For the purpose of the Data Protection Act 1998 (the Act) and the GDPR, the data controller is A Collected Man Limited.
FAIR PROCESSING NOTICE
Please be aware that before we provide services, goods or financing to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you and are in accordance with the CIFAS guidelines.
The personal data you have provided, we have collected from you, or we have received from third parties will be will be used to prevent fraud and money laundering, and to verify your identity.
We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.
We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. Such processing is a contractual requirement of the goods, services or financing you have requested.
Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.
We may, with your expressed consent, share your personal data with GDPR Certified Third Party Data Processors as part of our customised marketing strategy. Your personal data will not be hosted by such Third Party Data Processors and any data that is processed will be fully encrypted in compliance with the GDPR.
Your personal data may also be used in order to inform you of promotions, new arrivals and updates via email that we feel are relevant to you and any products you have purchased, sold or serviced, where you have given us consent to do so. Your data will be hosted and processed with MailChimp, a GDPR Certified Third Party Data Processor, in order to be able to provide you with this information.
As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk or if our processing reveals your behaviour to be consistent with that of known fraudsters or money launderers; or is inconsistent with your previous submissions; or you appear to have deliberately hidden your true identity. You have rights in relation to automated decision making: if you want to know more please contact our Legal Team at firstname.lastname@example.org.
CONSEQUENCES OF PROCESSING
If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services and financing you have requested, or to employ you, or we may stop providing existing services to you.
A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact our Legal Team at email@example.com.
Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to ‘international frameworks’ intended to enable secure data sharing.
Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.
For more information or to exercise your data protection rights please, please contact us using the contact details provided.
You also have a right to complain to the Information Commissioner's Office which regulates the processing of personal data.
INFORMATION WE MAY COLLECT FROM YOU
Further to the above, we may collect and process the following data about you:
- Information that you provide by filling in forms on our site www.acollectedman.com (our site). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services, for example: name, address, date of birth, address, contact details, financial information, employment details. We may also ask you for information when you report a problem with our site.
- If you contact us, we may keep a record of that correspondence.
- We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
- Device identifiers such as your IP address.
- Details of transactions you carry out through our site and of the fulfilment of your orders.
- Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
As set out in clause 1d above, we may collect information about your computer or other such devices, including where available your IP address, operating system and browser type, for fraud prevention means, system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
WHERE WE STORE YOUR PERSONAL DATA
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing outside the EEA.
All information you provide to us is stored on secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
USES MADE OF THE INFORMATION
We use information held about you in the following ways:
- To ensure that content from our site is presented in the most effective manner for you and for your computer.
- To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes. In the case of product enquiries, your e-mail address, including details of the watch you selected, will be stored so that we can return a written quote by e-mail or send offers on similar watches or other offers that might be relevant to you. For instance, we may contact you with price and availability information on watches that both we and third parties (authorised watch dealers) have in stock.
- To carry out our obligations arising from any contracts entered into between you and us.
- To allow you to participate in interactive features of our service, when you choose to do so.
- To notify you about changes to our service.
- To conduct market research.
- To run competitions, promotions and events, both ours and those from carefully selected third party companies.
Unless you tell us otherwise, we may also use your data, or, with your consent, permit selected third parties to use your data, to provide you with information about goods and services which may be of interest to you and we or they may contact you about these by telephone or e-mail.
If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please either email firstname.lastname@example.org or click on the unsubscribe link, which is displayed at the end of e-mail correspondence.
We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, men in EC1). We may make use of the personal data we have collected from you to enable us to comply with our advertisers' wishes by displaying their advertisement to that target audience.
COMMUNICATIONS BETWEEN US
We may monitor, record, store and use any telephone, email or other communication with you in order to check any instructions given to us, for training purposes, for crime prevention and to improve the quality of our customer service.
THIRD PARTY RIGHTS
Disclosure of your information
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006 in order to provide goods and services to you.
We may disclose your personal information to GDPR certified third parties:
- In the event that A Collected Man does not have a supplier for a particular brand or individual watch, in which case we may pass your details on to a third party authorised watch dealer so that they can quote on price and availability.
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If A Collected Man or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of or terms and conditions of sale or purchase and other agreements; or to protect the rights, property, or safety of A Collected Man, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
You have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by clicking on the unsubscribe link, which is displayed at the end of e-mail correspondence. You can also exercise the right at any time by contacting us at email@example.com.
Our site may, from time to time, contain links to and from the websites of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
SUBJECT ACCESS REQUEST
You have the right to access any information we hold about you. Your right of access can be exercised in accordance with the Data Protection Act 1998 and GDPR. Any access request for your own personal information will be provided free of charge.
If A Collected Man is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalised service. Some of the cookies we use are essential for the site to operate.
Cookies are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Cookie – A Collected Man Session
Name – A Collected Man
Purpose - This cookie is essential for our site to enable us to:
- Estimate our audience size and usage pattern.
- Store information about your preferences, and so allow us to customise our site and to provide you with offers that are targeted at your individual interests.
- Recognise you when you return to our site.
We store a session number within the cookie. No customer identifiable information will be stored within the cookie.
Except for essential cookies, all cookies will expire after a period of 7 days.
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, EMAIL our Privacy Compliance Officer at firstname.lastname@example.org.