Data Controller: The controller determines the purposes and means of processing data.
Data Processor: The processor is responsible for processing the data on behalf of the controller.
Data Subject: A person whose data is processed by a controller or processor.
Cupar, KY15 4BY
Invoices: Data will be stored for 6 years (from the end of the last financial year) in the form of invoices and will be processed solely for archiving purposes in the public interest (HMRC requirements).
These invoices will be destroyed after the minimum time required to comply with HMRC regulations. Organisational methods will be employed to protect the data from unauthorised or unlawful processing and against accidental loss or theft.
Email data: Emails from data subjects to dip-slides.com email addresses will be deleted from the servers that we use after one month unless the email is part of an ongoing conversation.
In this case, once the email conversation is complete / resolved, the email conversation will be deleted from the email servers.
Online content management system data: Other data stored will be on the online shop's content management system if a data subject creates a registered account. This data includes:
Only the registered user and the data controller has access to this data.
Inactive registered user accounts will be deleted if orders have not been placed within the previous 2 years. Due to the right to erasure, a registered user can choose to have their account deleted at any time by contacting the data controller (dip-slides.com).
All data will be processed on the basis of consent.
The data controller Dip-slides.com deems the processing of data as necessary for the following reasons:
The data subject will have to clearly give consent to the processing of their data by agreeing to this privacy notice when registering with dip-slides.com.
If a data subject withdraws their consent, the data of that individual will no longer be processed. However, as stated in the 'data retention' section, financial records such as invoices need to be stored for the appropriate period designated by HMRC. By giving consent, the data subject understands that this data will be solely used for archiving purposes in the public interest and will be destroyed once the minimum retention period stated by HMRC has passed.
Consent must be given via a positive opt in. The data subject will need to voluntarily tick a checkbox to provide consent. No pre-ticked boxes will be used.
The data subject must agree to both the privacy notice and terms and conditions separately via two separate checkboxes.
If the data subject refuses consent, dip-slides.com will not be able to process the data subject's data and therefore an account with dip-slides.com cannot be setup for the data subject and orders cannot be placed by the data subject. Orders and registered accounts cannot be created without data processing and therefore consent is required before either of these can be actioned. Consent is a precondition of signing up to the dip-slides.com service as data processing is necessary for the service.
No consent is required to browse the online catalogue as only 'essential' cookies are used (please see the 'cookies' section for more information).
Consent can be withdrawn at any time (please see data subject's rights). No personal data will be processed without consent.
By agreeing to this privacy notice, in the event that the data subject places an order with dip-slides.com, they agree that their name, address and contact details will be passed onto dip-slides.com couriers / postal services so that their orders can be fulfilled.
In some cases, where items are not in stock at the dip-slides.com facility, drop shipping may be required to ensure a quick and efficient fulfilment of the order. In the rare cases that this may occur, the data subject's name, billing / delivery address and contact details such as a phone number or email address may be passed onto dip-slides.com suppliers and their couriers in order for them to fulfil the order. The drop shippers are:
Lynd Products Ltd
The accountancy firm that dip-slides.com use have access to accounting data via Quickbooks software. Quickbooks stores invoices and data such as name, billing address, shipping address, email address and telephone number. The accountancy firm is:
James Hair & Co
Other than the data processors that we use (see data processors section for more information), the above are the only instances in which a data subject's data would be accessed / processed by a third party.
A data subject has the following rights:
The right to be informed: A data subject has a right to be informed about the collection and use of their data.
The right of access: A data subject has the right to access their personal data and be aware of and verify the lawfulness of processing. If a data subject uses their right to access, dip-slides.com will provide a copy of the information free of charge. The information will be provided within 1 month of the request. In order to supply the data subject with the requested information, dip-slides.com must verify the identity of the data subject. The data subject will already have access to most of their personal data via the secure online dip-slides.com registered user dashboard. If the data subject clicks on 'My Personal Data' in their dashboard, they can download their data to a PDF or CSV file.
The right to rectification: A data subject has a right to make a request for rectification and have inaccurate data rectified or completed if it is incomplete. Dip-slides.com has one calendar month after the request to respond to and rectify the specified information.
The right to erasure: A data subject has a right to have their data erased. A data subject can make a request for erasure and dip-slides.com has 1 calendar month to respond. The data subject requests to have the data erased in the knowledge that once this has been completed, they will no longer have a registered account with dip-slides.com and will be unable to place future orders. Dip-slides.com may need to verify the identity of the data subject before erasing data. This may be in the format of a phone call to the phone number on the registered account details. This method removes the need for requests for additional personal data (e.g photo ID) from the data subject.
