periodically, please check this page to ensure that you are in agreement with any changes.

What We Collect

Personal information, basically any data that can be used to identify or contact you is collected so we can service your requirements.  This could include your name, business name, address details, email, telephone numbers, or information pertaining to your exhibition stand requirements. You may also at times be asked to leave a message about your enquiry or project brief. Websites also collect your IP address through the use of Cookies (find out more about cookies below).

If you opted-in to our mailing list, you may receive occasional emails on important updates or service information. You have the right to opt-out or and have any personal details removed at any time, please email [replace email address]

What We Do With The Information We Collect

Information is saved until the enquiry is dealt with, and then archived with the project or on cloud based systems if you are an ongoing client. We also retain your contact details and information in the emails you have sent, but you can request to have your personal details deleted at any time.

We will not sell, distribute, or lease your personal information to third parties unless we have your express permission, or are required by law to do so. We may use your personal information to send you relevant information about services we offer, or information you need as part of the services we offer.

Data Security

In our continued commitment to ensuring that your information is secure and to prevent unauthorised access or disclosure, we have suitable physical, electronic and managerial procedures in place to safeguard and secure the information we collect online.

  • Data is stored on a secure cloud-based server or on a secure, password protected computer with limited user access.
  • Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit. Any data you send is at your own risk.
  • We have procedures including 2FA, passwords, restricted access and other security features in place to keep your data secure once we receive it.
  • [replace name]  will NEVER pass on your personal data to third parties without first getting your explicit consent.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  • Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used for direct marketing purposes
  • If you have previously opted-in to a mailing list, or provided other information, you can find out what information we hold, and ask us to remove or not to use any of it, by writing to, or emailing [replace email address]
  • You may request details of personal information which we hold about you.
  • If you believe that any information we are holding on you is incorrect or incomplete, please write to, or email us as soon as possible at [replace email address]  We will promptly correct any information.