Effective Date: July 1st 2021 Privacy and Cookie Policy for www-super-rod.co.uk
We respect your privacy and are committed to protecting your personal data (see paragraph 4 below for details of what personal data means). This privacy policy will inform you about how we collect and look after your personal data when you visit our websites (regardless of where you visit it from), when you call us, or when you otherwise interact with us. This policy also tells you about your privacy rights.
Whenever we collect information about you, we make decisions about how or why we process that personal data. We are responsible for ensuring that your personal data is used in accordance with data protection laws, to the extent they apply, such as the General Data Protection Regulation (GDPR) in Europe, the California Consumer Privacy Act (CCPA) in the United States, and other applicable global privacy regulations.
This privacy policy is provided in a layered format so you can scroll through to the specific areas set out below alternatively, you can download a PDF version of the policy here: //super-rod.co.uk/wp-content/uploads/2021/09/Privacy-Policy_Super-Rod-website.pdf
- The controller
- Third-party links
- Changes to the privacy policy
- The data we collect and process about you
- How we collect your data
- How we use your personal data
- Cookies
- Do Not Track signals
- Disclosures of your personal data
- International transfers
- Data security
- Data retention
- Your legal rights
- Children
- Contact us
1. The controller
To the extent the GDPR applies, and for other data privacy laws with a data controller requirement, Super Rod is the data controller that directs the purposes for which your personal data is processed.
2. Third-party links
The Super Rod website may include links to third-party websites (including to those websites that allow you to purchase products or services), plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy on every website you visit.
3. Changes to the privacy policy
We regularly review our privacy policy. Updated privacy policies will be made available through our websites. We will comply with applicable data privacy laws when making changes to our privacy practices. The date at the top of this privacy policy indicates the date when the policy was last updated and the updates went into effect.
4. The data we collect and process about you
“Personal data”, (also referred to as “personal information” or “personally identifiable information” in some jurisdictions/regions), means any information from which a person is identifiable or from which that person can be identified. It does not include data where the person’s identity has been removed (anonymous or de-identified data), unless it still possible to identify the person from that data in combination with other data held by the data controller.
In the context of this privacy policy, “processing” means any activity relating to personal data, including by way of example, collection, storage, use, consultation, disclosure, sharing and transmission.
Depending on which websites you use, and your activity on those websites, we may collect, use, store and transfer different kinds of personal data about you, which we have categorized as follows:
Profile Data includes your name, username and password (for the relevant website), email address, mailing address, payment information, purchases or orders you make, your interests, preferences, and on-line or telephonic feedback and survey responses.
Technical Data includes your internet protocol (IP) address, browser type and language, Internet service provider or mobile carrier, referring and exit websites and applications, time zone setting, location, browser plug-in types and versions, operating system and platform, and other technology identifiers on the devices you have used to access this website.
Usage Data includes information about how you use our website, products, and services.
We also collect, use and share Aggregated Data such as statistical or demographic data for various purposes. Aggregated Data may be derived from your personal data but is not considered personal data by law, as it will not directly or indirectly reveal your identity. For example, we may aggregate Usage Data to calculate the percentage of users who are accessing a specific website feature. However, if we combine or connect the Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data, which will be used in accordance with this privacy policy.
In relation to our customers, and for the purposes set out in this privacy policy, we do not collect Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, information about your health, and genetic and biometric data), with the exception of trade union membership in particular circumstances. In those circumstances, we will seek your explicit consent.
5. How we collect your data
We use different methods to collect data from and about you, including through:
- Data you enter. If you order a product, engage in our discussion forums, complete a warranty card, enter contests, or sign up for reward points, we will collect that relevant information.
- Automated technologies or interactions. As you interact with our websites, we will automatically collect Technical Data about your equipment and software, and we log usage data, such as when you view or click on content, perform a search, share articles, or apply for jobs. As further described under “Cookies” below, we use cookies and similar technologies (e.g., web beacons, pixels, ad tags, and device identifiers) to recognize you and/or your device(s) on, off, and across different websites and devices.
- Third parties or publicly available sources. We may receive data about you from third-party retailers who sell our products, primarily to enable us to ship products you have ordered through the third-party to you, or to fulfil legal or regulatory obligations.
6. How we use your personal data
To the extent the GDPR or another relevant privacy law applies, we will only use your personal data when we have a lawful basis to do so. The table below describes all the ways we plan to use your personal data, and the legal bases we rely on to do so.
Information we collect
Information:
If you place an order with us, we will collect the following Profile Data: your name, mailing and billing address, email address, telephone number, and payment information.
