19th December 2018 Version
This privacy notice tells you when you use our website about the information we collect from you. We act as a data controller when collecting this information and we are required by law to provide you with information about us, why and how we use your data, and about the rights you have over your data.
Who’s we?
We’re about CertiToolKit. Our address is 15/F Hong Kong Jewellery Building 178-180 Queen. You can contact us by email at [email protected] or by telephone at 85228818248.
We are not required to have a data protection officer, therefore any inquiries regarding our use of your personal data should be addressed to the above contact details.
When you use our website
When you use our website to browse our products and services and view the information we provide, we and third parties use a number of cookies to enable the website to function, collect useful visitor information and help improve your user experience.
When you submit an enquiry
When you submit an enquiry via our website, we ask you for your name, contact telephone number and email address.
We use this information to respond to your query, including providing you with any requested information about our products and services. We may also email you several times after your enquiry in order to follow up on your interest and ensure that we have answered your it to your satisfaction. We will do this based on our legitimate interest in providing accurate information prior to a sale.
Your enquiry is stored and processed as an email which is hosted by Microsoft within the European Economic Area (EEA).
We do not use the information you provide to make any automated decisions that might affect you.
We keep enquiry emails for two years, after which they are securely archived and kept for seven years, when we delete them.
When you purchase a product from our website
We ask you for your name, address, telephone number, email address and credit card information when you buy products from us online. We also record your IP address (Internet Protocol), which is your Internet computer’s address.
We will use your information to check your purchase credit card details, process your order, and send your products to you. We will also send you an email receipt and we may use your phone number to contact you about your purchase.
To process your payment, deliver your products or services, and fulfill our contract with you, we require this information. We record your IP address to show that the proper tax has been applied to the sale, which we are required by law to do.
Your information is stored on our Digital Ocean website and on our cloud server ShareFile, both based within the European Union. Your credit card details will be passed to a U.S – based third – party payment processor called Braintree and certified to the EU – US Privacy Shield (which requires effective safeguards for your information). We do not retain information about your credit card. If you use PayPal to pay you will share your information with PayPal.
We also share your name and email address with MailChimp so we can send you emails to help you use your toolkit and ask you to participate in our optional post – sale feedback survey.
For an indefinite period, we keep your order information as the licenses we sell for our products do not expire.
When you sign up to receive our newsletter
We ask for your name and email address when you sign up to receive our newsletter.
We will ask for your consent to use your name and email address in order to send you our newsletter containing information about our products and other information that we believe may be of interest to you.
You can withdraw your consent at any time and the newsletter will stop us from sending you.
Your name and email address will be stored on our Digital Ocean website.
We do not use your information to make any automated decisions that may affect you.
For as long as we produce and distribute our newsletter, we keep your personal data. If you withdraw your consent, we will mark and delete your details after two years so that they will not be used.
When you download a sample document
We ask for your name, company name (which is optional) and email address when you request to download a sample document from one of our toolkits.
To download the requested document, we use this information to email you a link. After downloading, we may also send you an email to monitor your interest in our products and services. We will do this for prospects for our products and services based on our legitimate interest in marketing.
Your name and email address will be stored on our Digital Ocean website.
We do not use your information to make any automated decisions that may affect you.
After you have requested your download, your personal data will be stored for a year after which it will be deleted.
When you take part in our feedback survey
When you participate in our feedback survey, we will record your name, your email address, the name of your organization, your job role, and your answers to questions that we ask about your opinion about our products and services and their use.
We use this information to develop and improve our products and services and relationships with our customers. Your job role, your organization and some or all of your comments can be displayed as a testimonial publicly on our website. On the basis of our legitimate interest in marketing our products and services, we will do this.
Your details are shared with Google’s third – party survey system, based within the European Economic Area (EEA).
We do not use your information to make any automated decisions that may affect you.
Your personal data will be stored for two years or as long as we market the product or services referred to in the review, whichever is shorter. You may ask us to remove a testimonial from our website at any time based on your feedback.
Your rights as a data subject
By law, you can ask us what information we have about you, and if it is inaccurate, you can ask us to correct it. You may withdraw your consent at any time if we have requested your consent to process your personal data.
If, for reasons of consent or to fulfill a contract, we process your personal data, you can ask us to provide you with a copy of the information in a machine – readable format so that you can transfer it to another provider.
If, for reasons of consent or legitimate interest, we process your personal data, you may request that your data be erased.
You are entitled to ask us for a period of time to stop using your information if you believe that we are not doing so legally.
Finally, under certain circumstances, you may ask us not to make decisions that affect you by using automated processing or profiling.
Please use the contact information provided above in the Who Are We section of this policy to submit a request regarding your personal data by email, post or telephone.
Your right to complain
If you have a complaint about our use of your information, we would prefer that you first contact us directly so that we can deal with your complaint. However, you can also contact or write to the Office of the Information Commissioner via its website at www.ico.org.uk/concerns:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Updates to this privacy policy
We review and update this privacy policy on a regular basis from time to time, as our services and personal data use evolve. If we wish to make use of your personal data in a manner that we have not previously identified, we will contact you to provide information about this and request your consent if necessary.
We will update this document’s version number and date every time it is changed.