We will receive your personal data on our website which is kept on a secure server in the UK where all personal data is encrypted. Data concerning your credit/debit card payments is processed by Worldpay, Paypal or Stripe on a secure website linked to ours and they each have their own privacy policies that you should read. If you give consent to receive communications from us, we use the marketing automation and email marketing service Mailchimp to communicate with you. Their privacy policy can be read here:
https://mailchimp.com/legal/privacy/. You will be free to unsubscribe from those messages at any time. The server of Mailchimp is located outside the EU, in the USA, and we are satisfied that the organization has appropriate safeguards in place to protect your data. We do not give anyone else access to personal data unless we are required to by law or the access is for our own team performing their services for our website, all of whom are subject to confidentiality obligations. If we wish to process your personal data for purposes other than those specified in this notice, we will notify you with relevant information and, if necessary, seek your consent. We may from time to time provide information of a general nature to third parties – for example, the number of individuals visiting our website, buying particular products or completing an enquiry form, but this information will be anonymized so that those individuals cannot be identified (except in the case of testimonials on our website where the individual has given consent).