Privacy Policy

    This Privacy Policy sets out how we collect and use your personal information and what your individual data protection and privacy rights are.
    We take your privacy very seriously and we ask that you read this privacy policy carefully as it contains important information on: the personal information we collect about you what we do with your information, and who your information might be shared with.
    This Privacy Policy was last updated on 24th May 2018 and is version 2.

    Who is Responsible for Processing Your Personal Data

    Brynglas Equine is the Data Controller. This is the legal entity responsible for how your personal data is collected, stored and processed. Brynglas Equine is registered at address: Pantygwyfol, Llanilar, Aberystwyth, Ceredigion, SY23 4NY.

    Managing Your Personal Data

    When you share your personal information with us, you have a right to expect that information to be treated with total confidentiality. Therefore, it is our responsibility to manage your personal data that you provide to us with care and in accordance with all data protection legislation and industry best practice.
    Whether you have supplied your personal details online, by phone, by email or in a letter, we will never use them without a lawful reason to do so. We will use your personal data for the purposes for which they were initially requested and as fully explained in this Privacy Policy.
    It is your responsibility to ensure that your personal data provided to us is accurate and up to date. You can update your personal contact details, including email address and phone number, by visiting My Account online.

    Using Your Personal Data for Direct Marketing Purposes

    Based on your marketing preferences, we use your email to send you details of our latest products and promotions. We also use marketing Profiling techniques to determine what product offers may be of interest to you.

    We hold your personal data for the purposes of direct marketing to you for a period of two years from the date of your last purchase unless you have an outstanding credit balance or have updated your marketing preferences in which case you will continue to receive marketing information unless you tell us otherwise.

    Obtaining Your Consent

    We will obtain your consent to send you details of our latest products and promotions via Email Marketing and Social Media in a number of ways. We will obtain your consent when you register your details with us, make a purchase, sign up to our email newsletters, request product information from us, enter a competition or when we send you electronic receipts via email in store. You can change your email and telemarketing preferences at any time – see Changing Your Marketing Preferences.

    Email Marketing

    We would like to keep you informed about our latest product offers and promotions using the email address you provide to us. To do this, we will ask you to opt-in to receive marketing emails when you first register an account with us, sign up for our newsletter, enter a competition or prize draw or agree for us to use your email address for marketing purposes when we send you electronic receipts in store. You can opt out of email marketing at any time – see Changing Your Marketing Preferences.

    Third Party Marketing

    We will not share your personal data with third party companies for the purpose of them marketing their products and services to you.

    Changing Your Marketing Preferences

    You can change your marketing preferences for Email Marketing at any time by:

    Clicking unsubscribe in the body of the email sent to you;

    Going online to My Account

    Please allow 48 hours for your changes to be processed for email and telephone marketing. You may still receive direct marketing materials that are already processed before we received your request.

    Using Your Personal Data to Improve Your Online Shopping Experience

    We want to make sure that we only contact you with online content that you will find relevant and interesting. For this to work effectively, we collect information about your browsing activity using Cookies when you are using our websites. These Cookies pass back to us your browsing information using your Internet Protocol (“IP”) address as the identifier, which we combine with other anonymised, non-personalised and aggregated data, allowing us to determine what content and product information is most relevant to you when you are shopping online.

    We have a legitimate business interest to use the aggregated and anonymised data obtained via Cookies and other data sources to help us provide you with relevant product marketing and improve your online shopping experience.

    Profiling

    Profiling is a term used to describe a form of data processing where significant volumes of data made up of lots of different data types – such as browser history from Cookies, transaction history, demographics and buying habits – are all used in an aggregated, anonymised and non-personalised form to evaluate and predict, based on statistical analysis, what you may or may not want to purchase from us. We use this technique to understand what drives you to buy from us and the types of products you are most likely to be interested in whether that be by email or social media. This is sometimes referred to as Big Data and Data Science and is widely used by retailers to improve their customer offering and Interest-Based Advertising.

    Interest Based Advertising

    The data that we collect and use when you browse or shop online, including where we use Cookies, uses your IP address as the unique identifier; however, it will not contain your name, home address or phone number. We may also use your email address to send you online targeted marketing information but we always use hashed email addresses to keep your data secure. The email addresses are scrambled before being utilised to ensure nobody else can gain access to your email address. This enables us to offer our customers the best possible online user experience and equally allows us to improve the relevancy of our advertising. This allows us to provide you with more of the content you want to see.

    Processing Card Payments

    Using Your Personal Data to Operate Your Personal Account

    We will use your personal data to administer and to operate your personal account as set out below. We will collect and use the contact details that you provide to us to communicate with you about your account and in relation to the products and services we provide to you.

    We will hold your personal data for 6 years, plus the current financial year, after the date of your last transaction on your personal account.

