Privacy Policy

INTRODUCTION AND PURPOSE OF THIS DOCUMENT

This is the privacy policy of Brookmark Limted and its subsidiary (referred to as “Storm Graphics”). Our website address is: www.stormgraphics.co.uk. We respect your privacy and are committed to protecting your personal data.

The purpose of this privacy notice is to give you information on how Storm Graphics collects and processes your personal data:

(a) through your use of any website operated by Storm Graphics, including any data you may provide through such website when you register, log-in, sign up to our services, purchase a product or service or take part in any promotion; and

(b) when you deal/interact/communicate with Storm Graphics through any channel (via our systems, by email, post, phone, other electronic communications or otherwise) as a customer, supplier or service provider (actual or potential), or in any other capacity (although potential and actual candidates or employees are subject to separate privacy policies); and also tells you about your privacy rights and how the law protects you.

Our data promise

We promise that we will tell you how we’ll use your data to improve the service and prices we provide to you and your business. We promise to collect and store your data securely and we give you the ability to control how we use it.

Data we collect from you

We only collect and retain the personal data we need for as long as we need it. “Personal data” refers to data that lets us identify you as an individual, either on its own or by using it in combination with our data sources.

We do typically need to store the name, address, email and telephone number, as well as any content you provide when you request a quotation, place an order, request a catalogue, sign up for our newsletter, or similar, in order to provide the service you are requesting. As we are a business-to-business retailer, most of the personal data we collect is usually associated with your business, but might include your home address, personal email or personal mobile phone number if you provided them instead.

We do not store sensitive data, such as credit card details, so you will need to provide these each time you order.

Examples of personal data we may hold

Your data is stored both on-site, where access is restricted to authorised persons, and off-site where it may be stored in backups or passed to essential third parties, such as payment providers, accountants or couriers who require it to handle your order or payment. The period for which we retain your data depends on the nature of the data collected.

Uploaded media

We will store and have access to any medias you choose to upload when requesting a product or service from us in order for us to deliver the products and/or service as required. When uploading images to the website, you should therefore avoid uploading images with embedded location data (EXIF GPS) included.

To comply with the law

In many cases we have a legal obligation to retain some of your data, especially any history of financial transactions and credit with us, for auditing purposes. In certain cases, we may also be asked to provide data for legal purposes and to protect our business interests.

How we use personal data

We comply with the General Data Protection Regulations (GDPR), which allow us to lawfully use your data on grounds of legitimate interest, rather than specific consent. As always, we give you control over your data and how it is used, and you are free to opt-out if you wish.

Third parties

Sometimes we may need to let a third party have access to certain data (such as to allow our courier to deliver to you, or to process your transaction) but we are very careful about who we let near your data, how they can use it and how that data is transferred securely. We might also pass your details to authorised third parties to allow you to give us feedback on our service so we can improve the level of service we provide.

Articles on this site may include embedded content (e.g. videos, images, articles, links, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Marketing

We may send you direct or email marketing communications after you place an order, request a quotation, or request a copy of our catalogue, or if you sign up for updates. We may combine your personal data with your purchase history to make this content more relevant to your business. We may use the data you provide us with to let you know about our services or keep you updated on additions to our range or other offers.

If you would like to stop receiving marketing from us, you can do so in several ways. For emails, you can click the unsubscribe link found in the footer of every marketing email we send, or you can change your email preferences in the My Account section. You can’t unsubscribe from our non-marketing transactional emails as we need to use these to keep you informed about the delivery of your goods. For direct mail, such as our brochures, please contact us at info@stormgraphics.co.uk and we will be happy to change your marketing preferences.

Please note that it can take a couple of weeks for you to stop receiving marketing due to the time it takes to produce mailing lists and print envelopes.

To manage our relationship with you

Sometimes we might need to contact you for operational or administrative reasons. For example, we may need to get in touch if there’s been a problem or delay with your order, an issue with your payment, or to let you know that your online quotation is ready. These communications are essential to provide the service you requested and are not for marketing purposes, so you’ll continue to receive them even if you opt-out of marketing communications.

To protect our business interests

We need to maintain some data to protect our business interests. For example, we may collect your IP address and other details about security checks you pass or fail to ensure that we protect against fraud. We may also use your data for statistical and marketing analysis and to ensure we provide an effective service to you and other customers.

What are legitimate interests?

ICO guidelines state that legitimate interests are one of the six lawful bases for processing personal data. Legitimate interests allow a business to process your data without specific consent when there is a relevant and appropriate relationship between the business and the individual. Many businesses use legitimate interests as a way of marketing to their customers without specific consent by making this transparent and providing customers with the opportunity to opt-out if they wish. As outlined in this Privacy Policy, we are transparent about the data we hold, how we use it, who we share it with and how you can opt-out. You can find out more about legitimate interests at the Information Commissioner’s Office website ico.org.uk

Accessing the data we hold

You have the right to request access to the data file held on you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. To obtain a copy of the data we hold upon you, please contact us in writing. For security reasons, you will be asked to provide proof of identity.

For further information, please contact us at info@stormgraphics.co.uk and we will provide an application form including the requirements you will need to fill in order for us to release this confidential information.

How we look after your data

We take the appropriate technical and operational measures to protect your data against unauthorised access. One of the main ways we protect the personal data we hold is to limit what we collect and store to the essential data required to provide an effective business service. Only authorised staff are able to access your personal data and we only share data with third parties when required to do so for operational, business or legal purposes.

We are compliant with the Payment Card Industry Data Security Standard (PCI DSS) guidelines and use advanced security technologies and adopt strict security policies to help protect against breaches of card data. We use strong encryption on our website to ensure the data you submit is encrypted enroute. We will also never store your card details on our website.

How we use cookies

We use cookies to improve the user experience and allow the site to function, in-line with other websites. These text files are stored in your browser and hold information, such as your basket contents so that you’re able to shop easily. We also use other cookies to help us improve the site and our marketing to make your shopping experience better. Our cookies include functional “session-based” cookies which allow you to use the site; analytics cookies to help us anonymously monitor and improve the customer experience; and anonymous cookies to help us measure the performance of our marketing. None of our cookies hold any personally identifiable information. You may choose to block cookies, but you may find the site does not function as intended.