Introduction
Welcome to Mellor Online’s Privacy Policy. We value your privacy and are committed to protecting your personal data. This policy explains how we manage your personal information when you visit our website, regardless of your location, and outlines your privacy rights and legal protections.
For definitions of terms used in this policy, please refer to the Glossary in Section 10. A PDF version of this privacy policy is also available for download.
1. Key Information and Identity
Purpose of This Policy
This privacy policy provides information on how Mellor Online collects and processes your personal data when you use our website, including data provided during product or service purchases or other interactions with us. Our website is not intended for children, and we do not knowingly collect data from them.
Please review this privacy policy along with any additional privacy notices we provide when collecting or processing your data. This policy complements, rather than replaces, other notices.
Data Controller
Mellor Online is the data controller responsible for your personal data, referred to as “Mellor Online”, "we", "us", or "our" in this policy.
We have a designated Data Privacy Manager to address any queries related to this policy. For questions or to exercise your legal rights, please contact:
- Legal Entity: Mellor Online
- Privacy Manager: Stuart Mellor
- Email: stuart@melloronline.co.uk
- Address: 139 Manor Road, OSSETT, West Yorkshire, WF5 0LQ
You have the right to file a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk. However, we would appreciate the opportunity to address any concerns before you do.
Updates and Notification
We regularly review and update our privacy policy. Previous versions may be available upon request. It is crucial to keep your personal data accurate and up-to-date, so please notify us of any changes during your relationship with us.
Third-Party Links
Our website may include links to third-party sites or services. We do not control these sites and are not responsible for their privacy practices. We recommend reviewing the privacy policies of any third-party websites you visit.
2. Data We Collect About You
Personal data refers to information that identifies an individual, excluding anonymized data.
We may collect, use, store, and transfer various types of personal data, categorized as follows:
- Identity Data: Includes name, username, marital status, title, date of birth, and gender.
- Contact Data: Includes addresses, email, and phone numbers.
- Financial Data: Includes bank account and payment card details.
- Transaction Data: Details about payments, purchases, and services.
- Technical Data: Includes IP address, browser details, operating system, and other technology-related information.
- Profile Data: Includes usernames, passwords, purchase history, preferences, feedback, and survey responses.
- Usage Data: Information about how you use our website and services.
- Marketing and Communications Data: Includes preferences for receiving marketing materials and communication preferences.
We also collect Aggregated Data, such as statistical information, which is not considered personal data unless combined with other information that identifies you.
We do not collect Special Categories of Personal Data (e.g., health data, racial or ethnic origin) or information about criminal convictions.
Consequences of Not Providing Data
If you do not provide required personal data, we may not be able to fulfill our contractual obligations with you. This could result in the cancellation of a product or service, with notification provided as necessary.
3. Data Collection Methods
We collect data through:
- Direct Interactions: Data provided by filling out forms, making inquiries, or engaging with us in other ways.
- Automated Technologies: Data collected through cookies, server logs, and other tracking technologies.
- Third Parties: Data obtained from service providers, analytics firms, and publicly available sources.
4. Use of Your Personal Data
We use your personal data in accordance with legal requirements. Common purposes include:
- Contract Performance: Fulfilling contractual obligations with you.
- Legitimate Interests: Processing necessary for our or third parties’ legitimate interests, balanced against your rights.
- Legal Obligations: Complying with legal requirements.
We do not typically rely on consent for processing, except for direct marketing communications. You can withdraw consent at any time.
Marketing
- Promotional Offers: We may use your data to assess what products or services may interest you. You will receive marketing if you’ve requested information or purchased from us, unless you opt out.
- Third-Party Marketing: We will seek your consent before sharing data with third parties for marketing purposes.
- Opt-Out: You can opt out of marketing communications via the provided links or by contacting us.
Cookies
You can adjust your browser settings to manage cookies. Note that disabling cookies may affect website functionality. For details, refer to our cookies policy.
Purpose Changes
We will use your data only for the purposes for which it was collected, unless a new purpose is compatible with the original one. We will notify you if data is used for an unrelated purpose and explain the legal basis for this.
5. Disclosures of Your Data
We may share your data with:
- External Third Parties: As described in the Glossary.
- Business Transfers: In the event of a business change (e.g., merger or sale), the new entity may use your data as outlined in this policy.
We ensure that third parties respect data security and only process data according to our instructions.
6. International Transfers
Some third parties are based outside the UK, requiring data transfers beyond UK borders. We ensure data protection through:
- Adequate Protection: Transferring data to countries with adequate protection levels.
- Approved Contracts: Using specific contracts to safeguard data.
Contact us for more details on data transfer mechanisms.
7. Data Security
We implement measures to protect your data from unauthorized access or loss. Access is restricted to authorized personnel who need it for business purposes and are bound by confidentiality agreements. We have procedures to address data breaches and will notify you and regulators as required.
8. Data Retention
We retain personal data as long as necessary to fulfill collection purposes and legal obligations. This includes retention for tax and legal requirements, with a minimum period of 6 years for basic customer data. Data may be anonymized for research or statistical purposes, where applicable.
9. Your Legal Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your data and confirm lawful processing.
- Correction: Request updates to inaccurate or incomplete data.
- Erasure: Request deletion of data where no longer necessary or if you object to processing.
- Objection: Object to data processing based on legitimate interests or for direct marketing.
- Restriction: Request suspension of data processing in certain situations.
- Transfer: Request data transfer in a machine-readable format to you or a third party.
- Withdrawal of Consent: Withdraw consent where applicable, without affecting prior processing.
Requests are generally free of charge unless excessive, and we may need to verify your identity before processing. We aim to respond within one month, though complex requests may take longer.
10. Glossary
Legal Bases for Processing:
- Legitimate Interest: Processing necessary for business operations, considering the impact on your rights.
- Performance of Contract: Processing required for contract fulfillment.
- Legal Obligation: Processing necessary to comply with legal requirements.
External Third Parties:
- Service Providers: Technical, IT, and administrative services.
- Professional Advisers: Legal, financial, and insurance services.
- Regulators: HM Revenue & Customs and other authorities.
- Product Manufacturers and Service Providers: Related to orders and services.
Your Legal Rights:
For further details on your rights and to exercise them, please contact us.