1. Types of personal information
We may process the following types of personal information in relation to you:
Contact details such as: email addresses, postal addresses, telephone numbers; and; Secure bank details such as full card details.
1. Personal information obtained from you directly
We will sometimes obtain information from you directly, including when you:
Subscribe to the newsletter or adverts, purchase a product/service, create a user profile, contact us using the “contact us” chat service.
2. Personal information obtained by use of cookies or other automated means
We will sometimes obtain information via automated technology. This shall be by use of cookies and other similar technology. A cookie is a small text file which is placed onto your computer or electronic device when you access our website. Similar technologies include web beacons, action tags, local shared objects ('flash cookies') and single-pixel gifs. Such technologies can be used to track users' actions and activities, and to store information about them. Usually this will be in order to monitor and obtain information regarding:
How many times a user visits the website, which pages a user visits, traffic data, location data.
On the first occasion that you use our site we will ask whether you consent to our use of cookies and/or other similar processing technologies. If you do not consent, such technologies will not be used. Thereafter you can opt-out of using cookies at any time or you can set your browser not to accept cookies. However, some of our website features may not function as a result.
For further information on our use of cookies and other similar technologies, please see our policy document as described below.
3. Additional sources
We shall collect personal information in relation to you from the following sources:
from ( Specialist mobile phone application ); through your device ID on any personal devices; through social media signons; through location technology.
4. Changes to the way in which we collect your personal information
In the event that we need to obtain personal information in relation to you from any other source than those described above, we shall notify you of this.
1. General purposes
In general, your personal information will generally be processed for the following purposes:
To enter into a contract for sale of goods/services to you, to manage our business and website, to provide marketing to you.
2. Monitoring
We may monitor communications, and in doing so we may obtain your personal information through this process. We will undertake monitoring in the following circumstances:
Calls and emails may be monitored for quality assurance; training; fraud prevention; compliance.
3. Use of your information for marketing purposes
We have described above that one of the general purposes for which your data shall be processed is for our marketing purposes.
We wish to make you aware that you have the right to object or to opt-out of any direct marketing by:
Describe how a user can object or opt-out on all emails;
Contacting us on the email optout@grantenmall.com
4. Fraud prevention
We will undertake fraud checks via use of your personal information. This will involve sharing and working with Fraud Prevention Agencies. We do so to protect our own commercial interests (which is encompassed within our own legitimate interests as a business).
In general, your information will be used for fraud prevention purposes:
We will use your information for fraud prevention purposes (with Fraud Prevention Agencies ) at the outset of any transaction.
Fraud prevention agencies can hold your personal information for different periods of time, the maximum period being six years.
1. General lawful bases The lawful basis upon which we are able to process your personal data are:
(1) where we have your consent to use your data for a specific purpose;
(2) where it is necessary to enter into a legal contract with you or to perform obligations under a legal contract with you;
(3) where it is necessary to enable us to comply with a legal obligation;
(4) where it is necessary to ensure our own legitimate interests or the legitimate interests of a third party (provided that your own interests and rights do not override those interests). Wherever we rely upon this basis, details of the legitimate interests concerned shall be provided to you;
(5) where we need to protect your own vital interests (or the vital interests of another person); and/or
(6) where it is needed in the public interest (or where we are acting in our official functions), provided that the task or function has a clear basis in law.
In general, in order to meet the purposes we have described above, we will process your personal information where we have your express consent on each occasion that the data is processed.
2. Lawful bases specifically applicable to marketing
We are able to lawfully process your personal data for marketing purposes because it is in our legitimate interests to do so. Our legitimate interests relevant to our marketing needs are:
To ensure that we can promote our business;
To ensure that we maintain and improve the standard of our products and services.
It may prevent you from using certain features of the website and/or receiving products/services.
Name and postal address – 4 years; Identity documents – 2 months; email address – 4 years; bank details – 3 months; IP addresses – 7 months.
User account access is controlled by a unique username and password; all data is stored on secure servers; payment details are encrypted using SSL.
(1) fair processing of information and transparency over how we use your use personal information;
(2) access to your personal information and to certain other supplementary information that this Privacy Statement is already designed to address;
(3) require us to correct any mistakes in your information which we hold;
(4) require the erasure of personal information concerning you in certain situations;
(5) receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this information to a third party in certain situations;
(6) object at any time to processing of personal information concerning you for direct marketing;
(7) object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
(8) object in certain other situations to our continued processing of your personal information, or ask us to suspend the processing procedure in order for you confirm its assurance or our reasoning for processing it;
(9) object to processing our your personal information where we are doing so in reliance upon a legitimate interest of our own or of a third party and where you wish to raise to an objection to this particular ground;
(10) otherwise restrict our processing of your personal information in certain circumstances;
(11) in any circumstance where we rely upon your consent for processing personal information, you may withdraw this consent at any time.
Via email to datarequests@grantenmall.com
By a notice on the website header;
By a notice in the news section of the website.
Via email to datarequests@grantenmall.com
Via the link www.grantenmall.com/cookies