1. Privacy Notice

This privacy policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed, shared or transmitted by us. Please read the following information carefully to understand our views and practices regarding your personal data and how we will treat it.

Policy updated 03 May 2018.

1.1. About us

Fishcakes Ltd, aka Fishcakes, can be contacted as follows:

• Post to Data Protection Officer, 38 Walker House, Phoenix Road, London NW1 1EN, United Kingdom.
• Phone +44 (0)20 7387 0509.
• Email to dpo@fishcakes.biz.

You can manage your subscription to our mailing list as follows:

• Subscribe on our website Subscribe page.
• Unsubscribe and any time by visiting our Unsubscribe page.
• Update your personal preferences at any time by clicking the update preferences or unsubscribe links in any email sent by our mailing list.

You can update your preferences in other products and services that we provide by using the user preferences options of the the respective products and services.

If you wish to contact us about your privacy policy, or any personal data we might hold on you, then please email dpo@fishcakes.biz. We will notify subscribers to our mailing list of any changes to our privacy policy.

1.2. Legal Compliance

Fishcakes Ltd is a Data Controller for the purpose of compliance and we operate in accordance with UK and EU law, including:

• The Data Protection Act, 1998
• The Privacy and Electronic Communications (EC Directive) Regulations 2003
• EU General Data Protection Regulation (GDPR) 2018

You access information about Fishcakes in the ICO Register of Data Controllers.

2. Our Privacy Promise

Fishcakes promises to use your data ethically and to allow you access so that you can update it, restrict its use, or ask us to delete it. We believe the data we hold about you is your property so you should have the right to control it, amend it or ask that it be erased.

2.1. What are your rights?

The EU General Data Protection Regulation gives you the right to access, amend and revoke any consent that you have provided allowing us to store and use your personal data. You have the right to ask us not to process your personal data for marketing purposes. We will inform you before collecting your data if we intend to use your data for marketing, or if we intend to disclose your personal data to any third party for marketing.

You can exercise your right to prevent such processing by selecting the appropriate options on the forms we use to collect your data and the forms that allow you to amend your data. You can also exercise your data rights at any time by contacting us by emailing dpo@fishcakes.biz.

You also have the right to be notified of any changes we may make to our privacy policy. Any changes will be posted on this page, and where appropriate you will be notified by email. Please be aware that if you have opted out of our marketing emails then you will not be notified about changes to our privacy policy so should instead check this page for any updates or changes to our privacy policy.

2.2. What type of data do we collect about you?

We may process, i.e. collect, store, use, delete and otherwise manipulate or access, personal data about you.

You may provide us with personal data about yourself when you correspond with us by phone, e-mail, in person, or by completing a request form on our website or another service that we use. We may collect your personal data to inform you of the various products and services we offer. We may also collect your personal data to help manage the products and services we provide to you.

You may provide us with personal data when you search for a product or service, or report a problem about a particular product or service you use, via our website or another service. We collect this personal data to inform you about the products and services we offer, or to help manage those products and services, including resolving any problems you report to us.

You may provide us with personal data when you use a third party service that we work with, including our business partners and subcontractors, cloud app services, analytics services, software providers, delivery services, and other systems and services.

You may provide us with additional personal data when using our products and services, including family details, lifestyle and social circumstances, employment and education details, visual images relating to personal appearance, plus information necessary for the products and services we provide to you.

You may provide us with financial and credit card information if it is needed to supply or help manage the products and services we provide to you, either directly or via a financial services providers or credit reference agencies that we use.

You may also provide us with more sensitive personal data required for a product or service, including physical or mental health details, racial or ethnic origin, religious or other beliefs, and visual images relating to personal behaviour.

You may also provide us with personal data each time you visit our website, or use a product or service we provide or help manage, from a computer or mobile device. We may automatically collect technical information about you, which can include the internet protocol (IP) address used to connect you to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, plus your operating system and platform.

