Privacy Policy

Who we are

We are Newport Balloons Ltd trading as Balloons-By-You

What Does This Policy Cover?

This Privacy Policy applies only to your use of Our Site. Our Site may contain links to other websites. Please note that We have no control over how your data is collected, stored, or used by other websites and We advise you to check the privacy policies of any such websites before providing any data to them.

Your Rights

As a data subject, you have the following rights under the GDPR, which this Policy and Our use of personal data have been designed to uphold:

• The right to be informed about Our collection and use of personal data;

• The right of access to the personal data We hold about you (see section 12);

• The right to rectification if any personal data We hold about you is inaccurate or incomplete (please contact Us using the details in section 13);

• The right to be forgotten – i.e. the right to ask Us to delete any personal data We hold about you (We only hold your personal data for a limited time, as explained in section 6 but if you would like Us to delete it sooner, please contact Us using the details in section 13);

• The right to restrict (i.e. prevent) the processing of your personal data;

• The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);

• The right to object to Us using your personal data for particular purposes; and
  Rights with respect to automated decision making and profiling.

If you have any cause for complaint about Our use of your personal data, please contact Us using the details provided in section 13 and We will do Our best to solve the problem for you. If We are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.
For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

What Data Do We Collect?

Depending upon your use of Our Site, We may collect some or all of the following personal and non-personal data from contact forms or cookies set at the time of you visiting Our site:

name;
date of birth;
gender;
business/company name
job title;
profession;
contact information such as email addresses and telephone numbers;
demographic information such as post code, preferences, and interests;
IP address;
web browser type and version;
operating system;
a list of URLs starting with a referring site, your activity on Our Site, and the site you exit to;

Sensitive Personal Information

‘Sensitive personal information’ is information about an individual that reveals their racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic information, biometric information for the purpose of uniquely identifying an individual, information concerning health or information concerning a natural person’s sex life or sexual orientation.

We do not knowingly or intentionally collect sensitive personal information from individuals, and you must not submit sensitive personal information to us. If, however, you inadvertently or intentionally transmit sensitive personal information to us, you will be considered to have explicitly consented to us processing that sensitive personal information under Article 9(2)(a) of the General Data Protection Regulation. We will use and process your sensitive personal information for the purposes of deleting it.

Children’s Privacy

Because we care about the safety and privacy of children online, we comply with the Children’s Online Privacy Protection Act of 1998 (COPPA). COPPA and its accompanying regulations protect the privacy of children using the internet. We do not knowingly contact or collect information from persons under the age of 18. The website is not intended to solicit information of any kind from persons under the age of 18.

It is possible that we could receive information pertaining to persons under the age of 18 by the fraud or deception of a third party. If we are notified of this, as soon as we verify the information, we will, where required by law to do so, immediately obtain the appropriate parental consent to use that information or, if we are unable to obtain such parental consent, we will delete the information from our servers.

What are Cookies?

Cookies are data files which are sent from a website to a browser to record information about users for various purposes.

We use cookies on our website, including essential, functional and analytical cookies. For further information on how we use cookies, please see our cookies policy

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We use Goggle Analytics software from Google Inc. to measure the performance of this website .

Google uses this information, including IP addresses and information from cookies, for a number of purposes, such as improving its Google Analytics service.

Information is shared with Google on an aggregated and anonymised basis. To find out more about what information Google collects, how it uses this information and how to control the information sent to Google, please see the following page: https://www.google.com/policies/privacy/partners/

You can opt out of Google Analytics in general by installing the browser plugin here: https://tools.google.com/dlpage/gaoptout

Transfer and storage of your information

Information collected by Google Analytics is stored outside the European Economic Area on Google’s servers in the United States of America. For further information about the safeguards used when your information is transferred outside the European Economic Area, see the following section.
Who we share your data with

Sharing your information with third parties, which are either related to or associated with the running of our business, where it is necessary for us to do so. These third parties include our accountants, advisors, affiliates, business partners, independent contractors, and insurers. These also include the following:

• Telephone provider (UK)

• Email and Mailing list provider (UK & USA)

• IT service provider (UK)

• Hosting provider (UK)

Apart from our email provider and mailing list provider, which are located in the United States of America, our service providers are located in the United Kingdom.

Your information will be shared with these service providers where necessary to provide you with the service you have requested, whether that is accessing our website or ordering goods and services from us.

We do not display the identities of all of our service providers publicly by name for security and competitive reasons. If you would like further information about the identities of our service providers, however, please contact us directly by email and we will provide you with such information where you have a legitimate reason for requesting it (where we have shared your information with such service providers, for example).

Disclosure of your information to third parties: only to the extent necessary to run our business, to our service providers, to fulfil any contracts we enter into with you, and where required by law or to enforce our legal rights.

