Privacy Policy

Introduction

We have designed this privacy policy to be as straightforward as possible, with the “Simply Put” sections serving to simplify complex legal terms and concepts for easier understanding by our users.

We last updated this Privacy Policy on 19th November 2023.

Our Privacy Policy applies between you, the User of this Website, and ALG ID Cards Ltd t/a The Lanyard Shop, the owner and provider of this Website. ALG ID Cards Ltd t/a The Lanyard Shop takes the privacy of your information very seriously. This Privacy Policy governs how we use all Data collected from or provided by you during your use of the Website.

You should read this Privacy Policy in conjunction with our Terms and Conditions, available at: 

https://www.thelanyardshop.co.uk/terms-conditions/

We have a dedicated Privacy Policy specifically addressing the handling of NHS & Police data for the verification of restricted products. To learn more about our approach to NHS and Police data, please review our NHS and Police Data Privacy Policy.

We will never sell your data or collect/keep unnecessary data.

Please read our Privacy Policy and related policies carefully.

Simply Put

Our Privacy Policy explains how we use your data on our website. It’s crucial, so please read it with our Terms and Conditions.

To understand our approach to NHS and Police data, please review our NHS and Police Data Privacy Policy.

Rest assured, we never sell your data or gather unnecessary information.

2. In this Privacy Policy, unless the context requires a different interpretation:

• the singular includes the plural and vice versa;
• references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this Privacy Policy;
• a reference to a person includes firms, companies, government entities, trusts and partnerships;
• interpret the term “including” as meaning “including without limitation”;
• reference to any statutory provision includes any modification or amendment of it;
• the headings and sub-headings do not form part of this Privacy Policy.

Simply Put

In this policy, words fit both singular & plural, “including” implies “without limitation,” legal terms are up-to-date & headings serve as guides.

Scope of this Privacy Policy

3. This Privacy Policy applies only to the actions of The Lanyard Shop and Users with respect to this Website. This policy does not cover websites accessible through this Website, including, but not limited to, any links we may offer to social media websites.
4. For purposes of the applicable Data Protection Laws, The Lanyard Shop is the “data controller”. This implies that The Lanyard Shop decides the purposes and methods for processing your Data.

Simply Put

This policy covers only The Lanyard Shop and its users, not external or social media sites.

As the “data controller,” The Lanyard Shop determines how and why your data is processed.

Data Collected

5. We may collect the following Data, which includes personal Data, from you:

• name;
• contact Information such as email addresses and telephone numbers;
• IP address (automatically collected);
• web browser type and version (automatically collected);
• operating system (automatically collected);
• a list of URLs starting with a referring site, your activity on this Website, and the site you exit to (automatically collected);
• customers purchasing items with are subject to NHS verification can provide their NHS email address or upload their NHS ID card at checkout;

in each case, in accordance with this Privacy Policy.

Simply Put

We collect personal data, like your name and contact details, and also gather information about your device and browsing habits.

Additionally, for certain orders, we may need extra verification, such as NHS credentials.

How We Collect Data

6. We collect Data through the following methods:

• data is given to us by you; and
• data is collected automatically.

Simply Put

We collect data in two ways: directly from you and automatically through your use of our website.

Data That You Provide to Us

7. We will collect your Data in a number of ways, for example:

• when you contact us through the Website, by telephone, post, e-mail or through any other means;
• when you register with us and set up an account to receive our products/services;
• when you make payments to us, through this Website or otherwise;
• when you elect to receive marketing communications from us;

in each case, in accordance with this Privacy Policy.

Simply Put

We gather your data when you reach out to us, create an account, make payments, or choose to receive marketing communications, in line with our Privacy Policy.

Data That Is Automatically Collected

8. To the extent that you access the Website, we will collect your Data automatically, for example:

• we automatically collect some information about your visit to the Website. This information helps us to make improvements to Website content and navigation, and includes your IP address, the date, times and frequency with which you access the Website and the way you use and interact with its content.
• we will collect your Data automatically via cookies, in line with the cookie settings on your browser. For more information about cookies, and how we use them on the Website, see the section below, headed “Cookies”.

Simply Put

We automatically collect data about your visits, like IP address and how often you access and interact with the website, to improve it.

We collect your data through cookies, which are dependent on your browser settings.

Our Use of Data

9. We may require any or all of the mentioned Data periodically to ensure the provision of the best possible service and experience when using our Website. Specifically, we may use Data for the following purposes:

• internal record keeping;
• improvement of our products / services;
• emailing you marketing materials if you’ve opted in, and sending transactional information like order confirmations and account updates.

in each case, in accordance with this Privacy Policy.

