We (We Are Magazine Ltd.) are committed to respecting and protecting the privacy of anyone using our site and the confidentiality of any information that you provide us with. The purpose of this statement is to set out how we use any personal information that we may obtain from you. We adhere to relevant legislation, including the Data Protection Act 1998 and the GDPR. Any personal data or information provided by you and which you can be identified through when using this website or our services, will only be used in accordance with this privacy statement.

Use and collection of personal information

In general, you can visit our website without telling us who you are and without revealing any information about yourself. If, however, you place an order through our site and either create an account or use guest checkout, you will be asked to provide certain information such as your contact details. We will store this data and hold it on a computer or otherwise.

What do we collect?

We collect data including your name, address, contact numbers and email address. Payment details will not be stored by us, but they may be held by the payment merchants, Stripe.

Who will see the data?

We may transfer your personal data to trusted third-party service providers, after we collect this data from you. All of our service providers are required to maintain the confidentiality and security of your personal data and to use it only in compliance with data privacy laws and for specified purposes in compliance with our instructions. Each service provider is also responsible for their use of your personal data, according to rules they set in their own privacy policies.

Here is an outline of how and why we pass your personal data to third parties, in three key areas:

Payment processing and fraud protection (Shopify) Email marketing (Mailchimp) Subscription fulfilment (Newsstand)

What do we do with the information we gather?

The data will be used to assist you with the services that you request from us, such as processing an order or sending a newsletter out to you. We may use it to contact you from time to time about our services where we have a legitimate reason to do so or where you have consented for us to contact you.

For the avoidance of doubt, the information you provide us with may only be used for the purpose for which it is supplied.

If you do not want us to use data in any way, or if you would like to unsubscribe at any time from marketing, then please contact info@lodestarsanthology.co.uk

In certain circumstances, personal data may need be disclosed to law enforcement agencies without the consent of the data subject. Under these circumstances, we will disclose the requested data after verifying the request is legitimate, seeking assistance from legal advisers where necessary.

How long do we hold information for?

We will normally delete personal data we hold if we have not had any meaningful contact with you for two years – this does not include customer accounts, and these will only be deleted if a customer does this themselves, or requests us to delete it. You can, however, ask us at any time to delete your personal data and we will do so subject to any legal restrictions on our ability to do so. We log the deletion of personal data, ensuring it is anonymous but describing how and what was removed and when this took place.

How can you control your personal information?

You are able to choose to restrict the collection or use of your personal information.

Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for marketing purposes and leave this blank.

If you have previously agreed to us using your personal information for marketing purposes, you can change your mind at any time by contacting us at info@lodestarsanthology.co.uk

Cookies

We collect information directly from you in a number of ways. One way is through our use of ‘cookies’. Most websites use cookies in order to make them work, or to work more efficiently, as well as to provide information to the owners of the website. They help us to understand how our customers and potential customers use our website so we can develop and improve the design, layout, content and function of the site. Cookies are small text files that are placed on your computer’s hard drive by websites that you visit. They save and retrieve pieces of information about your visit to the website – for example, how you entered the site, how you navigated through the site and what information and documentation was of interest to you. This means that when you go back to a website, it can give you tailored options based on the information it has stored about you on your last visit.

For more information on what cookies we use and for what purposes, please read our cookie policy. You can also find out more here about how you can decline them and opt-out from them in the future.

Security

When you submit information to us, whether via the website, or email, it is stored securely. We will use only this information to carry out the purpose for which it has been provided.

• When not required, any paper or files are kept in a locked drawer or filing cabinet

• Employees ensure paper and printouts are not left where unauthorised people could see them

• Data printouts are shredded and disposed of securely when no longer required

• When data is stored electronically, it is protected from unauthorised access, accidental deletion and malicious hacking attempts

• If data is stored on removable media, these are kept locked away securely when not being used

• Data is backed up frequently and those backups are tested regularly

• All servers and computers containing data are protected by approved security software and a firewall

We endeavour to take all reasonable steps to protect your personal information. However, we cannot guarantee the security of any data that you disclose online and we will not be responsible for any breach of security unless this is due to our negligence or wilful default.

Your rights

Under the GDPR, you have the following individual rights:

• The right to be informed

• The right of access

• The right to rectification

• The right to erasure

• The right to restrict processing

• The right to data portability

• The right to object

• Rights in relation to automated decision making and profiling

You can find out more about your rights on the ICO website. If you have any questions about these rights in relation to us, please contact info@lodestarsanthology.co.uk

General

You have the right to see personal data (as defined under the Data Protection Act) that we keep about you. Any request can be emailed to Elizabeth Schaffer info@lodestarsanthology.co.uk.

We will provide the relevant data within 28 days, unless there is a legitimate reason why it needs to take longer.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible at the above address. We will immediately correct any information found to be incorrect.

Should you wish to lodge a complaint, you have the right to do this through the Information Commissioner’s Office:

Phone: 0303 123 1113 Online contact form: https://ico.org.uk/global/contact-us/email Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF