This Privacy & Cookies Policy (the “Policy”) has been prepared to meet the requirements of the General Data Protection Regulation (GDPR), the UK’s Data Protection Act 1998 and The Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011, (the “Acts”). It relates to the collection, protection, disclosure and use of personal data belonging to individuals who visit www.nileandyork.com (our “Site”) and also refers in detail to the “Cookies” we use, what they are and their purpose. By clicking the “Dismiss” button on the box that appears on the first page you enter on our Site, you signify your acceptance of our Cookies Policy. If you wish subsequently to decline your acceptance of them we set out in Clause 4 of the Policy how you may do so. Please note that the box relating to “Cookies” will only appear the first time you enter our Site.
Your privacy and security is important to us. This Policy sets out how we will treat any personal information we obtain from you and it is intended to help you understand how we deal with it and how you may remove it. By providing your personal information to us, you agree that we may collect and use the personal information you provide in the ways described in this Policy. If you do not agree with the terms of this Policy, please do not provide any personal details to us.
We will use your personal information only for the purposes set out below.
Please note that we may need to update this Policy from time to time to reflect changes in the law. We recommend that you check this page regularly to ensure that you have read the most recent version and that you are happy with any changes.
This Policy was last revised on: 24 May 2018.
1.1 In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Nile & York Ltd – 28 Burroughs Crescent, Bourne End, Bucks, SL8 5NR, UK. Mail: firstname.lastname@example.org. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2.1 It is your choice to provide us with personal information. We may provide you with the option to select whether you would like to receive information from us. In some circumstances, you will not have the option to opt out, for example, when we are administering a transaction requested by you, or if we are satisfying a legal requirement.
2.2 Ways in which you may be providing us with personal information include, for example,
2.2.1 contacting us with an enquiry;
2.2.2 completing a survey which contains your personal information;
2.2.3 subscribing to a mailing list;
2.2.4 completing a customer account form application;
2.2.5 submitting your CV and/or covering letter to us; and/ or
2.2.6 reporting a problem.
2.3 The information we will collect from you includes, but is not limited to data concerning traffic on our Site, location data, weblogs and other communication data, (whether this is required for our billing purposes or otherwise) and the resources that you access.
2.4 By providing any personal information to us, you fully understand and clearly consent to the transfer, collection and processing of such personal information. Such transfer, collection and processing will comply with the terms of this Policy.
3.1 Like many other websites, we use “cookies” to help us gather and store information about visitors to our Site.
3.2 We may collect information about your computer, including your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our Site users’ browsing actions and patterns, and does not identify you as an individual.
3.3 A “cookie” is a small text file that is downloaded on to your computer’s hard disk when you access certain websites. Cookies allow the website to recognise your computer. A cookie can identify the pages that are being viewed and this can assist us to select the pages that the visitor sees.
3.4 “Session” cookies only exist whilst visitors are online on a particular occasion. These are temporary cookies that aid your journey around the site and remember the preferences you have selected during your “session”.
3.5 “Persistent” cookies, which are not session-based, remain on a visitor’s computer, so that you can be recognised as a previous visitor when you next visit our Site. This allows us to collect information about your browsing habits whilst on our site, and this can be useful in assisting us to monitor and improve our services.
3.6 We do not store sensitive information such as account numbers or passwords in “persistent” cookies, and cookies in themselves, do not contain enough information to identify you. You will only become personally identifiable in relation to your browsing habits after you have formally provided us with your personal data for the purposes outlined in Section 1.2 above.
3.7 In addition to using cookies, we might also use GIFs and other web tools, such as Google Analytics, to collect information about your browsing activities whilst on our site. In this respect the information that is provided is similar to the information supplied by cookies, and we use it for the same purposes.
3.8 Any information that we acquire about you using cookies, GIFs, or other web tools is subject to the same restrictions and conditions as any other information we collect about you, as outlined in this Policy.
4.1 Cookies set by our Site:
4.2 Cookies set by Google Analytics:
_utma, _utmb, _utmc, _utmz, or others within the range _utma to _utmz.
Google Analytics is a web analytics service provided by Google, Inc. By default, Google Analytics sets four performance cookies in order to evaluate your use of the Site, including number of visits, duration of browsing and referring sites, and compiles reports for us on activity on the Site. All information these cookies collect is aggregated and therefore anonymous.
Google stores the information collected by the cookie on servers in the United States. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google state that they will not associate your IP address with any other data held by Google.
For more information about the way in which Google Analytics uses these cookies please visit the following link
4.3 If you wish to know all the cookies we have set and how to delete or manage them, please refer to www.allaboutcookies.org.
5.1 You have the ability to accept or decline cookies by modifying the settings in your browser or by not clicking the “dismiss” button on the box that appears on the first page you see on our Site. For example, in Internet Explorer, you can go to Tools and Internet Options, where there is the option to change your settings to disable cookies. However, you may not be able to use all the interactive features of our site if the cookies are disabled.
5.2 You also have the ability to delete cookies that have been installed in the cookie folder of your browser and should search for “cookies” in your “Help” function for information on where to find your cookie folder.
5.3 To delete only the cookies set by our Site in Internet Explorer, you must do the following:-
1. In Internet Explorer, click the Tools button, and then click Internet Options.
2. On the General tab, under Browsing history, click Settings.
3. Click the View files button.
4. Click the Name column heading to sort all the files alphabetically, and then scroll down until you see files that begin with the prefix Cookie: All cookies will have that prefix, and they usually contain the name of the website that created the cookie.
5. Right-click the cookie you want to delete, click Delete, and then click Yes.
6. Close the window that contains the list of files, and then click OK twice to return to Internet Explorer.
You should note that some websites store your member name, password, or other information about you in a cookie. If you delete that cookie, you might need to re-enter your personal information again the next time you visit the Site.
5.4 To delete only the cookies set by our Site, for example in Firefox, you must do the following:-
1. At the top of the Firefox window, click on the Firefox button and then click Options
2. Select the Privacy panel.
3. Set Firefox to Use custom settings for history.
4. Click Show Cookies…. The Cookies window will appear.
5. In the Search field, type the name of the site whose cookies you want to remove. The cookies that match your search will be displayed.
6. Select the cookie(s) in the list to remove and click Remove Cookie
7. Select the first cookie and press Shift+End to select all the cookies in the list.
8. Click Close to closethe Cookies window.
5.6 To prevent Google Analytics cookies being set, you may install the Google Analytics Opt-Out Browser Add-On by clicking on this link – http://tools.google.com/dlpage/gaoptout and following the instructions.
6.1 All information you provide to us is stored on our secure servers.
6.2 The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA, who work for us or for one of our suppliers. By submitting your personal information, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy.
6.3 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
7.1 We may use personal information collected from you to provide specific services that you request and to provide additional services that may be of interest. We may use your personal information in the following ways:
7.1.1 Ease of Use – To ensure that content from our site is presented in the most effective manner for you and for your computer.
7.1.2 Transactional Purposes – To carry out our obligations arising from any contracts entered into between you and us and to respond to your queries and requests.
7.1.3 Communication – To notify you about changes to our service.
7.1.4 Provision of Information – To assess your eligibility, and if eligible, provide you with information.
7.1.5 Marketing Communications and Analysis – To communicate with you about our products and services and for our own internal marketing analysis, for example, to measure the amount of traffic to our Site.
8.1 If you are an existing customer, we will only contact you by email with information about goods and services similar to those, which were the subject of a previous sale to you.
8.3 We do not provide third parties with your personal information for advertising or marketing purposes. We may disclose your personal information as outlined in section 10 of this policy and for these purposes alone.
8.5 Please note that we will not, under any circumstances, sell your personal information to anyone else.
8.6 Any information or statistics relating to our business that we disclose to others will not identify you personally. We may, for example, perform statistical analyses of the behaviour of the users of our Site in order to measure interest in the various areas of our site and to inform advertisers as to how many consumers have “clicked” on their advertising banners. This information, and any other general information about our users that we share with advertisers and other partners, will not contain personal information about you.
This Policy only covers this Site. If you follow a link from this Site to another website, you must refer to and read the privacy statement on that other website which you visit. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
10.1 We may disclose your personal information:
10.1.1 To third parties to whom you have provided your consent in order that they will be able to prepare or send any communications to you, or to assist us in connection with any of our administrative or business functions or in the provision of any of our services to you.
10.1.2 In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer.
10.1.3 If Nile and York Ltd, or substantially all of its assets, are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
11.1 Information that you post via social networking (including but not limited to Facebook, Twitter and Instagram) is generally accessible to, and may be collected by, others and may result in unwelcome communications. For your own safety and security you should not provide information about yourself on the aforementioned areas of our Site or via social networking.
11.2 If you disclose any information via social networking, we do not accept any responsibility or liability for any breach of privacy, loss, damage, effect on your reputation or otherwise whatsoever.
12.1 Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed if you provide them to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms on the account form either emailed or sent to you in the post.
12.2 It is possible to delete your customer account at any time. This can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing.
12.3 After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we will inform you accordingly below.
13.1 You have the right to ask us not to process your personal data for marketing purposes. We will inform you, before collecting your data, if we intend to use your data for such purposes. You can exercise your right at any time to prevent such processing by emailing us at email@example.com or write to us at 28 Burroughs Crescent, Bourne End, Bucks, SL8 5NR.
13.2 If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can prove compelling reasons worthy of protection for processing which outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
13.3 If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data which are used for direct marketing purposes. You may exercise the objection as described above.
13.4 If you exercise your right to object, we will stop processing the data concerned for direct advertising purposes.
14.1 The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below :
Right of access by the data subject pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erase (“right to be forgotten”) pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to be informed pursuant to Art. 19 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to withdraw a given consent pursuant to Art. 7 (3) GDPR
Right to lodge a complaint pursuant to Art. 77 GDPR
14.2 The Acts give you the right to access information we hold about you. If you would like a copy of this information, please write to us at the address below or email us at firstname.lastname@example.org.
15.1 The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided they are no longer necessary for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in the further storage.
16.1 Questions, comments and requests regarding this Policy are welcomed and should be addressed to email@example.com or write to us at 28 Burroughs Crescent, Bourne End, Bucks, SL8 5NR