10. We may use your Data for the above purposes if we deem it necessary to do so for our legitimate interests. If you find this unsatisfactory, you can exercise your right to object in certain situations (refer to the “Your rights” section below).
11. For the delivery of direct marketing to you via e-mail, we’ll need your consent, whether via an opt-in or soft-opt-in:

• soft opt-in consent is a specific type of consent which applies when you have previously engaged with us (for example, you contact us to ask us for more details about a particular product/service, and we are marketing similar products/services). Under “soft opt-in” consent, we will take your consent as given unless you opt-out;
• For other forms of e-marketing, we need to secure your explicit consent. In other words, you must actively and affirmatively consent, such as by checking a tick box that we will provide.;
• If you’re unhappy with our marketing approach, you can withdraw your consent at any time. To find out how to withdraw your consent, see the section headed “Your rights” below;

12. When you register with us and set up an account to receive our services, the legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.

Simply Put

We utilise your data for record keeping, service improvement, and email communication.

Importantly, we send marketing emails only to those who’ve opted in or shown prior interest, with the option to opt out available.

Also, transactional emails, such as order updates, are integral to our services. Registering for our services implies agreement to this aspect of our contract.

Who We Share Data With

13. We may share your Data with the following groups of people for the following reasons:

• third party service providers who provide services to us which require the processing of personal data – to help third party service providers in receipt of any shared data to perform functions on our behalf to help ensure the website runs smoothly;
• third party payment providers who process payments made over the Website – to enable third party payment providers to process order payments and refunds;

in each case, in accordance with this Privacy Policy.

Simply Put

We share your data with certain third parties: service providers who help us manage our website and payment providers for processing payments and refunds.

This is always carried out in accordance with our Privacy Policy.

Keeping Data Secure

14. We will use technical and organisational measures to safeguard your Data, for example:

• you access your account through a unique username and password that is assigned to you;
• our access to your data is on a need only basis. We maintain detailed logs and conduct audits for all access to your data;
• we store your Data across secure servers;
• we securely process your payments and store details of your payment methods on the servers of our payment processors, with your explicit consent. We do not store your payment details on our websites or servers;

in each case, in accordance with this Privacy Policy.

15. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via this e-mail address: [email protected].
16. If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. HM Government and leading businesses support Get Safe Online.

Simply Put

We protect your data using strong security measures like unique passwords for your account and storing data on secure servers.

We only process payment details securely and never store them on our servers.

If you have any security concerns, please email us at [email protected]. For extra online safety advice, visit www.getsafeonline.org.

Data Retention

17. We will keep your Data on our systems solely for the time required to fulfil the purposes specified in this Privacy Policy or until you request its removal, unless the law mandates or permits a longer retention period.
18. Even if we delete your Data, it may persist on backup or archival media (online or offline) for legal, tax or regulatory purposes.

Simply Put

We keep your data only as long as needed for the purposes in this Privacy Policy or until you ask for its deletion, unless law requires us to hold it longer.

Deleted data may remain on backups or archives for legal reasons.

Your Rights

19. You have the following rights in relation to your Data:

• Right to access – the right to request:(i) copies of the information we hold about you at any time, or (ii) that we modify, update or delete such information. You can access the information we hold about you for free, unless we find your request to be “manifestly unfounded or excessive”. In cases where legal permissions allow, we may decline your request, and if we do so, we will provide you with the reasons for our decision.
• Right to correct – the right to have your Data rectified if it is inaccurate or incomplete.
• Right to erase – the right to request that we delete or remove your Data from our systems.
• Right to restrict our use of your Data – the right to “block” us from using your Data or limit the way in which we can use it.
• Right to data portability – the right to request that we move, copy or transfer your Data.
• Right to object – the right to object to our use of your Data including where we use it for our legitimate interests.

20. To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this e-mail address: [email protected].
21. If you’re dissatisfied with how we handle your data complaint, you can escalate the issue to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). You can find the contact details for the ICO on their website at:
    https://ico.org.uk/
22. It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.

Simply Put

You have rights regarding your data with us. You can ask to see, change, or delete your data, and request we stop using it or move it elsewhere.

If you want to use these rights or have concerns, email us at [email protected]. If you’re unhappy with our response, you can contact the UK’s data protection authority, the Information Commissioner’s Office (ICO), through their website.

It’s important to keep your data current with us, so please inform us of any changes.

