Purple Cat Limited ("We") are committed to protecting and respecting your privacy.
This policy (together with and upon request, and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting purple-cat.co.uk you are accepting and consenting to the practices described in this policy.
The rules on processing of personal data are set out in the General Data Protection Regulation (the “GDPR”).
Purple Cat Limited is the data controller. This means we decide how your personal data is processed and for what purposes. Our contact details are:
For all data matters contact our data representative at the address above.
We use your personal data for the following purposes:
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact our data representative at firstname.lastname@example.org.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
With reference to the categories of personal data described in the definitions section, we process the following categories of your data:
- Personal data: your title, name, company name, billing address, delivery address, email address, telephone number, fax number, VAT number, company registration number, bank account number and sort code, credit card information
- Technical information including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
- Information about your visit including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
We may receive information about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on this site.
We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Your personal data will be treated as strictly confidential and will be shared only with employees who are authorised to access this data in order to process orders and provide pre/after sale services and for accounting purposes.
Your data may be shared with selected third parties including:
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We keep your personal data for no longer than reasonably necessary for a period of 7 years in order to meet applicable legal and regulatory requirements, and exercise or defend legal claims.
We require your personal data as it is necessary for administrative and accounting purposes and in order to process payments and fulfill orders. You are not obligated to provide your personal data but we will not be able to enter any contract with you or offer our services without it.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
If you wish to exercise any of the rights set out above, please contact us at email@example.com.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable admin fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.
Purple Cat Ltd
8 New Street
If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioners Office on 03031231113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
We use the following cookies:
You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
Except for essential cookies, all cookies will expire after 1 hour.
When you pay for your order by credit or debit card, the transaction is processed by Opayo (formerly SagePay).
Opayo (formerly SagePay) is the result of the union of Protx, the payment service provider (PSP) and Sage, one of the UK’s most trusted business brands. They securely process millions of transactions each year for their 30,000+ customers.
All transaction information passed from our website to Opayo’s systems is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted. You can be completely assured that nothing you pass to Opayo's servers can be examined, used or modified by any third parties attempting to gain access to sensitive information. Once on Opayo's systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards used by, among others, the US Government. The encryption keys are held on state-of-the-art, tamper proof systems in the same family as those used to secure VeriSign's Global Root certificate, making them all but impossible to extract. The data Opayo hold is extremely secure and they are regularly audited by the banks and banking authorities to ensure it remains so.
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.