The right to restrict processing: A data subject has the right to request restriction of the processing of their data. This right gives the data subject more control over how their data is used and they can limit the way in which a data controller uses their data. When processing is restricted, dip-slides.com can still store the data but not use it. Dip-slides.com has 1 calendar month to respond to a right of restriction request.
The right to data portability: A data subject has a right to obtain, move, copy or transfer data easily from one online service to another. Once a data subject utilises their right to portability by communicating the request to dip-slides.com, a response will be made within 1 calendar month. Data will be provided to the data subject in a machine readable format.
The right to object: A data subject has a right to object to processing based on legitimate interests, direct marketing, profiling and processing for purposes of research and statistics. As soon as a right to object request is received by dip-slides.com, processing of the data subject's data by the data controller will be stopped. The request will also be communicated to third parties and data processors if applicable.
Rights in relation to automated decision making and profiling: This is a right under GDPR regulation but is not applicable to dip-slides.com as dip-slides.com does not use automated decision making or profiling.
The right to withdraw consent: A data subject can withdraw consent at any time and consent withdrawals will be acted upon as promptly as possible.
Dip-slides.com (data controller) uses the services of data processors that provide sufficient guarantees that their data protection policies meet GDPR requirements. Each processor has its own policies in relation to GDPR regulation. The owners of Dip-slides.com have checked to the best of their ability that all data processors comply with GDPR regulation.
Dip-slides.com uses the services of five data processors that handle dip-slides.com user data:
LiveChat, Inc software:
LiveChat's compliance statement can be viewed here:
Nochex payment processor:
Paypal payment processor:
Dip-slides.com has received a statement from Paypal that confirms that Paypal will be GDPR compliant by the 25th May 2018.
Krystal have confirmed in a statement that they are GDPR compliant:
'We have updated our Privacy Notice to meet the requirements of the new framework and have also implemented the required internal procedures to ensure that as a business we are fully GDPR compliant.'
Reviews.co.uk compliance statement can be found here: https://blog.reviews.co.uk/gdpr-compliance-update-reviews-co-uk/
You can read how Quickbooks plan to meet requirements here: https://quickbooks.intuit.com/uk/gdpr/
In the unlikely event of a data breach (security measures / procedures are regularly assessed and adhered to), dip-slides.com will contact the Information Commissioner's Office and will report the breach if advised to.
This will be reported within 72 hours of dip-slides.com becoming aware of the breach.
If the breach is likely to affect individual's rights and freedoms, the affected individuals will be informed without undue delay.
Records will be kept of any personal data breaches. Personal data breaches can include:
Access by an unauthorised third party.
Sending personal data to an incorrect recipient.
Computing devices containing data being lost or stolen.
Malicious sources deleting or stealing data.
Alteration of personal data without permission.
Loss of availability to personal data.
The cookies on dip-slides.com have been separated into 'essential' and 'extras'. In order for the website to function e.g the shopping cart or DDOS protection, the 'essential' cookies are installed by default when a user navigates the website. The 'extra' cookies are required for the following services to function:
In order for the above 'extra' cookies services to function, the user must choose to agree to the cookie notification popup. If the user does not agree, they can still browse the site but the 'extra' cookies services will not function and these 'extra' cookies will not be installed.
Data subjects that are also registered users can also revoke their consent to cookies within their dip-slides.com customer account.
Dip-slides.com have a Twitter.com account. If a data subject contacts dip-slides.com via direct message, the message will be stored for 30 days and will not be shared with other organisations.
This is a helpline service to assist callers that require information regarding dip-slides.com products and orders. No payments will be taken over the phone. Any notes taken of phone numbers, names or other personal information will be shredded immediately after use.
Newsletters will only be sent to data subjects that have opted in by voluntarily signing up for the newsletter. Data subjects will be able to unsubscribe from newsletters whenever they like. Data subjects can either click 'unsubscribe' at the bottom of newsletters received or they can contact dip-slides.com directly. Please note that any data subjects that signed up to the dip-slides.com newsletter prior to the 25th May 2018 will need to re-sign up to the newsletter for their email addresses to be included on the list.
Consent: All data subjects will need to give pre chat consent (by agreeing to the terms of the privacy notice) before a live chat can commence.
Data Retention: All chat data older than 30 days old will be deleted.
What data is processed: Every time a live chat commences, the live chat agent (dip-slides.com) can view the following information:
LiveChat have confirmed that the chat service data is hosted in Europe.
The data will only be used to assist the data subject immediately or very soon thereafter. The data will solely be used to help the data subject with their enquiry.
Email addresses may be used to help the data subject with their enquiry.
Email addresses may be used if the data subject has indicated during the chat that they wish to receive an email from dip-slides.com.
The same applies to any phone number data voluntarily supplied by the data subject.
Data subjects may request a copy of the chat transcript during the chat.
Last update: August 10th 2018