You may also provide us with personal data about your visit that our website, products and services collect, including the full Uniform Resource Locators (URL) clickstream to, through and from our website or other service, including date and time. We may also collect information about the products and services you viewed or searched for, including analytics about your browser such as page response times, download errors, length of visits to certain pages, and page interactions information such as scrolling, clicks, and mouse-overs. We may also collect methods used to browse away from the page, plus any phone number used to ring us to provide customer support or marketing information.

2.3. How do we use your personal data?

We use the personal data held about you to provide you with information about the products and services you request from us, and to carry out our obligations arising from any agreements entered into between you and us to provide our products and services.

We may also use the personal data held about you to provide marketing information about other products and services we offer similar to those that you have already purchased or enquired about.

We also use the personal data held about you to ensure that the content from our website and other products and services is presented in the most effective manner for you and for the device you use to access it.

We also use the personal data held about you to notify you about changes to our products and services.

2.4. How does our website use your data?

We use cookies on our website and other services to distinguish you from other users. This helps us to improve our website and other services so that we can offer you the best possible experience when you browse our website or use other services.

A cookie is a small file of letters and numbers that is stored in your browser or the hard drive of your computer or mobile device if you agree. Information about your browsing may be tracked using web analytics software and services including Web server stats, Google Analytics and WordPress Stats.

If you would prefer that we don’t track you using cookies then you can opt out using the Cookies consent pop-up on our website, or by adjusting your browser settings to block cookies. You can also clear the cookie cache in your browser to clear any cookies we may have stored on your device.

Please note that other third parties, including advertising networks and providers of web analytics, may also use cookies over which we have no control, but are likely to be analytical and/or performance targeting cookies.

Our website and other services may also contain links to and from the websites and services of our partners, clients, affiliates and other third parties. Please note that we are only responsible for your privacy in respect of your use of our website and services. Please check other websites and services for their own privacy policies before you submit any personal data.

2.5. How do we collect and use personal data?

We collect and use personal data when administering our website and managing our products and services. We also collect and use personal data for internal operations, including help you manage your products and services, troubleshooting, data analysis, testing, research, employee and partner training, plus for statistical and survey purposes.

We collect and use personal data as part of our efforts to improve our website and the services we use, plus our own products and services, and keep them safe and secure.

We collect and use personal data to measure and understand the effectiveness of the products and services we offer, including any advertising we may serve, and to deliver relevant advertising to you and others.

We collect and use personal data to make suggestions and recommendations about the products and services which may interest you or others.

We may also combine the personal data we hold with information from other sources for the purposes set out above, depending on the types of information we receive.

2.6. Where do we store your personal data?

We store your personal data on the systems and services we use to help collect and manage the data we process. The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, amongst other things, the fulfilment of your order, the processing of your payment details or the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this privacy policy.

2.7. How do we keep information secure?

Our website and other services use encryption to protect your personal data. Any information we transmit via the internet, including our email communications, are encrypted while in transit. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website or other services over networks that we do not control. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

We also expect you to use strict procedures and security to prevent unauthorised access to your personal data. If we have supplied you with the ability to set a password to access any part of our website, or any other service which have provided to you or help you manage, then you are responsible for keeping this password secure. Use a unique, secure password and do not to share your password with anyone. Where it is available you should always use two-factor authentication to protect your personal data.

We do not process payments on our website, but may use other third party websites or services to do so. All payment transactions will be encrypted.

2.8. When do we share information with others?

We may share your personal data with selected third parties including business partners, suppliers, service providers and subcontractors for the performance of any agreement we enter into with you, which may include analytics and search engine providers who assist us in the improvement and optimisation of our website and other services.

We may share your personal data with credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a agreement with you.

We may also share your personal data with a third party in the event we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets, or if we, or substantially all of our assets, are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.

We may also share personal data if we are under a duty to disclose or share it in order to comply with any legal obligation, or in order to enforce or apply our website’s terms of use or our terms and conditions of supply and other agreements, or to protect our rights, property, or safety or that of our customers or others, including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

We may also share your personal data with any member of our group, which means our subsidiaries, or our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.