privacy policy

General Data Protection Regulation (EU) 2018

 

The information we collect from you

We take the issue of security and data protection very seriously and strictly adhere to guidelines published in the General Data Protection Regulation (EU) 2016/679 which is applicable from the 25th May 2018, together with any domestic laws subsequently enacted.

This notice explains what information we collect, when we collect it and how we use this.

We collect the information you provide to us when you register on the site to purchase any one of our products, including your name, gender, date of birth, e-mail address, home address (including any previous addresses), current address, and search preferences. We use this information to create a user account for you to log in on our site and for us to provide our services to you.

However, we will not share your email address with other users of the site unless you have specifically chosen to disclose it yourself. Where you have not opted out of receiving them, we will also use this information to send you any email notifications on our Special Offers.

The information we collect from you

We may also collect certain information about your visits to our website and how you use it. This may include your IP address, geographical location, browser type, referral source, length of visit, number of page views and similar information. We may use this information for a number of purposes, including website administration, optimising the use and performance of the website.

Use of your information

We will only use the personal information we collect from you in accordance with this privacy policy. We may use your information to ensure that content from the website is presented in the most effective manner for you and for the device you’re using.

Disclosure of your information

Other than as expressly set out in this privacy policy or as otherwise required or permitted by law, we will not share, sell or distribute any of the information you provide to us without your consent.

Please note the following legitimate reasons we may have to collect personal information:

  • To process customer orders efficiently and accurately
  • To validate customers as genuine
  • To dissuade fraudulent users of our web site
  • To inform customers of our latest offers and products, provided they have granted us permission to send such correspondence
  • To provide the best possible customer services and gather feedback on how we may improve our services and product range.

Please note, you can check your account information online by logging in to your Account. If you find any inaccuracies please amend them where possible or inform us via email.

We do not sell or disclose any information regarding your details to other companies or mailing lists.

If, sometime in the future you wish to revoke your option to receive email from us, you may do so via your Account or by simply contacting us.

We may use technology to track the patterns of behaviour of visitors to our website. This can include using ‘session variable cookies’ which are stored within your browser settings. You can usually modify your browser settings to prevent this from happening; however, you will be unable to complete your order online without allowing cookies. Thereafter, any cookies generated during your visit to Golds Direct can be deleted.

For more information about privacy please contact us:

Lucas Param

22 Hockerill Street

Bishop’s Stortford

CM23 2DW

+44 (0)1279 659 181

Your Rights

You have the right at any time to:

  • ask for a copy of the information about you held by us in our records;
  • enquire us to correct any inaccuracies in your information;
  • make a request to us to delete what personal data of yours we hold; and
  • object to receiving any marketing communications from us.

Should you wish to complain about the use of your information, we would ask that you contact us to resolve this matter in the first instance. You also have the right to complain to the Information Commissioner’s Office in relation to our use of your information.  The Information Commissioner’s contact details are noted below:

England:

Information Commissioner’s Office

Wycliffe House, Water Lane

Wilmslow, Cheshire, SK9 5AF

Telephone: 0303 123 1113

Email: casework@ico.org.uk

Security

When you give us information, we take steps to make sure that your personal information is kept secure and safe.

WHERE WE STORE YOUR DATA

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent un-authorized access.

OUR USE OF COOKIES AND OTHER TRACKING MECHANISMS

We and our third-party service providers use cookies and other tracking mechanisms (including tracking technologies designed for mobile applications) to track information about your use of our Website and Services. We may combine this information with other personal information we collect from you (and our third-party service providers may do so on our behalf).

Cookies.  Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Website and Services, while others are used to enable a faster log-in process or to allow us to track your activities at our Website and Service. There are four types of cookie:

Strictly necessary cookies. These are cookies that are required for the operation of our Website. They include, for example, cookies that enable users to log into secure areas of our Website.

Analytical/performance cookies. These types of cookies allow us to recognize, count the number of visitors, and see how visitors move around our Website when they are using it. This assists us to improve the way in which our Website works, for example, by ensuring that you can find what you are looking for easily.

Functionality cookies. These cookies are used to recognize you when you return to our Website. They enable the personalization of content, recognition of users, and also remember your user preferences (for example, your choice of language or region).

Targeting cookies. These cookies record your visit to our Website, the individual pages visited and the links followed. If the cookie is set by a third party (for example, an advertising network) which also monitors traffic on other websites, this type of cookie may also be used to track your movements across different websites and to create profiles of your general online behavior. Information collected by tracking cookies is commonly used to target online advertising.

