Privacy Policy

At R&B Inflatables (“we”, “us”, or “our”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) (as set out in the UK Data Protection Act 2018).

By using our services or website, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who We Are

Company Name: R&B Inflatables
Registered Address: 1 Heol Bryn, North Cornelly, Bridgend, CF334DE
Email: info@randbinflatables.com
Phone: 07852730947

We are the data controller of your personal data under the UK GDPR.

2. What Personal Data We Collect

We collect the following types of personal data:

• Identity Data: Name, title, and gender
• Contact Data: Email address, phone number, billing address, delivery address
• Technical Data: IP address, browser type and version, time zone, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website
• Usage Data: Information about how you use our website, products, and services
• Marketing and Communications Data: Preferences in receiving marketing from us and your communication preferences

3. How We Collect Your Data

We collect personal data in the following ways:

• Directly from you when you fill out forms on our website, place an order, or communicate with us (via email, phone, etc.).
• Automatically when you use our website (e.g., through cookies and other tracking technologies).
• From third parties such as payment processors or delivery services.

4. Why We Process Your Data

We process your personal data for the following purposes:

• To process orders and provide our inflatable products and services to you.
• To communicate with you regarding your orders, bookings, inquiries, or to provide customer support.
• To send marketing communications (if you have opted in to receive them).
• To improve our website and services, track usage, and ensure that our website is functioning properly.
• To comply with legal obligations and protect our legal rights.

We process your personal data based on the following legal bases under the UK GDPR:

• Consent: You have given consent for us to process your personal data for specific purposes (e.g., receiving marketing).
• Contractual Necessity: We need to process your data to fulfill a contract or take steps before entering into a contract with you (e.g., processing an order or booking).
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services or website.
• Legal Obligation: We are required to process your data to comply with legal obligations.

5. How We Share Your Data

We may share your personal data with the following:

• Service Providers: Third parties who help us with order fulfillment, payments, deliveries, customer support, and marketing.
• Legal Authorities: If required by law, we may disclose your personal data to comply with legal obligations or protect our rights.
• Business Transfers: In the event of a sale, merger, or reorganization of our business, your personal data may be transferred as part of the transaction.

We ensure that all third parties who process your data on our behalf are compliant with UK GDPR and take the necessary steps to protect your personal data.

6. International Transfers of Data

If we transfer your personal data outside the United Kingdom or European Economic Area (EEA), we will ensure that adequate safeguards are in place, such as using Standard Contractual Clauses (SCCs), or relying on countries with an adequacy decision from the UK government (if applicable).

If we transfer your data to a country that is not deemed to provide an adequate level of protection, we will put appropriate measures in place to ensure your data is adequately protected.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. If we no longer need your data, we will securely delete or anonymize it.

8. Your Rights Under the UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You can request that we delete your personal data in certain circumstances.
• Right to Restriction: You can request that we restrict the processing of your personal data in certain situations.
• Right to Data Portability: You can request that we provide your personal data in a structured, machine-readable format or transfer it directly to another data controller.
• Right to Object: You can object to the processing of your personal data for certain purposes, such as direct marketing.
• Right to Withdraw Consent: If we process your data based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [Contact Email]. We will respond to your request within one month. If the request is complex or numerous, we may extend this period by an additional two months.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website, improve our services, and analyze website traffic. You can manage or disable cookies through your browser settings. For more details, please see our [Cookie Policy] (if applicable).

10. Security of Your Data

We take reasonable steps to protect your personal data from unauthorized access, use, or disclosure. While we use industry-standard security measures, please note that no method of transmission over the Internet or method of electronic storage is 100% secure.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will update the “Last Updated” date. We encourage you to review this policy periodically for any updates.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you would like to exercise your data protection rights, please contact us:

• By email: info@randbinflatables.com
• By phone: 07852730947
• By mail: 1 Heol Bryn, North Cornelly, Bridgend, CF33 4DE

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection matters. The ICO’s contact details can be found on their website: www.ico.org.uk.

Key Features Specific to UK GDPR Compliance:

1. Supervisory Authority: The Information Commissioner’s Office (ICO) is now explicitly listed as the UK’s supervisory authority in case of complaints or concerns.

2. International Transfers: The policy now mentions that if data is transferred outside the UK (to the EU or other countries), we will ensure that safeguards are in place (such as Standard Contractual Clauses or countries with an adequacy decision from the UK government).

3. Reference to UK GDPR: The policy specifically refers to compliance with UK GDPR as outlined in the UK Data Protection Act 2018, which governs data protection in the United Kingdom post-Brexit.

Conclusion:

This privacy policy is tailored to ensure compliance with the UK GDPR and reflects the changes that became relevant after the UK left the European Union. It covers all aspects of how R&B Inflatables handles personal data, including data subject rights, data sharing, retention, and international transfers, all while ensuring transparency and accountability.