This policy explains when, why and how we handle your
personal data that we receive from yourself who visit our website, sign up or
purchase, book any of our services or request or contact us in any other
manner.
At Cheap Deal Center, safeguarding and handling your
personal data in a compliant way is important to us. We understand and respect
the importance of guarding your privacy and are committed to protecting your
personal data. The policy also details the conditions under which we may
disclose the information to others and how we keep it secure.
From time to time, we will update this privacy notice as
we undertake new personal data practices or adopt new privacy policies.
1. Introduction
While we
encourage clients to read our privacy policy in full, we do have a number of
guiding principles we operate by
- We will never sell your data on.
- We will never share your data for marketing
to by any third parties.
- We will always keep your personal data secure
using strong encryption, abiding by data protection rules and by implementing
good security practice.
- We will never send you direct email marketing
without your consent, our newsletter requires you to explicitly opt-in, you can
opt-out at any time using the unsubscribe link contained within the email or
through your client area by selecting Manage Booking > Subscriptions
if you are ever concerned or have question about how your
personal data is collected or used, please contact us at helpdesk@cheapdealcenter.com
2. How and When we collect your personal data
We may
collect data about you in the following ways:
- By filling in any forms on our website, this
includes information provided at the time of booking, registration to use our
website, subscribing to any of our services, promotional offers, posting
material, asking service related questions or requesting further services. We
may also ask you for information when you enter a promotion sponsored by us or
if you report a problem with our site.
- If you contact us, we may keep a record of
that correspondence.
- We may also ask you to complete surveys,
review form that we use to improve our services, our partner’s services and for
research purpose, although you do not have to respond to them.
- Details of transactions you carry out through
our site and of the fulfilment of your orders or bookings.
- Visiting our sites, including, but not
limited to, traffic data, location data and other communication data required
for our own security, diagnostic, authentication and billing.
3. What personal data do we collect
If you are simply viewing our website, then we will
collect the following information within our logs:
- IP Address (See cookies and IP addresses)
- If you sign up to use our service or
promotional offers or book through us, we will then collect the following information:
- Full Name
- Email Address
- Contact Number
- Address
- Payment Details
- IP Address
While not actively collected we may store any other personal
information that you may disclose during live chat, support tickets or emails.
4. Cookies and IP Addresses
IP Addresses
- We collect
IP address information for security (DDoS prevention, anti-hacking and
fraud prevention), diagnostics and statistical analysis of traffic used
for improvements to the performance and usability of our services, for
GDPR purposes we collect this information under legitimate interest.
Cookies
- A cookie is a small file saved on your
computer that is used to help store preferences and other information that is
used by websites you may visit. We use cookies for the Following:
- Authentication
of users when logging in or out of our services.
- Analysis of
traffic to our website via Google Analytics (see Google Analytics).
- Tracking of
website preferences.
- Third party
services such live chat.
- If you
register with us or if you continue to use our site, you agree to the use
of cookies.
You can block cookies by activating the setting in your
browser which allows you to refuse the setting of all or some cookies. However,
if you use your browser settings to block all cookies you may not be allowed
access to all or parts of our site. Unless you have adjusted your browser
settings so that it will refuse cookies, our system will issue cookies as soon
as you visit our site.
5. Where we store and process your personal data
The data that we collect from you is
stored in the UK but it may be processed by staff operating outside the EEA
(European Economic Area) who work for us. Such staff may be engaged in, among
other things, the fulfilment of your order, booking, the processing of your
booking details and the provision of support services. By submitting your
personal data, you agree to the processing of this data outside of the EEA. We
take all steps necessary to ensure that your data, regardless of where it is
processed, is treated securely and in accordance with this privacy policy and
the GDPR (General Data Protection Regulation) .
6. How we Protect your personal data
We treat all
data with the utmost care and take appropriate steps in compliance with data
protection regulation to ensure it is kept safe.
- All data we collect is done so over encrypted
connections (https).
- All data is stored behind state of the art
firewalls.
- All systems storing personal data have access
logging.
- All passwords are encoded at rest.
- All systems are subject to regular
penetration testing and are monitored for vulnerabilities and attacks.
7. Uses we make of personal data
We use
information held about you in the following ways:
- To verify your identity.
- To provide you with the products and services
you have booked, purchased from us.
- To carry out our obligations arising from any
contracts entered into between you and us.
- To ensure that content from our site is
presented in the most effective manner for your device.
- To respond to queries.
- To provide you with information, products or
services that you request from us where you have consented to be contacted.
- To notify you about changes to our services.
- To send you marketing emails.
- To display personalized Ads from us.
- To prevent fraud.
- To detect, prevent and diagnose potential
security breaches.
8. Legal basis for the collection and processing
Data
protection law sets out the conditions under which personal data can be
collected and which we use as the basis for collection and processing, these
include:
- Contractual
obligations: When you book
a service, we need to collect personal data to fulfill our legal contractual
obligation, for example: so we can manage and invoice your account and contact
you for support purposes.
- Legal
compliance: The law
requires we collect and process data for certain purposes such as for keeping
financial records (i.e. invoicing) and that we can comply with law enforcement
requests for data.
