Thank you for your interest in this Privacy Policy! We, The Archive London of 71-75 Shelton Street, London, England, WC2H 9JQ (“The Archive London”, “we”, “us” or “our”) are committed to protecting and respecting your privacy when you visit our website and shop at www.thearchivelondon.com.
In principle, we will only use your Personal Data in accordance with applicable data protection laws, in particular the UK`s Data Protection Act (“DPA”), the EU’s General Data Protection Regulation (“GDPR”), and only as described in this privacy policy.
Definitions
What is Personal Data?
Personal data is any information relating to personal or material circumstances that relates to an identified or identifiable individual. This includes, for example, your name, date of birth, e-mail address, postal address, or telephone number as well as online identifiers such as your IP address. In contrast, information of a general nature that cannot be used to determine your identity is not Personal Data. This includes, for example, the number of users of a website.
What is processing?
“Processing” means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means. The term is broad and covers virtually any handling of data.
General Information on Data Processing
- The legal bases of processing
All Personal Data that we obtain from you via the website will be processed for the purposes described in more detail below. This is done within the framework of the DPA and the GDPR or with your consent. In particular, we process Personal Data only when processing is permitted and if:
- you have given your consent,
- the data is necessary for the fulfilment of a contract / pre-contractual measures,
- the data is necessary for the fulfilment of a legal obligation or
- the data is necessary to protect the legitimate interests of our company, provided that your interests are not overridden.
- Your data subject rights
The following rights are available to you as a data subject:
- the right to information,
- the right to rectification,
- the right to erasure,
- the right to restriction of data processing,
- the right to data portability,
- the right to object to data processing,
- the right to revoke any consent you have given, and
- the right to lodge a complaint with the competent supervisory authority.
Please contact us at any time with questions and suggestions regarding data protection and/or to enforce your rights, using contact@thearchivelondon.com.
- Exercising your rights
If you wish to access your Personal Data or exercise any of the rights listed above, you should apply in writing, providing evidence of your identity. Any communication from us in relation to your rights as detailed above will be provided free of charge. However, in case of requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or refuse to act on the request.
- Updating your information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please contact us.
- The competent supervisory authority
The Information Commissioner’s Office (ICO) is the relevant authority in the UK. The ICO is located at Wycliffe House, Water Ln, Wilmslow SK9 5AF, UK (www.ico.org.uk). If you believe that the processing of your Personal Data is not lawful, you can lodge a complaint with a data protection supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach the ICO or any other supervisory authority.
- International data transfer
In the course of our business and website operations, we process data. This also includes disclosure by transmission to third parties and, where applicable, to so-called third countries outside the UK and the EEA. When we transfer data outside the UK or the EEA, we make sure to use the necessary and appropriate safeguards to ensure that the security of your Personal Data is maintained and guaranteed. In particular those include standard contractual clauses, binding corporate rules and data processing agreements.
- Storage and retention of your data
We process and store your Personal Data only for the period of time required to achieve the respective processing purpose or for as long as a legal retention period (in particular commercial and tax law as set out by HMRC or Companies House, among others) exists. Once the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.
- Security
We have implemented technical and administrative security measures to protect your Personal Data against loss, destruction, manipulation, and unauthorised access. All our employees and service providers working for us are bound by the applicable data protection laws.
Whenever we collect and process Personal Data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process and our privacy policy is constantly being revised.
Nonetheless, databases or data sets that include Personal Data may be breached inadvertently or through wrongful intrusion. Upon becoming aware of a data breach, we will notify all affected individuals whose Personal Data may have been compromised, and the notice will be accompanied by a description of action being taken to reconcile any damage as a result of the data breach. Notices will be provided as expeditiously as possible after the breach was discovered.
Processing of Automatically Collected Data
- Collection of access data and log files
We also collect data on every access to our website. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.The legal basis for the data processing is our legitimate interest in providing an appealing website.
- Use of cookies
We use so-called cookies on our web site. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and saved by your browser. For further information please refer to our Cookie Policy. The legal basis for the use of cookies is your consent as well as our legitimate interest.
- Hosting
To provide our website, we use the services of iPpage (bluehost inc./ Newfold Digital Inc.) who processes all data to be processed in connection with the operation of this website on our behalf. The legal basis is our legitimate interest.
Data processing when you submit Personal Data to our website and shop
- Registration
On our website, we offer you the opportunity to register by providing Personal Data. The data entered in the registration form is transmitted to us and stored and includes your full name, your email address, and your password. We will also send you a verification email to ensure that the account creation is made for the intended person. The processing of the data for this registration thus serves the fulfilment of the contract of use or the implementation of pre-contractual measures. You can delete your account at any time either by using the delete function in your account or by contacting us.
- Storage of data in your account
For the conclusion and processing of contracts, we require contact details, such as name, delivery and billing address and email address, as well as information on the type of payment method you have chosen. You can store this data in your account. In addition, we use your data to maintain our customer database so that only accurate data is stored by us. In order to avoid typing errors and to ensure that the items you have ordered reach you, we check the completeness and accuracy of your address when you enter it.
Following your order, you will receive a corresponding order confirmation as well as further documents, which we are obliged to provide in order to fulfil our legal information obligations for an effective conclusion of a contract with you.
- Guest order
You have the option to place your orders as a guest. If you choose this order type, you do not have to register before placing an order. Please note that you will have to enter your data again for each subsequent order.
We collect, process, and use the information you provide in the context of a guest order for the purpose of executing the contract. We store the information you provide for the period of processing and handling your order. Afterwards, your data will be deleted unless you decide to activate your customer account within 14 days after placing your order. Data that we are required to store due to legal, statutory, or contractual retention obligations will be blocked instead of being deleted to prevent it being used for other purposes. The processing of the data serves the fulfilment of the contract with you.
- Order confirmation/dispatch confirmation
In order to process the contract and provide you with our services, for example the web shop or to send you your order, we use your contact details to send you registration confirmations, customer service information, order confirmations, contract documents or payment processing information. We are obliged to send you these documents in order to comply with our legal information obligations for an effective conclusion of a contract with you. The processing of your data is therefore necessary to fulfil our legal information obligations for an effective conclusion of a contract with you.
- Legal Obligations
Based on our legal obligation and our legitimate interest, we use and store your Personal Data and technical information to the extent necessary to prevent or prosecute misuse or other illegal behaviour on our website, e.g., to maintain data security in the event of attacks on our IT systems. This also takes place insofar as we are legally obliged to do so, for example due to official or court orders, and for the exercise of our rights and claims as well as for legal defence.
- Financial Information
To make a purchase, you may need to provide a valid payment method (e.g., credit or debit card). Your payment information will be collected and processed by our authorised payment vendor Stripe. We do not directly collect or store credit or debit card numbers ourselves in the ordinary course of processing transactions. Accordingly, the data is processed on the basis of our contractual relationship.
Disclosure or transfer of Personal Data
We will not disclose or otherwise distribute your Personal Data to third parties unless this is a) necessary for the performance of our services our fulfilment service providers Printful, Inc, to deliver your order, b) you have consented to the disclosure for example if you send someone a personal message along with an order, c) or if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or other legal proceedings; as required by law or regulation; if The Archive London (or a part of The Archive London) is sold to or merged with another company; or proceedings at home or abroad or to fulfil our legitimate interests.
Sending information, Advertising and Direct Marketing
We use your data for sending information ordered by you about our offer and other promotions from us to the e-mail address provided by you.
If you purchase goods on our website or forget something in your shopping cart, we may send you information on our own similar goods to your specified email address even without your consent.
The legal basis for this data processing is our legitimate interest because advertising related products by way of direct advertising represents a legitimate interest for us as a business and the provider of this website. You may object to the processing of your Personal Data for the purpose of direct advertising at any time without giving reasons by unsubscribing via the unsubscribe link at the end of each e-mail or by contacting us.
Insofar as you have also given us your separate consent to process your data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.
You may give us your consent in a number of ways including by selecting a box on a form where we seek your permission to send you marketing information, or sometimes your consent is implied from your interactions or contractual relationship with us. Where your consent is implied, it is on the basis that you would have a reasonable expectation of receiving a marketing communication based on your interactions or contractual relationship with us.
Direct Marketing generally takes the form of e-mail but may also include other less traditional or emerging channels. These forms of contact will be managed by us, or by our contracted service providers. Every directly addressed marketing sent or made by us or on our behalf will include a means by which you may unsubscribe or opt out.
Miscellaneous and Closing
- Automated decision-making
Automated decision-making including profiling does not take place.
- Personal data and children
Our services are aimed at people aged 18 and over. We will not knowingly collect, use or disclose Personal Data from minors under the age of 18 without first obtaining consent from a legal guardian through direct offline contact.
- Online presences in social media
We maintain online presences within social networks and platforms (Threads, Facebook, Instagram, Snapchat and TikTok) in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g., write posts on our online presences or send us messages.
- Changes
We may update this policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
- Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us using contact@thearchivelondon.com.
Effective Date