Privacy Policy

General

This Notice describes why and how we collect, use, and share your personal data.

This data protection notice is for this website for www.brandedbystreamline.com (this and any future website we may use including our merchandise webstores for personal consumers, hosted by Shopify: each a Site).

The data controller is Streamline Corporate Ltd, registered in England no 09624508 and our correspondence address is 7 Queen Anne Drive, Newbridge, Edinburgh EH28 8LH. We comply with the GDPR (General Data Protection Regulation 2018), the DPA (Data Protection Act 2018) and the PECR (Privacy and Electronic Communications Regulations 2003). We are registered with the Information Commissioner’s Office (ICO) no. ZA456478.

For consumers (that is: non-business customers) purchasing our products (doing so though our Shopify-hosted website), there is further information at the end of this notice.

Why do we control and process personal data?

We control and process personal data for the purposes of our business. More specifically and for example, we require personal data to enable goods and service purchases (on a Site or otherwise), despatch and invoicing, and to collect payments, to improve the customer experience, to keep accounting records, to manage enquiries and complaints, and to distribute communications of a general or marketing nature. In particular, we require your personal data for you to be able to contract with us.

What personal data do we collect?

We may collect, store, and use the following kinds of personal data:

data about your computer and your visits to and use of our Sites (including for example your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation)
data relating to any transactions carried out between you and us on or in relation to a Site, including information relating to any purchases you make
data you provide to us for the purpose of registering with us, such as your name and contact details
data you provide to us for the purpose of subscribing to our website services, email notifications and / or newsletters
any other data you choose to send to us

We do not process sensitive personal data.

If you intend to disclose to us another person’s personal data, you must obtain that person’s consent to both the disclosure and our processing that personal data.

Use of Cookies

Our Sites use cookies to better the user’s experience while visiting the Site. As required by legislation, where applicable the Sites use a cookie control system, allowing the user to give explicit permission or to deny the use of / saving of cookies on their computer / device.

Cookies are small files saved to the user’s computer’s hard drive that track, save, and store information about the user’s interactions and usage of websites. This allows a website, through its server, to provide users with a tailored experience within that website. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

If our Sites’ users wish to deny the use and saving of cookies from our Sites on to their computers hard drive they must take necessary steps within their web browser’s security settings to block all cookies from each of our Sites and its external serving vendors or use their cookie control system if available upon their first visit.

Cookies We Use

Cookie	Description	Duration	Type
uvc	The cookie is set by addthis.com to determine the usage of Addthis.com service.	1 year	Analytics
_CAN_BId		3 years	undefined
__atuvs	This cookie is set by Addthis to make sure you see the updated count if you share a page and return to it before our share count cache is updated.	30 minutes	Functional
CAN_SId		30 minutes	undefined
loc	This cookie is set by Addthis. This is a geolocation cookie to understand where the users sharing the information are located.	1 year	Advertisement
_CAN_BId	null	9 years	Uncategorized
_gid	This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visited in an anonymous form.	1 day	Analytics
_CAN_SId		1 hour	undefined
__atuvc	This cookie is set by Add this to make sure you see the updated count if you share a page and return to it before our share count cache is updated.	1 year	Functional
_gat_UA-64970644-1	This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.	1 minute	Performance
_ga	This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site’s analytics report. The cookies store information anonymously and assigns a randomly generated number to identify unique visitors.	2 years	Analytics
_hj/	This is cookie is from to Hotjar to analyse and track performance metrics on our website. Hotjar may temporarily process your IP address to ensure their service is running smoothly and improve the quality of Hotjar Platform.	30 calendar days	Performance

How we use your personal data

Personal data submitted to us will be used for the purposes set out above. We may use your personal data to, for example:

administer our Sites
improve your browsing experience by personalising the Sites
enable your use of the services available on the Sites
send you goods
send statements and invoices to you, and collect payments from you
send you general (non-marketing) commercial communications
send you email notifications regarding the services you can use on our Sites
send you our newsletter and other marketing communications relating to our business which we think may interest you
provide third parties with statistical information about our customers etc. (this information will not include personal data that identifies an individual)
respond to enquiries and complaints
verify compliance with the terms and conditions governing the use of the Sites

If you submit personal data for publication, we will publish and otherwise use that data in accordance with the licence you have granted to us.

