Privacy policy
1. About this policy
This policy explains how Halden Audio collects, uses and shares personal information when you visit www.example.com or buy from us, and the choices you have.
The business responsible for your personal information is Halden Audio Ltd, trading as Halden Audio.
2. Information we collect
We collect what you give us, what your device sends when you use our store, and what the providers who help us run it pass to us. This includes:
- Contact details, such as your name, email address and phone number.
- Shipping and billing addresses.
- Order details, such as what you buy, what you paid, and your order and return history.
- Payment details. You enter card numbers with our payment provider; we receive limited details, such as the card type, the last four digits and the expiry date.
- Account details, such as your sign-in email, password and saved preferences.
- Device and usage data, such as your IP address, browser, device type, the pages you view and how you found our store.
3. How we use your information
We use personal information to:
- Take, ship and deliver your orders, and handle returns and refunds.
- Answer your questions and help when something goes wrong.
- Send you news and offers by email or text message when you have agreed to them or the law allows it. Every message has a link to unsubscribe.
- Understand how people use our store, so we can improve it.
- Prevent fraud and keep our store and our customers safe.
- Keep the records that tax and accounting laws require, and answer lawful requests.
4. Who we share it with
We share personal information with these kinds of providers, and only as much as each needs to do its work for us:
- Payment providers, to take payments and check them for fraud.
- Shipping carriers and delivery partners, to deliver orders and send tracking updates.
- Analytics providers, to measure how our store is used.
- Email and messaging providers, to send order updates and the marketing you agreed to.
- Hosting and online store platform providers, who run our store and keep its data.
We may also share information when the law requires it, to protect our rights or the safety of others, or with a buyer if we sell or merge our business.
We do not sell your personal information.
5. Cookies and similar technologies
Our store uses cookies and similar technologies it needs to work, for example to keep items in your cart and keep you signed in.
We also use analytics cookies to count visits and see which pages people use.
Where the law requires it, we ask for your consent before we set cookies the store does not need. You can change your choice at any time in our cookie settings, and you can block or delete cookies in your browser.
There is no common standard for Do Not Track browser signals, so our store does not respond to them.
6. How long we keep it
- Order and payment records: 6 years after the order, to meet tax and accounting rules.
- Account details: until you close your account.
- Marketing choices: until you unsubscribe, with a record that you did.
- Everything else: only as long as we need it for the purposes in this policy.
When we no longer need information, we delete it or make it anonymous.
7. How we protect it
We protect personal information with reasonable technical and organisational measures, such as encrypted connections, limited staff access and providers bound by contract to protect it. No way of sending or storing data online is perfectly secure, so please tell us at privacy@example.com if you think your information is at risk.
8. Your choices and rights
You can ask us to:
- Give you a copy of the personal information we hold about you.
- Correct information that is wrong or out of date.
- Delete your information, unless the law says we must keep it.
- Stop sending you marketing, at any time.
Send your request to privacy@example.com. We may first need to confirm it is you.
Depending on where you live, you may have more rights, set out in the sections below.
9. Children
Our store is not meant for children. We do not knowingly collect personal information from children under 13, or under 16 where the law sets that age. If you think a child has given us information, write to privacy@example.com and we will delete it.
10. International transfers
We are based in United Kingdom. We and our providers may store and process your information in other countries, where privacy laws may differ from those where you live. When we transfer it, we use the safeguards the law requires.
11. If you are in the European Union or the United Kingdom
Halden Audio Ltd is the controller of your personal information under the General Data Protection Regulation (GDPR) and the UK GDPR. We rely on these legal bases:
- Our contract with you, to take, deliver and support your orders.
- Our legal obligations, to keep tax and accounting records.
- Our legitimate interests, to prevent fraud, keep the store secure and improve it, where your interests do not override them.
- Your consent, for marketing messages and for cookies the store does not need. You can withdraw it at any time.
You have the right to:
- Access your personal information and get a copy.
- Have it corrected.
- Have it deleted.
- Restrict how we use it.
- Receive it in a common format, or have it sent to another company.
- Object to how we use it, including at any time to direct marketing.
- Not be subject to decisions made only by automated means that have legal or similarly significant effects on you.
We answer within one month. For complex requests we may take two more months, and we will tell you if we do.
When your information leaves the European Economic Area or the United Kingdom, we rely on an adequacy decision, such as the EU-US Data Privacy Framework for certified US companies, or on the standard contractual clauses of the European Commission with the UK Addendum.
You can complain to the data protection authority where you live or work, or where you think the problem happened. In the United Kingdom that is the Information Commissioner’s Office (ico.org.uk). We would like the chance to help first, at privacy@example.com.
12. If you live in California
This part applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. In the last 12 months we collected these categories of personal information:
- Identifiers, such as your name, email address, postal address and IP address.
- Customer records, such as your phone number, address and payment card details.
- Commercial information, such as the products you bought.
- Internet activity, such as how you browse our store.
- Sensitive personal information: your account sign-in and password. We use it only to sign you in and keep your account secure.
We collect it from you, from your device and from our providers, use it for the purposes in "How we use your information", share it with the providers in "Who we share it with" and keep it for the periods in "How long we keep it".
We do not sell or share your personal information, and we have not done so in the last 12 months.
You have the right to:
- Know what personal information we collect, use, disclose, sell or share about you, and get a copy.
- Delete personal information we collected from you.
- Correct personal information that is inaccurate.
- Opt out of the sale or sharing of your personal information.
- Limit our use of your sensitive personal information. We use it only for the purposes the law allows without that request.
- Not be treated differently for using your rights: we will not deny you goods, charge you a different price or give you a lower level of service.
To make a request, write to privacy@example.com. We confirm receipt within 10 business days and answer within 45 days, or tell you if we need up to 45 more. We check your identity by matching details you give us with those we hold. An authorized agent can ask for you; we may ask for proof that you gave them permission.
13. If you live in another US state with a privacy law
Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia have rights under their state’s consumer privacy law. Depending on your state, you can:
- Confirm whether we process your personal information, and access it.
- Correct inaccurate personal information.
- Delete personal information.
- Get a copy in a portable format.
- Opt out of targeted advertising, the sale of your personal information, and profiling that leads to decisions with legal or similarly significant effects.
Where your state requires it, we ask for your consent before we process sensitive data.
Write to privacy@example.com to make a request. We answer within 45 days and may extend that once by 45 days when needed. If we decline, you can appeal by replying to our answer, and if we turn down the appeal you can contact your state attorney general.
14. Changes to this policy
We may update this policy. When we do, we change the effective date at the top, and if a change matters, we tell you, for example by email or with a notice on our store.
15. Contact us
Questions or requests about your personal information:
- Halden Audio Ltd
- Email: privacy@example.com
- Address: 14 Sample Street, London, UK
- Website: www.example.com