Introduction
The EU General Data Protection Regulations (GDPR) require all companies to treat personal information collected or handled securely and maintain accurate records as to how this information is stored and used. This policy explains how Ovation Boat Services Ltd (the company, trading as Ovation Boats) uses your personal information in order for normal administrative processes to take place when you use the company's services. All personal information is used and stored in compliance with the General Data Protection Regulation (EU) 2016/679.
Who are we?
Ovation Boat Services Ltd is a Limited Company registered in England (No. 07327026) which provides Boat Fitting services. The registered address is Mill Lane, Sileby, Loughborough, Leicestershire LE12 7UX.
How do we collect personal information from you?
Ovation Boat Services Ltd collects personal information via the following means:
- via our website contact form
- when you send us an email
- when you call us on the telephone
- when you meet with us face to face
What type of information is collected from you?
The personal information we collect might include:
- Your name and contact information (including email address and phone number) which you provide to us when you submit our contact form, telephone us, send us an email, or communicate in any other way
- Other information relevant to client enquiries
- Invoicing information/payment details (including name and invoice address) which you provide to us when you choose to purchase our paid services
Please note other general, non-personal information, for example your boat (boat name, registration details, and location of your boat) and any additional information that you provide relating to your boat or its features are also stored by the company. These are not covered by the General Data Protection Regulation (EU) 2016/679.
Website usage data - we may monitor your use of this website through the use of cookies
For example, we may monitor how many times you visit, which pages you go to, traffic and location data, IP address, operating system and browser type. This information helps us to build a profile of our users. Most of this data is aggregated or statistical, which means that we cannot identify you individually.
Only the IP address could be used to identify you individually (indirectly through your ISP and only by the relevant authorities). Your IP address is only stored in log files that are deleted after 30 days.
Please see further the section on ‘Use of cookies’ below.
How is your information used?
Collecting this data helps us understand what you are looking for from our business, enabling us to deliver improved products and services, and in particular for the following reasons:
- to contact you in response to a specific enquiry or request
- to provide you with a quotation
- to make an appointment for you to meet or talk with us
- to carry out our obligations arising from any contracts entered into by you and us
- to supply products and services
- to collect payments and send invoices and statements
- to send paperwork (by email or post) required for the administrative processes and normal operation of business between us
Who has access to your information?
We will never lease, distribute or sell your personal information to third parties unless we have your permission or the law requires us to.
Third Party Service Providers working on our behalf: We may pass your information to our third party service providers, agents subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example our website hosting provider). However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service.
How you can access and update your information
You may request a copy of the information that the company holds about you. Please apply in writing and by post to: The Data Control Officer, Ovation Boat Services Ltd, Mill Lane, Sileby, Leicestershire LE12 7UX. No other application method can be entertained.
You may restrict the use of your personal information. Please include any request for a restriction of your personal data on the initial contact between the company and yourself. Please bear in mind that it will not be possible for business between us to function without some basic information and use of it.
You may request to update or amend the personal information that the company holds on you if you believe it to be inaccurate. Applications should be made by post to the ‘Data Control Officer’ at the address above.
You may request for the company to delete the personal information that it holds on you. Applications should be made by post to the 'Data Control Officer' at the address above. Please note that there will be exceptions to this operation and this may not apply as required by HMRC and in cases of law enforcement, debt recovery, dishonesty or fraud.
Security precautions in place to protect the loss, misuse or alteration of your information
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Ovation Boat Services Ltd will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
All customer and supplier details will be kept stored on secure servers, and access limited only to authorised personnel with password protected access.
We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical and physical safeguards to protect Personal Data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Data in our possession. This includes, for example, firewalls, password protection and other access and authentication controls. We use SSL and TLS encryption technology to encrypt data during transmission through public internet (your enquiry form submissions and their transmission via email services to us).
However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us or store, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. Once we receive your information, we make our best effort to ensure its security on our systems. If you believe your Personal Data has been compromised, please contact us.
Use of 'cookies'
Like many websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.
Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you but Google do not grant us access to this. We consider Google to be a third party data processor (see below).
GA makes use of cookies, details of which can be found on Google’s developer guides.
Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.
It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, visit our full cookies policy. Turning cookies of may result in a loss of functionality when using our website.
Links to other websites
Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.
In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.
Email links
If you email us directly, or via a email mailto hyperlink (like this one), the email is transmitted to us via the Simple Mail Transfer Protocol (SMTP). Depending on your email provider, the email contents may or may not be encrypted from the point at which it leaves your computer, until it reaches your email provider or in some cases, until it reaches us. We have no control over this, but most popular email providers like Gmail do provide end-to-end encryption.
Contact Form
Our website contact form operates with a SSL ('Secure Sockets Layer' or 'https'). This means that any information you enter on our contact form will be encrypted by your own web browser from the point you click the 'Submit' button until it reaches our web server. It is briefly decrypted on our web server, but is then re-encrypted and transmitted to us via our email host where it is only ever transmitted in an encrypted form or held in a highly secure manner.
Our website contact form has a reCAPTCHA control, which is an additional safety feature to help prevent businesses from receiving spam or automated data, and thus protecting the website and customer data.
About this website’s server
This website is hosted in a virtual server by Amazon (Amazon Web services) within a secure UK data centre. The server may only be accessed by authorised personal and we have taken numerous security precautions including:
- Anti-Virus and Anti-Malware scans (passive and active)
- Secure SSH (Secure Shell) access with private/public key and password authentication for access by authorised personnel only
- Firewall locking down all but essential ports
- Security settings applied so server meets the technical level of PCI (Payment Card Industry) security requirements.
- Regular backups to secured backup storage
Our third party processors
We use a number of third parties to process personal data on our behalf.
- Amazon Web Services (Privacy Policy)
- Facebook (Privacy Policy)
- Google (Privacy Policy)
- Pinterest (Privacy Policy)
- PumpkinPip (Privacy Policy)
16 or Under
We are concerned about protecting the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian's permission beforehand whenever you provide us with personal information.
Data Breaches
We will report any unlawful data breach of this website’s database or the database(s) of any of our third party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.
Our lawful basis for processing this data
We will ensure we have your permission to use the data necessary for the fulfilment of services provided or in order to take steps to procuring further orders.
Data Retention
Ovation Boat Services Ltd will retain personal data we process on behalf of our customers for as long as needed to provide our services. We will retain this personal information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
Review of this Policy
We keep this Policy under regular review. This Policy was last updated in April 2018, but we may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this Policy.
Any questions regarding this Policy and our privacy practices should be sent by email to chris@ovationboatservices.co.uk or by writing to Ovation Boat Services Ltd, Mill Lane, Sileby, Loughborough, Leicestershire LE12 7UX.