Privacy statement

PRIVACY STATEMENT

  1. Queens University, Belfast the data controller for the purposes of data protection legislation. This notice is provided to explain the basis on which any personal information we collect from you, or which you provide to us, is processed. Queens University, Belfast is committed to protecting and respecting your privacy. The basis on which we process your personal information is set out within this policy.
  2. INFORMATION WE GATHER
    • When you purchase something online in our store, we collect certain personal information about you:
      • Name
      • Address
      • Email Address
      • Billing address
      • Delivery Address details
      • Contact telephone number
      • Details of any comments or feedback which you provide you us
    • We will also require your credit/debit card details. We will use this information to supply you with our products, to recover debt and to help us prevent fraud.
    • We may also collect and process records of any correspondence and communications with us and a record of transaction history and details of transactions conducted on our site is kept by us together with details of the fulfilment of any of your order.
    • If you sign up to be kept informed about our promotions and products we may collect your personal data, such as your name and email address. 
    • As you move around our site we will collect information about your visit, such as which pages you visit, how often you visit and what links you click on.
    • We may monitor, record, store and use any telephone, email or other communication with you in order to check any instructions given to us, for training purposes, for crime prevention and to improve the quality of our customer service.
    • [Shopify]
    • Credit card details are sent directly to our secure payment processor Shopify Payments which processes customer payments on our behalf.
    • Royal Mail or other couriers to allow delivery.
  3. how do we use your personal information
    • to carry out a transaction with you i.e. to allow you to browse for and purchase goods;
    • to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
    • to carry out appropriate and necessary investigations and discharge our legal and regulatory obligations and duties, including to comply with anti-fraud and anti-money laundering requirements, and (where applicable) to safeguard our staff and other customers / users in respect of unlawful, disruptive or objectionable behaviour in any of our stores or on our site
    • to deliver marketing material and to assist us in the improvement and optimisation of advertising, marketing material and content, our services and the sites.
  4. Lawful basis for processing your data
    • Data protection laws require that we meet certain conditions before we are allowed to use your data in the manner described in this privacy policy.
    • To use your personal data, we will rely on the following conditions, depending on the activities we are carrying out:
      • Compliance with legal obligations: we are obliged to comply with UK laws and guidance provided by UK regulatory bodies. In particular, we will need to process your personal information to verify your identity, your source of funds for anti-money laundering and fraud purposes, You will not be able to object to processing or ask for the deletion of your personal information insofar as it falls under this category.
      • Necessary for the entry into / performance of a contract: When you enter into a transaction with us, a contract between you and us will have been entered into. In order for us to fulfil our obligations under such contract (e.g. to allow you to purchase goods from us), we will need to collect and process your personal information. Failure to provide the requisite personal information on sign-up and financial information on entering into the transaction or objecting to this type of processing / exercising your deletion rights will unfortunately mean we cannot provide our goods / services to you.
      • Consent: Please note that we will use your personal information in order to provide certain marketing information for the same or similar services you have previously used. You have the right to withdraw your consent at any time and can object to processing of this nature.
      • Legitimate interests: To use your personal data for any other purpose described in this privacy policy, we will rely on a condition known as "legitimate interests".  It is in our legitimate interests to collect your personal data as it provides us with the information that we need to provide our services to you more effectively. Effectively, this requires us to carry out a balancing test of our interests in using your personal data (for example, in order to provide you with the information, products and services that you request from us), against the interests you have as a citizen and the rights you have under data protection laws.  The outcome of this balancing test will determine whether we can use your personal data in the ways described in this privacy policy (except in relation to certain marketing activities, where we will always rely on your explicit consent).  We will always act reasonably and give full and proper consideration to your interests in carrying out this balancing test.
  1. HOW LONG TO WE KEEP YOUR INFORMATION FOR
    • When your data is no longer required for the purposes listed above, we will delete it within the timescales noted at this page: http://www.qub.ac.uk/Legal/.
  2. marketing
    • We want to keep you informed about all our products, promotions and news, and where you have indicated you are happy to receive marketing by post, email, SMS or phone we will keep in touch with the latest news.
  3. DISCLOSURE
    • We will only disclose your information to:
      • business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you; e.g. service providers who operate elements of our site service and process personal data on our behalf. We may also disclose your personal data to our supply and delivery partners for the purpose of processing and fulfilling your order. Where such disclosures are made, this will be under contractual arrangements with us and carried out in accordance with the requirements of the Act.
      • third party suppliers and service providers to the extent they assist us with our legal / regulatory obligations e.g. providers of services in respect of anti-money laundering, fraud, verification etc.;
  1. where we store your personal data
    • The personal data that we collect from you is stored on secure information technology systems located in the EEA which are operated by us or on our behalf by third parties. Some data processing in relation to web and email services and delivery of any products ordered by you is carried out on our behalf by a third party.
  2. Cookies
    • Our site uses cookies, as almost all websites do, to help provide you with the best experience we can. For more information please see our cookies policy.
  3. your rights
    • You have a number of rights under data protection law in relation to the way we process your personal data, although these are not absolute and in some instances we may be unable to accept your request, in which case we will respond to you to explain why. These are set out below.  You may contact us directly at welcomecentre@qub.ac.uk to exercise any of these rights and we will respond to any request received from you within one month from the date of the request.
      • A right to access personal data held by us about you.
      • A right to require us to rectify any inaccurate personal data held by us about you.
      • A right to require us to erase personal data held by us about you.
      • In certain circumstances, a right to restrict our processing of personal data held by us about you.
      • In certain circumstances, a right to receive personal data, which you have provided to us, in a structured, commonly used and machine readable format.
      • In certain circumstances, a right to object to our processing of personal data held by us about you where the processing of such data is necessary for the purposes of our legitimate interests.
      • A right for you not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affect you.
      • A right to withdraw your consent, where we are relying on it to use your personal data (for example, to provide you with marketing information about our services or products).
    • If you have any concerns regarding our processing of your personal data, or are not satisfied with our handling of any request by you in relation to your rights, you also have the right to make a complaint to the Information Commissioner's Office on 0303 123 1113 or at https://ico.org.uk/global/contact-us

 

This policy was last reviewed and updated: [February 2018]