Privacy Policy

What information do we collect?

To enable you to purchase goods from us, we need to collect certain personal information from you when you make a purchase, contact us or interact with us.

We only ever collect information that is necessary for us to be able to process payments for your orders and to be able to deliver your products to you. We may also collect certain information when you contact or interact with us by way of email or by using the website 'contact' enquiry form. We will keep your information for as long as is needed and only for the following purposes:

• legitimate business activities
• statutory or legal obligations
• auditing and regulatory purposes

When you make a purchase or an enquiry about any of the products we offer, we will require you to provide us with certain information. This may include some or all of the following:

• full name
• billing address
• delivery address
• landline or mobile phone number
• email address

The information we hold is always visible to you when you log in on the website and visit to the 'Account' section accessible from the top of the page or home page. The specific information, including billing and delivery addresses for each order are accessible through the orders in the account section. You can update your personal details and email preferences through this page at any time, although historical order address and billing information cannot be changed as this is required for legitimate business purposes.

We do not share or pass any of your information on to any third parties and your information is always securely stored in our systems.

When you visit our website, we will collect certain data automatically. This may include (but isn’t limited to) the following:

• your IP address
• your device screen resolution
• information about your browser software
• geolocation data such as the city or region to which your IP address is allocated

We will also place cookies on your device in order to enable you to browse and make purchases from the website. Please see our Cookie Policy on the website for further details.

Please remember, that whilst we make every effort to secure your personal information, the internet is not 100% secure. We cannot guarantee the security of any information you send us online. We are also not responsible for any loss or damage you or others may suffer as a result of losing the confidentiality of your information.

How do we use the information we collect?

We use your information in order to be able to process payment for goods purchased from the website and in order to be able to despatch purchased goods to you. We will also contact you with emails confirming that an order has been received and emails advising of status updates to your orders along with despatch information to enable you to track the arrival of your purchases where applicable.

Where your information has been collected as a result of your making an enquiry by way of email, telephone or the website contact form, we will use your information to contact you with a response to your enquiry.

Where you have indicated by way of signing up to our newsletter by subscribing on the website, or by opting in to receive marketing and promotional material at the checkout, we will use your personal data to contact you with newsletters and/or promotional material we believe may be of interest to you. Occasionally we may run prize draws, competitions, promotions and surveys. If you take part in these promotional activities, we’ll use the personal data you provide for these activities.

We may use performance tracking technology within our emails to capture information including (but not limited to) the time and date you open our emails and the type of device you used to open them. This allows us to determine if our emails are opened, and what links our customers click on within them. We use this information to improve the emails we send to our customers and the services we provide.

If you do not wish to receive newsletters or emails containing promotional materials from us as explained above, you can update your preferences by logging into your account and updating your preferences. If you are not registered for an account with us, you can unsubscribe from the newsletter by clicking on the 'unsubscribe' link displayed at the top and bottom of each newsletter.

What are the legal grounds for collecting and using your information?

Data protection laws require that in order to collect and process your personal data, we must have a legitimate reason for doing so. These reasons can be any one or more of the following:

• to fulfil a contract we have with you
• if we have a legal duty to use your data for a particular reason
• when you consent to it
• when it is in our legitimate interest

Contract
We use the basis of contract because you provide us with your personal data in order to make purchases from our website. Our use of your information is therefore governed by contract terms. You choose to provide us with this information - if you choose not to provide it, you will not be able to make purchases from our website.

Under the basis of contract we process your data for the following purposes:

• enabling you to access our website and purchase our products
• advising you about significant changes to our products, terms or privacy policy
• providing customer support
• sending you service related communications
• responding to enquiries and complaints
• managing competitions and promotions

Consent
When we collect other information from you, we will seek your consent. An example of this would be when you use our website, we will seek your consent to placing one or more cookies on your device to enable you to make purchases from the website. If you do not want to give consent, or you remove your consent at a later point, we may not be able to provide some of the functionality that you require.

We will also seek your consent in the following circumstances:

• Marketing and promotional material – from time to time we would like to let you know about products, promotions and offers that may be of interest to you
• Prize draws and competitions – occasionally we run competitions and prize draws for our customers. In order to be included in these offers, we would require your consent

Legitimate Interests
Legitimate interests are our business and/or commercial reasons for using your data. In the United Kingdom, the law allows this where the benefits of doing this are not outweighed by the interests or fundamental rights or freedoms of the individuals concerned.

