This Privacy Notice explains the types of personal data we may collect about you when you interact with us. It also explains how we store and handle that data and keep it safe.
We want you to be fully informed about your rights, and how DR Products uses your data.
When you are using the Dream Runner website (dreamrunner.co.uk), DR Products is the data controller.
DR Products, which we will refer to as 'the Company' in this document.
DR Products registered office is 12 Kingsley Park Terrace, Northampton, NN2 7HG, and our company registration number is 14842393. Our Information Commissioner's Office registration number is [ICO REGISTRATION NUMBER].
For simplicity throughout this notice, 'we' and 'us' means DR Products.
UK data protection law, specifically the UK General Data Protection Regulation and the Data Protection Act 2018, sets out a number of different reasons for which a company may collect and process your personal data, including the following.
When you place an order with us, we collect the following mandatory information: name, email address, phone number, billing address, delivery address, company name, and VAT number if applicable. If you do not provide this information, you will not be able to purchase from or enter into a contract with us.
Legal basis for processing: processing is necessary to perform a contract, Article 6(1)(b) of the UK GDPR.
Why it is necessary to perform a contract: other than a phone number, we need the mandatory information collected by us to establish who the contract is with and to contact you to fulfil our obligations under the contract, including sending you receipts, order confirmations, invoices and statements.
Legal basis for processing: compliance with a legal obligation, Article 6(1)(c) of the UK GDPR.
Complying with a legal obligation: once you have ordered from us, we have a legal obligation to issue you with an invoice for the goods and services you purchased from us in accordance with UK VAT rules. For this, we require the mandatory information collected by our checkout form.
Legal basis for processing: legitimate interests, Article 6(1)(f) of the UK GDPR.
Legitimate interest: we collect your phone number for our legitimate interest of more easily and effectively contacting you in relation to your order and your account.
We collect your personal data in the following circumstances: when you visit our website and use your account to buy products; from the Company over the phone, at trade shows, or when our sales manager visits customers' premises; when you make an online purchase; when you open an account with us; when you engage with us on social media; when you join our mailing list; when you contact us by any means with queries or complaints; when you ask us to email you information about a product; when you book an appointment with us; when you complete any surveys we send you; when you comment on or review our products and services; when you fill in any forms; when you have given a third party permission to share with us the information they hold about you; and where we collect data from publicly available sources where you have given consent or where the information is made public as a matter of law.
If your comment or review includes information about a company that provided a service to you, it may be passed on to them if they request it, as any individual may access personal data relating to them, including opinions expressed about them.
If you have a web account with us, we gather your name, company name, billing and delivery address, orders and receipts, email address, and telephone number.
We collect details of your interactions with us online, by email, or by phone, including notes from our conversations with you, details of any complaints or comments you make, details of purchases you made, items viewed or added to your basket, brands you show interest in, web pages you visit, and how and when you contact us.
We collect details of your shopping preferences, such as your visits to our website and which site you came from.
We gather information through cookies and similar technology in your web browser.
We use your personal details to recommend items of interest. For example, you might tell us what items you like or sell, which we will use to guide our suggestions. It is always your choice whether you share such details with us.
We collect payment card information and bank details for issuing refunds.
We collect your comments and product reviews.
To deliver the best possible web experience, we collect technical information about your internet connection and browser, the country and telephone code associated with your device, the web pages viewed during your visit, advertisements you clicked on, and any search terms you entered.
We want to give you the best possible customer experience. One way we do this is by building an overall picture of who you are by combining the data we hold about you, so that we can offer promotions, products and services that are most likely to interest you where we have a lawful basis to do so.
If you choose not to share your personal data with us, or you decline certain contact permissions, we may not be able to provide some services you have asked for. For example, if you have asked us to let you know when an item comes back into stock, we cannot do that if you have withdrawn your consent to hear from us in that way.
Here is how we use your personal data and why.
To process any orders you place with us. If we do not collect your personal data during checkout, we will not be able to process your order or comply with our legal obligations.
To respond to your queries, refund requests, and complaints, and to keep a record of these to inform any future communications and to demonstrate how we communicated with you. We do this on the basis of our contractual obligations to you, our legal obligations, and our legitimate interests in providing a good service.