Transfers Outside the United Kingdom and European Economic Area

23. We may store, process, and transfer data collected from you to countries outside of the UK and European Economic Area (EEA). This could happen, for instance, if our servers are located in a country outside the UK or EEA or if one of our service providers operates in a country outside the UK or EEA.
24. We will only transfer Data outside the UK or EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data, e.g. by way of data transfer agreement, incorporating the current standard contractual clauses adopted by the European Commission.
25. To ensure that your Data receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Data with. This guarantees that third parties treat your Data in a manner consistent with Data Protection Laws.

Simply Put

Your data could be stored and processed in countries located outside of the UK and EEA.

We ensure compliance with data protection laws by using data transfer agreements with standard clauses from the European Commission for all international transfers.

Additionally, we make sure any third parties handling your data also follow these laws to keep your data secure.

Links to Other Websites

26. This Website may, from time to time, link to other websites that we do not own, are not affiliated with, or are not associated with our directors. We have no control over such websites and are not responsible for the content of these websites. This Privacy Policy does not extend to your use of such websites. We advise you to read the Privacy Policy or statement of other websites before using them.

Simply Put

Our website may link to external sites not controlled by us, and we’re not responsible for their content.

This Privacy Policy doesn’t cover these external sites.

Changes of Business Ownership and Control

27. The Lanyard Shop may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of The Lanyard Shop. Data provided by users will be transferred along with the relevant part of our business if such a transfer occurs, and the new owner or controlling party will be allowed, under the terms of this Privacy Policy, to utilise the data for the same purposes for which it was initially provided to us.
28. We may also disclose Data to a prospective purchaser of our business or any part of it.
29. In the scenarios mentioned above, we will take measures to safeguard your privacy.

Simply Put

If The Lanyard Shop experiences a sale or business transfer, we may transfer user data to the new owners, who will use it in accordance with this Privacy Policy.

Additionally, we may share data with potential buyers, always taking steps to protect your privacy.

Cookies

27. This Website may place and access certain Cookies on your computer.  The Lanyard Shop uses Cookies to improve your experience of using the Website and to improve our range of products. The Lanyard Shop has implemented measures to guarantee the protection and respect of your privacy at all times.
28. All cookies utilised by this Website are used in compliance with the prevailing UK and EU Cookie Law.
29. Prior to the Website placing Cookies on your computer, you will encounter a message bar requesting your consent to enable those Cookies that are not essential for our website to function properly. By giving your consent to the placing of Cookies, you are enabling The Lanyard Shop to provide a better experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of the Website may not function fully or as intended.
30. We maintain a dedicated Cookie policy page, which you can access at the following link:
    https://www.thelanyardshop.co.uk/cookie-policy/

Simply Put

Our website uses cookies to enhance your experience and our product range, always respecting your privacy. We comply with UK and EU Cookie Law.

We will seek your consent for non-essential cookies, as they assist us in delivering improved service.

Denying consent might affect website functionality. For more details, visit our Cookie Policy page.

General

31. You cannot assign any of your rights under this Privacy Policy to any other individual. We may transfer our rights under this Privacy Policy if we reasonably believe that your rights will not be adversely affected.
32. If a court or competent authority determines that any provision of this Privacy Policy (or any part of a provision) is invalid, illegal, or unenforceable, they will delete that specific provision or part to the necessary extent, and the remaining provisions of this Privacy Policy will continue to be valid and enforceable.
33. Unless both parties mutually agree otherwise, any delay, action, or omission by a party in exercising any right or remedy will not be interpreted as a waiver of that specific right or remedy or any other.
34. This Agreement shall be governed by and construed in accordance with the laws of England and Wales. Any disputes arising from this Agreement will be subject to the exclusive jurisdiction of the courts in England and Wales.

Simply Put

You can’t transfer your rights under this Privacy Policy. We may transfer ours, ensuring your rights stay protected.

If any portion of this policy is considered invalid, that specific part will be removed, while the remainder remains in effect. Not enforcing a right or remedy isn’t a waiver of it.

This policy is subject to English and Welsh law, and any disputes are within the jurisdiction of their courts.

Changes to This Privacy Policy

35. The Lanyard Shop reserves the right to modify this Privacy Policy as deemed necessary from time to time or as required by law. Any changes will be promptly published on the Website, and your acceptance of the terms of the Privacy Policy will be presumed when you initially use the Website following the updates.
       
      You may contact ALG ID Cards Ltd t/a The Lanyard Shop by email at [email protected].

Simply Put

The Lanyard Shop may update this Privacy Policy as necessary or to comply with legal changes.

These updates will be displayed on the website, and your use of the website following these changes implies your agreement with the updated terms.

For any inquiries, you can email The Lanyard Shop.

Attribution

36. This Privacy Policy has been generated using a document from Rocket Lawyer.