C1000 Stitches is an authorised supplier of MoD products with the relevant licenses in place. We handle orders for both small and medium-sized businesses and private companies.
As an essential part of our business and what we do, data is collected and managed by us. We observe the UK data protection legislation, and are committed to protecting and respecting customers’ privacy and rights. Specifically, we act as a “Data Controller” in respect of the information gathered and processed by us.
In order that you are reliably informed about how we operate, we have developed this privacy notice (also known as a Fair Processing Notice or FPN), which describes the ways in which we collect, manage, process, store and share information about you as a result of you visiting this site. The privacy notice also provides you with information about how you can have control over the use of your data.
If you have any comments or queries over the data we have and how it is used, please contact us as email@example.com
What Information Do We Collect About You?
In general terms, we seek to collect information about you so that we can:
- Administer our relationship with you, provide services and respond to enquiries
- Deliver requested information to you about our services and our subsidiaries
- Ensure the billing of any procured services and obtain payment
- Process and respond to any complaints
- Enable us to meet our legal and other regulatory obligations imposed on us
- Audit usage of our websites.
The information that we require for these purposes is known as your “personal data”. This includes your name, home address, email address, telephone and other contact numbers and financial information. We collect this in a number of different ways. For example, you may provide this data to us directly online or over the telephone, or when corresponding with us by letter.
We do not process sensitive classes of information. For example:
- Physical or mental health details, and
- Racial or ethnic origin.
How Will We Use The Information?
We use the data collected from you for the specific purposes listed in the table below. Please note that this table also explains:
- The legal basis for processing your data, linked to each processing purpose; and
- In what circumstances your data will be shared with a third party organisation.
Purpose for processing data
Purpose – To administer our relationship with you, provide services and respond to enquiries.
Why? To meet the requirements of any contract.
Purpose – To ensure the billing of any procured services by you and obtain payment.
Third party organisation – Government VAT and tax inspectors, external auditors, internal auditors.
Why? To ensure the billing of any goods by you and obtain payment for such goods.
Purpose – To process and respond to complaints.
Why? To meet a legal obligation.
Purpose – To monitor and record information relating to the use of our services, to include our website.
Why? To meet a legitimate interest in order to improve the services and experience and website for individuals
Purpose – To ensure the offices and its stored information is secure we use CCTV services.
Why? To meet the requirements of a contract.
Under the terms of data protection legislation, you have the following rights as a result of using this website:
Right to be Informed
This privacy notice, together with our Cookies Policy, fulfils our obligation to tell you about the ways in which we use your information as a result of you using this website. From time to time, we may contact you for further guidance to ensure your order meets your needs. This maybe in the form of a text, WhatsApp message, email or telephone call. If you do not wish at any time for us to contact you, please email us at Info@C1000Stitches.co.uk
Right to Access
You have the right to ask us for a copy of any personal data that we hold about you. This is known as a “Subject Access Request”. Except in exceptional circumstances (which we would discuss and agree with you in advance), you can obtain this information at no cost. We will send you a copy of the information within 30 days of your request.
To make Subject Access Request, please email us: firstname.lastname@example.org
Right to Rectification
If any of the information that we hold about you is inaccurate, you can either:
- Contact us on 020 3633 0085
- Contact us: email@example.com
Right to be Forgotten
From 25 May 2018, you can ask that we erase all personal information that we hold about you. Where it is appropriate that we comply, your request will be fully actioned within 30 days. For further information, please contact 020 3633 0085 or alternatively, please email us firstname.lastname@example.org
Right to Object
You have the right to object to:
- The continued use of your data for any purpose listed in section 3 above for which consent is identified as the lawful basis for processing i.e. you have the right to withdraw your consent at any time.
- The continued use of your data for any purpose listed in section 3 above for which the lawful basis of processing is that it has been deemed legitimate.
Right to Restrict Processing
If you wish us to restrict the use of your data because
(i) you think it is inaccurate but this will take time to validate,
(ii) you believe our data processing is unlawful but you do not want your data erased,
(iii) you wish to object to the processing of your data, but we have yet to determine whether this is appropriate, please contact us: email@example.com
Right to Data Portability
If you would like to move, copy or transfer the electronic personal data that we hold about you to another organisation, please contact us at firstname.lastname@example.org
Rights Related To Automated Decision-Making
If you would like to object to automated decision making without any individual involvement, and to the profiling of your data, please contact us at email@example.com
Is the processing of information likely to cause individuals to object or complain?
C1000 Stitches is not aware of any justifiable reasons that would constitute a legitimate reason for objecting or complaining about the way we process or control information.
How long will we retain Information for?
C1000 Stitches will typically retain information for a period of seven years. This is due to regulatory reasons and to ensure our business records are adequate to maintain the requisite levels of insurance to protect our clients and non-clients.
EEA personal data is received and initially processed by Shopify's Irish
entity, Shopify International Ltd.
EEA to Canada
Data is exported from the EEA to Shopify’s Canadian parent entity,
Shopify Inc. This export takes place within Shopify’s corporate structure.
Data within Shopify Inc. is protected under PIPEDA, Canada’s private
sector privacy legislation, which is considered adequate under the GDPR.
Shopify Inc. uses a combination of data centers and cloud service
providers to store this personal data in the United States and Canada.
When personal data is transferred to the United States, it is either done so
through the EU-U.S. and Swiss-U.S. Privacy Shield, for Shopify’s own
storage, or through contractual data protection addenda (DPAs) with
third-party service providers. The EU-U.S. and Swiss-U.S. Privacy Shields
are also considered adequate under the GDPR. Shopify’s Privacy Shield certification statement can be found on PrivacyShield.gov.15 further information can be found in the following link Shopify GDPR
Data Privacy and Security
C1000 Stitches and our website suppliers maintain a comprehensive data management work programme, which includes processes for ensuring that data protection is a key consideration of all new and existing IT systems that hold personal data. Where any concerns, risks or issues are identified, we conduct relevant impact assessments in order to determine any actions that are necessary to ensure optimum privacy.
We also maintain an active information security work programme which seeks to protect the availability, confidentiality and integrity of all physical and information assets. Specifically, this helps us to:
- Protect against potential breaches of confidentiality;
- Ensure all IT facilities are protected against damage, loss or misuse;
- Increase awareness and understanding of the requirements of information security, and the responsibility of our colleagues to protect the confidentiality and integrity of the information that they handle; and
- Ensure the optimum security of this website.
Location Tracking Via Our Website
Geo-location tracking, which shows us where you access our website, is not used on this website.
Questions and comments regarding this Privacy Notice are welcomed, and should be sent to firstname.lastname@example.org.
You can also contact us if you have any concerns or complaints about the ways in which your personal data has been handled as a result of you using this website.
Alternatively, you have the right to lodge a complaint with the Information Commissioner’s Office who may be contacted at Wycliffe House, Water Lane, Wilmslow SK9 5AF or https://ico.org.uk
For personalised embroidery or printing request, it is the purchaser's responsibility to seek permission to use any images (copyright / trademark), if not their own.
C1000 Stitches does not take any responsibilty for gaining or requesting permission on the purchaser's behalf for the use of any logo / badges not directly supplied by us.
This website and its contents are copyright of C1000 Stitches - © C1000 Stitches 2019. All rights reserved.
Any redistribution or reproduction of part or all of the contents in any form is prohibited other than the following:
- you may print or download to a local hard disk extracts for your personal and non-commercial use only
- you may copy the contents to individual third parties for their personal use, but only if you acknowledge the website as the source of the material
You may not, except with our express written permission, distribute or commercially exploit the contents. Nor may you transmit it or store it in any other website or other form of electronic retrieval system.