Privacy Policy

Gray To Sunny Day – Privacy Policy
This Privacy Policy was last updated April 2022.

About Us

Gray To Sunny Day is committed to protecting your privacy and the personal data that you provide to us, or any that we may collect from or about you. We completely understand that nobody wants to have their personal information misused or sold and how important it is for us to protect your personal information. We do not sell your personal information to anyone. This applies to all instances where we collect your data; in person, contacting us by telephone and using our websites. By visiting and using our websites you are accepting the terms in this Privacy Policy.

We request that you take a minute to read through this Privacy Policy. If you have any questions you can contact us – details are listed at the end of the Privacy Policy.

Third Party Data

This Privacy Policy does not cover any information collected by third-party sites or content or applications that may link to, or be accessible from, or on our website. At times our website may contain links to other websites that are not managed by us. If you choose to click on a third-party link, you will be directed to the third-party’s site. Each third-party website will have their own Privacy Policy. We recommend that you review this due to us having no control of the site, the content or the operations of the site or policies.

Information we collect

There are different ways in which we collect your personal information. Personal Identifiable Information (PII) is defined as any information which on its own, or when merged with other information, allows an individual to be identified. For example, this can be your name, telephone number or address.

We collect your information when you do any of the below:

Place an order on our website, by telephone or in person at our head office.
Make an enquiry regarding our products or services.
Enter a competition or promotion.
Upload an image, comment or review.
Sign up for our newsletter, promotions or offers.
Correspond with us, in person, by phone, letter, email, or social media.
When you browse our website information may be collected; commonly known as “cookies”. Cookie settings can be changed in your browser settings.
Complete any forms relating to accidents or incidents for Health and Safety and Insurance purposes.

The personal information that we may collect includes:

Name
Address
Email address
Phone numbers
Payment method details including credit/debit card details (if paid via these options), PayPal is excluded and has its own Privacy Policy
If you give us information regarding other people for example naming another person on an order. It is your responsibility to ensure that if you share personal data of other people for the enquiry and order that you make them aware of our Privacy Policy.

How we use your information

Gray To Sunny Day uses the personal information that we collect about you or that you provide to us for the following reasons:

To track sales and enquiries.
To answer your questions or provide you with requested information.
To process your order including sending order confirmations and invoices, payments and refunds.
To keep you up to date with the status of your order.
To dispatch your order.
To send you newsletters and information for marketing or advertising purposes.
To set up and maintain your account.
To respond to your correspondence and customer service queries.
For management of our business including accounting.
To contact you for your opinions on our products and services. Allowing us to develop, review and improve new/existing products and services based on your opinions and reviews.
To notify you about any important changes to our services or our sites.
To comply with any legal or regulatory obligations.
To facilitate any business transactions that include bankruptcy, mergers, acquisitions, asset sales or if the business is sold.
Accessing your information & updates
Your Rights

Under data protection laws all individuals have rights as listed below. They don’t apply in all circumstances. If you wish to use any of them we can explain at that time if they apply. If you would like further information regarding your rights please contact us or visit the ICO website.

The right to be informed about the processing of your personal information.
The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed.
The rightto object to processing of your personal information.
The right to restrict processingof your personal information.
The right to have your personal information erased.(the “right to be forgotten”)
The right to request access to your personal information and to obtain information about how we process it.
The right to move, copy or transfer your personal information.(“data portability”)
Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you.
If you have placed an order with us at any time, you can review any personal information we may hold by contacting us and making a request. (contact details below)

If your personal information changes we request that you tell us so we can update your records.

You have the right to ask for a copy of any personal information that we hold about you in our records, to correct any inaccuracies and to update any information which may be out of date. (contact details below)

You have the right to object to certain purposes for processing, in particular to data processed for direct marketing purposes and to data processed for certain reasons based on our legitimate interests. You can contact us to exercise these rights.

You have the right to complain to the Information Commissioner’s Office which enforces data protection laws: https://ico.org.uk/

Legal grounds for data processing of PII

We will rely on the following legal bases to use your personal data:

Performance of a contract – Where it is needed to provide you with our products or services, such as:

Providing you with a quote which includes prices and therefore assess whether we are able to provide you with a product or service.
Managing orders that you have with us including for both products and services.
Updating your records once an order has been placed.
Any activities relating to the products or services which may include enquiries, quotes, orders and administration of order or service.

Where it is in our legitimate interests to do so, such as:

To provide you with information regarding our products and services.
To provide you with suitable content on our website.
To review and test the performance of our products, services and internal processes.
For management and audit of our business including accounting.
To carry out monitoring and to keep records of our communications with you and our staff.
For market research and analysis and developing statistics.
For direct marketing communications to help us to offer you relevant products and services, including deciding whether or not to offer you certain products and service. We will send marketing to you by email, post and phone
To comply with Legal Obligations such as:

Where we need to share your personal information with people or organisations in order to run our business or comply with any legal and/or regulatory obligations.
Consent:

For some direct marketing communications.

Withdrawing consent and opting out

If you choose to opt in to receiving communication from us and change your mind and wish to opt out you can do this in a number of ways:

Contacting us using the contact details at the end of this Privacy Policy.
Clicking the unsubscribe link in any of our emails.
In cases where we rely upon consent to process your personal data you can withdraw this at any time by contacting us using the details shown below.

When we receive notification that you wish to withdraw consent or change your preferences we will do this as soon as reasonably possible and most likely within 7 days of the request.

Why we retain personal information

We will hold your personal information based on the following reasons:

For as long as we need to in order to carry out our business operations, such as managing your orders and managing our operations.
For as long as we provide goods and/or services to you and then for as long as someone could bring a claim against us.
Retention periods in line with legal and regulatory requirements or guidance.
If you have not placed an order with us we will only retain your information for a limited period in order to respond to your query, provide you with the information you require or to send you updates on our products and services for as long as you indicate that you are happy for us to do so.
If you have not placed an order with us and we no longer have a legitimate business reason to hold your data we will delete this data. In the event this is not possible due to data backups in archives we will ensure that no further processing takes place with your data until we are able to delete the data.

Security

Security is very important to us. Secure Socket Layer (“SSL”) encryption technology is used for protection of information in transit for any sensitive transactions such as payments. Additional security procedures are in place to protect the confidentiality, integrity and availability of your personal information. Your personal information will not be kept longer than is necessary for the purposes stated in this Privacy Policy.
To enhance the security of the checkout process we currently use Sagepay or Paypal as a part of the payment process when you place an order through the website.
All personal data held by us will be stored securely.

Disclosing your data / Information sharing

Gray To Sunny Day does not sell your personal information to third parties.

We will never make your personal details available to other companies for their own marketing purposes.

We may use other companies to provide services to you on our behalf. These services may include but are not limited to sending postal mail and courier services. We will only provide those companies with the information they need to deliver the service we have engaged them for and they are prohibited from using that information for any other purpose.

We may have to disclose your information by law or because a court or the police or other law enforcement agency has asked us for it.

Your personal information is not transferred or disclosed outside of the UK or the EEA.

Changes to this Privacy Policy

We may change this privacy notice from time to time by updating this page in order to reflect changes in the law and/or our privacy practices. We encourage you to check this privacy notice for changes whenever you visit our websites.

Contact Details

If you need to contact us regarding our Privacy Policy or any other related issue please write to:

Data Protection Officer
Gray To Sunny Day

Cavan House Oldways Road
Ravensden
Bedford
MK44 2RF
or email: enquiries@graytosunnyday.co.uk