To protect our business and your account from fraud and other illegal activity, including maintaining, updating and safeguarding your account, and monitoring browsing activity to identify and resolve problems. We do this on the basis of our legitimate interests, for example by checking your password at login and using automated monitoring of IP addresses to identify potentially fraudulent log-ins.
To protect our staff, premises, and assets, we operate CCTV systems in our warehouse and car park, which record images for security purposes, in line with the Surveillance Camera Code of Practice. Appropriate signage is displayed wherever CCTV is in operation. We do this on the basis of our legitimate interests.
To process payments and prevent fraudulent transactions, on the basis of our legitimate interests. If we discover any criminal activity or alleged criminal activity through CCTV, fraud monitoring, or suspicious transaction monitoring, we will process this data for the purpose of preventing or detecting unlawful acts.
With your consent, we will use your personal data, preferences, and transaction details to keep you informed by email, web, text, telephone, and social media about relevant products and services, including tailored offers, discounts, promotions, events, and competitions. You are free to opt out of hearing from us through any of these channels at any time, and doing so will not affect your ability to use our services or hold an account with us.
To send you relevant communications by post about updates, offers, services, and products, on the basis of our legitimate interests. You are free to opt out of postal marketing at any time.
To send you communications required by law or necessary to inform you of changes to our services, such as updates to this Privacy Notice, product recall notices, and legally required information about your orders. These service messages will not include promotional content and do not require prior consent when sent by email or text. If we did not use your personal data for these purposes, we would be unable to comply with our legal obligations.
To display relevant content on our website using historical data about your favourite products, on the basis of your consent to cookies or similar technology, or our legitimate interests where cookies are not required. For example, we might show items you have recently viewed or recommend products based on your purchase history.
To develop, test, and improve our systems, services, and products, on the basis of our legitimate interests. For example, we record your browser's session ID to help us understand feedback you leave about problems you have experienced.
To share data with law enforcement, for example when a court order requires us to do so.
To send you survey and feedback requests to help us improve our services, on the basis of our legitimate interests. These messages do not include promotional content. You may opt out of these at any time by updating your preferences in your online account.
To build a picture of who you are and what you like, and to inform our business decisions, we combine data captured across DR Products, from third parties, and from publicly available sources as described in section 5, on the basis of our legitimate interests. For example, this helps us personalise your experience and decide what content to share with you.
We also use anonymised data from customer purchase histories to identify regional trends, which may guide the products we display at sales shows.
Where we use computer algorithms to help decide what information to show you as a customer, we do this on the basis of your consent.
To fulfil your order, we sometimes need to share your details with a third party providing a service, such as a delivery courier. Without sharing this data, we would be unable to fulfil your order.
Further information on how we share personal data with third parties is set out in section 10.
We want to bring you offers and promotions that are relevant to your interests. To help us build a better understanding of you as a customer, we combine your personal data gathered across DR Products, such as your ordering history, with data we obtain from third parties to whom you have given consent to pass that data to us.
We take data security seriously and take appropriate steps to protect it. We secure access to all transactional areas of our website using https technology. Access to your personal data is password protected, and sensitive data such as payment information is only accessible to specific people in the finance department. We regularly monitor our systems for vulnerabilities and carry out checks to ensure systems are patched, secure, and operational.
We only keep your personal data for as long as necessary for the purpose for which it was collected. At the end of the relevant retention period, your data will either be deleted or anonymised so it can be used for statistical analysis and business planning without identifying you.
For example, order-related personal data is kept for six years from the end of the relevant tax year, in line with HMRC record-keeping requirements, after which it is deleted or anonymised.
We sometimes share your personal data with trusted third parties, for example delivery couriers, for fraud management, to handle complaints, or to help personalise our offers to you.
We apply the following policy to protect your data when working with these organisations. We provide only the information they need to perform their specific services. They may only use your data for the purposes we specify in our contract with them. If we stop using their services, any of your data held by them will be deleted or rendered anonymous.
Examples of the third parties we work with include IT companies who support our website and business systems, operational companies such as delivery couriers, direct marketing companies who help manage our electronic communications, and Google, to show you products that might interest you while browsing, based on your marketing consent or acceptance of cookies.
We will only share your data with third parties for their own purposes in specific circumstances, for example the following.
