Privacy Policy
This privacy policy explains how we collect, store and process your personal data. Personal data is any information that can be used to identify a living individual, either directly or indirectly. It can refer to obvious things, such as your name and address, but also to online identifiers such as IP addresses.
By making a purchase, becoming a dandx.co.uk member, using our website, entering a dandx.co.uk competition, or otherwise providing your details to us, you are acknowledging that your personal data may be used according to the practices set out in this policy.
Our Privacy Promise
In order to provide you with our services, we may need to collect personal data from you. When it comes to privacy, why we’re different comes down to something simple; we care.
• We promise to be transparent with you about how we collect, process, store and share your personal data.
• Your privacy will be respected at all times, and we will put you in control with easy-to-use tools and clear choices.
• We are committed to maintaining the safety and security of all personal data, from the point of collection to its deletion from our company records, by using appropriate security measures and controls.
• When we do process your personal data, we will do so to make your experience with co.uk better and to improve our products and services.
• We may also need to share your information with third parties who help us to provide our services, such as the couriers that deliver your items. We will make sure that all third parties we are engaged with treat your personal data with as much respect as we do.
Who are we?
D&X Ltd.
Unit 4 Belvedere Industrial Estate
Fishers Way
Kent
DA17 6BS
Phone number: +44 (0)20 8310 3400
Email address: info@dandx.co.uk
Registered company number: 6526193
ICO registration number: ZA398657
When do we collect your personal data?
• When you become a dandx.co.uk member
• When you sign up for our newsletter and other marketing
• When you enter our competitions
• When you talk with us on the phone
• When you make an online enquiry
Data we collect when you use our services:
• Transactional details when you order something from us
• Cookies gathered from the devices you use to connect to our website or social media platforms, and the platforms themselves
• Data from 3rd parties we work with, e.g. Google Ads and Google Analytics
Data that we DO NOT collect about you:
We do not collect any special category personal data from any of our customers.
This includes information about:
• Race or ethnicity
• Religious or philosophical beliefs
• Sex life or sexual orientation
• Political opinions
• Trade union membership
• Information about your health
• Genetic and biometric data
• Criminal convictions and offences
Data we may collect about you:
We have to collect some information from you, so that we can provide you with our services. We limit our data collection only to what is necessary.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
• Identity data: name and title
• Contact data: address, postcode, email address and telephone numbers
• Transaction data: details of products/services you have purchased from us, including date and time of purchase and money spent in relation to that purchase
• Technical data: internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website
• Profile data: purchases or orders made by you, your interests, your preferences, feedback and survey responses, and preferences about the use of our services
• Usage data: information about how you use our website, products and services
• Marketing and communications data: your preferences in receiving marketing from us and our third parties, and your communication preferences
How we use your personal data:
We will only use personal information about you if we have a legal basis to do so, and we will tell you what that legal basis is. We have set out in the table below:
• The personal information which we collect from you
• How we use that information
In some circumstances, we can use your personal information if it is in our legitimate interest to do so, provided that we have told you what that legitimate interest is. A legitimate interest is when we have a business or commercial reason to use your information which, when balanced against your rights, is justifiable. If we are relying on our legitimate interests, we have set that out in the table below.
What we use your personal information for: |
What personal information we collect: |
Our legal grounds for processing: |
Our legitimate interests (if applicable): |
To register you as a new member and create your dandx.co.uk account |
Identity Contact |
Performance of a contract with you |
|
To process your transactions and deliver your items |
Identity Contact Transaction |
Performance of a contract with you |
|
To manage payments and recover any money owed to us |
Identity Contact Transaction |
Performance of a contract with you Legitimate interests |
To recover any debts owed to us |
To make suggestions and recommendations to you about items that may be of interest to you |
Identity Contact Marketing and communications Technical Profile Usage |
Legitimate interests Consent |
To better tailor our services to our customers and grow our business |
To manage our relationship with you, including notifying you about changes to our terms or privacy notices |
Identity Contact Transaction |
Performance of a contract with you Necessary to comply with a legal obligation Legitimate interests |
To keep our records up to date |
To enable you to partake in a prize draw, competition or to complete a survey |
Identity Contact Transaction |
Performance of a contract with you Legitimate interests Consent |
To study how customers use our services and to grow our business |
To administer and protect our business and our website |
Transaction Technical Usage |
Legitimate interests |
Running our business, provision of administration and IT services, network security |
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you |
Identity Contact Marketing and communications Usage Profile |
Legitimate interests |
To study how customers use our services, to develop them, to grow our business and to inform our marketing strategy |
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences |
Technical Usage Profile |
Legitimate interests |
To define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy |
To carry out session recordings to improve our website, products/services, marketing, customer relationships and experiences |
Identity Technical Usage Profile |
Legitimate interests Consent |
To study how customers use our website, to develop and improve our website (including bug-fixing) and to inform our marketing strategy |
Marketing:
We use Sendinblue to help manage our marketing database and send out information to you, so your data, including your name, email address and phone number will be stored within the Sendinblue system.
