Last updated: 20th September 2024
1. Introduction
Britain Gadgets ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website scapoabbam.com, use our services, or purchase our health technology products.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, postal address
- Account Information: Username, password, and preferences
- Payment Information: Billing address, payment method details (processed securely by our payment processors)
- Health Data: Information collected through our health monitoring devices (with your explicit consent)
- Communication Records: Emails, phone calls, and chat conversations with our support team
2.2 Technical Information
We automatically collect certain technical information:
- IP address and location data
- Browser type and version
- Device information and operating system
- Website usage patterns and preferences
- Cookies and similar tracking technologies
3. How We Use Your Information
3.1 Legitimate Business Purposes
We use your personal information for the following purposes:
- Order Processing: To process and fulfil your orders, including shipping and customer service
- Customer Support: To respond to your enquiries and provide technical assistance
- Product Improvement: To enhance our products and services based on customer feedback
- Marketing Communications: To send you promotional materials (with your consent)
- Legal Compliance: To comply with applicable laws and regulations
3.2 Health Data Processing
For health monitoring devices, we process health data only:
- With your explicit consent
- To provide the health monitoring services you've requested
- To share with healthcare providers (only with your permission)
- For medical research purposes (anonymised and with your consent)
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: To fulfil our contractual obligations to you
- Legitimate Interests: For business operations, fraud prevention, and service improvement
- Consent: For marketing communications and health data processing
- Legal Obligation: To comply with applicable laws and regulations
5. Information Sharing and Disclosure
5.1 Third-Party Service Providers
We may share your information with trusted third parties who assist us in:
- Payment processing (Stripe, PayPal)
- Shipping and logistics (Royal Mail, DHL, UPS)
- Email marketing services (MailChimp)
- Website analytics (Google Analytics)
- Customer support platforms
5.2 Healthcare Providers
With your explicit consent, we may share health monitoring data with:
- Your designated GP or healthcare provider
- NHS systems (where applicable and consented)
- Specialist consultants involved in your care
5.3 Legal Requirements
We may disclose your information when required by law or to:
- Protect our rights and property
- Prevent fraud or illegal activities
- Respond to court orders or legal processes
- Protect public safety
6. Data Security
We implement robust security measures to protect your personal information:
- Encryption: All data transmission is encrypted using SSL/TLS protocols
- Access Controls: Strict access controls and authentication requirements
- Regular Audits: Regular security assessments and vulnerability testing
- Staff Training: Comprehensive data protection training for all employees
- Secure Storage: Data stored in secure, UK-based servers with backup systems
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
Specific retention periods:
- Customer Account Data: Until account deletion or 7 years of inactivity
- Order Information: 7 years for tax and accounting purposes
- Health Data: As long as you use our monitoring services, then 3 years after termination
- Marketing Data: Until you unsubscribe or withdraw consent
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
8.1 Right of Access
You can request a copy of the personal data we hold about you.
8.2 Right to Rectification
You can ask us to correct any inaccurate or incomplete personal data.
8.3 Right to Erasure
You can request deletion of your personal data in certain circumstances.
8.4 Right to Restrict Processing
You can ask us to limit how we use your personal data.
8.5 Right to Data Portability
You can request your data in a portable format to transfer to another service.
8.6 Right to Object
You can object to processing based on legitimate interests or for marketing purposes.
8.7 Right to Withdraw Consent
You can withdraw consent for data processing at any time.
9. Cookies and Tracking Technologies
9.1 Types of Cookies We Use
- Essential Cookies: Required for website functionality
- Analytics Cookies: To understand website usage and improve performance
- Marketing Cookies: To deliver relevant advertisements (with consent)
- Preference Cookies: To remember your settings and preferences
9.2 Managing Cookies
You can control cookies through:
- Our cookie preference centre
- Your browser settings
- Third-party opt-out tools
10. International Data Transfers
Your personal data is primarily processed within the UK. When we transfer data internationally, we ensure:
- Adequate protection through adequacy decisions
- Appropriate safeguards such as Standard Contractual Clauses
- Compliance with UK GDPR requirements
11. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our website
13. Contact Information
For any questions about this Privacy Policy or to exercise your rights, please contact us:
14. Regulatory Authority
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
This Privacy Policy was last updated on 20th September 2024 and is effective immediately.