Privacy Notice
Effective Date: November 14, 2024 | Version: 2.1
Elyndroshaven is committed to safeguarding your privacy and protecting your personal data. This Privacy Notice describes how we collect, process, store, and share your information in compliance with UK GDPR and the Data Protection Act 2018.
Who We Are
We are Elyndroshaven, and we act as the data controller for the personal information we collect through our website and services. This means we determine how and why your data is processed.
Data Protection Contact:
- Email: hello@elyndroshaven.co.uk
- Postal Address: 87 Piccadilly Arcade, Manchester M1 2PX, United Kingdom
What Information Do We Collect?
We process various categories of personal data depending on how you interact with our services:
How We Collect Your Information
Direct Interactions
Information you provide when registering, making purchases, subscribing to newsletters, or contacting our support team.
Automated Technologies
Data collected automatically through cookies, analytics tools, and similar tracking technologies as you navigate our website.
Third-Party Sources
Information from business partners, advertising networks, social media platforms, and publicly available sources.
Public Records
Data from credit reference agencies, fraud prevention services, and other legitimate public sources where lawful.
Legal Basis for Processing
We only process your personal data when we have a lawful basis to do so:
How We Use Your Information
Your personal data is processed for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Processing orders and delivering services | Contractual necessity |
| Customer support and query resolution | Contractual necessity |
| Payment processing and fraud prevention | Contractual necessity, Legal compliance |
| Website improvement and personalisation | Legitimate interests |
| Marketing communications (with opt-in) | Consent |
| Legal and regulatory compliance | Legal compliance |
Who We Share Your Data With
We may disclose your personal information to the following categories of recipients:
Service Providers & Processors
Third-party companies that provide services on our behalf (hosting, payment processing, email delivery, analytics, customer support) under strict data processing agreements.
Professional Advisers
Lawyers, accountants, auditors, insurers, and consultants who require access to data to provide professional services.
Regulatory & Law Enforcement
Government authorities, regulators, and law enforcement agencies where required by law or to protect our legal rights.
Business Transfers
Potential buyers or investors in the event of a merger, acquisition, reorganisation, or sale of assets.
International Data Transfers
Some of our service providers may be located outside the United Kingdom. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the UK authorities
- Adequacy decisions recognising equivalent data protection standards
- Binding Corporate Rules for intra-group transfers
You may request details of the safeguards we have in place by contacting us.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, regulatory, accounting, or reporting requirements. Retention periods vary depending on:
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access
Request copies of your personal data and information about how we process it.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data in certain circumstances.
Right to Restrict Processing
Request limitation of how we process your data in specific situations.
Right to Data Portability
Receive your data in a structured, commonly used format and transmit it to another controller.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month, though this may be extended in complex cases. You will not normally have to pay a fee to exercise your rights.
Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
Cookies and Tracking Technologies
Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
Children's Privacy
Our services are not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
Changes to This Privacy Notice
We reserve the right to update this Privacy Notice to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email or prominent notice on our website. We encourage you to review this notice periodically.
Contact & Complaints
If you have questions, concerns, or complaints about how we handle your personal data, please contact us:
- Email: hello@elyndroshaven.co.uk
- Postal Address: 87 Piccadilly Arcade, Manchester M1 2PX, United Kingdom
We are committed to resolving complaints fairly and promptly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
- ICO Website: www.ico.org.uk
- ICO Helpline: 0303 123 1113