We do not sell or pass on your information to third parties (other than in the course of a business sale or purchase or similar event): Not where you have supplied it to us directly.

How Do We Use Your Data?

All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with Our obligations and safeguard your rights under GDPR at all times.

Our use of your personal data will always have a lawful basis, either because it is necessary for Our performance of a contract with you, because you have consented to Our use of your personal data (e.g. by subscribing to emails), or because it is in Our legitimate interests. Specifically, We may use your data for the following purposes:

• Supplying Our products AND/OR services to you (please note that We require your personal data in order to enter into a contract with you);

• Personalising and tailoring Our products AND/OR services for you;

• Replying to emails from you;

• Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by selecting the opt-out link on every email);

• Market research;

• With your permission and/or where permitted by law, We may also use your data for marketing purposes which may include contacting you by email AND/OR telephone AND/OR text message AND/OR post with information, news, and offers on Our products AND/OR services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that We fully protect your rights and comply with Our obligations under GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

You have the right to withdraw your consent to Us using your personal data at any time, and to request that We delete it. We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Data will therefore be retained for the following periods (or its retention will be determined on the following bases):

• Until you tell us to delete the data;

How and Where Do We Store Your Data?

We only keep your personal data for as long as We need to in order to use it as described above and/or for as long as We have your permission to keep it.

Data is stored securely on local computers within the business. No third party has access. See also the section above on Cookies and Analytics about non personally identifiable data that may be transferred outside the European Economic Area.

Do We Share Your Data?

We will not share any of your data with any third parties for any purposes.

In certain circumstances, We may be legally required to share certain data held by Us, which may include your personal data, for example, where We are involved in legal proceedings, where We are complying with legal obligations, a court order, or a governmental authority.

What Happens If Our Business Changes Hands?

We may, from time to time, expand or reduce Our business and this may involve the sale and/or the transfer of control of all or part of Our business. Any personal data that you have provided will, where it is relevant to any part of Our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by Us.

In the event that any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your data deleted or withheld from the new owner or controller.

How Can You Control Your Data?

You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Subject to certain limitations on certain rights, you have the following rights in relation to your information, which you can exercise by writing to us at the address below or sending an email using the contact form or email address provided:

• to request access to your information and information related to our use and processing of your information;

• to request the correction or deletion of your information;

• to request that we restrict our use of your information;

• to receive information which you have provided to us in a structured, commonly used and machine-readable format (e.g. a CSV file) and the right to have that information transferred to another data controller (including a third party data controller);

• to object to the processing of your information for certain purposes (for further information, see the section below entitled Your right to object to the processing of your information for certain purposes); and
  to withdraw your consent to our use of your information at any time where we rely on your consent to use or process that information. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information on the basis of your consent before the point in time when you withdraw your consent.

In accordance with Article 77 of the General Data Protection Regulation, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or of an alleged infringement of the General Data Protection Regulation. For the purposes of the UK, the supervisory authority is the Information Commissioner’s Office (ICO), the contact details of which are available here: https://ico.org.uk/global/contact-us/

Where you request access to your information, we are required by law to use all reasonable measures to verify your identity before doing so. These measures are designed to protect your information and to reduce the risk of identity fraud, identity theft or general unauthorised access to your information.

No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.

Your Right to Withhold Information

You may access certain areas of Our Site without providing any data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain data.

How Can You Access Your Data?

You have the right to ask for a copy of any of your personal data held by Us (where such data is held). Under the GDPR, no fee is payable and We will provide any and all information in response to your request free of charge. Please contact Us for more details, or using the contact details below.

Contacting Us

If you have any questions about Our Site or this Privacy Policy, please contact Us by using any of the contact details provided above for information about the data We hold about you.

When you send an email to the email address listed above or use the contact form provided, we collect your email address and any other information you provide in that email (such as your name, telephone number and the information contained in any signature block in your email).

If you do not provide the mandatory information required by our contact form, you will not be able to submit the contact form and we will not receive your enquiry.

Transmission of information over the internet is not entirely secure, and if you submit any information to us over the internet (whether by email, via our website or any other means), you do so entirely at your own risk.

We cannot be responsible for any costs, expenses, loss of profits, harm to reputation, damages, liabilities or any other form of loss or damage suffered by you as a result of your decision to transmit information to us by such means.

Changes to Our Privacy Policy

We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up-to-date.

Legal basis for processing your data

• Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

• Legitimate interest(s): responding to enquiries and messages we receive and keeping records of correspondence.

• Legal basis for processing: necessary to perform a contract or to take steps at your request to enter into a contract (Article 6(1)(b) of the General Data Protection Regulation).

• Reason why necessary to perform a contract: where your message relates to us providing you with goods or services or taking steps at your request prior to providing you with our goods and services (for example, providing you with information about such goods and services), we will process your information in order to do so).