- what information we may collect about you;
- how we will use information we collect about you;
- whether we will disclose your details to anyone else; and
- your choices and rights regarding the personal information you have provided to us.
Where we determine the purpose and means for the personal data, we are the "data controller" and the "data processor".
Please note that the Services may contain hyperlinks to services owned and operated by third parties (e.g. Paypal). These third party services may have their own privacy policies and we recommend that you review them. They will govern the use of personal information that you submit or which is collected by cookies and other tracking technologies whilst using these services. We do not accept any responsibility or liability for the privacy practices of such third party services and your use of these is at your own risk.
To provide our Services to you, we collect and process the following information which may include your personal data. "Personal data" or "personal information" means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect the following information from you:
When you access the Services via a third party social media provider such as Facebook, Google, Microsoft we may collect and store personal and non-personal information which is available on that third party social media provider, such as your name, its URL, your email address. We will also receive technical data in order to ensure the Services connect to the correct third-party account.
When you purchase anything via NST, we use a third party payment system called Paypal which transacts all our payments. We have no access to your card payment information.
We may collect personal information about users of the platform in the following way:
2.1 Directly from you - for example, through purchasing a product or submitting an enquiry.
The main purpose of processing personal information during the provision of the Service is to provide goods to you and respond to your enquiries.
Where we decide the purpose or means for the processing of the personal data that you provide when using the Services, we are the "data controller" for the purposes of Data Protection law. We have provided further detail on our lawful reason for processing your personal information below.
Performance of a contract. To perform the Services.
Pursuit of legitimate interests. In some cases, we may use your personal information to pursue legitimate interests of our own including commercial interests. For example, we need to process personal data in pursuit of our legitimate interests to:
In all instances we will ensure your interests and fundamental rights do not override those interests.
Consent. NST may also process your personal data on the basis of consent you give, for example to send you certain direct marketing communications.
Compliance with our legal obligations.
Our Services are not for intended to be purchased by children. In the event that we learn that we have collected personal information from a child under 13 years of age we will delete that information as quickly as possible.
Personal information collected and processed by NST may be shared with the following recipients, or categories of recipients, where necessary:
Information may be sent to your computer in the form of an Internet “cookie” to allow the NST servers to monitor your requirements. The cookie is stored on your computer. The NST server may request that your computer return a cookie to it. These return cookies do not contain any information supplied by you or any personally identifiable information about you.
Such measures are necessary to allow NST to measure the usability of the systems, which will help in its continuing development to ensure that we understand the requirements of our users. Your browser software should however enable you to block cookies if you wish to. For more information about cookies, please visit www.allaboutcookies.org.
We will only retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
Where we are the data controller, to determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay.
To make a request, please let us know by contacting our Data Protection Officer with the details below.
We will take all reasonable technical and organisational precautions to prevent the loss misuse or alteration of your personal information.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Please be aware that, although we endeavour to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.
Our information is stored within the EEA on secure databases.
We have appointed a Data Protection Officer to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact the Data Protection Officer: firstname.lastname@example.org
If you are unhappy with the way we are processing your personal data, please let us know by contacting us.
If you do not agree with the way we have processed your data or responded to your concerns, an alternative is to submit a complaint to a Data Protection Supervisory Authority: www.ico.org.uk
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
If you have any questions about data protection or this privacy notice, please contact us.