The Northern River Masters is committed to maintaining the trust and confidence of our visitors to our website. We are committed to protecting and respecting your privacy. We want you to know that we will not sell, rent or trade your personal data with other companies and businesses for marketing purposes. In this Privacy Policy, we’ve provided information on how we collect and use your personal data. For general use of this website, there is no need to provide any personal data.
Privacy Policy Updates
Changes to this Privacy Policy can be made at any time. We encourage you, from time to time, to come back and read this policy for any changes that may have occurred since your last visit. This version of the Privacy Policy was last updated on the 15th March 2020.
Privacy Policy Detail
Location
Data is processed at our registered address, at our server locations in Enfield and Welwyn Garden City in the United Kingdom and in other locations where data processors and co-controllers are located.
Children
We do not sell products for purchase by children or provide content specifically aimed at children. This website does not allow children to register or accept orders from persons under the age of 18. If you’re under 18, you may use the Northern River Masters website only with the involvement of a parent or guardian.
Information You Have Provided to Us
Information we hold that has been provided by you to us is usually in the form of your email address, name, home address, phone number, date of birth, payment details etc.
Information Automatically Collected About You
Includes information that is automatically stored and used by session tools such as cookies. This can include items such as your IP address, browser type and version, browser plugins, computer information such as screen resolution, operating system, device used and general location (such as country). We track your movements across the website including pages visited, entry and exit points, time on site etc. This information is used to improve the website and the services that we offering. The information is collected anonymously.
How Your Data is Used
Information is stored to enhance your use of the website. This includes storing your information so you don’t have to log in to your account every time you visit. It is used to store your photo uploads, catch reports, correspondence with us, product reviews, check e-commerce orders, confirmations, order history, order progress, product lists, best sellers etc.
Email addresses are used with your consent, it allows us to send you emails about updates to our websites, news updates, surveys, competitions and promotion emails about products we may sell. It will be used to communicate transaction emails such as password resets, changing usernames, order information etc. The email address is also used when you correspond with us.
Your personal data will be used to supply you with any service you have requested by using this website.
Your Data Protection
- Processing of your data is fair, transparent and must have lawful grounds. We will always make sure we have a reason to use your personal data, for the purpose intended and the consent you gave.
- Processing of minimal data. We will ensure that we only gather and process the minimum amount of personal data required to facilitate your use of the web site.
- Retention of data. Your personal data is kept for the minimum time necessary to provide the services you have requested and provided consent for.
- Ensure the accuracy, integrity and confidentially of data. We will take all reasonable precautions to prevent unauthorised access, disclosure, modification or destruction of the personal data we hold. We will take reasonable measures to keep the personal data you provide, up to date.
Your Rights
- You have the right to know whether your information is being processed, the data that has/is being gathered and where it was obtained from. You also have the right to access this data that we hold about you, including a copy of such data.
- You have the right to change your data to correct or delete inaccuracies. You also have the right to have your personal data erased from our records.
- You have a right to restrict or object to the processing of your personal data. Under certain circumstances, you can ask us to modify the use of your personal data so that it is not used for processes you don’t want it to be used for. For example, removing your personal data from a mailing list or mailing list segment where applicable.
- You have the right to move your data from one processor to another. Where feasibly possibly your data can be moved to another processor or provided to you in a useable format.
- You have the right to withdraw your consent for the use of your personal data.
- If you wish to use your rights for any of the above, please contact our Data Protection Officer, who will be able to help you.
- Please note, that if you are ever unsatisfied with the way we have handled a data request, please do make contact with us further so we can help you. If you feel that after several attempts you have still not had a satisfactory outcome, you can contact the Information Commissioner’s Office directly.
Security
We use safe, secure protocols for protecting your data, communications and transferring data. The web site has a secure certificate (HTTPS) issued by the Certificate Authority, Let’s Encrypt, San Francisco, United States. Our processing partners operate similar security protocols to ensure that your data is as secure as possible.
Whilst we try our best, we cannot guarantee the safety of your personal information. In the case of any security breach, we will notify you and relevant authorities as to the nature of the breach.
We would remind all users that you should keep your own username and password secure and secret.
The Northern River Masters uses the payment platform Stripe for online transactions. Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1, this is the most stringent level of certification available in the payments industry. They offer best in class security protocols and practices. Stripe uses HTTPS for all services using TLS (SSL). Card numbers are encrypted with AES-256 and Stripe also uses two PGP keys to encrypt communications with Stripe. For more information on Stripe security, click here.
Detailed Data Collection Information
Analytics
Google Analytics
Data Collected: Cookies and Usage Data
Privacy Policy: Google Privacy Policy – Google Opt Out
Summary: Google Analytics is a web service provided by Google Inc. (United States of America) which uses JavaScript and Cookies to collect data relating to your visits to this web site. The data that is collected is anonymous and is not cross-linked with any personal data. The data is aggregated to allow us to analyse visitor trends, page popularity, conversions and other statistical data that is used to enhance your experience of the web site.
Marketing, Contact Forms and Transactional Emails
Contact Forms
Data Used: Email Address, Name, Phone Number
Summary: When you send us an email using the contact form, we will store your personal data in order to reply back to your message and to continue processing your requests. We keep hold of this data for a set period of time so that we can refer back to the correspondence if we need to if you contact us again at a later date. We also keep correspondence to improve your service and products.
SendGrid
Data Used: Email Address
Privacy Policy: Sendgrid Privacy Policy
Summary: When we send you an email from the website from a promotional email to a transaction email such as an order received notice, order shipped notice, automated responses etc. These emails will be routed via the SMTP cloud provider, SendGrid. SendGrid is a whitelisted, SMTP provider that ensures that our email delivery is reliable and you get transactional emails with minimum disruption from junk/spam filters and other blocks to these important emails.
Registration
Registration on the Northern River Masters website will collect your email, name, address, phone and optionally your date of birth. This data is used for registration on the web site allowing you to login in and process and use services you have requested to use. This may include items such as placing an order, viewing order details, updating your contact details, using the checkout process, uploading catch reports, writing reviews, commenting on posts and other uses of the web site that requires a login.
Payments
Stripe
Data Collected: Card Details, Full Name, Shipping and Billing Address
Privacy Policy: Stripe Privacy Policy
Summary: Stripe is used as our main Payments Provider. It is fully PCI DSS Compliant, this service is used so that at no stage of the order process online does Northern River Masters have access to your full payment information. Stripe uses your personal details to process and authorise payments for any services you have requested.
Other Partners
Nimbus Hosting Ltd, United Kingdom. Web site hosting services, storage of web site files and databases relating to the web site. This database holds all order details and registration details so that orders can be processed and you can login to your account to order new items, amend your details or use other web site services such as writing reviews, uploading catches and commenting on articles. Nimbus Hosting has a Privacy Policy which can be read here.
Contact Information
Data Controller: Northern River Masters. Email: contact us
