1. INTRODUCTION

This privacy notice provides details of how ID Cards and Lanyards collects and processes your personal data, including through your use of our website https://idcardsandlanyards.co.uk/. By providing us with your data, you warrant that you are over 13 years old.

ID Cards and Lanyards is the data controller responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

Contact Details

ID Cards and Lanyards
Email: hello@idcardsandlanyards.co.uk
Postal address: The Old Town Hall, 354 Mare Street, Hackney, E8 1HR
Telephone: 0203 026 0565

Please let us know if your personal information changes by emailing us at hello@idcardsandlanyards.co.uk

2. WHAT DATA WE COLLECT, PURPOSE AND LEGAL BASIS FOR PROCESSING

We may process the following categories of personal data about you:

• Communication Data: Any communication you send us. Processed to communicate with you, keep records and establish, pursue or defend legal claims. Our lawful ground is our legitimate interests to reply to communications, keep records and establish, pursue or defend legal claims.
• Customer Data: Data relating to purchases of goods/services such as your name, title, billing/delivery address, email, phone, contact details, purchase details and card details. Processed to supply goods/services purchased and keep records. Our lawful ground is performance of a contract and/or taking steps at your request to enter a contract.
• User Data: Data about how you use our website and online services. Processed to operate our website, provide relevant content, ensure security, maintain backups, and enable publication and administration. Our lawful ground is our legitimate interests to properly administer our website and business.
• Technical Data: Data about your use of our website and online services such as your IP, login data, browser details, page views, navigation paths, time zone settings and technology on devices used to access our website. Processed to analyze your website use, administer and protect our website and business, deliver relevant content and ads, and understand ad effectiveness. Our lawful ground is our legitimate interests to properly administer our website and business and grow our business and decide our marketing strategy.
• We may process photos you upload to our website or send us as part of an order. While we will not share these photos with any third parties, please be aware that the photos themselves may appear on ID card mockups used for our own marketing purposes. If you do not want your photos used in this way, simply email us at hello@idcardsandlanyards.co.uk to let us know.
• Marketing Data: Data about your preferences in receiving marketing from us and third parties and your communication preferences. Processed to enable participation in promotions, deliver relevant website content and ads, and measure ad effectiveness. Our lawful ground is our legitimate interests to study how customers use our products/services, develop them, grow our business and inform our marketing strategy.
• Reviews Data: Data relating to a specific order including your name and email. Processed to collect feedback on products and services to ensure customer satisfaction. Our lawful ground is our legitimate interests to ensure your order met your requirements.

We do not collect any Sensitive Data about you. We will only use your personal data for the purpose it was collected or a reasonably compatible purpose. We may process your personal data without your knowledge or consent where required or permitted by law. We do not carry out automated decision making or profiling.

3. HOW WE COLLECT YOUR PERSONAL DATA

We may collect data by you providing it directly (e.g. filling in forms or sending emails). We may collect data automatically as you use our website via cookies and similar technologies (see our cookie policy for details). We may receive data from third parties such as analytics providers, ad networks, search information providers, technical/payment/delivery services, and public sources.

4. MARKETING COMMUNICATIONS

Our lawful ground for processing your personal data to send marketing communications is either your consent or our legitimate interests to grow our business. Under Privacy and Electronic Communications Regulations, we may send you marketing communications if (i) you made a purchase or requested information from us about our goods or services or (ii) you agreed to receive marketing communications and have not opted out. We will get your express consent before sharing your personal data with third parties for marketing. You can opt-out of marketing by following opt-out links on any marketing message or emailing us at hello@idcardsandlanyards.co.uk. Opting out does not apply to personal data provided as part of other transactions like purchases.

5. DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with:

• Service providers for IT and system administration
• Professional advisers including lawyers, bankers, auditors and insurers
• Government bodies that require reporting of processing activities
• Marketing, website and online support services
• Third party suppliers and couriers to fulfill and deliver orders
• Third parties to whom we sell, transfer, or merge parts of our business or assets

We require all third parties to respect the security of your personal data and treat it per the law. We only allow them to process your data for specified purposes per our instructions.

6. INTERNATIONAL TRANSFERS

We share your personal data within our group of companies which involves transferring it outside the European Economic Area (EEA). Many of our service providers are also based outside the EEA so processing of your data will involve a transfer of data outside the EEA.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection by ensuring at least one of these safeguards is implemented:

• We will only transfer to countries the European Commission deemed to provide an adequate level of protection for personal data
• Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide protection to personal data equivalent to EU standards
• We may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe

If none of these safeguards are available, we may request your explicit consent to the transfer. You can withdraw this consent at any time.

7. DATA SECURITY

We have security measures in place to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorization. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if legally required.

8. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. To determine the retention period, we consider the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process your personal data and whether we can achieve those purposes through other means; and the applicable legal requirements.

For tax purposes, the law requires us to keep basic customer information for six years after they stop being customers. In some circumstances we may anonymize your personal data for research or statistical purposes, in which case we may use it indefinitely without further notice to you.

9. YOUR LEGAL RIGHTS

Under data protection laws you have rights including:

• Right of access to your personal data
• Right to rectification if data is inaccurate
• Right to erasure (‘right to be forgotten’)
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of your rights, please email us at hello@idcardsandlanyards.co.uk.
You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may need specific information from you to confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure. We may also contact you for more information to speed up our response.

We try to respond to all legitimate requests within one month. It may take us longer if your request is particularly complex or you have made multiple requests. We will notify you in this case.

If you are not satisfied with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would appreciate the chance to address your concerns before you approach the ICO, so please contact us first.

10. THIRD-PARTY LINKS

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

11. COOKIES

You can set your browser to refuse some or all browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookie Policy on our website.