Privacy Policy for Yellow Sub Liverpool
1. Introduction
At Yellow Sub Liverpool (“we,” “us,” or “our”), accessible at yellowsubliverpool.com, your privacy is of paramount importance. We are committed to safeguarding your personal data and ensuring your right to privacy and data protection. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in accordance with applicable data protection laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
We recognize the sensitivity and importance of the information you entrust to us, and this policy aims to clearly inform you about our data practices and your rights.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected through your use of yellowsubliverpool.com, including interactions with our website, communications, and any products or services we offer online. We act as the Data Controller for the personal data we collect and are responsible for determining the means and purposes of processing that data.
For any inquiries regarding the handling of your data, you may contact us at: [email protected].
3. Categories of Data Processed
We process the following categories of personal data:
a) Usage Data
Data about how you interact with our website, including IP address, browser type, operating system, referral URLs, pages visited, device identifiers, timestamps of visits, and session duration.
b) Account Data
Information you provide when creating or managing an account, including your full name, postal address, email address, and telephone number.
c) Profile Data
Information derived from your interactions with our services, such as purchase history, user preferences, behavioral trends, and feedback data.
d) Communication Data
Records of correspondence, such as customer support inquiries, emails, messages sent through contact forms, and your communication preferences.
e) Technical Data
Technical configurations associated with the device or platform you use, such as operating system, device type, screen resolution, and language settings.
f) Transaction Data
Details relating to purchases or bookings, including transaction identifiers, payment methods, billing and delivery addresses, and order details. We do not store full credit card information; this is processed securely via third-party payment processors.
g) Preference Data
Your expressed choices for marketing communications, product preferences, and service interests.
4. Legal Bases for Processing
We rely on the following lawful bases to process your personal data:
– Contractual Necessity: To fulfill our obligations under any contract with you (e.g., processing purchases or account management).
– Legitimate Interests: To operate and improve our services, prevent fraud, and maintain website security.
– Consent: For marketing communications, certain cookies, or any optional data submission.
– Compliance with Legal Obligations: Where required to comply with applicable laws or legal orders.
5. Your Data Subject Rights
Depending on your jurisdiction, you have specific rights under data protection law, which include:
– Right to Access: Request access to the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of personal data where lawful grounds exist.
– Right to Restriction: Request temporary halt in processing under certain circumstances.
– Right to Portability: Receive your personal data in a structured, commonly used format and transfer it to another controller.
To exercise any of these rights, please contact us at [email protected]. We will respond in accordance with applicable legal timelines.
6. Security Measures
We have implemented appropriate technical and organizational safeguards designed to protect your personal data, including:
– Data encryption in transit (SSL/TLS) and at rest.
– Role-based access controls and authentication protocols.
– Secure data backup procedures and redundancy systems.
– Staff training on data protection principles and secure handling practices.
While no system can guarantee absolute security, we vigilantly monitor and revise our controls to mitigate risks and unauthorized access.
7. International Data Transfers
Wherever your data is processed, we ensure protection consistent with your legal rights. If data is transferred outside of the UK, EU, or other relevant jurisdictions, we implement standard contractual clauses and other legally recognized safeguards to maintain adequate protection.
8. Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected, including:
– Usage Data: Up to 12 months for analytics purposes.
– Account Data: Retained while your account is active and for up to 6 years following closure, in line with tax and legal obligations.
– Transaction Data: Retained for 7 years for financial and compliance reasons.
– Communication Data: Retained for up to 3 years following your last contact with us.
– Marketing Preferences: Retained until you withdraw your consent or opt-out.
Data no longer required is securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar technologies. These technologies allow us to provide, protect, and improve yellowsubliverpool.com, such as by personalizing content and providing analytics.
Types of cookies used:
– Essential Cookies: Necessary for the functioning of our website and services.
– Functional Cookies: Enable personalization and enhanced functionality.
– Analytics Cookies: Gather usage data to understand website performance.
– Performance Cookies: Help us measure technical performance and identify issues.
10. Cookie Management and Compliance
You can manage your cookie preferences at any time using the cookie consent tool accessible on our website. You may also control cookies through your browser settings. Under GDPR and CCPA, users have the right to opt-out of non-essential cookies and data tracking.
California residents may also utilize authorized agents to submit data access or deletion requests. To exercise your rights under CCPA, email [email protected].
11. Children’s Privacy
Our website and services are not intended for individuals under the age of 13. We do not knowingly collect personal data from individuals in this age group. If we become aware that data has been collected from a minor without verifiable parental consent, we will delete such data.
12. Policy Updates
We reserve the right to update this Privacy Policy to reflect changes in legal obligations or business practices. Material changes will be highlighted on yellowsubliverpool.com. We encourage you to review this policy regularly to stay informed about our privacy practices.
13. Contact Us
If you have questions or concerns regarding this Privacy Policy or your personal data, please contact us via:
Email: [email protected]
Your privacy is important to us, and we are committed to ensuring compliance with applicable privacy laws and industry best practices. Should you have any concerns about how your data is processed, do not hesitate to reach out.