Why we collect it:
This information is necessary to provide you (or the company which you represent, where your order is on behalf a company) with the product you ordered, or to take steps at your request prior to providing you with the product.
Lawful basis for the processing:
Where you are contracting with us on your own behalf: necessary for the performance of a contract or in order to take steps to enter into a contract.
Where you are contracting with us as a representative of a company (e.g. your employer): necessary for our legitimate interests of taking and fulfilling orders from companies (which does not cause you unfair prejudice because it is used to complete the purchase you have requested).
Information:
If you complete a warranty card, or ask us to provide warranty services, we will collect the following Profile Data: your name, address, telephone number, and email address, in addition to the product(s) batch number you purchased place and the date of purchase.
Why we collect it:
This information is necessary to register your product for the warranty or for us to provide warranty services.
Lawful basis for the processing:
Where you are contracting with us on your own behalf: necessary for the performance of a contract or in order to take steps to enter into a contract.
Where you are contracting with us as a representative of a company (e.g. your employer): necessary for our legitimate interests of providing warranties to companies in relation to their purchases (which does not cause you unfair prejudice because it is used to enable the company to register for the warranty).
Information:
If you choose to complete a survey or leave a review, we will collect the following Profile Data: your name, address, email address, phone number.
Why we collect it:
This information is necessary for us to receive your input or feedback.
Lawful basis for the processing:
In some cases we may seek your consent for this processing.
Where we do not seek your consent, but you voluntarily provide us with a review or a survey response, our lawful basis for processing your personal data is that it is necessary for our legitimate interest of receiving your input or feedback about our products/services (which does not cause you unfair prejudice because it is used with the aim of improving our products/services rather than making decisions in relation to you).
Information:
You request or agree to receive electronic communications or mailings from us, we may collect the following Profile Data: your name, company name, email, phone number and physical address.
Why we collect it:
This information is necessary to send you the information you have requested.
Lawful basis for the processing:
Consent.
Information:
If you enter a contest, we will collect the following Profile Data: your name, email, phone number, and physical address.
Why we collect it:
This information is necessary for you to enter the contest and for us to provide you with the prize should you win.
Lawful basis for the processing:
Consent.
Information:
If you sign up for the Super Rod & Klein Tools Trades Club programs, we will collect the following Profile Data: your name, company name, email, phone number, physical address, preferred wholesaler, area of work and social media profiles.
Why we collect it:
This information is necessary to register you (or the company whom you represent) As a Trades Club Member and for you to receive rewards, special deals, exclusive content.
Lawful basis for the processing:
Where you are signing-up with the Super Rod & Klein Tools Trades Club on your own behalf: Necessary for the performance of a contract or in order to take steps to enter into a contract.
Information:
If you visit our website or interact with our electronic communications, we collect your IP address as well as electronic activity information about your use and interaction with our website or communications, and geolocation data. You can find more information on how we collect information in the Cookies section of this policy.
Why we collect it:
This data is necessary for us to ensure the security and functionality of our website and related systems. Furthermore, this data is used to offer products and services that may be of interest to you (or the company whom you represent).
Lawful basis for the processing:
This is necessary for our legitimate interest of ensuring that our websites function and are secure for you to use (which does not cause you unfair prejudice because it provides you with a functional and secure website to use for purchases).
With respect to using this data to offer products and services that may be of interest to you:
- where you are an using the website on your own behalf: consent.
- When you are using the website as a representative of a company (e.g. your employer): necessary for our legitimate interests of promoting our products/services to the company which you represent (which does not cause you unfair prejudice because it relates to offering goods/services to your company rather than to you as an individual)
This is necessary for our legitimate interest of ensuring that our websites
Where we rely on consent, depending on the applicable data protection/privacy law which applies, you have the right to withdraw your consent at any time by contacting us or by clicking on the “unsubscribe” link in marketing emails or text messages. Withdrawing consent will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you.
In cases where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you or the company whom you represent (for example, to provide you or the company whom you represent with goods or services). In such cases, we may have to cancel a product or service you or the company whom you represent have with us, but we will notify you at the time when this occurs.
Furthermore, where our processing of your personal data is necessary for our legitimate interests, depending on the applicable data protection/privacy law which applies, you can object to this processing at any time. If you do this, we will need to show either a compelling reason why our processing should continue, which overrides your interests, rights and freedoms or that the processing is necessary for us to establish, exercise or defend a legal claim.
