Customers of Talbot Heath Shop

This document outlines how and why we collect, use and process your data. The privacy and data security of our Alumnae and friends is extremely important to us as a school. 

This notice relates specifically to the data we collect when you make an order on the online shop. 

All personal data is collected, processed and stored in accordance with the Data Protection Act 1998 and with the General Data Protection Regulation (May 2018). 

Under what circumstances do we process personal data?

In accordance with GDPR, we only process personal information collected by the Shop website which is necessary to fulfill our contract with you. This will allow us to process the sale, and deliver items purchased through the school shop. 

What information do we keep?

We store information that allows us tomanage your purchase online by processing your orders and payments and keep you updated about your order. 

We will also use your data in order to handle complaints and warranty matters for products.
Payment information is processed, encrypted and stored by a third party, Stripe, with whom we hold a specific contract. 

What types of personal data do we process?

We will process following categories of personal data 
* contact information such as name, address, e-mail address and telephone number
* payment information and payment history (encrypted and stored by Stripe)
* order records

​

How we use the data

Data we store is used to carry out your online order. We do not communicate with you for any other reason than for fulfillment of this purchase.

We will never sell or share your personal information with organisations so that they can contact you for any marketing activities.

We may, however, share your information, or your information may be shared with us, by our trusted partners and suppliers who work on our behalf to deliver our services. Processing of this information is always carried out under our instruction with agreement to store securely and process in accordance with GDPR regulations. We make sure that they store the data securely, delete it when they no longer need it and never use it for any other purposes. Some examples include our partners who help us to collect payments, Stripe. 

We enter into contracts with these service providers that require them to comply with both the Data Protection Act (1998) and GDPR (2018).

Your data is only kept as long as is reasonable and necessary for the activity.

​

Your rights

Under the Data Protection Act and GDPR regulations you have the right to:

●     Access copies of any of the data we hold on you

●     Request for us to cease processing your data 

●     Request us to cease sending you marketing communication

●     Request us to correct incorrect data we hold

●     Request us to erase your personal data 

●     To withdraw consent, or change levels of consent, to further processing of your data.

●     To object to any of our particular processing activities where you feel this has a disproportionate impact on your rights

​

Keeping your information up to date

It is important to keep your information correct, if you wish to access your information, change how we communicate with you, or update your information please get in touch with us. 

​

The Data Protection Officer at Talbot Heath School is Mr. Ian Craddick. 

You can email us at – office@talbotheath.org

Telephone us on – 012020 761881

Or write to us at – Talbot Heath School, Rothesay Road, Bournemouth. BH4 9NJ

​

Who has access to your data?

Access is limited to the finance and events teams. Security of the data we hold for you is of utmost importance to the team, all information is stored securely and we will not allow access nor share this information beyond these teams.