For the purpose of the Data Protection Act 2018 (the Act), the data controller is Shrap Ltd of 87 North Road, Poole, BH14 0LT (registration number 11349561).
We may collect and process the following data about you:
IP addresses and cookies
We may collect information about your device including, where available, your IP address, operating system and browser version. We collect statistical data about our users’ browsing actions and usage patterns in a way that does not identify any individual, and we will not collect personal information in this way.
We store and obtain information using a cookie file on your device. Cookies are issued when you sign in, and help us to improve our site and to deliver a better and more personalised service. They enable us:
You may refuse to accept cookies by activating the relevant setting in your browser. However, most parts of our systems will be inaccessible if you choose to do this.
Information you provide to us is stored on secure servers located in the UK, which are provided and managed by external suppliers appointed by us. The server suppliers are subject to strict contractual requirements on data security. We also have internal policies and controls in place to minimise the risk of your data being lost, misused, accidentally destroyed or disclosed.
Some of your personal data that we collect may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring one of the following safeguards is implemented:
Any payment transactions will be encrypted. Where you have chosen a password which enables you to access our services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Our website may contain links to and from other websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
We use information held about you in the following ways:
We will not sell or in any other way mistreat your data. However, we may be required to disclose your personal information to third parties:
You have the following rights in relation to your personal data:
Request access to your personal data: You can ask for a copy of the personal data we hold about you free of charge. However, we may charge a reasonable fee if your request is repetitive or excessive, or we may refuse to comply with your request.
We may need to request specific information from you to help us confirm your identity to ensure that personal data is not disclosed to any person not entitled to receive it. We may also contact you to ask for further information to speed up our response.
We try to respond to all legitimate requests within one month of receipt, but it may take longer than this if your request is particularly complex. In such cases we will notify you, and keep you updated.
Request correction of your personal data: You have the right ask for any incomplete or inaccurate data we hold about you to be corrected, though we may need to verify the accuracy of the new data provided to us.
Request the deletion of your personal data: You may ask us to delete or remove personal data where there is no good reason for us continuing to process it. Please note, however, we may not always be able to comply with your request (for example where data is retained to fulfil our regulatory obligations).
Withdraw consent: You can withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide our services to you. We will advise you if this is the case at the time you request to withdraw your consent.
If you wish to exercise any of the rights set out above, please contact our Head of Compliance.