You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
 

Changes to the privacy notice and your duty to inform us of changes
 

This version was last updated on 16th May 2018.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
 

Third-party links
 

The Site may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Site, we encourage you to read the privacy notice of every website you visit.
 

The data we collect about you
 

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
 

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
 

• Identity Data includes first name, maiden name, last name and title.

• Contact Data includes billing address, delivery address, email address and telephone numbers.

• Financial Data includes bank account and payment card details.

• Transaction Data includes details about payments to and from you and other details of products and Services you have purchased from us.

• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Site and App.

• Profile Data includes your unique account reference number, purchases or orders made by you, preferences, feedback and survey responses.

• Usage Data includes information about how you use our Site and Services.

• Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
   

How is your personal data collected?
 

We use different methods to collect data from and about you including through:
 

Direct interactions
 

You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise.
 

Automated technologies or interactions
 

As you interact with our Site, we may automatically collect Technical Data about your equipment, browsing actions and patterns.
 

Third parties or publicly available sources
 

We may receive personal data about you from various third parties and public sources.
 

How we use your personal data
 

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
 

• Where we need to perform the contract we are about to enter into or have entered into with you.

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

• Where we need to comply with a legal or regulatory obligation.
   

Marketing
 

Promotional offers from us
 

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you.
 

Opting out
 

You can ask us or third parties to stop sending you marketing messages at any time by contacting us.
 

Cookies
 

When you interact with the Site, we try to make that experience simple and meaningful. When you visit our Site, our web server sends a cookie to your computer or mobile device (as the case may be).

Cookies are small pieces of information which are issued to your computer or device when you visit a website or access or use a mobile application and which store and sometimes track information about your use of the Site.
 

Disclosures of your personal data
 

We may have to share your personal data with the parties set out below for the purposes set out in the table in paragraph 4 above.
 

• Service providers based within and outside the EU who provide IT and system administration, payment and data capturing services.

• Professional advisers including lawyers, bankers, auditors and insurers based within the EU.

• Regulators and other authorities based in the United Kingdom who require reporting of processing activities in certain circumstances.

• Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
   

International transfers
 

Some of our external third party suppliers are based outside the European Economic Area (EEA). Their processing of your personal data will involve a transfer of data outside the EEA.
 

Data security
 

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
 

Data retention
 

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
 

Your legal rights
 

Under certain circumstances, you have rights under data protection laws in relation to your personal data.
 

• Access to information: You have the right to request a copy of the information OYNB holds about you.

• Ensuring accuracy of information: You may ask OYNB to correct or complete information that is inaccurate or incomplete.

• Right to erasure: You may have a right to erasure, which is more commonly known as the 'right to be forgotten'.

• Ability to restrict processing: You may also have the right to require OYNB to restrict OYNB's use of your personal information in certain circumstances.

• Right to data portability: You may have the right to receive personal data OYNB holds about you in a format that enables you to transfer such information to another data controller.

• Review by an independent authority: You will always have the right to lodge a complaint with a supervisory body, including ICO as listed above.

• Preventing direct marketing: OYNB does not sell your personal data.

• Objecting to other uses of your information: You may also have the right to object to OYNB's use of your information in other circumstances.
   

If you would like further information on how you can exercise these rights, please email us at info@oneyearnobeer.com.
 

No fee usually required
 

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
 

Time limit to respond
 

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.