Updated 26th May 2018
This policy applies to all the products, services and websites offered by Heartflood and our affiliates, except where otherwise noted. Products, services and websites are collectively referred to as the “services” in this policy.
What Data We Hold & Why
We collect and use the following information to provide, improve, and protect our Services:
We collect, and associate with you, information that you provide to us when you perform actions such as contacting us via email, telephone or written correspondence.
We collect information related to how you use this website and our services, including actions you take on this website, such as newsletter signup, file downloads, or clicks through to external websites. We use this information to improve our Services and to develop new services and features.
We also collect information from and about the devices you use to access our services. This includes information like IP addresses, the type of browser and device you use, the web page you visited before coming to our sites, and identifiers associated with your devices. Your devices, depending on their settings, may also transmit location information.
Cookies and other technologies
We may give users the option to sign up to marketing emails, text messages, phone calls and direct mailers, via the website, social media and through competitions that we run. If you register for this marketing, we may, from time to time, send you information about products, news, events, offers & competitions. Users who receive these marketing materials can opt out at any time. If you do not want to receive marketing emails from us, simply click the ‘unsubscribe’ link in any email. You can opt out of any other marketing by emailing us at firstname.lastname@example.org
Why we hold your data
We collect and use the personal data described above in order to provide you with services in a reliable and secure manner. We also collect and use personal data for our legitimate business needs. To the extent we may process your personal data for other purposes, we ask for your consent in advance or require that our partners obtain such consent.
Specifically, we may use your data to:
- Provide, update, maintain and protect our services and business.
- Communicate with you by responding to your requests, comments, and questions. If you contact us with questions or concerns, we may use your personal information to respond.
- Send you emails and other communications. We may contact you about important changes to our services.
- Understand how you use our services and improve them.
- Investigate and prevent security issues and abuse of services.
- Protect any person from death or serious bodily injury.
- Comply with applicable law, legal process, or regulation.
- Perform a task carried out in the public interest.
- We will also collect and use your data with your consent to send you marketing materials about our services.
Our Data Partners
We may share information as discussed below, but we won’t sell it to advertisers or other third parties.
Others working for and with us
Heartflood uses certain trusted third parties (for example, providers of customer support and IT services) to help us provide, improve, protect, and promote our services. These third parties will access your information only to perform tasks on our behalf in compliance with this policy, and we’ll remain responsible for their handling of your information per our instructions.
Law & order and the public interest
We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to: (a) comply with any applicable law, regulation, legal process, or appropriate government request; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse of this website or our stakeholders; (d) protect Heartflood rights, property, safety, or interest; or (e) perform a task carried out in the public interest. www.heartflood.co.uk
If we are involved in a reorganization, merger, acquisition, or sale of our assets, your information may be transferred as part of that deal. We will notify you, for example, via a message to the email address associated with your account, of any such deal and outline your choices in that event.
We may revise this policy from time to time, and will post the most current version on our website. If a revision meaningfully reduces your rights, we will notify you.
Your Right to Control and Access Your Information
You have a right to be informed of Personal Data processed by Heartflood and a right to rectification/correction, erasure and restriction of processing. You also have the right to receive from Heartflood in a structured, common and machine-readable format of Personal Data you provided to us.
We can only identify you via your email address and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly and/or you using our site and/or service. We cannot provide, rectify or delete any data that we store on behalf of our users or customers.
Where you have provided consent, you may withdraw it at any time, without affecting the lawfulness of the processing that was carried out prior to withdrawing it.
To exercise any of the rights mentioned in this policy and/or in the event of questions or comments relating to the use of Personal Data you may contact our Data Protection Officer at email@example.com
Where Personal Data is processed for the above purposes on the basis of Heartflood’s legitimate interests, under the GDPR, you may object to such processing at any time. To do so please contact our Data Protection Officer at firstname.lastname@example.org
In addition, you have the right to contact your local data protection supervisory authority.
What is a cookie?
A cookie is a piece of data stored by a website on your computer or mobile device. Cookies are useful for storing data so that when you revisit a site the stored cookie data can be retrieved and reused. An example of when this often happens is if you choose to remain logged in to a website. On doing so, a cookie is stored to remember your choice of remaining logged in, so that even after you close your browser or turn off your computer you don’t have to login again when you next visit the page.
A pixel tag (“pixel”) is a small piece of code that can be embedded on websites and emails. We use pixels and cookies to learn how you interact with our webpages and emails. This information helps us, and the advertising services providers we use, better promote our services. www.heartflood.co.uk
You can control whether your computer accepts or rejects cookies by default, or to tell you when a site tries to save a cookie on your computer, by adjusting your browser setting. Cookies can also be manually deleted. The method to change these settings varies depending on the browser. Read the help section within your browser to find out more, or visit www.aboutcookies.org (we are not responsible for the content of external websites).
You can set your browser to not accept cookies, but this may limit your ability to use the Services.
This site operates implied consent for cookies, which means we assume by using this site you are happy with the usage of the cookies outlined below. If you do not want to accept the use of these cookies you should discontinue use of the site, delete the cookies, or adjust your browser settings accordingly.
Where Heartflood holds data on individuals this data will only be for the time which is necessary and we will regularly review the amount and age of any data held and implement polices to remove any data that we no longer require, to reduce any risk for all stakeholders.
In some cases, such as active email mailing lists and Google Analytics tracking this data could be retained indefinitely as it will always be of use for us to keep historic stats for comparison and to continue marketing to anyone that has agreed to this. However, this data is subject to the above data rights and anyone has the right to request any data on them or request that this is amended or removed. Details on how to do this can be found in the “What are your Rights” section above.
But please note: there might be some latency in deleting this information from our servers and back-up storage; and we may retain this information if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements.
If you have questions or concerns about Heartflood, our services, and privacy, contact our Data Protection Officer at email@example.com If they can’t answer your question, you have the right to contact your local data protection supervisory authority.