Processing of your personal data is an important issue for Silverado and we always want to be open and transparent with you about how and why we do it. This is the policy setting out how your personal data will be processed and protected in accordance with the GDPR which takes effect on 25 May 2018.
Who controls your personal data?
Silverado Retail Limited, registered at 31 Bond St, Brighton BN1 1RD (the company) is the controller of the personal data you submit to us and responsible for your personal data under applicable data protection law.
How do we store and secure your personal data?
We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.
Who can access your data?
Your data will only be used within the company. We never pass on, sell or swap your data for marketing purposes to third parties outside the company.
What is the lawful basis for processing?
Consent - We have checked that consent is the most appropriate lawful basis and have requested consent separate from our terms and conditions. We ask people to positively opt in to consent and don’t use pre-ticked boxes. We continue to process the data until consent is withdrawn and we inform you that you can withdraw consent at any time.
Contract – We rely on contract as a lawful basis in order to fulfill our obligations to you as a customer. We process your personal data in the act of complying with these obligations.
What are your rights?
The right to access: You have the right to request information about the personal data we hold on you at any time.
The right to rectification: You have the right to request rectification of your personal data if any are incorrect, including the right to have incomplete personal data completed.
The right to erasure: You have the right to erase any personal data processed by the company at any time except for the following situations;
- you have an ongoing customer service issue
- you have an open order which has not yet been shipped or partially shipped
- if you have misused or are suspected to have misused our services
If you have made a purchase, we will keep your personal data in connection to the transaction for the purpose of internal company records for three years.
The right to object: You have the right to object to processing of your personal data that is based on the company’s legitimate interest. The company will not continue to process the personal data unless we can demonstrate a legitimate ground for the process which overrides your interest and rights.
You have the right to object to direct marketing. You can opt out from direct marketing by following the unsubscribe link in every marketing email.
How can you exercise your rights?
If you have any queries or requests in relation to our policies or your rights as stated above you can email our Data Protection Officer at firstname.lastname@example.org, putting DPO in the subject line.
You also have the right to complain to the ICO (www.ico.org.uk) if you feel there are problems with the way we are dealing with your personal data.