Privacy Policy
Online Privacy Policy
This website has been built and is owned by The Northbrook Arms Ltd. Please see our online privacy policy below.
1. Overview
1.1 This Privacy Notice applies when you visit or use our website. Further Privacy Policy statements and documents may apply offline and these are available, if relevant, on request. Our reference number for this Online Privacy policy is: NBA001001
1.2 This site is owned by Northbrook Arms Ltd whose Registered office is situated at: Stratton Lane, East Stratton, Winchester, Hampshire, SO21 3DU
1.3 Our Company registration number is 11897120. We are the ‘data controller’ of any personal information you provide to us.
1.4 We are registered as a Data controller with the Information Commissioners Office our registration number is: TBC
1.5 We have appointed a Data Contact who is Mr Adam Shanley.
1.6 You can write to our Data Contact at our postal address given above or via email at [email protected] if you have any queries regarding this policy.
1.7 As a Data Controller, we will take all the necessary steps to comply with the GDPR and Data Protection Act 2018 and relevant subordinate legislation when handling any personal data which you may provide to us.
This includes ensuring that data is:
i) Fairly and lawfully processed
ii) Processed for limited purposes
iii) Adequate, relevant and not excessive
iv) Accurate and Secure
v) Not kept longer than necessary
vi) Processed in accordance with your rights
vii) Not transferred to countries outside the UK without safeguards.
1.8 We are committed to protecting and respecting your privacy when visiting our website and providing us with your personal information and this privacy policy statement summarises what personal details we may collect from you before, during or after you use our site and what we will do with them.
1.9 This Online Privacy information is a précis of our detailed written policies which are held at our business premises. Please contact our Data Contact if you require further information regarding our data protection compliance procedures.
1.10 We will review and update this Privacy Policy from time to time and all changes will be posted to this page.
2. Our privacy policy and data protection policies:
2.1 We are committed to protecting your personal privacy and, in accordance with relevant data protection laws, we uphold strict security procedures for the collection, storage, use and disclosure of your personal information.
2.2 We have described below the personal information we may gather about you, the purposes we will hold it for and the limited categories of people to whom we may disclose it.
3. What information do we collect and how may we use it?
3.1 All visitors to the site:
(a) During your visit to our site, we will only collect personal information that you choose to provide, if for example you: contact us with an enquiry or request us to provide you with further information
(b) If you share other people’s data with us, for example if you order on behalf of another company, you will need to check that company consents to you providing their information to us.
(c) We may process data about you from various sources and use it to contact you if it is in our Legitimate Interests to do so and we have completed the necessary formalities required under the data protection legislation and guidelines. In all cases the purpose of our contacting you will be made clear and you will be provided with information with which to contact us if you would like us to stop processing your data.
4. We may use the information held about you in the following ways:
4.1 To administer any account you have with us
4.2 To perform our contractual obligations to you
4.3 To respond to your queries and requests
4.4 To communicate with you
4.5 To ensure that the content of our site is presented in the most effective manner
4.6 To provide you with the information, products and services requested from us
4.7 To provide you with helpful information about our products or services
4.8 To make improvements to the service we provide you
4.9 We also reserve the right to disclose your personal information where we are required to do so by law, such as to assist in any disputes, claims or investigations relating to your account or contract with us, and to detect and prevent fraudulent transactions.
4.10 E-mail correspondence with us via our website and email addresses accessible through, or obtained from, this site may be recorded and/or monitored.
5. How do we store and protect your data?
5.1 We take the security of your information seriously and we will endeavour to ensure that the personal information you submit to us is kept private and secure.
5.2 Data we receive and process is held by us in secure electronic devices and separate back up devices and servers.
5.3 Personal Data may also be held in encrypted 3rd party ‘Cloud’ Servers.
5.4 Further encrypted back ups of data may be held securely in offsite locations which are also subject to physical security at their location.
5.5 We will not sell, rent or otherwise disclose the personal information you provide to us through the site to third parties (other than as listed below) unless we are required to do so by law.
6. Third parties who provide services on our behalf
6.1 We may share your personal information with certain third parties who provide services on our behalf.
6.2 Such 3rd Parties only have access to the personal information they need to perform those services.
6.3 Such 3rd parties are bound by contractual arrangements with Ourselves and are required to keep your personal information secure and confidential. They may only use it as permitted by us in accordance with our Privacy Policies.
6.4 If you have contracted with us we will share data only to the extent necessary for the performance of the contract, otherwise we will obtain specific consent from you before sharing your data.
6.5 The third parties who provide services on our behalf fall into the following categories:
1. i) Our partners providing logistics and external service support.
