Privacy PolicyWe take the privacy of our customers and website users very seriously and take great care to protect your information. Our Privacy Policy explains what information we collect about you, how we may use it, and some of the steps we take to ensure that it is kept secure. We also explain your rights and how to contact us. Please note, this website may contain links to other websites which are provided for your convenience. We are only responsible for the privacy practices and security of this site. We recommend that you check the privacy and security policies and procedures of each and every other website that you visit. What information do we collect? In order to provide you with services and to fulfill our legal obligations, we may collect personal information about you from our website, telephone conversations, emails and written and verbal communications. This can include your name, address, email address and telephone number. We will not hold your data any longer than is necessary to fulfill our obligations. How will we use your information? Any personal information you provide we will treated in accordance with current data protection legislation. We will primarily use your personal information to provide our products and services to you. We may also use it
You may also opt in so that we can keep you updated of new products, services or special offers that may be of interest to you. Disclosure of your information In order to provide our products and services to you, we may need to appoint other organisations to perform some of the processing activities on our behalf. These may include, for example, production partners and delivery agents. In these circumstances we will ensure that your information is properly protected and that it is only used in accordance with this policy. What to do if you do not want to receive details of offers If you have Opted In and have changed your mind about being contacted by us, you can simply click the unsubscribe link in the email, or contact us, or via the My Account area of this web site. Please note, if you choose to not receive information, we will be unable to keep you informed of new services, products, events or special offers that may interest you. Use of your information outside the European Union Some of the organisations to which we may disclose your personal information in order to fulfil your order may be situated outside of the European Union. In order to provide you with the products and services you require, we may need to transfer your personal information to these countries some of which do not have laws that protect privacy rights as extensively as in the United Kingdom. If we do transfer your personal information to other territories, we will take proper steps to ensure that your information is properly protected. Security of information We take the security of your personal information seriously. When you submit your credit card details, we use industry standard Secure Sockets Layer (SSL) encryption technology to guard your information. In addition, we have security procedures in place to protect our paper based systems and computerised databases from loss and misuse, and only allow access to them when it is absolutely necessary to do so, and then under strict guidelines as to what use may be made of the personal information contained within them. Monitoring We may monitor or record telephone calls for security purposes and to improve the quality of services that we provide to you. Changes to this privacy policy We aim to meet high standards and our policies and procedures are, therefore, constantly under review. From time to time we may change our security and privacy policies. Accordingly we recommend that you check this page periodically in order to review our current policies. Updating and correcting information You may correct your personal information by email or by changing your profile on our website. Please include your name, address and/or email address when you contact us as this helps us to ensure that we accept amendments only from the correct person. We encourage you to promptly update your personal information if it changes. Your rights to access your personal information You have the right to receive a copy of any personal information that we hold about you. Lawful Basis for Processing Personal Data Media Storehouse is an online retailer offering print on demand services for a range of image contributors. An individual may order online, whether at Media Storehouse own web sites or on Third Party sites (including Amazon and eBay). Media Storehouse collects Personal Data for order fulfillment purposes and the delivery information is passed to select Authorised Third Parties for final fulfillment and shipping. As Media Storehouse ships globally it has written formal agreements with print production labs outside of the UK - currently in USA and Australia – who can fulfill orders locally reducing shipping costs and lead times. Media Storehouse can also collect Personal Marketing Data for use by Media Storehouse only and is obtained by an informed Opt-In process that is compliant with current legislation (including GDPR). Data Retention It is our aim to automatically remove all Personal Data acquired during the Ordering process within 3 months. Personal Data includes Name, Email, Password, IP Address and any other data identified by legislation. For additional safety, emails (or other correspondence) that may contain personal information is removed within 12 months of receipt. Exceptions to these include Personal Data required to meet our legal obligations, and where an individual has explicitly opted-in for the data to be retained – for example by registering a user account or giving informed consent for marketing emails. As a further safeguard unused user accounts may automatically expire after 2 years of inactivity. Under their right to be forgotten, individuals can at any time request all their personal data be removed. This can be actioned by authorised support personnel or online by the person themselves via a simple tick box. In order to complete our obligations for Order Processing (including the handling of returned items etc.) this may not immediately affect Personal Data associated with a recent order. Any such Personal Data is automatically removed separately within 3 months of the order being placed. To aid after-sales support, beyond this 3 month period orders can still be identified by non-personal markers. Use of Personal Data for Marketing From April 2018 Media Storehouse has operated a clear Opt-In policy to obtain informed consent in order to retain contact information for the purposes of communications from Media Storehouse. Only individuals who have given clear consent after April 2018 to receive such communication will be contacted by email for marketing and related purposes. At no time shall Media Storehouse pass personal