Last Updated: January 2024
Olive River is committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
Olive River is the data controller responsible for your personal data. Our contact details are:
Olive River
Unit 7, Riverside Business Centre
Moreton-in-Marsh
Gloucestershire GL56 0JQ
Email: [email protected]
Your Data Protection Rights
Under the UK GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data under certain conditions, particularly in relation to direct marketing.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Lawful Basis for Processing
We will only process your personal data when we have a lawful basis to do so. The lawful bases we rely on are:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legal Obligation: The processing is necessary for us to comply with the law.
- Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.
Data We Collect
We collect and process the following categories of personal data:
- Identity data: name, title
- Contact data: email address, postal address
- Transaction data: details of products you have purchased
- Technical data: IP address, browser type, time zone setting
- Usage data: how you use our website
How Long We Keep Your Data
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. To determine the appropriate retention period, we consider:
- The amount, nature, and sensitivity of the personal data
- The potential risk of harm from unauthorised use or disclosure
- The purposes for which we process your personal data
- Whether we can achieve those purposes through other means
- The applicable legal, regulatory, tax, accounting, or other requirements
International Transfers
We do not routinely transfer your personal data outside the United Kingdom. If we need to do so, we will ensure appropriate safeguards are in place to protect your personal data.
Security Measures
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and partners who have a business need to know.
Making a Complaint
If you wish to make a complaint about how we process your personal data, please contact us first at [email protected]. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Exercising Your Rights
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. This period may be extended by two further months where necessary, taking into account the complexity and number of requests.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or exercise any of your other rights.
Changes to This Notice
We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.