Ffa Da is a company based in Llandanwg, Harlech, Gwynedd LL46 2SD.
We control the ways your personal data are collected and the purposes for which your personal data are used. We are the “data controller” and “data processor” for the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679).
We also have contracts in place with “data processors” who receive your personal data from us for the sole purpose of fulfilling the services we offer (see Section 3).
We collect personal data from you when you use our platform. We may also acquire personal data via third parties where you have consented to them sharing the data with us or from publicly available information. We do not buy personal data from third parties.
The table below outlines what personal data we collect, when we collect it and why.
|What we collect||When we collect it||Why we collect it|
|Your name, address, email address and telephone number||When you place an order with us for a physical product requiring delivery||To fulfil an order of a physical product|
|Your email address||When you explicitly opt-in and ask us to send you this information||To send you relevant information and offers|
|Your email address||When you explicitly register to create an account on our Platform||To allow you to interact with our Platform in a personalised manner (i.e. setting your preferences, favourite products)|
|Your email address||When you contact us directly for advice, help or information||To respond to any emails you send us|
|Your phone number||When you provide us with your phone number to return a phone call||To respond to any phone calls you make to us|
|Your IP address||When you use certain parts of our Platform||We collect log files of some activities in order to operate and support the Platform. We do not store or analyze this information, and the log files are regularly purged.|
|Your name, address, email address and telephone number||If and when you explicitly send us personal data of your own accord for other purposes (e.g. employment enquiries)||To process your request or enquiry; personal data will not be sent to a third party processor without your consent|
As a data controller we require the use of third party processors to ensure a smooth running of our Platforms. We use third party processors to collect and/or process your data on our behalf to deliver services (detailed in Section 4). We only provide them with the data needed to deliver the specific service.
We only use trusted partners and suppliers as our third party processors. We have audited all of our third party processors to ensure they store data securely and are contractually obliged to adhere to all the data regulations required by law. We continually monitor our data processors to ensure they are adhering to the required standards.
We use your personal data for the following purposes and reasons:
To provide services to you and manage your account
When you choose to use our Platform, we will use the information you have given us to fulfil any services you have requested. This may include the fulfilment and mailing of physical goods you have ordered, taking and processing payment for services
To communicate with you and manage our relationship with you
We may need to contact you by phone, email or text message for administrative or operational reasons. This may include confirming details of an order you have made or services you have requested, or notifying you of any unanticipated issues with our ability to fulfil our service to you. We may also email you to request your feedback on the services we have provided.
These communications are not made for marketing purposes and you will continue to receive them if you opt-out of marketing communications but continue to use our Platform.
To share news, updates and promotional offers with you – if you have consented.
If you have consented to receiving marketing communications from us by marking a checkbox when signing up or as part of a checkout purchase, we may occasionally send you emails with news, updates and promotional offers. We will not send you these emails unless you have given your consent for us to do so, and all emails include an opt-out link to prevent future emails being sent to you..
We will not transfer or sell your personal data to third parties for the purposes of marketing.
To personalise your experience on our Platform
To improve our services, fulfil our administrative purposes and protect our business interests.
Your information may also be used within our business to fulfil our accounting, billing, audit, fraud screening, safety, security and legal requirements. Your activity on our Platform may also be statistically analysed to help us operate our Platform more efficiently and effectively. Note that personal data is not used in this statistical analysis.
As required by applicable law, legal process or regulation.
There may be other legal or regulatory processes that require the use of your personal data that have not been explicitly documented here. To understand these requirements please visit www.eugdpr.org .
You have rights in relation to the personal data that we hold about you. In summary you have the rights to be informed, of access, of rectification, of erasure, to restrict processing, to data portability, of objection and related to automated decision making including profiling of the personal data we hold on you.
To fully understand your rights please see https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ .
If you wish to exercise these rights, please contact firstname.lastname@example.org We will confirm receipt of your request as a matter of urgency, and may require further communications to ensure we, and you, understand the scope of the request. We are then obliged to honour your request within one month of your initial communication.
There may be circumstances where your request cannot be honoured due to legal or financial reasons.
We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers or third party data processors. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.
In order to improve our services, to provide you with more relevant content and to analyse how visitors use our Platform, we may use technologies, such as cookies, pixels or tracking software.
For example, we use software to monitor customer traffic patterns and website usage to help us develop the design and layout of the website in order to enhance the experience of the visitors to our website. This software does not enable us to collect any personal data. In addition, in order to understand how our customers interact with the emails and the content that we send, we use pixels that allow us to know if the emails we send are opened or if the content of our emails is displayed in text or html form.
We may collect information about your computer, including where available your IP address, operating system, browser type, mobile phone operating system and other related details for system administration. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
Ffa Da will not share any of your data help on the website.
We do not disclose or sell your information to third parties for the purposes of direct marketing.