Introduction

Welcome to Innavisions Ltd's privacy policy.

This cookie notice is for visitors to our websites, apps and other digital platforms. It sets out how we use cookies. In this notice 'we' and 'our' means Innavisions which operates this platform.

We respect your privacy and are committed to protecting your personal data, whether you buy services from Innavisions. This privacy policy will inform you about how we look after your personal data when you visit our website (regardless of where you visit it) and tell you about your privacy rights and how the law protects you. It will also deal with any personal data collected in other ways, such as at events, signing up for newsletters, responses to correspondence or on-site events.

WHAT IS THE PURPOSE OF THIS NOTICE?

• Your Personal Data
• Why we need it
• What we do with it
• Where we keep it
• How long we keep it
• What are your rights?

PRIVACY POLICY

Your Personal Data

In this policy, we refer to ourselves as "Innavisions" and this term will cover personal data collected by and processed by Innavisions Ltd (company reg. no. 03738956).
At Innavisions, we do not collect any data while you browse our website except for data collected by Google for analytical purposes. Any data that is collected is only done when orders are placed and processed.
Innavisions is a controller of the personal data you provide to us or that we collect about you. We only collect the following types of personal data about you when orders are placed:

• Identity Data (first name, last name, business name or similar identifier, title, BASIS & NRoSO membership numbers).
• Contact Data (billing address, delivery address, e-mail address and telephone numbers).
• Financial Data (bank account and payment card details).
• Transaction Data (details about payments to and from you and other details of products and services you have purchased from us).
• Technical Data (internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website).
• Profile Data (your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses).
• Usage Data (information about how you use our website, products and services).
• Marketing and Communications Data (preferences in receiving marketing from us and our third party companies and your communication preferences).
• We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

What is the purpose of this notice?

To describe how we collect and use personal data about you in accordance with the General Data Protection Regulation (GDPR).

Why we need it

We need to know your basic personal data in order to meet our statutory, legal and contractual obligations, provide goods and services to you, process your orders and provide you with marketing information, if as a customer we have received your consent to tell you about our products and services.
We will not collect any personal data from you that we do not need to provide and oversee these services to you.

What we do with it

We only ever use your personal data with your consent, or where it is necessary:

• to enter into, or perform, a contract with you
• to comply with a legal duty
• to protect your vital interests
• for our own (or a third party's) lawful interests, provided your rights do not override these.

In any event, we will only use your information for the purpose or purposes it was collected for (or for closely related purposes).

We may process personal information for certain legitimate business purposes, which include some or all of the following:

• where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our customers
• to identify and prevent fraud
• to enhance the security of our network and information systems
• to better understand how people interact with our websites
• to provide postal/email/phone communications which we think will be of interest to you
• to determine the effectiveness of promotional campaigns and advertising.

Whenever we process data for these purposes we will ensure that we always keep your personal data rights in high regard and take account of these rights at all times. We will also comply with your stated marketing preferences.

When we process your personal data for our legitimate interests, we will make sure that we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. Our legitimate business interests do not automatically override your interests - we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You have the right to object to this processing if you wish. Please bear in mind that if you object this may affect our ability to carry out tasks for your benefit.

Where we keep it

We are based in the UK and we store our data within the EU. Some organisations which provide services to us may transfer personal data outside of the EU, but we will only allow them to do this if your data is adequately protected.

How long we keep it

We will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored depends on the information in question and what it is being used for. For example, if you ask us not to send you marketing e-mails, we will stop storing your e-mail address for marketing purposes (though we will keep a record of your preference not to be e-mailed).

We continually review what information we hold and delete what is no longer required. We never store payment card information.
We will not retain your data for any longer than necessary and the longest time that we will hold your data will be for six years.

What are your rights?

We want to ensure that you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:

• the right to confirmation as to whether we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as a data subject access request)
• the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason)
• the right to have inaccurate data rectified
• the right to object to your data being used for marketing or profiling; and where technically feasible, you have the right to personal data you have provided to us which we process automatically based on your consent or the performance of a contract. This information will be provided in a common electronic format.

Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so.
If you wish to raise a complaint on how we have handled your personal data, you can contact Cynthia Oxford, Data Protection Officer, H L Hutchinson Ltd, Weasenham Lane, Wisbech, Cambs. PE13 2RN, who will investigate the matter.

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner's Office, the UK supervisory authority for data protection issues.