Privacy Policy for moncrieflondon.com
At Moncrieff London, accessible via moncrieflondon.com, we are committed to respecting and protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other applicable data protection laws.
By accessing or using moncrieflondon.com, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, please do not use our website.
1. Commitment to Privacy and Data Protection
We take your privacy seriously and are committed to maintaining the confidentiality, integrity, and security of your personal information. Our approach prioritizes transparency and the responsible handling of all data we collect. Your trust is foundational to our business, and we uphold that trust through strong internal policies, continual assessment of data practices, and strict compliance with global privacy standards.
2. Scope of Policy and Data Controller
This Privacy Policy applies to all personal data collected through moncrieflondon.com and related communications with users. Moncrieff London Ltd. is the controller of your personal data. This means that we determine the purposes and means of processing your information. For any privacy-related inquiries, you can contact us at: [email protected].
3. Categories of Data Processed
We collect and process various categories of personal data to deliver our services, improve your experience, and meet our legal obligations:
a) Usage Data
Information concerning your use of moncrieflondon.com, including IP address, browser type, browsing actions, referring URLs, access dates and times, session data, and page interaction information.
b) Account Data
Personal identification information you provide when creating an account or placing an order, such as full name, postal address, email address, and telephone number.
c) Profile Data
Information about your preferences, past purchases, order history, feedback, reviews submitted, and other behavioral data associated with your use of our website.
d) Communication Data
Records of communications with us, including customer service interactions, inquiries, and any messages you send or receive via support channels or contact forms.
e) Technical Data
Device-specific data such as operating system, device model, network information, and configurations used in accessing moncrieflondon.com.
f) Transaction Data
Data related to purchases and transactions, such as payment method details (processed securely through a third-party provider), shipping information, and billing history.
g) Preference Data
Information you provide regarding marketing preferences, consent to marketing communications, wishlists, and product interests.
4. Legal Bases for Processing
We rely on the following lawful bases under GDPR and applicable laws for processing your personal data:
– Consent: When you have given us clear consent for specific purposes, such as subscribing to newsletters.
– Contractual Necessity: To fulfill contractual obligations, such as processing orders and delivering products.
– Legitimate Interests: To improve our services, maintain security, promote relevant products, and prevent fraud, provided such interests are not overridden by your rights.
– Legal Obligation: To comply with applicable laws, including tax, record-keeping, and consumer protection requirements.
5. Your Rights
Subject to applicable privacy laws, you may have the following rights concerning your personal data:
– Right of Access: To request access to the personal data we hold about you.
– Right to Rectification: To request corrections to inaccurate or incomplete data.
– Right to Erasure: To request deletion of your personal data, subject to certain legal limitations.
– Right to Restrict Processing: To limit specific uses of your data.
– Right to Data Portability: To receive your data and, where feasible, have it transmitted to another controller.
– Right to Object: To object to processing based on legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent: To revoke your consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We use appropriate technical and organizational safeguards to protect your data, including:
– Encryption of sensitive data during transmission and storage.
– Access controls and user authentication for internal systems.
– Regular backups and secure data storage.
– Staff training on data privacy and security awareness.
– An incident response plan for managing and mitigating breaches.
7. International Transfers
We may transfer data outside of your country of residence, including to countries not deemed to provide the same level of data protection. Where such transfers occur, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and equivalent mechanisms as required under local law to ensure your data is protected.
8. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal obligations. Specific retention periods are as follows:
– Usage Data: 12 months from date of collection.
– Account and Profile Data: For the lifespan of your account and up to 6 years after closure.
– Communication and Transaction Data: 7 years for accounting and auditing purposes.
– Preference Data: Until consent is withdrawn or account closure.
After the applicable retention period, data will be securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar technologies to enhance your browsing experience and gather analytics. Types of cookies used include:
– Essential Cookies: Required for basic site functionality (e.g., login, cart).
– Functional Cookies: Improve functions such as remembering your preferences.
– Analytics Cookies: Help us understand user behavior through tools such as Google Analytics.
– Performance Cookies: Measure and optimize site performance and navigation metrics.
10. Cookie Management and Compliance with GDPR & CCPA
You can manage cookie preferences through the cookie banner presented during your first visit, as well as through your browser settings. Under GDPR and CCPA, you have the right to opt-out of non-essential cookies at any time. We do not sell your personal data and do not use cookies to make automated decisions that result in legal or similar effects.
11. Children’s Privacy
We do not knowingly collect or solicit personal data from individuals under the age of 13 or allow such individuals to use moncrieflondon.com. If you are a parent or guardian and believe that your child has provided us with their data, please contact us at [email protected] so we can take appropriate action.
12. Policy Updates and User Notifications
We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. Any material changes will be communicated to you via the website or through other reasonable means. Continued use of moncrieflondon.com indicates acceptance of the revised policy.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at:
Email: [email protected]
Website: https://moncrieflondon.com
We are fully committed to ensuring compliance with data protection legislation, and we welcome your inquiries regarding your privacy rights or our use of your personal data.