Section 1: Introduction
From time to time, we will amend our policy to adapt to new legislation or case law, as well as to industry practice standards. We will notify you of such modifications being effective within 72 hours after their appearance on the website.
Section 2: Lawful Basis for Processing Data
Under the following legal conditions, GDPR allows us to collect your personal data for example first or last names, addresses and email addresses as outlined further below.
In some cases, we can collect and process your data with your consent. For example when you create an account and start creating your maps. If we collect your data, we will always inform you about it.
We collect your personal data in certain situations like contractual obligations. For example to complete your transactions, when you purchase maps or start your paid subscription, we would need your address as well as other necessary personal data to complete your purchase.
We may process personal data for certain legitimate interests, for example to understand how people interact with our website, to determine the effectiveness of improvements we have made, or seeing where you are purchasing from to create effective marketing plans and pricing.
Section 3: When do we collect your personal data?
- when you visit our website
- when you start by creating a free account with us
- when you make online purchases for our maps or subscriptions
- when you leave us feedback and reviews
- when you contact our customer service team for any requests or queries
Section 4: What kind of personal data do we collect?
Depending on how you contact us, we may collect Personally Identifiable Information (PII) including first and last name, gender, date of birth, billing/delivery address, orders and receipts, email address & cookies etc. For your security, we’ll also keep an encrypted record of your login password if you create an account on our website.
If you make a payment on our website, we do NOT store your credit card details or other sensitive payment details. Your payment is handled by Stripe, our payment service provided (PSP), and you can read their security policy at https://stripe.com/gb/privacy.
Section 5: How and why do we use your personal data?
We use your personal data to give you the best customer service or inform you about our new products and services. If you order any products or services from us, then we need your personal data to get in touch with you and to provide after-sales support.
We may use your non-sensitive personal data to register you as a new customer, manage your payments, collect and recover monies owed to us, to manage our relationship with you, or to send you details of our goods and services.
Our legal grounds for processing your data are in relation to the points above that are for the performance of a contact with you, or are necessary for our legitimate interests to develop our products/services and to grow our business.
We will NOT share your details with third parties for marketing purposes except with your express consent.
Section 6: To whom do we disclose your personal data?
We may have to share your personal date with:
- Service providers who provide IT and system administration support
- Direct marketing companies who help us manage our electronic communications with you.
- Google to show you products that might interest you while you’re browsing the internet. This is based on either your marketing consent of your acceptance of cookies on our websites. See our Cookies notice for details which is in Section 11.
- Professional advisors including lawyers, bankers, auditors and insurers HMRC and other regulatory authorities.
We require all of these third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance of the law. They are only allowed to process your personal data under our instructions.
Section 7: How long will we keep your personal data?
Whenever we collect or process your personal data, we’ll only keep it for as long as it is necessary for the purpose for which it was collected.
At the end of the retention period, your data will either be deleted or completely anoymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Section 8: How we protect your personal data?
Protecting your data is important to us and we have put in place security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breaches and we will notify you and any applicable regulator of a breach where we are legally required to do so.
We may anonymise your personal data (so that you can no longer be identified from such data) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Section 9: Your rights in respect of your personal data
Right of access by the individual
Under the GDPR “right of access” you have the right to request from us (free of charge in most cases) the following information about the processing of your personal data:
- the purposes of the processing;
- the categories of personal data concerned;
- to whom the personal data have been or will be disclosed (for example, to business partners, third countries or international organizations);
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- deletion of the personal data, restriction of processing, or to withdraw your consent;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from the individuals, any available information as to their source;
- the existence of automated decision-making, including profiling;
Right to erasure (‘right to be forgotten’)
You have the right to request deletion of your personal data. In this case, we will delete your personal data without undue delay. This will be done providing there is no legal obligation or legitimate interest to retain the data.
Right to restriction of processing
In the following circumstances you have the right to request the restriction of processing:
- the correction of your personal data when incorrect, out of date or incomplete;
- the data has been unlawfully processed and you oppose erasure of your data but request restriction instead;
- we no longer need your personal data but you need us to keep it in order to establish, exercise or defend a legal claim;
Right to withdraw consent
You have the right to withdraw any of your consent at any time, which you have given us to processing your personal data. For example, to stop the use of your personal data for direct marketing activity or any processing of your personal data.
Section 10: Contacting the supervising authority
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. You can contact them by calling 0303 123 1113, or by clicking the following link: https://ico.org.uk/concerns
If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.
Cookies are harmless text files designed to make your online life easier, usually by remembering details such as whether you’ve visited a site before, what content you may have viewed and what you’ve placed in your online shopping basket. This data is completely anonymous, containing simply a website name and unique user ID.
Cookies are also used to collect anonymous data about how visitors use a website, such as how long is spent on each page. This allows companies to work out which parts of their websites are most popular, and which sections might need improving to give visitors a better experience of using the site.
None of the cookies we use collect personal information about you; they are simply used to give us anonymous data that allows our website to work properly and help us see where we can improve.
Our website may uses anonymised cookies to serve the following functions:
- Count visitor numbers, pages viewed and other anonymous data on our website usage.
- Google Analytics tracking: this gives us aggregated data on how visitors use our website, allowing us to see information such as which are our most popular pages, and how long visitors spend on different parts of our site. We use this anonymous data (which is linked only to your IP address, not to any personally identifying information) to identify parts of the site that may need redesigning or rewriting to make them easier to use. We also use Google Ads remarketing to market our products. We place a cookie on a browser, and then these cookies are read by Google, that may serve an ad on a 3rd party website. You can read about Google’s ad policy and opt out on this page.
- Other third-party analytics tracking: from time to time, we may also make use of other third-party analytics tracking, which again would be linked only to your IP address and not to any personal information.
If you’d rather not have cookies on your computer, you can disable them quickly and easily in your browser settings. Instructions for doing this will vary from browser to browser, but will usually be in the ‘privacy’ section of your browser settings or preferences. You’ll also be able to delete any cookies already on your computer, as well as blocking cookies from other sites.
Cookies used by us are stored on your device and cannot read the data contained in it or read cookie files created by other service providers. Disabling cookies in your browser may result in some aspects of our website not functioning correctly. For example, information you have entered with respect to any maps may disappear if you move to another page. We therefore recommend keeping cookies enabled to ensure you get the most from our site.