Privacy’s important - as we found out when we forgot to lock the train toilet door… So here’s a very long legal doc all about it.
The main thing to know is that we only want your data if you want us to have it. We’re not going to collect data just for the sake of it, we’re definitely not going to go around selling it to people, and if ever want us to delete any info then we will.
Surreal follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this as a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable though. The purpose of the information is for analysing trends, administering the site, tracking users' movement on the website, and gathering demographic information. It helps us to keep improving the site for you.
What types of personal information we collect
We only collect information you knowingly provide to us. This includes:
Contact information, such as your email when you sign up for our newsletter.
Marketing information, such as information on your preferences for receiving communications about our activities, events, and publications, and details about how you engage with our communications.
Personal details such as your name, address, and contact details for the purposes of order processing. These will only be shared with our third party couriers.
Transactional details, such as bank account/payment card details, purchasing history and previous payments.
If at any stage you would like for us to delete the data we hold about you we would be happy to do so (provided there are no outstanding deliveries or debts). Please email email@example.com to discuss.
Where we use your information
Non-personal data, such as the log files above, will be used for the purposes of improving our website performance.
Personal data will only be used where we have a basis that is lawful, and hopefully beneficial to you. We do not want your data if you do not want us to have it.
We will use your personal information in the following circumstances:
In completing your order and delivery.
Where it is necessary for the purposes of our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those legitimate interests.
In compliance to any legal obligation or regulatory requirement.
We may also use your consent as a lawful basis for providing you with marketing communications in certain circumstances. These are outlined below.
Lawful grounds for data processing
We have lawful grounds for processing your data relating to the following fields:
- Registering you as a new customer.
- Performing any contract with you.
- Processing and delivering your orders.
- Providing you with products or services in connection with our contract.
- Communicating with you for the purposes of providing you with the products or services you have ordered.
- Managing our relationship with you, including reviewing, and responding to any questions, feedback, or communications you submit.
- Managing and processing payments, or charges, and collecting any sums owed to us.
- Providing you with the opportunity to take part in promotions or competitions.
- Providing you with the opportunity to complete reviews about our products and services, and communicating with you about them.
- Administering and protecting our business and website (troubleshooting, data analysis, testing, maintenance, support, reporting and hosting).
- Delivering relevant website content and online advertising to you and measuring their effectiveness.
- Using data analytics to improve our website, products, and marketing.
- Providing you with marketing materials, newsletters, promotions, suggestions, and recommendations of products and services that may be of interest to you.
What we do about marketing
We may use your personal information to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services, promotions, or offers may be relevant for you for the purposes of marketing.
You will receive marketing materials from us if you have:
- requested this information from us.
- purchased products or services from us, or engaged in negotiations with us in connection with our products or services.
- provided us with your details when you entered a competition or registered for a promotion.
- signed up for our newsletter.
- and in each case, you have not opted out of receiving marketing materials.
In these circumstances, we will provide you with marketing materials on the lawful basis that it is necessary for the purposes of our legitimate interests in developing and promoting our products and services and growing our business.
If you have provided us with your details and none of the above circumstances apply, you will only receive marketing materials, email newsletters or email promotions from us in circumstances where you have provided an opt-in consent which confirms that you want to receive such marketing from us. In these circumstances, you have the right to withdraw your consent at any time. You can do this by following the opt-out links in any marketing communication or emailing us directly (firstname.lastname@example.org).
Nobody wants to be bombarded with ads or feel like they're being followed by brands online. If this is happening to you please let us know immediately (email@example.com) and we will work to resolve it.
We will retain your information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Disclosing your information
We may need to share your information with various third parties who provide services or act on our behalf in connection with the operation of our business. These include:
- Other entities in our corporate group, including but not limited to professional advisers (including legal advisers and financial advisers), auditors, insurers, bankers, financial organisations, IT and system administration services and other technical services; website development services; data storage services; digital marketing and email deployment services; tour booking services; customer fulfilment services; logistics, distribution and delivery services; data analytics services; fraud prevention and credit reference services; and payment processing and receipt processing services.
- Third parties with whom we may enter into negotiations in respect of a commercial agreement, e.g. a joint business venture.
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets.
- HM Revenue & Customs or any other public authority or regulatory authority in circumstances where we are required to disclose personal information by law.
We require all third party service providers to respect the security of your personal information, and to treat it in accordance with the law. We do not permit our third party service providers to use your information for their own purposes, and only permit them to process your information for specified purposes and in accordance with our instructions.
Please note that there may be instances where it may be necessary for us to transfer your information outside the European Economic Area, e.g. if we use third party service providers from another country. In these circumstances we shall put in place suitable safeguards to ensure that your information is held securely. If you require further information about the safeguards put in place you can request it from us by contacting us at firstname.lastname@example.org .
Third party privacy policies
Under the GDPR, you have a number of legal rights in relation to the personal information which we hold about you. We respect your legal rights in relation to your information and aim to uphold your rights in everything we do. Your legal rights under the GDPR include the following:
- Subject access right – You can ask us to provide you with a copy of the personal information which we hold about you and a description of how we use your information.
- Right to rectification – If you believe any information we hold about you may be inaccurate or incomplete, you can require us to rectify these inaccuracies.
- Right to be forgotten – You can require us to erase your information in certain circumstances. However, please note that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- Right to data portability – Where we process your information using automated means of processing on the basis of your consent or for the purposes of performing a contract with you, you can request that we supply such information to another party in a machine-readable format.
- Right to restriction of processing – You can require us to restrict or suspend our processing of your information in certain limited circumstances.
- Right to object to processing – Where we process your information on the lawful basis that such processing is necessary for the purposes of our legitimate interests, you have the right to object to us processing your information in certain circumstances.
- Right to object to processing for direct marketing purposes – You have the right to object at any time to the processing of your information for direct marketing purposes. If you object to us processing your information for direct marketing purposes, we will no longer process your information for such purposes.
- Right to withdraw consent – If we process your information on the basis of your consent, you have the right to withdraw your consent at any time to the processing of your information. However, please note that this will not affect the lawfulness of any processing of your information carried out before you withdraw your consent.
Cookies and web beacons
Like any other website, SURREAL uses 'cookies'. These cookies are used to store information including your preferences, and the pages on the website that you accessed or visited. The information is used to optimise your experience by customising our web page content based on your browser type and/or other information.
You can choose to disable cookies through your individual browser options. More detailed information about cookie management with specific web browsers can be found at the Internet browsers' respective websites.
Like we said at the start, we only want your data if you want us to have your data. We have no interest in collecting data for the sake of it and will happily delete any personal information we store about you if you want us to.