Privacy Notice

This Privacy Notice applies to personal data collected through our website www.miastanza.co.uk (“our site”) and when you buy products from us on our site and in our store.

This Privacy Notice is provided by Mia Stanza Limited (‘we‘ or ‘us‘). We are a ‘controller’ for the purposes of the Data Protection Act 2018 (“Data Protection Laws“).

We take your privacy very seriously.  We ask that you read this Privacy Notice carefully as it contains important information about our processing and your rights.

How to contact us

If you have any questions about this Privacy Notice, how we handle your personal data, or want to exercise any of your rights, please contact:

• Name of data protection contact: Nick Lightowler
• Address: 7 The Manor House, Beam Street, Nantwich, Cheshire, CW5 5LR
• Telephone number: 01270 628836
• Email: [email protected]

1. What personal data do we collect?

We collect and process the following personal data about you.

(a) Contact data: name and contact details where you contact us with enquiries about our site or Products;

(b) Transactional data: name, contact details, delivery address, financial data ; and

(c) Interaction data: data collected through cookies that track visits to our site and the resources that you access.

2. How is processing your personal data lawful?

We are allowed to process your personal data on the following lawful bases (which are described more in section 3 below):

Processing activity	Personal data	Lawful basis
Enquiries and correspondence – we use your data to respond to enquiries that you submit and to correspond with you to resolve your requests	Contact data	Our legitimate interest to respond to your enquiries and requests.
Surveys – from time to time we send out surveys to our customers to gather information about interests, preference and our sites and Products Taking part in surveys is optional.	Contact data	Our legitimate interest to understand feedback about our site and Products and market intelligence on customer interests. This information is not used for targeted marketing.
Fulfilling orders – we need to use your information in order to deliver Products to you.	Transactional data	Necessary to perform our contract with you.
Site improvements – we use analytical data gathered on our site to improve it	Interaction data	Our legitimate interest to monitor and improve our site
Marketing I– we will send newsletters and offers to our existing customers	Contact data	Our legitimate interest to promote our Products to existing customers. You can opt-out at any time using the link in our emails.

3. Security

All information is stored on our secure servers. Any payment transactions will be encrypted using industry standard technology.
DUnfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

4. Who do we share your information with?

We will need to share your information with other people and organisations. We will only do this when we have a legitimate legal basis for doing so and in compliance with our obligations under data protection laws.

Your information may be disclosed to other organisations in the circumstances set out below:

• Third-Party Service Providers: We use other companies to perform functions on our behalf such as customer database providers, delivery companies, bulk letter and e-mail senders, data analysts, marketing providers, payment processors, and customer service providers . Such providers will have access to personal information about you needed to perform those functions, but may not use it for other purposes. We take steps to ensure that our service providers treat your data in accordance with the law, only use it in accordance with our contract with them and keep it secure
• Business Transfers: As we continue to develop our business, we might sell or buy stores, subsidiaries, or business units. In such transactions, customer information is generally one of the transferred business assets.
• Law enforcement and legal obligations: where we are legally obliged to do so, e.g. to comply with a court order or where requested by police or other law enforcement
• To our professional advisers for example our lawyers or accountants when they need it to give us their professional advice

5. How long will we keep your data?

The table below provides details about how long we will process your data.

Data we process	How long this will be held for
Interaction data	12 months
Contact data from enquiry forms	Until the enquiry has been completed and no further responses are received for a reasonable period. If you are an existing customer, the enquiry may be added to other information that we hold about you as a customer.
Complaints data	For a period of up to 6 years after resolution of  the complaint. If you are an existing customer, the complaint and its resolution may be added to other information that we hold about you as a customer.]
Transactional data	Until you tell us that you no longer wish us to retain your order history.
Contact data for marketing	Until you tell us that you no longer wish to receive marketing material.

6. Your rights

As a data subject, you have the following legal rights:

YOUR DATA PROTECTION RIGHTS	WHAT DOES THIS MEAN?
1.      Right of access	You have the right to obtain access to your personal data we process and certain other information (similar to that provided in this Privacy Notice). This is so you are aware and can check that we are using your information in accordance with Data Protection Laws. You may ask for: ·         A copy of your information; ·         Details of the purpose for which it is being processed; ·         Details of the recipients or classes of recipients to whom it is or could be disclosed, including if they are overseas and what protections they have in place; ·         The period for which it is held (or the criteria which determines this); ·         Any information available about the source of the data; and ·         Whether we carry out any automated decision-making or profiling, and where we do information about the logic involved and the outcome or consequences of that decision or profiling. To help us find the information, please give us as much information as possible about the type of personal data you would like to see.
2.     Right to rectification	You are entitled to have your information corrected if it is inaccurate or incomplete. If you would like us to do this, please contact us (see section “How to Contact Us“).
3.     Right to erasure	This is also known as the ‘right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where: ·         You do not believe that we need your data in order to process it for the purposes set out in this Privacy Notice; ·         If you had given us consent to process your data, you withdraw that consent and we cannot otherwise legally process your data; ·         You object to our processing and we do not have any legitimate interests that mean we can continue to process your data; or ·         Your data has been processed unlawfully or have not been erased when it should have been.
4.     Right to restrict processing	You have rights to ‘block’ or suppress further use of your information. When processing is restricted we can still store your information, but may not use it further. You may request that we stop processing your personal data temporarily if: ·         You do not think your data is accurate. We will start processing again once we have checked whether or not the data is accurate; ·         The processing is unlawful but you do not want to erase your data; ·         We no longer need the personal data for our processing, but you need the data to establish, exercise or defend legal claims; or ·         You have objected to the processing because you believe that your interests should override [the companies] legitimate interests.
5.     Right to object to processing	You have the right to object to certain types of processing, including processing based on our legitimate interests and processing for direct marketing.
6.     Right to withdraw consent	If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, that does not mean anything we have done with your personal data with your consent up to that point is unlawful.) Please contact us (see “How to contact us” section) if you want to withdraw your consent.

If you would like to exercise your rights, please contact us at the details set out above.

We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months.

Please note that exceptions apply to some of these rights which we will apply in accordance with the law.

7. Changes to this privacy policy

If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures that you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.