Privacy Policy for Imperial Fabrications
This Privacy Policy describes how and when I, Alan Dorricott, collect, use, and share information when you purchase an item from me, contact me, or otherwise use my services.
1. External Services & Third Parties
While I am the Data Controller for Imperial Fabrications, this Privacy Policy does not apply to the practices of third parties that I do not own or control. This includes PayPal, or any external delivery and postal services required to fulfil your order. These platforms have their own privacy practices, and I encourage you to review their specific policies.
2. Information I Collect
To fulfil your order, you must provide me with certain information, such as your name, email address, postal address, payment information, and the details of the product that you’re ordering. You may also choose to provide me with additional personal information if you contact me directly for a custom order.
3. Why I Need Your Information and How I Use It
I rely on several legal bases to collect, use, and share your information, including:
Service Delivery: As needed to provide my services, such as fulfilling your order, settling disputes, or providing customer support.
Legal Obligation: If necessary to comply with a legal claim or court order, such as retaining information about your purchases if required by UK tax law (HMRC).
Legitimate Interests: As necessary for my legitimate interests in providing and improving my services, provided those interests are not overridden by your rights or interests.
4. Information Sharing and Disclosure
I share your personal information for very limited reasons, as follows:
Payment Processors: I share information with PayPal as necessary to securely process your payment.
Service Providers: I engage trusted third parties to perform functions for my shop, such as delivery companies. I share your name and address with these parties only to the extent necessary to perform these services.
Compliance with Laws: I may retain and share your information if I have a good faith belief that it is reasonably necessary to respond to legal process, enforce agreements, or protect the safety of my customers.
5. Data Retention
I retain your personal information only for as long as necessary to provide you with my services. However, I am also required to retain this information to comply with my legal and regulatory obligations. I generally keep your sales data for a period of 6 years to satisfy UK HMRC accounting requirements.
6. Transfers of Personal Information Outside the UK/EU
I may store and process your information through third-party hosting services (such as Google Cloud or PayPal) which may be located in the US. If I am deemed to transfer information about you outside of the UK or EU, I rely on Standard Contractual Clauses or the UK Extension to the Data Privacy Framework as the legal basis for the transfer.
7. Your Rights
If you reside in the UK or EU, you have several rights in relation to your personal information:
Access: You may have the right to access and receive a copy of the personal information I hold about you.
Change, Restrict, Delete: You have rights to change, restrict my use of, or delete your personal information. Absent exceptional legal circumstances, I will generally delete your information upon request.
Complain: If you wish to raise a concern about my use of your information, you have the right to do so with the Information Commissioner’s Office (ICO).
How to Contact Me
For purposes of UK and EU data protection law, I, Alan Dorricott, am the data controller of your personal information. If you have any questions or concerns, you may contact me at: imppics[at]aol.com or by mail at: 151, Shaggy Cal Lane, Slough. SL2 5HR.
