Privacy policy
This Privacy Notice provides details of the personal data we collect from you, what we do with it, how you might access it and who it might be shared with.
Our Contact Information (Data Controller)
Naturally Collagen Ltd.
Drummond Place 5
Twickenham, TW1 1JN
United Kingdom
Telephone: +44 (0)333 335 5530
Email: hello@naturallycollagen.co.uk
What we do with your personal data
We process personal data only for the purpose for which they are collected. The purpose is dependent on whether you use only our website, or additionally, our services. If you use our services you are required to register and we collect your personal data. We use this personal data for the provision of the service or the performance of the contract. We may use your personal data for other similar purposes, including marketing and communications, but that will only occur in the case we have your consent or another legal justification for doing so.
From our Suppliers we process and retain personal data for the following purposes and periods, with the applicable legal basis.
|
Processing purpose |
Legal basis |
Retention period |
|
Budget management |
6(1)(f) - it's in our legitimate interest (Business operations and due Diligence) |
Until contract completed |
|
Business operations and due diligence |
6(1)(f) - it's in our legitimate interest (Business operations and due Diligence) |
Until contract completed |
|
Supplier Management |
6(1)(f) - it's in our legitimate interest (Business operations and due Diligence) |
Until contract completed |
|
Video surveillance |
6(1)(f) - it's in our legitimate interest (Business operations and due Diligence) |
6 months |
|
Trust Information - Meeting Notes |
6(1)(f) - it's in our legitimate interest (Information, system, network and cyber security) |
Until service completed |
From our Previous Tax Advisor we process and retain personal data for the following purposes and periods, with the applicable legal basis.
|
Processing purpose |
Legal basis |
Retention period |
|
Communications, marketing and intelligence |
6(1)(a) - we have the data subject's consent |
Until consent withdrawn |
|
Information, system, network and cyber security |
6(1)(f) - it's in our legitimate interest (Information, system, network and cyber security) |
Until service completed |
From our Insurance Company Representative we process and retain personal data for the following purposes and periods, with the applicable legal basis.
|
Processing purpose |
Legal basis |
Retention period |
|
Business operations and due diligence |
6(1)(f) - it's in our legitimate interest (Business operations and due Diligence) |
Until tax or other retention period expires |
|
Communications, marketing and intelligence |
6(1)(a) - we have the data subject's consent |
Until consent withdrawn |
|
Support requests |
6(1)(b) - we have a contract with the data subject |
Until service completed |
|
Personalisation and customisation of the online experience |
6(1)(f) - it's in our legitimate interest (Business operations and due Diligence) |
Until service completed |
|
Trust Information - Meeting Notes |
6(1)(f) - it's in our legitimate interest (Information, system, network and cyber security) |
Until service completed |
From our None we process and retain personal data for the following purposes and periods, with the applicable legal basis.
|
Processing purpose |
Legal basis |
Retention period |
|
Business operations and due diligence |
6(1)(f) - it's in our legitimate interest (Business operations and due Diligence) |
Until tax or other retention period expires |
|
Communications, marketing and intelligence |
6(1)(b) - we have a contract with the data subject |
Until service completed |
|
Support requests |
6(1)(b) - we have a contract with the data subject |
Until service completed |
|
Debt management |
6(1)(f) - it's in our legitimate interest (Business operations and due Diligence) |
Until tax or other retention period expires |
|
Sales and Distribution of Products and Services |
6(1)(b) - we have a contract with the data subject |
Until service completed |
|
Trust Information - Meeting Notes |
6(1)(f) - it's in our legitimate interest (Information, system, network and cyber security) |
Until service completed |
From our Temporary Workers we process and retain personal data for the following purposes and periods, with the applicable legal basis.
|
Processing purpose |
Legal basis |
Retention period |
|
Employee Recruitment and Employment |
6(1)(b) - steps are required prior to a contract with the data subject |
3 years |
What personal data do we collect?
The personal data we collect depends on whether you just visit our website or use our services. If you visit our website, you do not need to provide us with any personal data. However, your browser transmits some data automatically, such as the date and time of retrieval of one of our web pages, your browser type and settings, your operating system, the last web page you visited, the data transmitted and the access status, and your IP address.
If you use our services, personal data is required to fulfill the requirements of a contractual or service relationship, which may exist between you and our organisation.
We collect:
- Online Identifiers
- Digital Images
- Financial Details
- Employment History
- Education History
- Location Information
- Name
- Telephone contact details
- Banking Details
- Visual Images
- Confidential Correspondence
- Credit History
- Email, Social Networks
We collect your personal data from the following indirect sources
|
Data subject type |
Personal data type |
Indirect source name |
|
Insurance Company Representative |
Location Information |
Stockists Customer |
|
Insurance Company Representative |
Name |
Stockists Customer |
|
Insurance Company Representative |
Telephone contact details |
Stockists Customer |
|
Insurance Company Representative |
Email, Social Networks |
Stockists Customer |
Who might we share your personal data with?
