Privacy Policy

Purple and Gold Website Privacy Policy

We are Purple and Gold. We’re a company registered in the United Kingdom, whose registered address is at:

Weatherill House Business Centre;

New South Quarter,

23 Whitestone Way,

Croydon CRO 4WF

In this privacy notice we will refer to ourselves as ‘we’, ‘us’ or ‘our’.

You can get hold of us in any of the following ways:

by e-mailing us at: heart@purpleandgold.co.uk

Web address: www.purpleandgold.co.uk

Purple and Gold is committed to protecting the privacy and security of personal information. This privacy notice describes how we collect and use personal information about pupils, in accordance with the General Data Protection Regulation (GDPR).

Purple and Gold is a well-being brand which provides natural great quality products that will boost mental health.

We do not have a Data Protection Officer, but if you have any questions about this privacy notice or issues arising from it then you should contact Alicia Findlay, who is responsible for matters relating to data protection at our organisation, including any matters in this privacy notice. You can contact them using the details set out above.

The Categories Of Personal Information That We Collect, Process, Hold And may Share

We may collect, store and use the following categories of personal information about you: -

·     Personal information such as name, pupil number, date of birth, gender and contact information;

·     Emergency contact and family lifestyle information such as names, relationship, phone numbers and email addresses;

·     Attendance details (such as sessions attended, number of absences and reasons for absence);

·     Financial details (in order to ensure effective payment is made)

How We Use Your Personal Information

We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).

Additionally, we use this Order Information to:

•               Communicate with you.

•               Screen our orders for potential risk or fraud.

•               When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

•               We use the Device Information that we collect to help us screen for potential risk and fraud (in   particular, your IP address), and more generally to improve and optimise our Site.

The Lawful Basis On Which We Use This Information

1.    We will only use your information when the law allows us to. Most commonly, we will use your information in the following circumstances: -

2.    Consent: the individual has given clear consent to process their personal data for a specific purpose;

3.    Contract: the processing is necessary for a contract with the individual;

4.    Legal obligation: the processing is necessary to comply with the law (not including contractual obligations).

5.    Vital interests: the processing is necessary to protect someone’s life.

6.    Public task: the processing is necessary to perform a task in the public interest or for official functions, and the task or function has a clear basis in law; and

7.    Legitimate Interests – the processing is necessary for the purposes of the Company’s legitimate interests (or a third party_ provided those interests are not overridden by the rights and freedoms of the data subject.

8.    We share your Personal Information with third parties to help us use your Personal Information, as described above.

9.     We also use Google Analytics to help us understand how our customers use (Purple and Gold).

10. We need all the categories of information in the list above primarily to allow us to comply with legal obligations. Please note that we may process information without knowledge or consent, where this is required or permitted by law.

Storing Data

The Company keeps information on computer systems and sometimes on paper.

Except as required by law, the Company only retains information for as long as necessary in accordance with time frames imposed by law and our internal policy.

Full details on how long we keep personal data for is set out in our data retention policy.

Security

We have put in place measures to protect the security of your information (i.e. against it being accidentally lost, used or accessed in an unauthorised way).

Requesting Access To Your Personal Data

Under data protection legislation, data subjects (including parents and pupils) have the right to request access to information about them that we hold.

You also have the right to: -

·     Object to processing of personal data that is likely to cause, or is causing, damage or distress;

·     Prevent processing for the purposes of direct marketing;

·     In certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and

·     Claim compensation for damages caused by a breach of the data protection regulations.

If you want to exercise any of the above rights, please contact Alicia Findlay at heart@purpleandgold.co.uk in writing. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

Right To Withdraw Consent



In circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact heart@purpleandgold.co.uk Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

Complaints

If you are unhappy about the way that we have handled or used your personal information, you have the right to complain to the UK supervisory authority for data protection, which is the Information Commissioner’s Office (ICO) @ https://ico.org.uk/concerns . Please do contact us in the first instance if you wish to raise any queries or make a complaint in respect of our handling or use of your personal information, so that we have the opportunity to discuss this with you and to take steps to resolve the position. You can contact us using the details set out at the beginning of this privacy notice.

Third Party Websites

Our website contains links to third party websites. If you click and follow those links then these will take you to the third party website. Those third party websites may collect personal information from you and you will need to check their privacy notices to understand how your personal information is collected and used by them.

Changes To This Privacy Notice

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information. This privacy notice was last updated December 2023.