Privacy Policy Notice

This privacy policy notice is for this website; www.yourimage2canvas.co.uk and served by Ultra-Print Ltd, Unit 10-12 Priory Business Park, Fitzwilliam, WF9 5BZ and governs the privacy of those who use it.

The purpose of this policy is to explain to you how we control, process, handle and protect your personal information while browsing or using this website, including your rights under current laws and regulations.

If you do not agree to the following policy you may wish to cease viewing / using this website.

Policy key definitions:

• "I", "our", "us", or "we" refer to the business, Ultra-Print Ltd & Your Image 2 Canvas
• "you", "the user" refer to the person(s) using this website.
• GDPR means General Data Protection Act.
• PECR means Privacy & Electronic Communications Regulation.
• ICO means Information Commissioner's Office.
• Cookies mean small files stored on a users computer or device.

Processing of your personal data

Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases.

• We are registered with the ICO under the Data Protection Register, our registration number is: ZA372882

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (https://ico.org.uk).

In the UK, please read: https://ico.org.uk/for-the-public/raising-concerns/ for details of how to do this. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

How the law protects you

Data protection laws state that we are only able to process personal data if we have valid reasons to do so.

The basis for processing your personal data includes, but is not limited to, your consent, performance of a contract, to enable billing and remittance, and to contact you for customer service purposes.

How is your personal data collected?

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your Identity Data, Contact Data, Transaction Data, Profile Data, Financial Data and Marketing and Communications Data by using our website, filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you purchase a product or service (including gift cards) through our website
• create an account on our website
• request marketing to be sent to you
• enter a competition
• or give us some feedback.
  
  

We receive information about you from you when you use our website, complete forms on our website, if you contact us by phone, email, live-chat or otherwise in respect of any of our products and services or during the purchasing of any such product.

Additionally we also collect information from you when you sign up, enter a competition, promotion or survey or when you inform us of any other matter.

Your personal data may be automatically collected when you use our services, including but not limited to, your IP address, device-specific information, server logs, device event information, location information and unique application numbers.

What type of data do we collect from you?

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data includes first name and last name.
• Contact Data means the data we use to contact you including your billing address, delivery address, email address and telephone number.
• Financial Data means the data we use to process your payments for your orders including your payment card details. We do not store or process your card details ourselves, they are processed and stored via one of our contracted third party service providers. We encrypt your payment card details in your browser and securely transfer this data to our relevant third party payment provider to process a payment.
  
• Transaction Data means details about transactions you have made on our website including the payments to and from you along with other details of products and services you have purchased from us.
• Technical Data means details about the device(s) you use to access our website including your internet protocol (IP) address, browser type and version, location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Profile Data includes your username (email address) and password, your login data, purchases or orders made by you, your interests, preferences, feedback and survey responses.
• Usage Data includes information about how you use our website, products and services. This includes your browsing patterns and information such as how long you might spend on one of our webpages and what you look at and for on our website, the click stream to and from our website, page response times and page interaction information such as scrolling, clicks and mouse overs.
• Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, where you do not provide suitable delivery instructions to provide you with goods or services).

In this case, we may have to cancel a product or service you have with us but we will notify you should this occur.

Third Party Data Sharing

We also collect from and share data with the following providers:

• Essential Service Providers: Sometimes, other businesses give us data about you which we may need for our legitimate interests of conducting business with you and on occasion they are necessary to perform our contract with you. It usually comprises Financial Data or Transaction Data. This happens when we link through to third party payment providers. They tell us that you have paid for your products and, where relevant and/or necessary they will provide us with your Contact Data and Transaction Data. We also might engage third party contractors to provide us with technical or delivery services that are related to your account with us. We may also pass contact details to delivery service in relation to an order placed with us so you can be contacted about delivery timescales and any delivery issues that could occur.

How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To process orders that you have submitted to us
• To provide you with products and services
•  To comply with our contractual obligations we have with you
• To help us identify you and any accounts you hold with us
•  To enable us to review, develop and improve the website and services
•  To provide customer care, including responding to your requests if you contact us with a query
• To administer accounts, process payments and keep track of billing and payments
• To detect fraud and to make sure what you have told us is correct
•  To carry out marketing and statistical analysis
• To review job applications
• To notify you about changes to our website and services
•  To provide you with information about products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes; and
• To inform you of service and price changes.

Generally we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third party direct marketing communications to you via email.

You have the right to withdraw consent to marketing at any time by selecting to unsubscribe from the email which will be in every email we send.

We generally only send electronic marketing - such as email marketing - to people who have previously bought similar products from us or opted in (for example by entering a competition or signing up for a newsletter), and this is in our legitimate interests.

The Newsletters do need to be opted into but we will always offer a way out of receiving this marketing in every marketing communication we send.

Alternatively, you can contact us at any time to ask to be removed from our marketing communications.

Data Security

For the avoidance of doubt, we do not and never shall sell your personal data to third parties for marketing or advertising purposes.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

You acknowledge that the Internet is not a completely secure medium for communication and, accordingly, we cannot guarantee the security of any information you send to us (or we send to you) via the Internet. We are not responsible for any damages which you, or others, may suffer as a result of the loss of confidentiality of such information.

Data Retention Periods

We will keep your personal data for the duration of the period you are a customer of Ultra-Print Ltd.

We shall retain your data only for as long as necessary in accordance with applicable laws.

On the closure of your account, we may keep your data for up to 7 years after you have cancelled your services with us.

We may not be able to delete your data before this time due to our legal and/or accountancy obligations.

We may also keep it for research or statistical purposes. We assure you that your personal data shall only be used for these purposes stated herein.

In some circumstances you can ask us to delete your data.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Your Legal Rights

Under certain circumstances, you have rights under UK data protection laws in relation to your personal data.

In preventing the use or processing of your personal data, it may delay or prevent us from fulfilling our contractual obligations to you. It may also mean that we shall be unable to provide our services or process the cancellation of your service.

You have the right to object to our use of your personal data, or ask us to delete, remove or stop using it if there is no need for us to keep it.

This is known as your right to be forgotten. There are legal and accountancy reasons why we will need to keep your data, but please do inform us if you think we are retaining or using your personal data incorrectly.

You can view, edit or delete your personal data and to do so please Contact Us.

You have the right to ask us not to process your personal data for marketing purposes. You will be given the opportunity to opt out of Marketing Communications by selecting the option to unsubscribe which will be provided in every marketing email sent or you can Contact Us.