Privacy Policy

Privacy Policy

lorcanseward.co.uk

Effective Date: 06 May 2025

This Privacy Policy describes how lorcanseward.co.uk ("we," "us," or "our") collects, uses, and discloses your personal information when you visit or use our website at lorcanseward.co.uk (the "Site"). We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and other applicable UK data protection laws.

1. Information We Collect

The primary personal data we collect and store when you register an account or interact with our Site includes:

Account Identifiers:
A unique User ID generated for your account.
Your chosen Username.
Your Email Address.

Account Status Information:
Confirmation status of your Email Address.
Your provided Phone Number (please note: based on the data structure, this field may be empty or not actively used to store a contact number unless provided and confirmed by you).
Confirmation status of your Phone Number.
Status of Two-Factor Authentication being enabled.
Any Authenticator Key associated with two-factor authentication (please note: based on the data structure, this field may be empty or not actively used unless two-factor authentication is enabled).

Information Collected Automatically: When you access and use the Site, we may automatically collect certain information about your device and your usage of the Site, including:
Your IP address
Browser type and version
Operating system
Referring URLs
Pages you view on our Site
The time and date of your visit
The time spent on those pages
Unique device identifiers and other diagnostic data

Information Collected Through Cookies and Similar Technologies: We use cookies and similar tracking technologies to track the activity on our Site and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. We use cookies to enable core functionality, remember your login, and analyse site traffic. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

We do NOT collect or store personal data such as your full name (if different from your Username/Email), physical address, payment card details, date of birth, or gender, unless explicitly provided by you through other means not reflected in the primary account data structure and for a stated purpose. We aim to collect only the personal data necessary for the functionality and security of your account and our services.

2. How We Use Your Information

We use the information we collect for the following purposes under the legal bases provided by the GDPR:

To provide and maintain the Site: (Legal Basis: Performance of a contract) We use your account information to create and manage your user account and provide you with access to the features and services of the Site.
To communicate with you: (Legal Basis: Performance of a contract, Legitimate interests, Consent) We use your email address to send you important updates about your account, respond to your inquiries, and provide customer support. If you opt-in, we may also use your email address to send you newsletters or promotional communications.
To ensure the security of your account: (Legal Basis: Legitimate interests, Legal obligation) We use your account information, including email confirmation status and two-factor authentication settings, to help secure your account and prevent unauthorized access.
To analyze Site usage and improve our services: (Legal Basis: Legitimate interests) We use automatically collected information and cookie data in an aggregated and anonymized form to understand how users interact with our Site, identify areas for improvement, and optimize performance.
To detect, prevent, and address technical issues: (Legal Basis: Legitimate interests)
To comply with legal obligations: (Legal Basis: Legal obligation) We may process your personal information where required by law.

3. How We Share Your Information

We only share your personal information in limited circumstances and in accordance with GDPR. We may share your information with third parties in the following situations:

With Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include hosting providers, email service providers (if used for sending emails to you), and analytics providers (like Google Analytics, subject to their own privacy policies and GDPR compliance). We only share the minimum information necessary for them to perform their services and have contracts in place to ensure they protect your data.

For Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
With Your Explicit Consent: We may disclose your personal information for any other purpose if you have given us your clear and affirmative consent to do so.
Legal Requirements: We may disclose your information if required to do so by law, regulation, or legal process, such as in response to a court order or a request from a regulatory authority.
To Protect Our Rights: We may disclose your information when we believe it is necessary to investigate, prevent, or take action regarding potential violations of our terms of service, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in legal proceedings.

We do not sell your personal data to third parties.

4. International Data Transfers

We may transfer your personal information to service providers located in countries outside the United Kingdom and the European Economic Area (EEA). In such cases, we will take steps to ensure that your personal information receives an adequate level of protection, such as by implementing Standard Contractual Clauses approved by the European Commission or the ICO, or by relying on other lawful transfer mechanisms.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your personal data is no longer required, we will securely delete or anonymize it.

6. Your Data Protection Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal information:

The right to be informed: You have the right to be informed about how your personal data is collected and used. This privacy policy serves to fulfill this right.

The right to access: You have the right to request a copy of the personal data we hold about you.
The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure (also known as the 'right to be forgotten'): You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The right to withdraw consent: Where we are processing your personal information based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
The right to lodge a complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk), if you believe we have not complied with data protection laws. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

To exercise any of these rights, please contact us using the contact information provided below.

7. Data Security

We have implemented appropriate technical and organizational measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. However, the transmission of information via the internet is not completely secure, and we cannot guarantee the security of your personal information transmitted to our Site.

8. Third-Party Links

Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. Children's Privacy

Our Site is not intended for individuals under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this policy. If we make significant changes, we may provide more prominent notice, such as by email or a notice on the Site. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

By email: contact@lorcanseward.co.uk