To maintain and improve our services, your personal data may need to be shared with or disclosed to service providers, other Controllers or, in some cases, public authorities. We may be mandated to disclose your personal data in response to requests from a court, police services or other regulatory bodies. Where feasible, we will consult with you prior to making such disclosure and, in order to protect your privacy, we will ensure that we will disclose only the minimum amount of your information necessary for the required purpose.
We transfer personal data to the following organisations and countries:
|
Data subject type |
Organisation name |
Type |
Country |
|
Previous Tax Advisor |
Eat Sleep Breathe |
Processor |
United Kingdom |
|
Previous Tax Advisor |
Zendesk |
Processor |
United States |
|
Insurance Company Representative |
DHL |
Processor |
United Kingdom |
|
Insurance Company Representative |
DPD |
Processor |
United Kingdom |
|
Insurance Company Representative |
Dropbox |
Processor |
United States |
|
Insurance Company Representative |
Eat Sleep Breathe |
Processor |
United Kingdom |
|
Insurance Company Representative |
Google Drive |
Processor |
Ireland |
|
Insurance Company Representative |
Mailchimp |
Processor |
United States |
|
Insurance Company Representative |
Paypal |
Processor |
Ireland |
|
Insurance Company Representative |
Xero |
Processor |
United States |
|
Insurance Company Representative |
Zendesk |
Processor |
United States |
|
None |
DHL |
Processor |
United Kingdom |
|
None |
DPD |
Processor |
United Kingdom |
|
None |
Dropbox |
Processor |
United States |
|
None |
Google Drive |
Processor |
Ireland |
|
None |
Mailchimp |
Processor |
United States |
|
None |
Satago |
Processor |
United Kingdom |
|
None |
Xero |
Processor |
United States |
|
Temporary Workers |
Google Drive |
Processor |
Ireland |
|
Suppliers |
Dropbox |
Processor |
United States |
|
Suppliers |
Eat Sleep Breathe |
Processor |
United Kingdom |
|
Suppliers |
Google Drive |
Processor |
Ireland |
|
Suppliers |
Xero |
Processor |
United States |
When a Processor or Controller is in a country outside the EU, we apply the necessary safeguards which may include, confirming whether the EC approves of transfers to the country, whether we need to use the EC's model contracts or, if the transfer is internal to our organisation, commitment to Binding Corporate Rules. Details of these safeguards may be obtained by contacting us directly.
Cookie declaration
This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. You consent to our cookies if you continue to use our website.
Cookies are small text files that can be used by websites to make a user's experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.
Your consent applies to the following domains: naturallycollagen.com
Your current state: Allow all.
Your consent ID: PGWJVFptm8JHzaKEsTepyHzmXaw2SSLLHJLn2WXa0xLzH5DsVPcQeg==
Consent date: Tuesday, August 1, 2023 at 01:22:27 PM GMT+1
Cookie declaration last updated on 1/14/24 by Cookiebot:
Necessary (1)
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
|
Name |
Provider |
Purpose |
Expiry |
Type |
|
CookieConsent |
Stores the user's cookie consent state for the current domain |
1 year |
HTTP Cookie |
How do we look after personal data?
We limit the amount of personal data collected only to what is fit for the purpose, as described above. We restrict, secure and control all of our information assets against unauthorised access, damage, loss or destruction; whether physical or electronic. We retain personal data only for as long as is described above, to respond to your requests, or longer if required by law. If we retain your personal data for historical or statistical purposes we ensure that the personal data cannot be used further. While in our possession, together with your assistance, we try to maintain the accuracy of your personal data.
How can you access your personal data?
You have the right to request access to any of your personal data we may hold. If any of that information is incorrect, you may request that we correct it. If we are improperly using your information, you may request that we stop using it or even delete it completely.
If you would like to make a request to see what personal data of yours we might hold, you may make a request from our company website.
Where you have previously given your consent to process your personal data, you also have the right to request that we port or transfer your personal data to a different service provider or to yourself, if you so wish.
Where it may have been necessary to get your consent to use your personal data, at any moment, you have the right to withdraw that consent. If you withdraw your consent, we will cease using your personal data without affecting the lawfulness of processing based on consent before your withdrawal.
Our Supervisory Authority
You have the right to lodge a complaint with any Supervisory Authority. See our Supervisory Authority contact details below.
Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow - Cheshire SK9 5AF
United Kingdom
casework@ico.org.uk
+44 303 123 3113
www.ico.org.uk