We will not, without your express consent, provide your personal data to any third parties for the purposes of direct marketing.

Disclosures

We may disclose your personal data to our employees, officers, agents, suppliers, providers or subcontractors and those of any companies in a group to which we may belong so far as reasonably necessary for the purposes set out in this privacy policy. In addition, we may disclose your personal data:

to the extent that we are required to do so by law
in connection with any ongoing or prospective legal proceedings
to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)
to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information

Except as set out in this Notice, we will not provide your information to third parties.

Retention

Other than as regards the cookie durations above, we retain your personal data for so long as we have a reasonable need to do so. Specifically, we shall normally retail your data for five years after you last visit a Site unless we have legitimate reasons to retain it longer.

Whom we share your personal information with

We routinely share personal information with:

companies within the Streamline group
third parties we use to help deliver our products ( eg payment service providers, warehouses and delivery companies)
other third parties we use to help us run our business, eg marketing agencies or website hosts and our professional advisers

International Data Transfers

Information may be held at our offices and those of our group companies, third party agencies, service providers, representatives and agents as described above. However, personal data we collect may be stored and processed in and transferred between any of the countries in which we operate to enable us to use the data, including outside the UK and EEA. Such may be transferred to countries which may not have data protection laws equivalent to those in force in the EEA. This might happen if you or our service providers are outside the UK/EEA.

These transfers are subject to special rules under European and UK data protection law. This means we can only transfer your personal information to a country or international organisation outside the UK/EEA where:

the European Commission has issued an ‘adequacy decision’ in relation to that country or international organisation; or
there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for data subjects; or
a specific exception applies under data protection law

If you would like further information on this, please contact us.

In addition, personal data you submit for publication on the website (such as reviews of products or blog comments etc.) may be published on the internet. We cannot prevent the use or misuse of such information by others.

You expressly agree to such transfers of personal data.

Security of your personal data

We will take reasonable technical and organisational precautions to prevent the loss, misuse, or alteration of your personal data.

We or our IT providers will store all the personal data you provide on our/their secure password- and firewall-protected servers.

You acknowledge that the transmission of data over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.

You are responsible for keeping your password and other login details confidential. We will not ask you for your password (except when you log in to the website).

Policy amendments

We may update this data protection notice from time to time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes. We may also notify you of changes to our privacy policy by email.

Your rights

You may instruct us to provide you with any personal data we hold about you. Our providing of such data to you will be subject to your first providing appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank, plus an original copy of a utility bill showing your current address).

We shall provide such personal data to the extent required by law.

You may instruct us not to process your personal data for marketing purposes, by sending an email to marketing@streamlinecorporate.com In practice, you will usually either expressly agree in advance to our using your personal information for marketing purposes, or we will provide you with an opportunity to opt out of the use of your personal information for marketing purposes.

You may instruct us to delete your personal data to the extent that we do not need to retain it for our legitimate purposes.

If you are dissatisfied with how we process your data, and if you and we cannot resolve the issue between us, you have the right to complain to the ICO. The ICO’s details are: https://ico.org.uk/make-a-complaint/ or you can contact them on 0303 123 1113, or write to them at Wycliffe House, Water Lane, Wilmslow SK9 5AF.

Third party websites

Our Sites may contain links to other websites. We are not responsible for the privacy policies or practices of third-party websites.

Updating information

Please let us know if the personal data which we hold about you needs to be corrected or updated.

Contact

If you have any questions about this privacy policy or our treatment of your personal information, please contact our Marketing Manager via email at marketing@streamlinecorporate.com or by post to 7 Queen Anne Drive, Newbridge, Edinburgh, EH28 8LH.

Website Visitor Tracking

Our Sites use tracking software to monitor visitors to better understand how they use the Sites. The software will save a cookie to your computer’s hard drive to track and monitor your engagement and Site usage, but will not store, save, or collect personal data.

Tracking software used includes, but is not limited to:

Google Analytics
Candii
Infinity Call Tracking
Hotjar

Adverts and Sponsored Links

This website does not contain sponsored links and adverts.

Downloads and Media Files

Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine downloads are available, users must verify their authenticity using appropriate antivirus software or similar applications.

We accept no responsibility for third party downloads and downloads provided by external third-party websites and advise users to verify their authenticity using third party antivirus software or similar applications.

Contact and Communication

Users contacting us through a Site do so at their own discretion and provide any personal data at their own risk.

