our privacy policy.
How INDIGO Concept collects, uses and protects personal information when you use this website or contact us.
1. How we use your personal data
In this section we set out the categories of personal data we may process, where that data may come from, the purposes for which it may be processed and the legal bases for that processing.
We may process data about your use of our website and services, including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, navigation paths and information about the timing, frequency and pattern of your use. This usage data comes from our analytics tracking system and may be processed for analysing and improving our website and services. The legal basis for this processing is our legitimate interests.
We may process your account data, including your name and email address, for operating our website, providing our services, maintaining security, keeping backups and communicating with you. The legal basis for this processing is our legitimate interests in the proper administration of our website and business.
We may process information included in your personal profile on our website as profile data. This may be processed for enabling and monitoring your use of our website and services. The legal basis for this processing is our legitimate interests.
We may process personal data provided in the course of using our services as service data. This may be processed for operating our website, providing our services, ensuring security, maintaining backups and communicating with you. The legal basis for this processing is our legitimate interests.
We may process information that you post for publication on our website or through our services as publication data. This may be processed for enabling publication and administering our website and services. The legal basis for this processing is our legitimate interests.
We may process information contained in any enquiry you submit to us regarding products or services as enquiry data. This may be processed for offering, marketing and selling relevant products or services to you. The legal basis for this processing is consent.
We may process information relating to transactions you enter into with us or through our website as transaction data. This may include contact details, card details and transaction details. This may be processed to supply purchased goods and services and keep proper records of those transactions. The legal basis is the performance of a contract, steps taken at your request before entering a contract and our legitimate interests.
We may process information provided for subscribing to our email notifications or newsletters as notification data. This may be processed for sending the relevant notifications and newsletters. The legal basis is the performance of a contract or steps taken at your request before entering a contract.
We may process information contained in or relating to any communication that you send to us as correspondence data. This may include the communication content and related metadata and may be processed for communicating with you and for record-keeping. The legal basis is our legitimate interests.
We may also process personal data where necessary for the establishment, exercise or defence of legal claims, for compliance with a legal obligation or to protect your vital interests or the vital interests of another natural person.
Please do not supply any other person's personal data to us unless we prompt you to do so.
2. Providing your personal data to others
We may disclose your personal data to any member of our group of companies where reasonably necessary for the purposes set out in this policy.
We may disclose your personal data to our insurers or professional advisers where reasonably necessary for obtaining and maintaining insurance coverage, managing risks, obtaining professional advice and managing legal disputes.
We may disclose account data to our suppliers or subcontractors where reasonably necessary for the performance of a contract.
Financial transactions relating to our website and services may be handled by our payment services provider, GoCardless. We will share transaction data with our payment provider only to the extent necessary for processing payments, refunding payments and dealing with complaints and queries relating to payments and refunds. You can read GoCardless's privacy policy here: https://gocardless.com/legal/privacy/.
We may also disclose your personal data where disclosure is necessary for compliance with a legal obligation or to protect your vital interests or the vital interests of another natural person.
3. Retaining and deleting personal data
This section sets out our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
Personal data that we process for any purpose will not be kept for longer than is necessary for that purpose.
We will retain account and profile data for up to five years following initial contact, after which it will be deleted from our systems.
In some cases it is not possible to specify retention periods in advance. In those cases, retention periods will be determined by reference to whether you continue to rely on our services.
We may retain your personal data where necessary for compliance with a legal obligation or in order to protect your vital interests or the vital interests of another natural person.
4. Security of personal data
We will take appropriate technical and organisational precautions to secure your personal data and to prevent the loss, misuse or alteration of your personal data.
The following personal data will be stored by us in encrypted form: your name, contact information, passwords and cardholder data.
Data relating to your enquiries and financial transactions sent between your web browser and our web server will be protected using encryption technology.
You acknowledge that the transmission of unencrypted, or inadequately encrypted, data over the internet is inherently insecure and we cannot guarantee the security of data sent over the internet.
You should ensure that any password you use for accessing our website is not susceptible to being guessed. You are responsible for keeping that password confidential and we will not ask you for it except when you log in to our website.
5. Amendments
We may update this policy from time to time by publishing a new version on our website.
You should check this page occasionally to ensure that you are happy with any changes to this policy.
We may notify you of changes to this policy by email.
6. Your rights
You may instruct us to provide you with any personal information we hold about you.
For this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address.
We may withhold personal information that you request to the extent permitted by law.
You may instruct us at any time not to process your personal information for marketing purposes.
In practice, you will usually either expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt out of the use of your personal information for marketing purposes.
7. Third party websites
Our website includes hyperlinks to, and details of, third party websites.
We have no control over, and are not responsible for, the privacy policies and practices of third parties.
8. Personal data of children
Our website and services are targeted at persons over the age of 18.
If we have reason to believe that we hold personal data of a person under that age in our databases, we will delete that personal data.
9. Updating information
Please let us know if the personal information that we hold about you needs to be corrected or updated.
10. About cookies
A cookie is a file containing an identifier, which is a string of letters and numbers, that is sent by a web server to a web browser and stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either persistent cookies or session cookies. A persistent cookie will be stored by a web browser and will remain valid until its set expiry date unless deleted by the user before then. A session cookie will expire at the end of the user session when the browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to information stored in and obtained from cookies.
11. Cookies that we use
We use cookies for the following purposes:
- security, as part of the measures used to protect user accounts, prevent fraudulent use of login credentials and protect our website and services generally;
- analysis, to help us analyse the use and performance of our website and services; and
- cookie consent, to store your preferences in relation to the use of cookies more generally.
12. Cookies used by our service providers
Our service providers use cookies and those cookies may be stored on your computer when you visit our website.
We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google's privacy policy is available at https://www.google.com/policies/privacy/.
13. Managing cookies
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser and from version to version. You can obtain up-to-date information about blocking and deleting cookies via these links:
Blocking all cookies will have a negative impact upon the usability of many websites.
If you block cookies, you may not be able to use all the features on our website.
14. Our details
This website is owned and operated by The INDIGO Concept Ltd.
We are registered in England and Wales under registration number 06941846, and our registered office is at Mill House, Liphook Road, Haslemere, Surrey, United Kingdom, GU27 3QE.
Our principal place of business is at Oakhanger Business Park, Oakhanger, GU35 9JA, United Kingdom.
You can contact us by post using the address above, by using our website contact form, by telephone using the contact number published on our website or by email using the address published on our website.
15. Representative within the European Union
Our representative within the European Union with respect to our obligations under data protection law is William Fairhurst and can be contacted by phone or email using the information published on this website.
16. Data protection officer
Our data protection officer's contact details are William Fairhurst using the contact information published on this website.