Privacy Policy
Like every organisation, we are required to comply with the new EU General Data Protection Regulation (GDPR), which came into force on 25th May 2018 replacing the 1998 Data Protection Act. The GDPR aims to protect the privacy, rights and freedoms of all EU citizens, and places stricter requirements on organisations relating to how they process personal information.
Personal Information is defined as any information (data) which can be used to directly or indirectly identify a living individual.
Your Rights: The GDPR brings clarity to your rights whenever a company collects information about you. You are entitled to the following:-
To be informed when and how we collect, process or store your data. Ideally, this is done before your data is collected, however there may be times when this is not possible, for example when your data is not collected directly from you. In this case, organisations are now required to inform you that they have acquired your data within one month of its collection.
-
To access information we hold about you. To help us respond in the most efficient and effective way, please email aim2Entertain@outlook.com with your request.
-
To rectify any discrepancies or errors in the information we hold about you. If we have stored any information about you, and you believe it to be incorrect, you may ask that it be rectified.
-
To restrict processing. We’ll be honest here, other than processing your orders and handling service communications and marketing emails, we don’t tend to process your identifiable information. However, you may ask us to stop processing it, for example, if you want to take a break from receiving marketing communications.
-
To object to processing, for example to stop receiving direct marketing communications.
-
To ask us to erase the data we hold about you. However, you should note that there may be overriding legal statutory or regulatory reasons that prevent us from doing this.
-
Where Automated Decision Making is used, there must be an option for human intervention.
-
Lawful, Fair and Transparent – In other words, we should have a legal reason for processing your data, we should be fair in processing your data and we should be transparent in processing your data.
-
Limited Purpose – We should only process your data for the purpose that we informed you about, e.g. processing orders, sending product updates and offers, marketing, handling complaints. We should not use data collected for one purpose to fulfill another purpose.
-
Data should be Minimal – We won’t ask you for more information than is necessary to carry out the activity we are collecting it for, i.e. we wouldn’t ask for your National Insurance number, unless you were joining our team.
-
– Any data we hold about you should be kept accurate and up to date. We will often rely on you to notify us of any changes that affect our ability to do this. This principle supports your right to rectify discrepancies and errors.
-
Storage Limitation – This means that we won’t keep your data for longer than is necessary to perform the purpose for which it was collected, or to satisfy any legal statutory or regulatory requirement to keep it.
-
Integrity & Confidentiality – We will take every reasonable organisational effort and technical measure to protect the data we hold about you from unauthorised access, alteration or disclosure.