Under the basis of Legitimate interests, we process personal data for the following purposes:

• in order to comply with legal and regulatory requirements - as a business we have an obligation to maintain records for company and tax reporting purposes
• maintaining our records and other administrative purposes - to enable us to maintain up-to-date and accurate details
• for the resolution of complaints and disputes - in the event of complaints or problems, we can investigate to resolve issues for our customers
• marketing purposes - in order to grow our business and deliver better service to our customers, we use information to market products. We ensure that customers can access the information that we hold and that they can clearly understand how we use that data. We also ensure that you have the right to correct or restrict that information and how to complain if you are unhappy about how we use your data.
• tracking website activity - this helps us to understand how our customers use our website and enable us to identify ways to improve our user experience
• email tracking - this helps us to improve the way that we communicate with our customers in order to better meet their needs
• staff training - to enable our staff to offer the bets possible standard of service we use the information that we collect to train our staff

What are your rights?

You have the right to be informed about the collection and use of their personal data. We do this in our website Policy document.

You have the right to access your personal data and supplementary information, and to amend and correct such data.

If you are a registered customer on our website, this can be done by logging into your account on the website and visisting the 'Account' section where you can view and amend all the personal information that we hold on you.

If you are not registered as a customer on the website, you have the right to obtain
    confirmation that your data is being processed
    access to your personal data
    other supplementary information

You have the right to have your personal data erased if:

• the personal data is no longer necessary for the purpose which it was originally collected
• we rely upon consent as the lawful basis for holding the data and you withdraw consent
• we rely upon legitimate interests as the lawful basis for processing, and you object to the processing of your data and there is no overriding legitimate interest to continue this processing
• we are processing your personal data for direct marketing purposes and you object to that processing
• we have processed your personal data unlawfully
• we have to do it to comply with a legal obligation

The right to erasure does not apply where processing is necessary for one of the following reasons:

• to exercise the right of freedom of expression and information
• to comply with a legal obligation
• for the performance of a task carried out in the public interest or in the exercise of official authority
• for the establishment, exercise or defence of legal claims

We will not charge for initial requests to provide information, but may charge a fee if requests for further copies of the same information are made. We will provide the requested information to you within a month of receiving your request.

Where a request is unjustified or excessive, particularly if it is repetitive, we may charge a fee to provide the information requested or refuse to respond. In such cases, we will inform you and explain our reason.

Before we proceed with any request, we will take steps to verify the identity of the person making the request.

To exercise any of your rights detailed above you can contact us as detailed below:

In writing:

Data Protection Officer
ASL
PO Box 803
Ipswich
IP3 8XZ
Suffolk
United Kingdom

Email: info@attitude-smoking-lounge.com

Call: 01473 270 050
         +44 1473 270 050

We take the privacy of your personal information very seriously. If you ever feel you need to complain about how we’ve handled your personal information and data you can contact us as follows:

In writing:

Complaints Department
ASL
PO Box 803
Ipswich
IP3 8XZ
Suffolk
United Kingdom

Email: info@attitude-smoking-lounge.com

Call: 01473 270 050
         +44 1473 270 050

How long to we keep your data?

We keep your data only for as long as we need it. How long we need data depends on what we are using it for, whether that is to provide services to you, for our own legitimate interests (described above) or so that we can comply with the law.

We will regularly review the information we hold and when there is no longer a customer, legal or business need for us to hold it, we will either archive it securely or delete it entirely.

We protect your personal data against unauthorised access, unlawful use, accidental loss, corruption or destruction.

We use technical measures such as encryption and password protection to protect your data and the systems they are held in. We also use organisational measures and controls to restrict and limit the number of people who have access to any personal information.

We constantly review these security measures and refer to industry security standards to keep up to date with current best practice.

Please remember, that whilst we make every effort to secure your personal information, the internet is not 100% secure. We cannot guarantee the security of any information you send us online. We are also not responsible for any loss or damage you or others may suffer as a result of losing the confidentiality of your information.

We reserve the right to change our Privacy Policy at any time in accordance with any existing or future privacy and/or data protection laws and regulations. Please review this policy regularly for any updates.