Where we have clearly stated and made you aware of the fact, and where you have given your express consent, we may use your personal data to send you products / services information through a mailing list system.

Email Mailing List and Marketing Messages

We operate an email mailing list program, used to inform subscribers about products, services and / or news we supply / publish. Users can subscribe through an online automated process where they have given their explicit consent. Subscribers can unsubscribe at any time through an automated online service, or if not available, other means as detailed in the footer of sent marketing messages (or email us directly marketing@streamlinecorporate.com and request to be removed). The type and content of marketing messages subscribers receive, and if it may contain third party content, is clearly outlined at the point of subscription.

Email marketing messages may contain tracking beacons / tracked clickable links or similar server technologies to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of subscriber data relating to engagement, geographic, demographics and already stored subscriber data.

Our EMS (email marketing service) provider is; Mailchimp and you can read their privacy policy here.

External Website Links and Third Parties

Although we aim to include quality, safe and relevant external links only, users should be cautious before clicking any such external links. (External links are clickable text / banner / image links to other websites).

Shortened URLs – URL shortening is a technique used on the web to shorten URLs (Uniform Resource Locators) to something substantially shorter. This technique is especially used in social media and looks similar to this (example: http://bit.ly/zyVUBo). Users should be cautious before clicking on shortened URL links and verify their authenticity before proceeding.

We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users click on external links at their own risk. We cannot be held liable for any damages or implications caused by visiting any external links mentioned.

In the instances of online ordering, we work with courier companies to ship the goods ordered. To be able to send items out of our warehouse to the correct location marked with the correct contact information, your details will be shared with courier companies.

Social Media Policy and Usage

We adopt a Social Media Policy to ensure our business and our staff conduct themselves appropriately online. While we may have official profiles on social media platforms, users must verify the authenticity of such profiles before engaging with, or sharing information with such profiles. We will never ask for user passwords or personal details on social media platforms. Users should conduct themselves appropriately when engaging with us on social media.

There may be instances where our Sites feature social sharing buttons, which help share web content directly from web pages to the respective social media platforms. You use our social sharing buttons at your own discretion and accept that doing so may publish content to your social media profile, feed, or page. You can find further information about some social media privacy and usage policies in the resources section below.

Behavioural Advertising

We may use your personal data to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (NAI) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

FACEBOOK – https://www.facebook.com/settings/?tab=ads
GOOGLE – https://www.google.com/settings/ads/anonymous
BING – https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Do Not Track

We do not alter our Sites’ data collection and use practices when we see a Do Not Track signal from your browser.

The following is additional and directed at consumers purchasing our products (doing so though our Shopify-hosted website),

What do we do with your information?
1. When you purchase something from our store hosted by Shopify, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address
2. When you browse our Shopify-hosted store, we also automatically receive your computer’s internet protocol (IP) address to provide us with information that helps us learn about your browser and operating system.
3. Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.
Consent
1. How do you get my consent?
2. When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, it is understood that that you consent to our collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
3. How do I withdraw my consent?
4. If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us.
Disclosure
1. We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
Shopify
1. Our consumer sales store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
  Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
2. If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
3. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
4. For more insight, you may also want to read Shopify’s Terms of Service here or Privacy Statement here.
Third-party services
1. In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
2. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
  For these providers, we recommend that you read their privacy policies so you can understand the way your personal information will be handled by these providers.
3. In particular, certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So, if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
4. As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
5. Once you leave our Shopify-hosted store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Shopify website’s Terms of Service.
6. When you click on links on our Shopify-hosted store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Security
1. To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

Cookies

Here is a list of cookies that we use on the Shopify website. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.

Cookie	Description etc.
_session_id	_session_id unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc.)
_shopify_visit	no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq	no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer. cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id	unique token, sessional, unique token, indefinite
_storefront_digest	If the shop has a password, this is used to determine if the current visitor has access.

Changes to this privacy policy (consumers)

If our Shopify-hosted store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

Resources / Further Information

Overview of the GDPR – General Data Protection Regulation
Data Protection Act 2018
Privacy and Electronic Communications Regulations 2003
The Guide to the PECR 2003
Twitter Privacy Policy
Google Privacy Policy
LinkedIn Privacy Policy
Mailchimp Privacy Policy
UK GDPR

Streamline Corporate Ltd, September 2022