The four types of cookies above will be either session cookies or persistent cookies.

Session Cookies. Session cookies exist only during an online session. They disappear from your computer when you close your browser or turn off your computer. We use session cookies to allow our systems to uniquely identify you during a session or while you are logged into the Website or Services. This allows us to process your online transactions and requests and verify your identity, after you have logged in, as you move through our Website or Services.

Persistent Cookies. Persistent cookies remain on your computer after you have closed your browser or turned off your computer.  We use persistent cookies to remember your user information, preferences and activity, to enable us to provide our services to you when you next return to our Website or Services.  We also use persistent cookies to track aggregate and statistical information about user activity, which may be combined with other user information.

Local Storage Objects. We may use Flash Local Storage Objects (“Flash LSOs”) to store your Website preferences and to personalize your visit. Flash LSOs are different from browser cookie because of the amount and type of data stored. Typically, you cannot control, delete, or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs, or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel” and follow the instructions. To see the Flash LSOs currently on your computer, choose “Website Storage Settings Panel” and follow the instructions to review and, if you choose, to delete any specific Flash LSO.

Storage HTML5 Storage.  We may also store your user information and Website preferences locally within your web browser via HTML5.

Clear GIFs, pixel tags and other technologies. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We may use clear GIFs (a.k.a. web beacons, web bugs or pixel tags), in connection with our Website or Services to, among other things, track the activities of Website visitors, help us manage content, and compile statistics about Website and Services usage. We and our third-party service providers also use clear GIFs in HTML emails to our customers, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.

Changing or Disabling your Cookie Settings. Most web browsers automatically accept cookies, but if you prefer you can edit your browser options to block them in the future.  The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.  Visitors to our Website who disable their web browsers’ ability to accept cookies will be able to browse the Website; however, most site features will not function if you disable cookies and you will not be able to login to use our services.

Do Not Track. Currently, our systems do not honor browser “do-not-track” requests. You may, however, disable certain tracking as discussed above (e.g., by disabling Cookies); you also may opt-out of Third Party Analytics or targeted advertising by following the instructions in the Third Party Ad Networks section below.

THIRD PARTY ANALYTICS

We use automated devices and applications, such as Google Analytics, VWO and Trendemon, to evaluate use of our Website and the Services. To opt-out of Google Analytics, please go to:  https://tools.google.com/dlpage/gaoptout/. Please note that if you use a new or different computer, install a new browser, or clear your cookies; in that case, you will need to re-opt-out through the link above.

We use these tools to help us improve our Services, performance and user experiences. These entities may use cookies and other tracking technologies to perform their services. These third parties may collect your device ID, IP address, or other information about your use of the Services as part of the analytics they provide to us.

THIRD-PARTY AD NETWORKS

We use third parties, such as network advertisers and other marketing agents, to display advertisements on our Website, to assist us in displaying advertisements on third party websites, and to evaluate the success of our advertising campaigns. Network advertisers are third parties that display advertisements based on your visits to our Website and unrelated third-party websites. This enables us and these third parties to target advertisements by displaying ads for products and services in which you might be interested. Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party’s specific privacy policy, not this one. We may provide these third-party advertisers with information about your use of our Website and our Services, as well as aggregate or non-personally identifiable information about visitors to our Website and users of our Service.

You may opt-out of many third-party ad networks, including those operated by members of the Network Advertising Initiative (“NAI”) and the Digital Advertising Alliance (“DAA”).  For more information regarding this practice by NAI members and DAA members, and your choices regarding having this information used by these companies, including how to opt-out of third-party ad networks operated by NAI and DAA members, please visit their respective websites: www.networkadvertising.org/optout_nonppii.asp (NAI) and www.aboutads.info/choices (DAA).

Opting out of one or more NAI member or DAA member networks (many of which will be the same) only means that those members no longer will deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our Website or other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing. Also, if your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different computer or mobile device or change web browsers, your NAI or DAA opt-out may no longer be effective. Additional information is available on NAI’s and DAA’s websites accessible by the above links.

CHANGES TO OUR PRIVACY & COOKIES POLICY

This Policy may change from time to time. Any changes in the future will be posted on our Website and, where appropriate, notified to you by email or in your “My Account” on the Website.  Please check back frequently to see any updates or changes to our Policy. We will not materially reduce your rights under this Policy without taking steps to bring such changes to your attention.

