rangeDoor is committed to protecting your personal information, being transparent about what data we hold and giving you control over how we use it. This policy covers the UK and European Economic Area.
This privacy policy describes the personal data collected or processed when you use the OrangeDoor website, digital experience, or interact with one of our other products or services, all of which are part of OrangeDoorPlatform. It also explains how your personal data is used, shared and protected, what choices you have relating to your personal data, and how you can contact us.
WHAT PERSONAL DATA DO WE COLLECT?
We may collect, use, store and transfer your “personal data”. This can include:
· Identity Data such as name, address, usernames, marital status, job title, DOB, and gender, dietary
· Demographic Data such as preferences and interests
· Contact Data such as email address or telephone number
· Financial Data such as bank account or payment card details
· Technical Data such as IP address, login data, browser type, location, statistical or demographic data
· Usage Data such as information about how you use our website, products, and services
· Marketing and Communications Data including your preferences regarding receiving marketing materials from us
WHAT WE DO WITH YOUR PERSONAL INFORMATION
The personal information recorded will be available toOrangeDoor, our affiliated companies and trusted third party service providers and contractors for the following purposes:
· To process enquiries received
· To register you for and send you newsletters
· To conduct market research and business development
· To provide you with information about products and promotions that may be of interest to you from ourselves
· In connection with surveys related to our products and the Sites
· Any other purpose indicated at the time you voluntarily provide your personal information
MARKETING
When you consent, we will send you marketing communications and news concerning OrangeDoor products, services, events, and other promotions. You can opt-out at any time after you have given your consent.
If you are an existing customer of OrangeDoor (for example, if you have placed an order with us), we may use the contact details you provided to send you marketing communications about similar products or services, where permitted by applicable law (unless you have opted out).
SHARING OF YOUR PERSONAL DATA
We do not sell your personal data.
We may share your personal data with other organisations inthe following circumstances:
· If the law or a public authority says we must share the personal data;
· If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk);
We use data processors who are third parties who provide elements of services for us. We have Data Processor Agreements in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us or further sub-processors who must comply with our Data Processor Agreement. They will hold your personal data securely and retain it for the period we instruct.
LAWFUL PROCESSING
To process your personal data, we rely on certain lawful basis, depending on how you interact with our Platforms.
If we do process your personal data, we may use one or more of the following lawful basis for processing:
· Consent: We may Process your Personal Data where we have obtained your prior, express consent to the Processing (this legal basis is only used in relation to processing that is entirely voluntary – it is not used for processing that is necessary or obligatory in any way);
· Contractual: We may Process your Personal Data where the processing is necessary in connection with any contract that you may enter into with us;
· Compliance with applicable law: We may Process your Personal Data where the processing is required by applicable law;
· Vital interests: We may Process your PersonalData where the processing is necessary to protect the vital interests of any individual; or
· Legitimate interests: We may process yourPersonal Data where we have a legitimate interest in carrying out the processing for the purpose of managing, operating or promoting our business, and that legitimate interest is not overridden by your interests, fundamental rights, or freedoms.
· Third-party Processors: Our carefully selected partners and service providers may process personal information about you on our behalf as described below:
o Digital Marketing Service Providers
o We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include:
o (i) Prospect Global Ltd (trading as Sopro) Reg.UK Co. 09648733. You can contact Sopro and view their privacy policy here:http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io
YOUR RIGHTS OVER YOUR INFORMATION
The right to be informed about our collection and use of personal data;
You have the right to be informed about the collection and use of your personal data. We ensure we do this with our internal data protection policies and through our external website policy. These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities.
Right to Access Your Personal Information
You have the right to access the personal information that we hold about you in many circumstances, by making a request. This is some times termed ‘Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 1 month from when your identity has been confirmed.
We would ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information.
If you would like to exercise this right, please contact us asset out below.
Right to Correction Your Personal Information
If any of the personal information we hold about you is inaccurate, incomplete, or out of date, you may ask us to correct it.
If you would like to exercise this right, please contact us asset out below.
Right to Stop or Limit Our Processing of Your Data
You have the right to object to us processing your personal information for particular purposes, to have your information deleted if we are keeping it too long or have its processing restricted in certain circumstances.
If you would like to exercise this right, please contact us as set out below.
Right to Erasure
You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.
If you would like to exercise this right, please contact us as set out below.
Right to Portability
The right to portability gives you the right to receive personal data you have provided to a controller in a structured, commonly used and machine-readable format. It also gives them you the right to request that a controller transmits this data directly to another controller.
If you would like to exercise this right, please contact us as set out below.
If you would like to contact us about anything to do with this privacy policy, please use the ‘Contact Us’ facility on our Site or write to us at: 26 & 30 Scotts Road, Bromley, Kent BR1 3QD
For EEA Residents: Please contact our EU Representative ateurep@weareorangedoor.com. Alternatively, they can be reached by post (The DPOCentre, Alexandra House, 3 Ballsbridge Park, Dublin, D04C 7H2) or +353 1 6319460. www.dpocentre.com.
The Information Commissioner's Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here https://ico.org.uk/for-the-public.
You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
SECURITY
Data security is of great importance to OrangeDoor and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your collected data.
We take security measures to protect your information including:
· Limiting access to our buildings to those that we have determined are entitled to be there (by use of passes, key card access and other related technologies);
· Implementing access controls to our information technology;
o We use appropriate procedures and technical security measures (including strict encryption, anonymisation and archiving techniques) to safeguard your information across all our computer systems, networks, websites, platforms, and offices.
o Never asking you for your passwords
INTERNATIONAL TRANSFERS OF YOUR PERSONAL INFORMATION
We may transfer and process any personal information you provide to us to countries outside the European Economic Area whose laws may not afford the same level of protection to your personal information. We will therefore ensure that all adequate safeguards are in place and that all applicable laws and regulations are complied with in connection with such transfer.
HOW LONG WE KEEP YOUR INFORMATION FOR
We retain a record of your personal information in order to provide you with a high quality and consistent service. We will always retain your personal information in accordance with the Data Protection Legislation and never retain your information for longer than is necessary.