Sendinblue may process some of your personal data outside of the EEA and we have ensured that there are appropriate safeguards in place for doing so. Sendinblue uses Standard Contractual Clauses to ensure the security of processing outside of the EEA.
Click to see Sendinblue's Privacy Policy and Terms and Conditions.
Deliveries:
We will share your name, address, email address and phone number with our couriers so that they may deliver your items and contact you with delivery updates. We utilise different couriers depending on the size of the item you have ordered, how quickly you have requested your delivery, and where you live; however, we will always tell you which service will be delivering your order.
Transactions:
We use third-party payment providers to securely process our transactions, so information relating to your payments, including your card details, will be shared with these providers. These providers may process your personal data outside of the EEA.
How long will we keep your data?
We do not keep your data for longer than necessary; specifically, we will not keep your personal details for longer than 6 years, as this is the statutory retention period for HMRC records.
How we guard your data:
We will protect the data you entrust to us with appropriate measures and controls, as well as ensuring that the companies we work with are just as careful with your data.
We will always use appropriate technical and organisational measures to prevent the loss, misuse, destruction or alteration of your personal data.
We will continually test, audit and monitor our compliance with Information Security standards and relevant Data Protection regulations.
We ensure that the third parties we work with who process your personal data operate under a Data Sharing Agreement.
Your rights:
You have the following rights with regards to your personal data:
• The right to be informed – this privacy notice explains to you how your personal data is processed by us.
• The right to access – you can request that we provide you with all of the personal data that we hold about you. We will provide this to you free of charge within one month of your request.
• The right to rectification – we like to make sure that the information we have about you is correct. You can manage your personal details within your dandx.co.uk account to ensure that they are up to date. You can also contact us by emailing info@dandx.co.uk or calling us on +44 (0)20 8310 3400.
• The right to erasure – this means that you have the right to have your data ‘erased’ in the following situations:
1. Where the personal data is no longer necessary in relation to the purpose for which it was originally collected or processed
2. When you withdraw consent
3. When you object to the processing and there is no overriding legitimate interest for continuing the processing
4. When the personal data was unlawfully processed
5. When the personal data has to be erased in order to comply with a legal obligation
• The right to restrict processing – you have the right to restrict processing in certain situations such as:
1. When you contest the accuracy of your personal data, we will restrict the processing until you have verified the accuracy of your personal data
2. When you have objected to processing and we are considering whether our legitimate grounds override your legitimate grounds
3. When processing is unlawful and you oppose erasure and request restriction instead
4. When we no longer need the personal data, but you require the data to establish, exercise or defend a legal claim
• The right to object – You have the right to object to the processing of your personal data in the following circumstances:
1. Direct marketing: remember, you can opt out at any time from our marketing communications using the preference centre in your dandx.co.uk account and by using the ‘unsubscribe’ function in our marketing emails
2. When and where the processing is based on legitimate interests
3. When your information is being processed for purposes of scientific/historical research and statistics
You also have the right not to be subject to a decision that is based solely on automated processing. dandx.co.uk does not conduct any automated decision making, including profiling, on our customers.
Updates to our privacy policy:
We will continually review this Privacy Policy and may make changes where necessary. The Privacy Policy published on our website will always be the most up to date version, so to ensure you always have the most up to date information please keep checking this page.
How to contact us:
If you want to talk to us about anything in this privacy policy, to find out more about your rights, or to enforce your rights, please contact us via info@dandx.co.uk and our team will be happy to help.
You have the right to make a complaint with the ICO here.