data onto third parties for marketing or other non-processing related activities. Individuals in the Media Storehouse database that were receiving emails from Media Storehouse prior to April 2018 have been contacted via their email address and given the opportunity to give informed opt-in consent to continue receiving emails from Media Storehouse. Any contacts who have not explicitly agreed to continue receiving emails will no longer be sent any email communications. In addition, after a reasonable period of time (and no longer than 3 months) all such accounts will be permanently removed from the system unless indicated otherwise (such as where a user account has been registered). Personal Data Storage Media Storehouse retains Personal Data in double encrypted database tables, with passwords having secure additional one-way encryption prior to storage. Media Storehouse production servers and data are currently located within the EU. Media Storehouse has upgraded all web sites under its control to HTTPS in order to benefit from secure SSL encryption. All mediastorehouse.com sites are now fully HTTPS compliant. There remains a small number of third party web sites operated by Media Storehouse which still use HTTP since their domains are not under the direct control of Media Storehouse. We are upgrading those as soon as the domain owner grants the permissions needed to obtain a Secure SSL Certificate. Furthermore, Media Storehouse does not retain any payment card data. All financial transactions are handled by secure proven third party financial services over a high level encrypted channel. These currently include Barclaycard ePDQ , Braintree (a division of PayPal), and PayPal. Data Flow Media Storehouse securely collects the minimal Personal Data needed in order to fulfill orders placed online or via telephone. This data is held in secure servers located within the EU. For order fulfillment the Delivery Name and Address is passed to an approved Media Storehouse Production Partner with whom Media Storehouse has a formal contract, both for production and for their handling of any Personal Data supplied by Media Storehouse. Once an order is produced it is shipped by an approved shipping agent to the requested destination address. Unless otherwise required, by default all Personal Data associated with an order is automatically removed after 3 months. In addition, all correspondence that may contain Personal Data (including the general support and sales email accounts) is deleted after 12 months. Consent Consent to retain Personal Data can be granted by an individual choosing to do either of the following during the ordering or registration process; (a) register an account and supply an acceptable password Consent can be withdrawn at any time either via a simply Tick Box in the My Account area or by contacting Media Storehouse, including simply replying to any Order or Marketing Update email sent by Media Storehouse. Rectification and Data Quality All Personal Data held by Media Storehouse can be amended at any time from the My Account area of the web site or by contacting Media Storehouse, including simply replying to any Order or Marketing Update email sent by Media Storehouse. Data Erasure and Retention All Personal Data held by Media Storehouse Consent can be removed at any time from the My Account area of the web site or by contacting Media Storehouse, including simply replying to any Order or Marketing Update email sent by Media Storehouse. In order to meet our obligations regarding order fulfillment and possible returns handling, Personal Data needed to fulfill an order is normally retained for up to 3 months regardless of Data Erasure Requests. By default, all Personal Data related to an order is removed after 3 months and all correspondence (including emails) removed after 12 months. Right to Object If an individual objects to our handling of their data they can log their objection via our Web Site Feedback Page, Electronic Mail or Physical Post to our published address. They can also use any of our other communications channels including social media to contact us. We aim to respond to all such enquiries within 2 working days and to have a formal response within 30 days. Automated Decision Making and Profiling Media Storehouse does not perform any automated decision making or profiling. Personal Data is used purely for order delivery, if opted in, email updates. Cookies and this website "Cookies" are small text files that are placed on your computer or phone by your web browser at the request of the websites that you visit. Cookies are used to make websites work more efficiently or more conveniently, as well as provide information to the site's operators. What cookies does this site set? This site sets the following cookies: PHPSESSID: A temporary cookie used to help the programming code of this website maintain settings/information for users as they move from page to page during a "session" of web browsing. The cookie is removed less than half an hour after the session finishes. The cookie only stores the ID number of the session, no private information is sought or retained. DMCS: If you choose to opt-in to "Remember me on this computer" semi-permanent cookies are used to help this website remember your choice for the next time you sign in. These cookie are removed after a week. The cookies only store encrypted reference numbers, no private information is sought or retained within the cookie. AWSALB: Used to assist Load Balancing of our service to help ensure a quick and reliable service cookie_ok: If you choose to accept cookies this cookie is used to help this website remember your choice for the next time you visit this site. The cookie only stores a reminder of your choice, no private information is sought or retained. test_cookie: Used by Google Ads and DoubleClick so we can see how well Google Ads are performing Google Analytics: Cookies named "__utma","__utmb","__utmc" and "__utmz" are used by Google Analytics. Google Analytics is software provided by Google to website operators to help them measure the visitor traffic to the site. The information they track is anonymous and is not used to identify individuals. You can find out more about Google's usage of information here Bing: Cookies named "MUIDB" and "MUIDBing" are used by Microsofts Bing Search Analytics Cloudflare: "__cfduid" cookie is used by reviews.co.uk and other global sites to help remember if this is a secure connection How do I remove cookies? If you do not wish to have cookies on your computer or phone you can choose to remove them, and/or to block them altogether. You can read more about cookies and how to manage them here How to contact us If you would like any further information or have any comments about our privacy policy or any other aspect of our website or service, please contact our Data Protection Officer at our normal address. |