Privacy Policy for Orkney Ink
Introduction
Orkney Ink is committed to protecting the privacy and personal data of our customers and website visitors. This Privacy Policy outlines how we collect, use, store, and disclose your personal data when you interact with our online platform, visit our independent bookshop and cultural hub at 17 Shore Street, Kirkwall, Orkney Islands, KW15 1AG, UK, or participate in our services such as book sales, artisan craft showcases, literary events, workshops, children's storytelling, and our coffee and tea bar. We adhere to the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Data Controller
Orkney Ink acts as the data controller for the personal data processed in accordance with this Privacy Policy.
Information We Collect
We may collect various types of personal data from you depending on how you interact with us.
- Information you provide directly to us: This includes data such as your name, email address, postal address, phone number, and payment information when you make a purchase, register for an event, sign up for our newsletter, or create an account on our online platform. If you participate in creative writing workshops or submit content, we may also collect information related to your creative interests.
- Information collected automatically: When you visit our online platform, we may automatically collect certain information about your device and browsing activity. This may include your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This data helps us understand how our online platform is used and how to improve it.
- Information from cookies and similar technologies: Our online platform uses cookies to enhance your user experience, analyse site usage, and support marketing efforts. For more details, please refer to our Cookie Policy.
How We Use Your Information
We use the collected information for the following purposes and on the following legal bases:
- To fulfil contracts with you: Processing your orders for books and artisan crafts, managing event registrations, and providing access to workshops.
- For our legitimate interests: Operating and improving our online platform; personalising your experience; communicating with you about our products, services, events, and promotions; conducting analytics to understand customer preferences and market trends; preventing fraud and ensuring the security of our services. We ensure these interests do not override your fundamental rights and freedoms.
- With your consent: Sending you marketing communications and newsletters if you have explicitly consented to receive them. You have the right to withdraw your consent at any time.
- To comply with legal obligations: Maintaining records for tax or auditing purposes, responding to legal requests, and adhering to regulatory requirements.
Sharing Your Information
We do not sell your personal data to third parties. We may share your information with:
- Service providers: Trusted third parties who perform services on our behalf, such as payment processing, website hosting, email delivery, and analytics. These providers are obligated to protect your data and only use it for the purposes we specify.
- Legal and regulatory authorities: When required by law or to protect our rights, property, or safety, or the safety of others.
- Event partners: If you register for an event co-hosted with a partner, your registration details may be shared with them to facilitate the event. We will always inform you if this is the case.
International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA). When transferring data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to guarantee your data receives a similar level of protection as it would within the EEA.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we retain customer data for a period of up to seven years after your last interaction with us, to comply with legal obligations such as tax records.
Your Rights
Under GDPR, you have the following rights regarding your personal data:
- The right to be informed: About how we collect and use your personal data.
- The right of access: To request a copy of the personal data we hold about you.
- The right to rectification: To request that we correct any inaccurate or incomplete data we hold about you.
- The right to erasure ("the right to be forgotten"): To request that we delete your personal data in certain circumstances.
- The right to restrict processing: To request that we limit the way we use your personal data in certain circumstances.
- The right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
- The right to object: To our processing of your personal data based on our legitimate interests or for direct marketing purposes.
- Rights in relation to automated decision-making and profiling: To not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the details provided below.
Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. This includes using encryption, secure servers, and access controls.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on our online platform and encourage you to review this policy periodically.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Orkney Ink
17 Shore Street,
Kirkwall, Orkney Islands,
KW15 1AG, UK
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.