Privacy Policy – Tabla Works

This Website is owned by Tabla Works Ltd (hereafter “Tabla Works”) , registered as a Limited Company

Tabla Works respects your privacy and is committed to protecting your personal data. We have created this privacy policy in order to share with you our information collection and use practices. It will inform you as to how we look after your personal data when you visit our website and also tell you about your privacy rights and how the law protects you.

When processing your personal data, we rely on various legal bases according to the so-called Basic Data Protection Ordinance, an EU-wide legal framework for the standardization of data protection law (“GDPR” for short).

As more clearly defined herein, we will never knowingly sell or assign your personal information without your knowledge and/or approval.

Please read this privacy policy carefully before sharing any personally identifiable information described below.

By using, registering or placing an order on this website at http://www.tabla.co.uk, you consent to the collection, use and transfer of your information under the terms of this policy. Since this is a growing web site and because Internet technologies are constantly evolving, this privacy policy is subject to change at any time and any changes will be posted on this page.

This privacy policy works hand-in-hand with the Terms and Conditions particularly those conerning opening an account as set out in 1.2 (Privacy Policy), found at https://www.tabla.co.uk/terms-and-conditions. 

For the purposes of the Data protection Act 1998, the Data Controller is Sulekh Ruparell of 93 Holden Road, London N127DF, (sulekh.ruparell@tabla.co.uk)

Purpose of this Privacy Policy

This privacy policy aims to give you information on how Tabla Works collects and processes your personal data through your use of this website, including any data you may provide when you purchase a product or service.

This website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy notice so that you are fully aware of how and why we are using your data.

Changes to the Privacy Notice and your duty to inform us of changes

This version was last updated on 5^th July 2018. We may periodically update this Privacy Policy for new, unanticipated uses not previously disclosed. Any changes made will be posted here.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third Parties

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information that you provide whilst visiting such sites, and such sites are not governed by this privacy statement.

In addition, we transmit data to external service providers that enable us to provide the Platform. In this context, please note that all our server hosting and cloud services are provided by Amazon Web Services, Inc. (“AWS”). AWS processes all data on our behalf and we have subjected AWS to a strict data processing agreement to ensure the security of the processing in accordance with the requirements of the GDPR.

Our payment gateway is Sagepay.

Your Data

Personal data, or personal information, means any information about an individual from which the person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data includes first name, last name, username or similar identifier, title

Contact Data includes billing address, delivery address, email address and telephone number.

Financial Data includes payment details. We partner with Sage pay and to provide real time, easy-to-use payment facilities. Their secure server software guarantees to protect your information whenever you place an order with us or access your account details. This software encrypts the information you input before it is sent from your browser to us to minimise the risk of this being intercepted before we receive it.

Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.

Profile Data includes your username, purchases or orders made by you, feedback and survey responses.

Usage Data includes information about how you use our website, product and services

Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

No Special Category Data collection

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

Failing to provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

Collection of Personal Data

We use different methods to collect data from and about you including through:

Direct interactions.

You may give us your Identity, Contact and Profile Data by filling in forms or by corresponding with us by phone, email or otherwise. This includes personal data you provide when you:-

a)    Buy one of our products or services;

b)   Create an account on our website;

c)    Subscribe to our service or publications;

d)    Request marketing to be sent to you;

e)    Enter a promotion or survey; or

f)     Give us some feedback.

Automated technologies or interactions.

As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please see further details about cookies.

Using personal information

How we will use your personal information. (Article 6 (1) b GDPR)

Processing is necessary to fulfil our contract with you

We will use the personal information you provide to us:

To supply the products to you;

To process your payment for the products;

If you agreed to our policy during the order process, to give you information about similar products that we provide, but you may stop receiving this at any time by contacting us or through your account created when ordering;

Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests;

Where we need to comply with a legal or regulatory obligation or for criminal prosecution and tax authorities. (Article 6 (1) c GDPR) or in the public interest (Article 6 (1) e GDPR)

Purposes for which we may use your personal data

We have set out below, in a table format, a description of all the ways we plan to use personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

 Marketing

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We have established the following personal data control mechanisms:

Promotional offers from us

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing). You will receive marketing communications from us if you have requested information from us or purchased goods from us and, in each case, you have not opted out of receiving that marketing.

Opting Out

You can ask us to stop sending you marketing messages at any time by logging into your account and adjusting your preferences accordingly. Where you opt out of receiving marketing messages, this will not apply to personal data provided to us as a result of a product purchase, product experience or other transactions.

Cookies

We use cookies and similar technologies to collect information about the pages you access or visit. Cookies are information that is automatically stored on your computer so we can recognise you when you return. We use cookies to better understand your use of our website so that we may continue to refine and improve the website. If you do not wish to have cookies on your system, you can set your browser preferences to disable them. However, if you decide not to accept cookies, you may not be able to take advantage of all of the features on our website.

Purpose of Data Collection

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Disclosure

We do not disclose your personal data to third parties under any circumstances (unless required by law to do so under our terms and conditions).

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data Retention

By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

You can however delete your personal date through your account. See below

Right to be Forgotten – GDPR Compliance

We have added the GDPR compliant commercial website plugin extension which allows our customers full anonymisation data. Along with other features, the following is included with the plugin:

It provides a registered user the option to delete their account including newletter subscription, quote, order, invoice, shipment and credit memo data. The user gets a delete option under my account section on the front end. Admin can enable and disable this option from configurations.

It provides the option to delete customers, newsletter subscription and anonymise transaction data to administrators

It allows administrators to send confirmation emails to customers with the link to delete and anonymise their transaction data including order, invoice, credit memo and shipment

It anonymises personal data which includes customer firstname, middlename, lastname, email address, remote IP address, phone, fax, region, street, city and postcode

 Consent (Article 6 (1) a GDPR)

Since you have given us your consent to process personal data for the specific purposes explained above, this consent ensures the legality of the processing. By registering with your account data or making a purchase, you expressly agree the data processing as described in detail in this privacy policy by ticking the box before sending the registration or reservation form: If we process your data, it is because you have expressly allowed and requested us to do so when you use the website. Thus, your consent represents the most important legal basis for the processing of your personal data by us.

Your Legal Rights

As well as your ability to delete your own personal data, you have rights under data protection laws in relation to your personal data. You have the right to request personal data held by us about you by contacting us at tablaworks@tabla.co.uk a follows:

Request access to your personal data (article 15 GDPR)

Request correction of the personal data that we hold about you. (article 16 GDPR)

Request erasure of your personal data. (article 17 GDPR)

Object to processing of your personal data. (article 18 GDPR)

Request the transfer of your personal data to you (article 20 GDPR)

Withdraw consent at any time  It should be noted that if you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Right of Appeal to the responsible data protection supervisory authority (Article 77 GDPR in conjunction with § 19 BDSG).  

 No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Terms used in the Privacy Policy

Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

Comply with a legal or regulatory obligation means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.

External Third Parties

·         Service providers, acting as processors, based in the United Kingdom who provide IT, system and web administration services.

·         Postal providers, acting as processors, based in the United Kingdom who provide product delivery services.

·         HM Revenue & Customs, acting as processors or joint controllers, regulators and other authorities based in the United Kingdom