1.1 One Woman Owner (OWO) are committed to safeguarding the privacy of our website visitors, service users and customers.
1.2 This policy applies where OWO are acting as a data controller with respect to the personal data of our website visitors, service users and customers.
1.3 In this policy, the terms “we”, “us” and “our” refer to OWO.
1.4 OWO may use personal data that our website visitors, service users and customers provide to us. This policy provides information in relation to the processing of the personal data of our website visitors, service users and customers, specifically:
– what personal data about our website visitors, service users and customers are processed by OWO
– the purposes of the processing for which the personal data are intended
– the legal basis for the processing
– if applicable, the recipients or categories of recipients of the personal data OWO processes (e.g. any data shared that may be shared with third parties)
– the period for which the personal data will be stored
– your rights in regard to access and control over your personal data
1.5 This privacy statement only covers the OWO website (www.onewomanowner.com). It does not cover other websites that can be linked to from this site, so you should always be aware when you are moving to another site and read the privacy statement on that site.
1.6 OWO processes all personal data according to the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations and the General Data Protection Regulations (GDPR).
2.1 This document was created using a template from SEQ Legal (https://seqlegal.com/free-legal-documents/privacy-policy).
- How we use your personal data
3.2 Personal data processed when you visit our website (“Usage data”):
Personal data consisting of your ‘cookie data’ (IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use) may be processed when you visit our website. (Please see ‘cookie’ section for more details)
The purpose of this processing is for analysis of the use of our website and services to improve our website and services to provide a better user experience.
The legal basis for this will be through your consent when you first visit the website.
3.3 Personal data processed when you create a profile with our website and services (“profile data”):
When creating a profile within our website, we will need to process your personal data including your first name, last name and email address.
The purpose of this processing is to improve our website and services, to provide a better user experience and to provide you with relevant offers and information in relation to our services.
The legal basis for this processing will be through your consent when setting up your profile.
3.4 Personal data processed when you register an account with our website and services (“account data”):
When registering an account to advertise your vehicle, we will need to process your personal data including your first name, last name, email address, telephone number and financial information (credit and debit card details).
The processing of your payment information (and the legal basis for the processing) is necessary for the performance of a contract of service between yourself and us, and/or taking steps, at your request, to enter into such a contract of service for advertising your vehicle.
The processing of your first name, last name, email address and telephone number is for the purposes of operating our website, the provision of our services, ensuring the security of our website and services, and communicating with you. The legal basis for this is through your consent.
3.5 Personal data processed when using our Concierge service:
When using our concierge service, we will need to process your personal data including your name, telephone number and email address.
The purpose of this processing is to contact yourself in regard to the provision of this service.
The legal basis for this processing will be through your consent.
- Processing and disclosing personal by/to third parties, embedded and affiliated content
4.1 Our website is hosted by Amazon Web Services (AWS) a subsidiary of Amazon.com, Inc. AWS process all personal data provided by yourself to us for the purposes of the management and administration of the OWO website, and for this sole purpose only. AWS is hosted in Ireland
All personal data processed by AWS on our behalf will be done so in strict adherence to the DPA 2018, EC Directive and the GDPR.
Within our website users will find embedded third-party content, specifically for the purposes of vehicle insurance quotes estimates. Personal data, including demographic data, contact details, vehicle ownership, occupation and financial data may be shared with our partners for this purpose.
We will not disclose your personal data to any other third party for any other purpose unless there is an overriding legal obligation to do so.
- Retention of personal data
6.1 Personal data processed by us will be held for at minimum as long as is necessary to fulfill the purposes that it was processed for. In any case, any personal information received in relation to payment with your account data will be held for a minimum of 7 years.
All personal data will be regularly reviewed to determine whether it is needed to fulfill the original purpose that it was collected for. Any data no longer needed will be securely destroyed.
7.1 We may update this policy from time to time by publishing a new version on our website.
7.2 We will notify account holders and users with profiles of any significant changes to this policy through contact details you have supplied to us.
- Your rights
8.1 The GDPR includes a number of rights that you can request in relation to the personal data we process about you. We must generally respond to requests in relation to your rights within one month, although there are some exceptions to this. The availability of some of these rights depends on the legal basis that applies in relation to the processing of your personal data and may not be upheld. These rights include:
– Right to be informed whether we process your personal personal data, the purpose of its use and the legal basis of the processing.
– Right of access to a copy of the personal data we process about you.
– Right to rectification of any inaccurate data we hold about you.
– Right to erasure (‘right to be forgotten’) of personal data about you that we hold.
– Right to restriction of processing of personal data about you that we hold.
– Right to data portability, whereby you may request any personal data about you processed by us using consent as a legal basis be transferred to yourself or a nominated third party in a commonly used electronic format.
– Right to object to processing of personal data about you on grounds relating to your particular situation.
– Right not to be subject to a decision based solely on automated processing, including profiling, should we perform any automated processing.
8.2 Where we have used consent as a legal basis to process your personal data, you may withdraw your consent at any time.
8.3 You may contact us about requesting any of these rights, or for the withdrawal of your consent via ([email protected])
8.12 You also have the right to complain to the Information Commissioner if you are not happy with any aspect of our processing of personal data or believe that we are not meeting our responsibilities as a data controller. The Information Commissioner can be found at https://ico.org.uk/.
- About cookies, and cookies we use
9.1 A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
9.2 Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
9.3 Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
[additional list items]
- Cookies used by our service providers
[additional list items]