Bounce and Bella is the data controller for all personal data collected. To contact us about GDPR or other data protection issues (including subject access requests) please email: firstname.lastname@example.org
Bounce and Bella is a trading name of Factly Books Ltd, The Old Court House, Clark St, Morecambe LA4 5HR
We collect the following categories of data:-
1 Personal contact details, including name, address(es), telephone number, email address
2 Transaction and experience information, including order and product details, customer VAT status, device information, usage data and geolocation information.
We do not collect or retain any financial instrument data (eg credit card numbers) and have agreements in place with our partners who provide this service (Paypal and Stripe) to ensure they comply with EU and local law, specifically in regard to data protection.
Why do we retain this data?
We use the data to fulfill our contractual obligations which include fulfilling orders and the administration of product warranties and guarantees.
This data is also retained for the purposes of fulfilling our legal obligations (eg VAT and tax records) for the time proscribed in law.
We may also retain personal data collected from existing customers for our legitimate business interests for longer periods than required by law where there is no conflict with the rights and interests of the individual.
We also collect personal data from individuals, who have given their consent for this collection, for the purposes of direct marketing.
Legitimate Interests Declaration
Data is only processed for the legitimate interests of Bounce and Bella and not for, or on behalf of, third party.
1 Enforcing our terms and conditions.
2 Marketing our own products and services to existing customers
Special Categories Data
We do not process any data which falls into “Special Categories”
Who do we share data with?
We only share personal data for the following purposes:-
1 Where legally obliged. This includes tax and VAT records and returns to government offices in countries where we are registered or have an obligation to report.
2 To provide services to our customers. We email our customers using an automated service provided by third party companies. The online store is hosted by a third party which enables us to process orders. These companies act as data processors on our behalf and are governed by a Data Processing Agreement to guarantee the rights of the individual data subject.
3 To fulfill orders. We share name and address details to companies which deliver our goods. These companies act as data processors on our behalf and are governed by a Data Processing Agreement to guarantee the rights of the individual data subject.
4 Marketing purposes. We share email addresses with third parties for the purposes of contacting existing customers and potential customers about further offers and promotions which we may offer from time to time.
Geographic location of data
All data is retained in the EU except where our partner companies host it elsewhere. Some of our partner companies host data in the USA and other countries, however, where this is the case they have a contractual obligation to maintain the same high standard of care and responsibility to remain complaint with the EU General Data Protection Regulations. This also maintains all of the rights of individuals (see below).
The right to be informed.
This data policy sets out the way we collect and use your data. When we collect your information you are referred to this policy.
If we collect your data from any other source we will inform you without delay.
The right of access.
You have the right to access the data we hold about you at any time.
The right to rectification.
If you believe any of the data we hold is incorrect you have the right to have it amended.
The right to erasure.
You have the right to have any data that is collected that we do not have to retain to fulfill legal or contractual obligations (provided it has not already been held for an unreasonable length of time) deleted. We may reasonably deny your request if we can show that there is a legitimate requirement to retain this data.
The right to restrict processing.
You may ask us not to process your data for any purposes other than those required to fulfill our contractual and legal obligations.
The right to data portability.
You may ask us to transfer your data to a third party in an electronic format.
The right to object.
You have the right to withdraw any consent previously given for the processing of your personal data. You also have the absolute right to object to your personal data being used for marketing purposes.
Rights in relation to automated decision making and profiling.
We do not use your data in any application that profiles or is not subject to human decision making. However, you do have to right to object to your data being used in this way.
There is no fee for any of these requests but we may ask you to provide further information in order to validate your identity.
Please email email@example.com in the first instance in all cases.