With your consent, given at the time you supply your personal data, we may pass data to Google. Google collects information through our use of Google Analytics on our website, including IP addresses and cookie data, for purposes such as improving its Google Analytics service. Information is shared with Google on an aggregated and anonymised basis. To find out more about what information Google collects and how to control it, please see Google's privacy policy. Legal basis: our legitimate interests, Article 6(1)(f) of the UK GDPR, specifically meeting our contractual obligations to Google under the Google Analytics Terms of Service.
Sharing your information with a prospective or actual purchaser or seller in the context of a business or asset sale, merger, or similar transaction. Legal basis: our legitimate interests, Article 6(1)(f) of the UK GDPR, in allowing such a transaction to take place.
Sharing your information with third parties related to or associated with running our business, where necessary, including our accountants, advisors, affiliates, business partners, independent contractors, and insurers, on the basis of our legitimate interest in running our business efficiently.
Accountants: we share invoices issued and received with our accountants for tax returns and end of year accounts.
Advisors: we obtain advice from advisors such as accountants, financial advisors, and lawyers, and share your information with them only where necessary for them to provide relevant advice.
Insurers: we share your information with our insurers where necessary, for example in relation to a claim, or under our disclosure obligations to them.
For fraud management, we may share information about fraudulent or potentially fraudulent activity with law enforcement bodies. We may also be required to disclose your personal data to the police or another enforcement, regulatory, or government body
upon a valid request. These requests are assessed case by case, taking your privacy into consideration.
As a UK based company, we may transfer personal data we collect from you to third party data processors located outside the United Kingdom, for example where this is required to fulfil your order or provide support services.
Where we transfer personal data outside the United Kingdom, we ensure an appropriate level of protection is in place, using one of the following safeguards: transferring data to a country that the UK government has confirmed offers an adequate level of data protection, entering into the UK International Data TransferAgreement or the UK Addendum to the European Commission's Standard Contractual Clauses with the recipient, or another safeguard recognised under the UK GDPR.
We will treat your personal data in line with the principles of this Privacy Notice wherever it is processed.
Under the UK GDPR, you have the right to request the following. Access to the personal data we hold about you, generally free of charge. Correction of your personal data where it is incorrect, out of date, or incomplete. Erasure of your personal data in certain circumstances. That we restrict or stop using your personal data for direct marketing, through specific channels or all channels. That we stop any consent based processing of your personal data after you withdraw consent. Data portability, where applicable. Review of any decision made based solely on automated processing of your data, where no human has reviewed the outcome.
To make any of these requests, please contact DR Products using the details in section 16, update your online account, or contact our Customer Services team. If we decide not to act on your request, we will explain our reasons.
Where you have given us consent to use your personal data, you may withdraw that consent at any time.
Where we rely on our legitimate interest to process your data, you can ask us to stop for reasons connected to your particular situation, and we must do so unless we have a legitimate overriding reason to continue.
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request under this Privacy Notice. If you have authorised a third party to submit a request on your behalf, we will ask them to prove their
permission to act.
You can stop direct marketing communications from us at any time by writing to DR Products, 12 Kingsley Park Terrace, Northampton, NN2 7HG, or by emailing Mr.Antonio-ruan@hotmail.co.uk.
Please note you may continue to receive communications for a short period after changing your preferences while our systems are updated.
If you feel your data has not been handled correctly, or you are unhappy with our response to a request you have made regarding your personal data, you have the right to lodge a complaint with the Information Commissioner's Office. You can contact them by calling 0303 123 1113 or online at www.ico.org.uk/concerns.
Where we provide goods or services to customers based outside the United Kingdom, we process personal data in accordance with this Privacy Notice and applicable UK data protection law. Where we transfer your personal data internationally, including storing it on servers located in the United Kingdom, we take reasonable steps to protect its confidentiality and privacy, and to ensure it is not used in a way that is inconsistent with this Privacy Notice. If you have concerns about how your data is transferred or processed, please contact us using the details in section 16, or, if you are based outside the UK, you may also have the right to contact the data protection regulator in your own country.
We hope this Privacy Notice has been helpful in setting out how we handle your personal data and your rights over it.
If you have any questions that have not been covered, please contact us. Email us at Mr.Antonio-ruan@hotmail.co.uk. Or write to us at 12 Kingsley Park Terrace, Northampton, NN2 7HG.
