What is GDPR?
The EU’s General Data Protection Regulation (GDPR) is the culmination of four years of efforts to update data protection for the 21st century, in which people regularly grant permissions to use their personal information for a variety of reasons in exchange for ‘free’ services.
In the UK, GDPR will replace the Data Protection Act 1998, which was brought into law as a way to implement the 1995 EU Data Protection Directive. GDPR seeks to give people more control over how organisations use their data, and introduced hefty penalties for organisations that fairly to comply with the rules, and for those that suffer data breaches. It also ensures data protection law is almost identical across the EU.
How do we use your data?
When you place an order with us or fill in our contact form, we will ask you for personal information in order for us to process your request for products or information.
We will only ever ask for and process personal data that is relevant and necessary in dealing with your order or query.
Your data will never be stored without legitimate reason and will never be disclosed to a third party other than our delivery partners, who’s roles are critical in processing your request for products or information.
You will always be asked permission for us to use your personal data for the purposes outlined on this page, prior to submitting your order or request for information. You have the right to request details of the personal data about you that we have stored, and the right to request deletion of that data at any time. Your data will never be used for marketing or other purposes without your prior permission.
If you require any further information on this, please read our full terms and conditions or contact us on 0333 015 4345 / info@cairntechnology.com
Data Subject Access Request
If you would like to know what data we hold about you, please contact us. and we will come back to you with all the details we hold about you.
We can only provide the details that match the information you provide, and we will also need to verify your identity.
Once we have received your request we will respond to you with any information we may hold about you within 30 days.
Data Subject Removal Request
If you would like to remove any data we hold about you and consent you have provided, please contact us and we will process your request and if we have matching records, delete them.
We can only delete the details that match the information you provide, and we will also need to verify your identity.
Once we have received your request we will respond to you confirming the result within 30 days.
User Tracking
We use Leadoo’s tracking service to follow what users are doing on the site and combine this behavioral data with other data we can gather from e.g. chat interactions. Leadoo uses etag tracking in order to hook together the same users behavior over several sessions – in practice this works similarly to cookie based tracking. Please check out Leadoo Marketing Technologies Ltd’s Privacy Policy (https://leadoo.com/privacy-policy/) for more information on what is tracked and what your rights are. Leadoo works as the Processor and we work as the Controller for the data in terms of GDPR. You can stop the tracking by emptying your browser’s cache after the visit. For more on how Leadoo works as a GDPR compliant processor, see https://leadoo.com/privacy-policy-processor/