Data Privacy Policy
Effective Date: July 2024

1. Introduction
RSSL Computers Ltd is committed to protecting and respecting your privacy. This Data Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website rsslcomputers.co.uk, use our services, or purchase our products. This policy complies with the UK Data Protection Act 2018 (DPA 2018) and the General Data Protection Regulation (GDPR).

2. Information:
We may collect and process the following data about you:
Personal Information: Name, email address, postal address, phone number, payment information, and any other details you provide during registration or purchase. Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website. Usage Data: Information about how you use our website, products, and services. Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

3. How We Use Your Information
We use the information we collect in the following ways:
To provide, operate, and maintain our website and services. To improve, personalise, and expand our website and services. To process your transactions and manage your orders. To communicate with you, including sending you updates and promotional materials. To comply with legal obligations and resolve any disputes.

4. Legal Basis for Processing Your Information
We will process your personal information based on the following legal grounds:
Consent: When you have given clear consent for us to process your personal data for a specific purpose. Contract: When the processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract.
Legal Obligation: When the processing is necessary for us to comply with the law.
Legitimate Interests: When the processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests.

5. Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
What Are Cookies?: Cookies are small data files that are placed on your device when you visit a website. They are widely used by online service providers to facilitate and improve the operation of websites and services and to provide reporting information. Types of Cookies We Use: Strictly Necessary Cookies: These cookies are essential for the operation of our website. Performance Cookies: These cookies collect information about how you use our website, such as the pages you visit and any errors you experience. These cookies do not collect personal information. Functionality Cookies: These cookies allow our website to remember choices you make (such as your user name, language, or the region you are in) and provide enhanced, more personal features. Targeting Cookies: These cookies are used to deliver adverts more relevant to you and your interests. Managing Cookies: You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can obtain up-to-date information about blocking and deleting cookies via these links: Chrome Firefox Edge Safari

6. Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised way. Additionally, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Data Protection Rights Under the UK GDPR Under the UK General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

8.1 Right to Access
You have the right to request copies of your personal data that we hold. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
How to Exercise This Right: To request access to your personal data, please contact us using the contact details provided in this policy. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

8.2 Right to Rectification
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
How to Exercise This Right: If you believe that any data we hold about you is incorrect or incomplete, please contact us using the contact details provided in this policy. We will promptly correct any information found to be incorrect.

8.3 Right to Erasure
You have the right to request that we erase your personal data, under certain conditions. This is also known as the ‘right to be forgotten’.
How to Exercise This Right: To request the deletion of your personal data, please contact us using the contact details provided in this policy. We will comply with your request unless we have a lawful reason not to do so.

8.4 Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
How to Exercise This Right: If you wish to restrict the processing of your personal data, please contact us using the contact details provided in this policy. We will mark your data as restricted and will not process it except for the establishment, exercise, or defence of legal claims, or where necessary to protect the rights of another person.

8.5 Right to Object to Processing
You have the right to object to our processing of your personal data, under certain conditions.
How to Exercise This Right: If you object to our processing of your personal data, please contact us using the contact details provided in this policy. We will cease processing your data unless we have compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims.

8.6 Right to Data Portability
You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
How to Exercise This Right: To request the transfer of your personal data, please contact us using the contact details provided in this policy. We will provide your data in a structured, commonly used, and machine-readable format.

8.7 Right to Withdraw Consent
If you have given us consent to process your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
How to Exercise This Right: To withdraw your consent, please contact us using the contact details provided in this policy. We will cease processing your data where consent is the sole legal basis for processing.

8.8 Right to Complain to a Supervisory Authority
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

How to Exercise This Right: You can contact the ICO via their website at https://ico.org.uk/make-a-complaint/ or by calling their helpline at 0303 123 1113.

Contact Information
For any questions about this Data Privacy Policy or to exercise any of your data protection rights, please contact us at [info@rsslcomputers.co.uk]