2. ii) Our business partners or advisors for the purposes of completing or investigating a transaction with you.
iii) Marketing agencies appointed to provide services to us
1. iv) The service providers operating this site on our behalf
2. v) Accountants, auditors, law firms, payment processors, information technology support providers
3. vi) Advertising services, analytics services, content providers
7. How long do we store your data?
7.1 We will not keep your data for longer than is necessary for the relevant purposes set out in our Company Compliance Policy.
7.2 Where you have purchased a product or service from us, we will hold your relevant personal details to enable us to provide after-sales services and to administer the contract.
8. Your rights
8.1 Under the General Data Protection Regulation (GDPR) and The Data Protection Act 2018 (DPA) you have a number of rights with regard to your personal data.
8.2 You have the right to request from us access to and rectification or erasure of your personal data; the right to restrict processing; the right to object to processing as well as in certain circumstances the right to data portability. Please note we will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
8.3 To exercise any of these rights contact our Data Contact using the details given above.
9. Lawful bases for data processing
9.1 We hold and process your data by lawfully allowed means, these include:
1. i) Your Consent: Consent is usually given by yourself when you contact us via the Website or personally when we discuss products or advice with you.
ii) Contractual obligations: This occurs when you purchase products or services from us.
iii) Legal Obligation: When the processing is necessary for us to comply with the Law.
iv) Vital Interests: When the processing is necessary to protect someone’s life.
v) Public Task: When the processing is necessary for us to perform a task in the public interest or for an official function and the task or function has a clear basis in Law.
vi) Legitimate Interests: When the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
10. Children’s data
10.1 Our site is not directed at children and should not be accessed by them.
10.2 We will not knowingly collect information from minors without their parent’s or guardian’s consent.
11. Third Party Websites
11.1 From time to time our site may contain links to and from the websites of our suppliers or other third party sites.
11.2 If you visit any of these sites please note they have their own privacy policies and you should check these before submitting any personal data. We cannot accept any responsibility or liability for these policies.
12 Data Access
12.1 You have rights of access to the data we hold about you. Should you wish to exercise these rights please contact our appointed Data Contact whose details are given above.
12.2 There is no charge for the Data Access service. As soon as we are satisfied as to your identity, we will send you, within one Month, confirmation of the data we hold relating to you, which we are legally obliged to provide.
12.3 Please contact us if you believe that any personal data or information which we hold about you is incorrect or incomplete. Any information or data which is found to be incorrect will be corrected as soon as practicable.
12.4 Please contact us if you wish to have your personal data removed entirely from our systems. As soon as we are satisfied as to your identity and the data is not required to be kept for any other lawful reason or purpose it will be removed from our systems forthwith. If you so wish, your Data is provided to you electronically in a commonly used format such as email.
12.5 If you are unhappy with any of the responses given to you by us you may complain about us to the regulator at the Information Commissioners Office on 0303 123 1113 or through their website www.ico.org.uk.
13. Business Transfer or Sale
13.1 In the event our business, or part of it, is taken over, bought or merged with another business we may need to disclose any personal data we are holding about you to the other Company so they can continue to provide services to you in accordance with this Privacy Policy.
13.2 It may be necessary to transfer your data to a Company that is negotiating with us for the purchase of our business but only where it is necessary to evaluate the business purchase transaction. In this case your data would be kept safe and destroyed by the third party if the sale or merger did not go ahead.
14. Changes to this policy.
14.1 There may be developments in how we use your data according to changes in the Law.
14.2 We reserve the right to make changes to this Data Protection and Privacy Policy at any time without notice and it is your responsibility to revisit this page from time to time to re-read this policy.
14.3 Any revised terms shall take effect as at the date of posting.
14.4 If you don’t find your concern addressed here, feel free to contact us by e-mailing our Data Contact at the contact details given above.
Cookie Policy
Cookies are small text files that are placed on your computer by websites that you visit. They’re widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Most web browsers allow control of cookies through their settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org
The following information will explain which cookies we use and why.
Google Analytics cookies
Google analytics set’s a number of first party cookies through this website, the names of which are prefixed by _utm. These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. You can read more about Google Analytics privacy policy here. This tracking is not compulsory and you can opt out by following this link: https://tools.google.com/dlpage/gaoptout
Cloudflare cookie
Cloudflare is a global internet services provider that protects our website from malicious activity. Cloudflare may set a __cfduid cookie through this website if your browsing session meets certain security requirements, such as solving a Captcha challenge or being automatically permitted to browse our web pages. The _cfduid is a one-way hash of certain values and cannot be used to personally identify you. For more details please see Cloudflare’s cookie policy.
Login cookies
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
Embedded content from other websites
Pages on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.