7. Cookies
A cookie is a small piece of data that a website asks your browser to store on your computer or mobile device. The cookie allows the website to “remember” your actions or preferences over time. Cookies are widely used by online service providers in order to (for example) make their websites or services work, or to work more efficiently, as well as to provide reporting information.
Most Internet browsers support cookies; however, users can set their browsers to decline certain types of cookies or specific cookies by configuring their browser’s privacy settings (please refer to your browser’s help function to learn more about cookie controls). Further, users can delete cookies at any time. Note that if you disable cookies entirely, our websites may not function properly.
Why do we use cookies?
We use cookies to learn how you interact with our content and to improve your experience when visiting our website(s). For example, some cookies remember your preferences and where you left off so that you do not have to repeatedly make these choices when you visit one of our websites. They can also be used to remember which products you added to your cart while you continue to browse our websites. Additionally, cookies allow us to serve you specific content, such as videos on our website(s). We may employ the learnings of your behaviour on our website(s) to serve you with targeted advertisements on third-party website(s) in an effort to “re-market” our products and services to you.
What types of cookies do we use?
Third-party cookies belong to and are managed by other parties, such as Google Analytics or service providers. These cookies may be required to render certain forms, such as email list sign-up, or to allow for some advertising outside of our website.
Session cookies are temporary cookies that are used to remember you during the course of your visit to the website, and they expire when you close the web browser.
Persistent cookies are used to remember your preferences within the website and remain on your desktop or mobile device even after you close your browser or restart your computer. We use these cookies to analyse user behaviour to establish visit patterns so that we can improve our website functionality for you and others who visit our website(s). These cookies also allow us to serve you with targeted advertising and measure the effectiveness of our site functionality and advertising.
How are cookies used for advertising purposes?
Cookies and ad technology such as web beacons, pixels, and anonymous ad network tags help us serve relevant ads to you more effectively. They also help us collect aggregated audit data, research, and performance reporting for advertisers. Pixels enable us to understand and improve the delivery of ads to you, and know when certain ads have been shown to you. Since your web browser may request advertisements and web beacons directly from ad network servers, these networks can view, edit, or set their own cookies, just as if you had requested a web page from their site.
Although we do not use cookies to create a profile of your browsing behaviour on third-party sites, we do use aggregate data from third parties to show you relevant, interest-based advertising. We do not provide any personal data that we collect to advertisers. You can choose not to enable off-site and third-party-informed advertising by adjusting your cookie settings. Doing so will not remove advertising from the pages you visit, but, instead, will result in the ads you see not being matched to your interests. This implies that the ad(s) you see will not be matched to your interests by those specific cookies.
How are third party cookies used?
For some of the functions within our websites we use third party suppliers, for example, when you visit a page with videos embedded from or links to YouTube. These videos or links (and any other content from third party suppliers) may contain third party cookies, and we encourage you to consult the privacy policies of these third party vendors on their websites for information regarding their use of cookies.
How do I reject and delete cookies?
You can choose to reject or block all or specific types of cookies for Super Rod’s website and/or the websites of any third party suppliers by changing your browser settings. Please note that most browsers automatically accept cookies. Therefore, if you do not wish cookies to be used, you may need to actively delete or block the cookies. If you reject the use of cookies, you will still be able to visit our websites but some of the functions may not work correctly. You may also visit www.allaboutcookies.org for details on how to delete or reject cookies and for further information on cookies generally. By using our website without deleting or rejecting some or all cookies, you agree that we can place those cookies that you have not deleted or rejected on your device. You can also manage advertising cookies via http://optout.aboutads.info/.
Third-party cookies used on our website:
Google Analytics
We use Google Analytics to understand how our media campaigns work and how you interact with our website in order to improve the user experience. Personal data gets deleted between 1 minute and 2 years, depending on the type of analytic.
Google tracking cookies
Google tracking cookies enable us to understand if you complete certain actions on our website(s) after you have seen or clicked through one of our adverts served via Google. Based on the content you have engaged with on our websites Google are able to deliver some targeted adverts across other Google partner websites. Personal data gets deleted between 180-540 days.
Facebook helps you stay in touch with your network through their website/ mobile application. We make it easier for you to share any content of interest on Facebook and sometimes, we may present you with some targeted advertisements on Facebook based on your engagement with our website(s). Personal data gets deleted after 1 year.
The LinkedIn insight tag allows us to perform campaign reporting and unlock valuable insights about website visitors that may come via the campaigns we run on LinkedIn. Personal data gets deleted after 90 days.