- Legitimate
interest: We collect
data under legitimate interest in a way that is reasonably expected as part of
the day to day running of our business. For example, we collect and log IP
addresses for fraud protection and security as well as analysis of our site
usage.
- Consent: In
certain cases, we may collect and process your data with your consent, for
example our newsletter and hot offers emails. Consent to receive these can be
withdrawn at any time.
9. How long we keep personal data
Your data
will be kept until it is no longer required for the purpose of its collection.
At the end of the retention period the data will either be deleted or anonymized
so it can no longer be linked back to an individual. Personal data linked to
purchases or any other financial transaction are kept for a minimum of 6 years
as required by UK law to retain financial data.
10. Who we share personal data with
Like many
websites we use a number of third-party services for functionality such as
email sign-up and payment processing. The following is a list of companies we
share data with on a day to day basis. This list does not include services we
share anonymous data with or that provide services on an ad-hoc basis such as
car park service providers. All the suppliers below have been carefully
selected to ensure they provide suitable protections under GDPR.
Stripe
Stripe is used to provide secure credit and debit card
processing services. If you choose to pay by this method then your card
details, name, address and email will be transmitted to Stripe securely for the
processing of payment and for fraud prevention. If you choose to store your
card details then this will be saved alongside your name, address and email on
Stripe’s servers. Privacy Policy: https://stripe.com/gb/privacy
11. Ads and Remarketing
We use Google
AdWords remarketing services on our blog and forum to display our ads on third
party websites (including Google) to previous visitors of those pages, this is
done in the form of a cookie that contains anonymous data regarding your
visit.If you have a google account you can opt-out of receiving these ads here
http://www.google.com/settings/ads.Google are also a member of the NAI (Network
Advertising Initiative), you can also use their site to opt out here
http://www.networkadvertising.org/managing/opt_out.asp
12. Google Analytics
Like many
websites we use Google Analytics to collect anonymous data about the users of
our sites such as how often they visit, what pages they visit, what time they
visit, how long the stay and what country they are visiting from. This data is
collected using cookies and from your IP address, the resulting statistics are
used for the following purposes:
- Improving website usability
- Tracking the success of marketing campaigns
- Pattern analysis
You can prevent Google Analytics from collecting this
information by installing the google opt-out browser addon:
https://tools.google.com/dlpage/gaoptoutTo learn how Google uses data collected
from our own and partner sites please see the following link:
https://policies.google.com/privacy/partners?hl=en-GB&gl=uk
13. Newsletter and Marketing Emails
All our
marketing emails are opt-in, we will never sell on your details or pass them on
to third parties for marketing purposes. If you have opted in to receive these
then you can opt out at any time in one of three ways:
- If you have received an email, click on the
unsubscribe link located in the email footer.
- Log into your Manage Booking and select:
Manage E-mail Subscriptions
- By contacting our customer services
department via email helpdesk@cheapdealcenter.com
14. Your rights under GDPR
Under GDPR
(General Data Protection regulation) you have a number of rights relating to
your personal data, these will come into force on the 25th May 2018, for
further information please see https://ico.org.uk
- The
right to access: The GDPR Act gives you the right to
access information held about you. You can exercise this right by contacting us
(see Contacting Us). We are required to verify your identify before processing
any right to access request, once verified the data shall be provided within 28
days. The data shall be provided free of charge however an admin fee may be
applied where a request is manifestly unfounded or excessive, particularly if
it is repetitive.
- The
right to rectification: The
GDPR provides the right to have any personal data rectified that may be
incorrect or incomplete. Customers can update their own personal details via
the Manage Booking area however if this is not sufficient please contact our
customer services team (See contacting Us).
- The
right to erasure: As an individual you have the right to
request the erasure of any data we hold on you, this is not an absolute right,
for example it does not override our requirement under UK law to keep financial
data such as invoice information. You can make a request where your personal
data is no longer necessary in relation to the purpose for which it was
originally collected/processed, for example if you cancel all services you have
with us. To make a right to erasure request please contact our customer
services team (see Contacting Us).
- The
right to restrict processing: You
have the right to request we restrict processing of your personal data where
there is no legitimate interest for us to do so:
- Where
the accuracy of the personal data is contested, to restrict the
processing until such time as the accuracy has been sufficiently
verified.
- Where
you object to the processing (See Right to Object), and where we are
considering whether there are legitimate grounds to override the request.
- When
processing is unlawful and you oppose erasure and request restriction
instead.
- If
we no longer need the personal data but you require the data to
establish, exercise or defend a legal claim.
- You
can exercise the right at any time by contacting our team (see Contacting
Us).
- The
right to object: You have the right to object to the
processing of your personal data where there is no legitimate or lawful reason
to do so. To make a right to object request please contact our customer
services team (see Contacting Us).
If you make a request, we have one month to respond to
you. If you would like to exercise any of these rights (see Contacting Us).
15. Changes to our privacy policy
We keep our
privacy policy under regular review, you can always find the latest version at
the URL below:
helpdesk@cheapdealcenter.com
16. Contacting Us
Questions,
comments and requests regarding this privacy policy are welcomed, you can
contact us in the following ways:
