Introduction
Blue & More Ltd (Blue & More) respects your privacy and is committed to protecting your personal data. This privacy notice tells you how we look after the information you may provide to us about yourself in your dealings with us, both online and offline.
1. Purpose of this notice
This privacy notice explains our approach to any information about yourself that you might supply to us (or that might be collected from you) in your interactions with us which contains personal data and sets out your rights in respect of our processing of your personal data.
This privacy notice is intended to help you make informed decisions when using our website, resources and in your other interactions with Blue & More. Please take a moment to read and understand it. Use of our website is also subject to Our Terms of Use, Acceptable Use Policy and Cookies Policy, which should be read in conjunction with this privacy notice.
Please also note that this privacy notice only applies to the use of personal data collected by Blue & More during your communications with us, as general enquiry or working with us in some capacity i.e. as a Client, third-party supplier, if we hold an event with you in some capacity, etc. It also applies to any communications with our carefully selected service providers that we rely on to carry out some of our activity, but it does not apply to personal data collected during your communications with third parties.
2. Who are we and what do we do?
Blue & More is a design agency and we are associated with
References to (“we” “us” or “our”) in this privacy notice are references to Blue & More Ltd.
Blue & More Ltd registered number 11986633.
Who’s registered office is at No.19 Leyden Street, Unit A, London E1 7LE, United Kingdom. However, all enquires should be addressed to Blue & More Ltd in the first instance (see section 3 below).
3. How to contact us?
If you have any questions about this privacy notice or want to exercise your rights (see How to access your information and your other rights? (Point .14), you can contact Blue & More Ltd by writing to Blue & More, No.19 Leyden Street, Unit A, London E1 7LE or for a more speedy and direct response, by using our website contact form.
4. When do we collect personal data?
We collect personal data about you in various different circumstances, most of which involve direct interaction between you and us, but some of which do not.
We collect personal data about you:
- When you engage with us on social media.
- When you contact us by any means with general queries, complaints etc.
- When you ask us to send you information.
- When you choose to complete any surveys, we send you.
- When you agree to provide any service to us.
- When you comment on or review our information.
- Any individual may access personal data related to them, including opinions. So, if your comment or review includes information about a member of our team that you dealt with, it may be passed on to them if requested.
- When you fill in any forms. For example, a contact form.
- When you’ve given a third-party permission to share with us the information they hold about you.
- From publicly-available sources (such as Companies House, the Electoral Register or the Land Registry) when you have given your consent to share information or where the information is made public as a matter of law.
5. What sort of personal data do we collect?
Personal information may be collected from you in the following ways:
- Information you voluntarily provide to us.
We collect and maintain personal data that you voluntarily submit to us during your use of our website and your other interactions with us (e.g. when registering to receive information from us, during the course of correspondence and conversations with us, as part of any user support interactions, if you participate as a member of Blue & More, or if you communicate with us via social media.
In particular, via our website, by email or by phone we request the following personal information from you:
- name;
- company name (if applicable);
- title;
- address (home/office);
- email address;
- phone number.
If you contact us, we may collect additional personal data from you such as your opinion on our resources and/or our activity, with specific reference to Blue & More.
- Information we collect through your use of our website.
Through our use of cookies, log files and other technologies, we may collect personal data regarding your mobile device or the computer hardware and software used to access our website. This may include the following:
IP address ofdevice (s) used;- browser type;
- operating system and device type;
- approximate location (e.g. Manchester, London etc);
- access times and dates; and
referring website addresses.
We also collect personal data regarding your use of and activity on our website.
This personal data allows us to deliver more helpful information, services and tools. Please see our cookie policy for further information.
- Information we collect from third parties.
We may also combine personal data that we collect through your interactions with us with personal data that: a) you have provided to third parties and in respect of which you have given the third-party permission to share with us; and/or b) we have obtained from a public record.
6. What legal grounds do we have for using your personal data?
We will only use your personal data where the law allows us to. Under data protection law, there are various grounds (also referred to as lawful basis or legal basis) on which we can rely when processing your personal data. In some contexts more than one ground applies. We have summarised the applicable grounds under GDPR to us as Contract, Legal Obligation, Legitimate Interests and Consent and outline what those terms mean in the following table:
| Term | Ground for processing | Explanation |
|---|---|---|
| Contract | Processing is necessary for performance of a contract with you or to take steps at your request to enter a contract | This covers carrying out our contractual duties and exercising our contractual rights. |
| Legal Obligation | Processing is necessary to comply with our legal obligations | Ensuring we perform our legal and regulatory obligations. |
| Legitimate Interests | Processing is necessary for our or a third party’s legitimate interests | We or a third party have legitimate interests in carrying on, managing and administering our respective businesses effectively and properly and in connection with those interests processing your data. Your data will not be processed on this basis if our or a third party’s interests are overridden by your own interests, rights and freedoms. |
| Consent | You have given specific consent to processing your data | Generally, we rely on consent as a legal basis for processing your personal data only to send you information about Blue & More via email or text message which you have not specifically asked us for. You have the right to withdraw consent to us sending you this information at any time by contacting us (see How to contact us? (Point .3). |
7. How and why do we use your personal data?
We have set out below a description of the ways we use your personal data, and which of the lawful grounds for processing we rely on to do so.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us (see How to contact us? (Point .3) if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
| Purpose / Activity | Ground for Processing |
|---|---|
| To register you as a user, client or supplier of Blue & More | Legitimate Interests |
| By providing us with a testimonial, reference and/or providing us with other information about your activities which support the services provided by us | Consent, and or Legitimate interests, and or Contract |
| To respond to your communications with us e.g. a general enquiry | Legitimate interests |
| To manage our relationship with you which will include (a) notifying you about changes to our terms or privacy notice (b) | Legal obligation Legitimate interests |
| To enable you to take part in the services we offer and provide, events and workshops, competitions or complete a survey | Legitimate interests Contract |
| To administer and protect our organisation, our staff or team of volunteers, run the events and services we provide, including our daily activities and our website. | Legitimate interests Legal obligation |
| To deliver relevant content and other information and measure or understand the effectiveness of the information we send to you | Legitimate interests Consent |
| To use data analytics to improve our website, information, resources and user relationships and experiences | Legitimate interests |
| To make suggestions and recommendations to you about information that would be of interest to you with | Legitimate Interests |
8. Communications from us
Communications from us will only be provided under consent, legitimate interest or contractual requirements. We will never provide your details to a third-party in any way, unless you specifically ask us to.
Third-party marketing
We will never share your personal data with any company for marketing purposes.
Opting out
You can ask us to stop sending you communications about Blue & More at any time by contacting us at any time.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you would like an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us (see How to contact us? (Point .3).
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal ground which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
9. Use of cookies
Our website may use certain cookies, pixels, beacons, log files and other technologies of which you should be aware. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly. Please see our cookies policy to find out more about the cookies we use and how to manage and delete cookies.
10. Third party links and services
Our website may contain links to third party websites and services. Please remember that when you use a link to go from our website to another website or you request a service from a third party, this privacy notice no longer applies.
Your browsing and interaction on any other website, or your dealings with any other third-party service provider, is subject to that website’s or third-party service provider’s own rules and policies.
We do not monitor, control, or endorse the privacy practices of any third parties.
We encourage you to become familiar with the privacy practices of every website you visit or third-party service provider that you deal with and to contact them if you have any questions about their respective privacy policies and practices.
This privacy notice applies solely to personal data collected by us through our website and does not apply to these third-party websites and third-party service providers.
11. Transfers outside the EEA
The remit of our organisation is within Great Britain, and so there is generally no need for us to transfer your personal data outside the EEA. However, a small number of our external third-party providers (such as DropBox, third-party plugins on our website, and/or website providers, may use services that use services outside Europe). So, their processing of your personal data may involve a transfer of data outside the EEA.
However, whenever we or a third-party provider transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- We may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
- Where we use providers based outside the EEA, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and countries outside the EEA.
12. How long do we keep your personal information for?
We will only keep your personal data for as long as is necessary for our purposes. In considering how long to keep personal data, we will take into account its relevance to our business and our legal and regulatory obligations.
Contact us (see How to contact us? (Point .3) if you would like to see a copy of our retention policy, which contains more information
13. Confidentiality and security of your personal information
We are committed to keeping the personal information you provide us secure and we will take reasonable precautions to protect your personal information from loss, misuse or alteration.
We have implemented information security policies, rules and technical measures to protect the personal information that we have under our control from:
- unauthorised access;
- improper use or disclosure;
- unauthorised modification; and
- unlawful destruction or accidental loss.
All those responsible in the day to day management of Blue & More, who have access to, and are associated with the processing
14. How to access your information and your other rights?
You have the following rights in relation to the personal information we hold about you:
- Your right of access
If you ask us, we’ll confirm whether we’re processing your personal data and, if so, provide you with a copy of that personal data (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.
- Your right to rectification
If the personal data we hold about you is inaccurate or incomplete, you’re entitled to have it rectified. If we’ve shared your personal data with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
- Your right to erasure
You can ask us to delete or remove your personal data in some circumstances such as where we no longer need it or you withdraw your consent (where applicable). If we’ve shared your personal data with others, we’ll let them know about the erasure where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
- Your right to restrict processing
You can ask us to ‘block’ or suppress the processing of your personal data in certain circumstances such as where you contest the accuracy of that personal data or object to us processing it. It won’t stop us from storing your personal data though. We’ll tell you before we lift any restriction. If we’ve shared your personal data with others, we’ll let them know about the restriction where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
- Your right to data portability
You have the right, in certain circumstances, to obtain personal data you’ve provided us with (in a structured, commonly used and machine-readable format) and to re-use it elsewhere or ask us to transfer this to a third party of your choice.
- Your right to object
You can ask us to stop processing your personal data, and we will do so, if we’re:
- relying on our own or someone else’s legitimate interests to process your personal information except if we can demonstrate compelling legal grounds for the processing;
- processing your personal data for direct marketing; or
- processing your personal data for research unless such processing is necessary for the performance of a task carried out in the public interest.
- Your rights in relation to automated decision-making and profiling
You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, and it produces a legal effect or similarly significantly affects you unless such profiling is necessary for entering into, or the performance of, a contract
- Your right to withdraw consent
If we rely on your consent as our legal basis for processing your personal data, you have the right to withdraw that consent at any time (see How to contact us? (Point .3).
- Your right to lodge a complaint with the supervisory authority.
If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal data, you can report it to the UK Information Commissioner’s Office (ICO). You can find details about how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.
15. Changes to this privacy notice
We may make changes to this privacy notice from time to time and you should tell us if your information changes.
16. Changes to your information
It is important that the personal data we hold about you is accurate and current. Please tell us of your personal data changes during your relationship with us (see How to contact us? (Point .3).
This Policy was last updated: CF 26th July 2019 v 2.0.0