Twitter provides real time updates from across the globe on the latest trending stories, ideas and opinions from the Twitter accounts or hashtags that you choose to follow. We make it easier for you to share our website content over Twitter. At times, we may present you with some ads on Twitter based on your engagement with our website(s). Personal data gets deleted after 1 year.
YouTube
We embed videos or insert links to videos from YouTube on our website(s). As a result, when you visit a page with content embedded from or linked to YouTube, you may be presented with cookies from YouTube. Personal data gets deleted between 180-540 days.
MailChimp
These cookies are used to help track email subscriptions and engagement with MailChimp emails or other content sent to opt-in customers. Personal data gets deleted after 1 year.
8. Do Not Track signals
Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, our services do not currently respond to browser DNT signals. For more information on DNT, see https://allaboutdnt.com/.
9. Disclosures of your personal data
We may disclose your personal data to our affiliated companies, when required by law, or to our service providers (e.g., when necessary for the administration and maintenance of our IT systems). Where you have provided us with your personal data in your capacity as a representative of a company, we may disclose your personal data to that company. We require our service providers to provide written assurances regarding the security and privacy protections they have in place to protect any personal data transferred or disclosed to them, as well as their compliance with our security requirements and any applicable laws and regulations.
The third parties we may share your personal data with include:
- third-party service providers (for example, administration and maintenance of IT systems, payments providers, email marketing services providers) ;
- regulatory authorities;
- other companies in relation to managing the proposed sale, restructuring, transfer or merging of any or all part(s) of our business, including to respond to queries from the prospective buyer or merging organisation; and
- our auditors and legal advisors.
11. Data security
We have put in place reasonable and appropriate security measures (which will include, where relevant, those required by applicable law) to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to employees, agents, contractors, and other third parties who need to know for business purposes. They will only process your personal data according to our instructions and they are subject to the duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach, and we will notify you and any applicable regulators of a breach where we are legally required to do so.
12. Data retention
We will only retain your personal data for as long as is reasonably necessary to fulfil the purposes that we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint, or if we reasonably believe there is a prospect of litigation with respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from the unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.
In some circumstances, we will anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without providing further notice to you.
13. Your legal rights
You may have the following rights available to you, depending on your jurisdiction or depending on the jurisdiction in which the data was collected, including the right to:
- Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you.
- Request the correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, although we may need to verify the accuracy of the new data you provide to us.
- Request the erasure of your personal data. This enables you to ask us to delete or remove personal data. Note, however, that we may not always be able to comply with your request (for example, we cannot erase information if we are required to keep it for regulatory purposes or to fulfil an order you have placed).
- Restrict or object to the processing of your personal data when we are relying on a legitimate interest, and there is something about your particular situation which makes you want to object to the processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Data portability. In some instances, you may have the right to receive the information about you in a portable and readily usable format. Before providing this information, we must be able to verify your identity.
- Opt-out of the sale of personal data. We do not knowingly sell your personal data to third parties, nor do we intend to, as those terms are defined in the CCPA. We also have not done so for the last 12 months. In addition, we have contracts with our service providers to prohibit any sale of the personal information we provide them; but if you have any concerns that our third parties might be selling your information, please contact us.
You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We will not discriminate against you in any way for exercising your rights.
Depending on the applicable data protection/privacy law which applies, you may also have the right to lodge a complaint with local state regulators/data protection authorities – please see paragraph 16.
What we may need from you
We may need to request specific information from you to help us verify your identity and ensure your right to access your personal data (or to exercise any of your other rights). Where applicable, this is a security measure to ensure that the personal data is not disclosed to any person who has no right to receive it. For example, we may verify the email address we have on file with the email address from which you are sending a request. We may also ask you to verify certain past orders, or to confirm your last four digits on a card you recently used to place an order. If you have an account with us, we may ask you to verify yourself by logging in. We may also contact you to ask you for further information in relation to your request, in order to speed up our response.
15. Children
These websites are not intended for use by children, and we do not knowingly collect data relating to children under the age of 16. .
16. Contact us
If you have any questions about this privacy policy or our privacy practices, please call us at +44(0)1495 792000 or email us at sales@super-rod.co.uk. You can also contact us via the compact form on the website at: https://www.super-rod.co.uk/home
Without prejudice to any other administrative or judicial remedy you might have, you may have the right to lodge a complaint with local state regulators/data protection authorities if you believe that we have infringed applicable privacy or data protection requirements when processing personal data about you.
The appropriate data protection authority in the United Kingdom is:
The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow – Cheshire SK9 5AF
Telephone: +44 1625 545 745
E-mail: international.team@ico.org.uk
Website: https://ico.org.uk