    Delivering Your Goods

    We will use your personal contact details such as name, postal address, phone number and email address that you provide to us in respect of delivering products or services to you. We will share this information with our suppliers who directly dispatch orders to you or our delivery partners who may contact you to arrange a convenient delivery time and provide you with updates as to when they will arrive.

    Processing Returns and Refunds

    We use your customer account and contact details to verify any returns and refunds that we process either by card or via your credit account. We process all card payments in line with our obligations under the PCI-DSS regulations and will encrypt the payment details before sending to our card payment and banking provider.

    General Service Communications

    We will use your personal data for all general service communications including processing orders, notifying you of orders received, updating you on deliveries, despatched or products out of stock. We need to do this for the performance of the contract and terms and conditions that you have signed

    Product Reviews

    At times when you make a purchase from us, we will send you an email asking you to provide a review of the product and tell us what you think. If you choose to do so, you will be asked to enter your email address, your thoughts about the product and any relevant details which may be relevant to the product you have purchased. We will use your email address to confirm that we have received your product review. We are really keen to hear what you think about our products and use the information to inform our product development programme.

    Social Media

    We actively use social media platforms as a way of connecting, and getting closer, to our customers to hear and understand what our customers think about us and our products and services. Occasionally, we may contact you directly via those social media platforms if we would like to share your comments or pictures with other customers or publish them in our marketing materials. We will always ask you if you are happy for us to use your data in this way and will keep any data that you provide to us, such as email address, confidential and secure.

    Processing Your Personal Data Outside of the EU

    We will transfer your personal data outside the European Economic Area (the EEA) to prevent fraud, for credit searches and with our outsourced IT partners. Please also see Sharing Your Personal Data with Third Party Processors & Partners. In some cases, countries outside the EEA may not have such well-developed data protection laws as those in the EEA. However, we will put in place measures and safeguards that require your personal data to be kept secure, confidential and to be processed only and strictly in line with the terms of this Privacy Policy and any relevant data protection laws.

    How to Contact Us

    If you have any questions, comments or complaints about this Privacy Policy or our use of your personal data:

    If you wish to contact us, please send an email to info@brynglasequine.co.uk or write to us at our address or call us on 07773 496226

    If you are at all dissatisfied with the information provided by the Data Governance Team, please address any complaints to the Data Protection Officer at the same address.

    Your Personal Data Rights

    Right of Access

    You may wish to access a copy of the personal data we hold about you – known as a Subject Access Request. You can do so by ringing, writing to or emailing the Data Governance team. We will respond to your Subject Access Request as soon as possible and, in any event, within the statutory 30 days. However, in the event that we need more information from you to verify your identity, which we must do to ensure we disclose your personal data to the right person, the 30 day response period will only commence from the time that we have validated your identity

    Right of Rectification

    If you believe we have made an error as to the personal data we hold about you, please speak to one of our customer service advisors on 07773 496226 or email us on info@brynglasequine.co.uk who will be able to process the correction for you. Alternatively, you can visit My Account to update your contact details online. Should you wish to discuss this matter further, please contact the Data Governance team

    Right of Erasure

    You have the right to request your personal data to be permanently deleted from our records and systems to avoid any further communication with you. Your request will always be considered in light of the legal bases that we hold, store and process your personal data and the purpose that we collected your data. Where the legal bases permits, we will carry out your instruction without undue delay. Please note, however, that where we have a legal or contractual obligation to hold your personal data, we may not be able to carry out your request but we will explain this fully to you. Please address any request to delete your data to the Data Governance team.

    Right to Restrict Processing

    Should you believe that we are processing your personal data in a way that you did not understand or agree to and wish to restrict such processing, please speak to the Data Governance team who will be able to assist you.

    Right to Object to Processing

    You have the right to object to certain types of processing of your personal data. We will always make it clear at the outset of any new arrangement with you how we are going to process your personal data. Should you wish to object to such processing, particularly concerning Automated Decisioning and Profiling, we will give you the option to opt out on application. However, should you wish to discuss this matter further, please speak to the Data Governance team.

    Right to Portability

    In the event that you wish to move your personal data that we hold on you to another organisation in the form of an excel or csv format, please contact the Data Governance team who will be able to assist you.

    Right to be Informed

    You have the right to be informed about the collection and use of your personal data. This is commonly known as a ‘privacy statement’ or ‘privacy policy’. We will provide you with the information about how we collect and use your data in various means, such as by ‘just in time’ notice provided to you at the time of collecting your personal data and via this Privacy Policy. Our Privacy Policy is regularly reviewed in line with our business processes. Any changes to this Privacy Policy will be communicated via email to all active customers. You can ask for a printed copy of our Privacy Policy by contacting the Data Governance team.

    Right to Complain to the Information Commissioner’s Office (ICO)

    You have a right to lodge a complaint with the Information Commissioner’s Office (ICO) if you have a complaint with how you believe your personal data has been handled. For more information, please visit https://ico.org.uk/concerns