CONTACT US, QUESTIONS, UPDATING YOUR INFO, OPTING OUT

If you are a GoldsDirect customer and would like to update your information, please log into your “My Account” in order to update certain information or contact us through the contact information below. If you are not a GoldsDirect customer, but have provided us with information, and would like to update your information, you may contact us through the phone number or email address listed below. From time to time, we may email you with special offers; you may opt-out of those offers through the email or by contacting us.

DISCLAIMER

Any and all content provided on this Website or the Services, including links to other websites is provided for information purposes only and does not constitute advice, recommendation or support of such content or website. GoldsDirect makes every effort to provide true and accurate content on its Website. However, GoldsDirect provides no warranty, express or implied, of the accuracy, completeness, timeliness, or applicability of such content. GoldsDirect accepts no responsibility for and excludes all liability in connection with information provided on the GoldsDirect website, including but not limited to any liability for errors, inaccuracies or omissions.

APPENDIX 1: ADDITIONAL TERMS FOR EEA CUSTOMERS

The information below is required pursuant to the EEA law regarding privacy and data protection. The terms below apply to EEA customers in addition to the terms in the rest of the Policy.

WHEN DO WE SHARE YOUR INFORMATION

You should be aware that when sharing your information, it may be transferred to, and stored at, a destination outside the EEA.

Please note that where data is transferred outside of the EEA, non-EEA countries may not offer the same level of protection for personal data as is available in the EEA. GoldsDirect will take various measures to ensure that your data is treated securely, which may include, but not be limited to:

  • assessing the security measures taken at any place your data is transferred to;
  • having suitable contract terms in place that oblige a data processor to only process in accordance with our instructions; and
  • having monitoring, reporting and resolution procedures in place with regard to ongoing security.

Please contact us if you require more detailed information about international transfers of your information, and the particular safeguards used.

LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA

We process your information based on the following legal grounds, as recognised by and in compliance with the applicable data protection laws:

  • the processing is necessary to perform our contract with you (i.e. the Terms and Conditions that apply as applicable with respect to GoldsDirect Services, for the provision of our Services), or to take steps requested by you before entering into said contract;
  • the processing is in GoldsDirect’s or someone else’s legitimate interests, and these interests are not overridden by your interests or rights in the protection of your personal data. This may include processing your data for prevention of fraudulent activity, internal research and analytics assessments, for purposes of communication with you, and informing you about new products and services we are offering or to promote new products and services of other parties which we think may be of interest to you, etc.;
  • you have given your consent to the processing of your data;
  • the processing is necessary to meet a legal obligation which applies to GoldsDirect.

Sometimes we process data about you which the law considers to fall within special categories, in which case, we use one of the following grounds:

  • the processing is necessary for the establishment, exercise or defence of legal claims;
  • you have freely given your informed, specific consent to the processing; or
  • the processing is necessary for reasons of substantial public interest, based on applicable law.

If you would like more information about the legal grounds used to process your information, or about the legitimate interests referred to above, please contact us.

In cases where we have asked for, and you have given, your consent to our processing of your personal data, you have the right to withdraw such consent at any time.

DO YOU HAVE TO GIVE US YOUR INFORMATION?

In most cases, providing your personal data to us is optional, however, if you do not provide it, you will not be able to use our Services. For example, we need details such as your name, address and bank account details so that we can make payments to you and receive payments from you. In other cases, you have a choice over whether we collect your personal data, for example, you can turn off cookies on your browser and we will not place any cookies on your device or computer (although in this case you may not be able to use all parts of our website).

PROFILING AND AUTOMATED DECISION MAKING

We use automated decision making as part of our process to evaluate eligibility for the use of the GoldsDirect Services. We use these tools as a measure of fraud prevention and for purposes of security and risk assessment relating to the performance of the GoldsDirect Services:

Automated tools incorporated in our process of approval of your registration application: based on the information you provided, the tool may advise if additional information is required for purpose of approval of your application.

Automated tools incorporated in our process of approval of certain payment transaction of registered users: such tools may advise if additional information is required for purpose of performance of the payment transaction.

HOW LONG DO WE KEEP YOUR INFORMATION?

GoldsDirect retains your information as required by applicable laws or regulations and/or in accordance with GoldsDirect’s internal policies and procedures for purposes of prevention of fraudulent activity, risk management and security. GoldsDirect will periodically review the necessity of retention of your data.

EEA CUSTOMERS ONLY: YOUR RIGHTS

You have several rights in relation to your personal data which are described in more detail below.

Accessing your data

You can ask us to:

  • Confirm whether we are processing your personal data
  • Give you a copy of that data
  • Provide you with other information about your personal data such as what data we have, what we use it for, who we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it for, what rights you have, how you can make a complaint, where we got your data from and whether we carry out any automated decision making or profiling.
  • You do not have to pay a fee for a copy of your information unless your request is unfounded, respective or excessive, in which case we will charge a reasonable amount in the circumstances. We will let you know of any charges before completing your request.
  • We aim to respond to you within 1 (one) month of receiving your request unless it is particularly complicated or you have made several requests, in which case we aim to respond within 3 (three) months. We will let you know if we are going to take longer than 1 (one) month in dealing with your request.  If we have a lot of information about you we might ask you if you can tell us what exactly you want to receive.  This will help us action your request more quickly.

Correcting your data

You can ask us to correct any data which is inaccurate or incomplete.  This is free of charge.

If we have shared the data with anyone else, we will tell them about the correction wherever possible.  We aim to deal with requests for correction within 1 (one) month, although it might take us up to 3 (three) months if your request is particularly complicated.

If we cannot action a request to correct your data, we will let you know and explain why this is.

Erasing your data

This right is sometimes referred to as “the right to be forgotten”.  This is not an absolute right but you have the right to have your data erased, free of charge, in certain circumstances.

You can ask for your data to be erased where:

  • it is no longer necessary for the purpose for which it was originally collected or processed;
  • we are processing your data based on your consent, and you withdraw that consent;
  • you object to the processing and we do not have an overriding legitimate interest for continuing;
  • your data has been unlawfully processed;
  • your data must be erased to comply with a legal obligation;
  • the data was processed to offer information society services to a child.

There are some exceptions to this right.  If one of these applies, we do not have to delete the data.

If we have shared your data with third parties, we will tell them about the erasure of your data unless this is impossible or would involve disproportionate effort.

Restricting the processing of your data

You can ask us to restrict the processing of your personal data in some circumstances, free of charge.  This is not an absolute right.  If processing is restricted we can store the data and retain enough information to make sure the restriction is respected, but we cannot further process your data.

You can restrict the processing of your personal data in the following cases:

  • if you contest the accuracy of your data, we will restrict processing until we have made sure the data is accurate;
  • if you object to our processing and we are considering this objection;
  • if the processing is unlawful but you do not want us to erase your data;
  • if we no longer need the personal data but you require the data to establish, exercise or defend a legal claim.
  • If we have disclosed the data to a third party, we will inform them about the restriction unless it is impossible or would require a disproportionate effort. We will tell you if we decide to lift a restriction on processing your data.

Objecting to the processing of your data

Objecting to the processing of your data is free of charge.  It is not an absolute right but you can object to our processing of your data where it is:

  • based on the legitimate interests ground; or
  • for the purposes of scientific/historical research and statistics.

We will stop processing your personal data unless we have compelling legitimate grounds for the processing which override your interests and rights, or unless we are processing the data for the establishment, exercise or defence of legal claims.

You can require us to stop using your data for direct marketing purposes.  We will stop as soon as we receive your request.  There are no exemptions or reasons for us to refuse.

Data Portability

This allows you to obtain and reuse your personal data for your own purposes across different services.  It applies where the following conditions are met:

  • you provided the personal data to us yourself;
  • we are processing the data either based on your consent or because it is necessary for the performance of a contract; and
  • the processing is carried out by automated means.

We will provide your data free of charge in a structured, commonly used and machine-readable form.  We aim to provide your data within 1 (one) month of receiving your request unless it is particularly complicated or you have made several requests, in which case we aim to respond within 3 (three) months.  If we are going to take longer than 1 (one) month we will let you know and explain why we need more time.  If we consider that we cannot provide you with your data, we will contact you and explain why this is.

Automated decision making and profiling

You have the right not to be subject to a decision which is based on automated processing and which produces a legal (or similarly significant) effect on you.

We will tell you about any automated decision making that affects you.  You have the right to:

  • request human intervention;
  • express your point of view;
  • ask for the decision to be explained; and
  • challenge the decision.

These rights are not absolute.  They do not apply if the decision is:

  • necessary for us to enter into or perform a contract with you;
  • authorised by law (e.g. for fraud prevention); or
  • based on your explicit consent.

We may change this policy from time to time by updating this page, and you should check this page as you reuse this website to ensure that you are happy with any changes.

We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email or postal address which you have provided.

We may ask you for feedback on the services we have provided.

Many thanks and thank you for using our website.