The 7th Heaven privacy policy lets you know what happens to any personal data that you give to us, or any that we may collect from you. This privacy notice applies to personal information processed by, or on behalf of, 7th Heaven Bridal.

Changes to this privacy notice
We may change this privacy notice from time to time in order to reflect changes in the law and/or our privacy practices.
7th Heaven Bridal and our Data Protection Officer (DPO)
We are 7th Heaven Bridal, 63 Lawton Street, Congleton, Cheshire, CW12 1RU. We are a data controller of the personal data we hold about customers who contact us and/or attend our premises.
We have a dedicated data protection officer. You can contact the DPO by writing to the above address, marking it for the attention of the DPO. Our DPO is Mr J. Norris.

What kinds of personal information about you do we process?
Personal information that we’ll process in connection with you includes:
• Customer personal and contact details, such as title, full name, contact details and contact details history
• Date of proposed marriage/ceremony
• Body measurements taken for the purpose of dress sizing.
• Records of your contact with 7th Heaven Bridal.
• Financial information required for the processing of any order you make.

What is the source of your personal information?
We’ll collect personal information from the following sources:
• From you via the telephone, text messaging and/or email.
• Information collected when you attend our premises.
• Financial information collected as a result of processing a payment you make.

What do we use your personal data for?
We use personal data for the following purposes:
• Assessing your dress requirements.
• Ordering and taking delivery of any order you place.
• Passing to a seamstress whom you agree to use to make alterations to the dress.
• Management and auditing of our business performance.
• Complying with legal and regulatory obligations, requirements and guidance.
• Direct marketing communications to you from 7th Heaven Bridal only.

What are the legal grounds for our processing of your personal information (including when we share it with others)?
We rely on the following legal bases to use your personal data:
• Where it is needed to provide you with a dress provision service.
• Where it is needed to support your need for alterations by a seamstress agreed with you.
• Management and audit of business operation, particularly accounting.
• Complying with our legal obligations.

When do we share your personal information with other organisations?
We do not share it with other organisations. The exceptions are:
• Your name and dress size with our dress suppliers.
• Your name, address, contact details, wedding date and body measurements to the agreed seamstress.

How and when can you withdraw your consent?
There are no circumstances where we require your written consent to collect the personal data above. Without it we cannot offer you our dress procurement service.

Is your personal information transferred outside the UK or the EEA?
Yes, limited personal data (name and dress size) to your chosen dress suppliers where they are located outside of the UK and EEA.

What should you do if your personal information changes?
You should contact us so that we can update our records.

Do we do any monitoring involving processing of your personal information?
Monitoring means any: listening to, viewing of, intercepting of, or taking and keeping records (as the case may be) of calls, email, text messages, social media messages, in person (face to face) meetings and other communications.
We may monitor where permitted by law and we’ll do this where the law requires it, or to comply with regulatory rules, to prevent or detect crime, in the interests of protecting the security of our communications systems and procedures and for quality control and staff training purposes. This information may be shared for the purposes described above.

For how long is your personal information retained by us?
Unless we explain otherwise to you, we’ll hold your personal information based on the following criteria:
• For as long as we provide dress provision services to you and then for a period of 7 years thereafter to comply with retention periods in line with legal and regulatory requirements or guidance.

What are your rights under data protection laws?
Here is a list of the rights that all individuals have under data protection laws. They don’t apply in all circumstances to all data and its processing. If you wish to use any of them, we’ll explain at that time if they are appropriate or not.
• Be informed about the processing of your personal information
• Have your personal information corrected if it is inaccurate and to have incomplete personal information completed
• Object to processing of your personal information
• Restrict processing of your personal information
• Have your personal information erased (the “right to be forgotten”)
• Request access to your personal information and obtain information about how we process it
• Move, copy or transfer your personal information (“data portability”)
• You have the right to complain to the Information Commissioner’s Office which enforces data protection laws: https://ico.org.uk/.

Your right to object
You have the right to object to our use of personal data for processing purposes where you believe these extend beyond the legitimate pursuit of providing a dress provision service to you.

Contact Us
If you have any questions about this privacy notice, or if you wish to exercise your rights or contact the DPO, you can contact us and seek clarification asking for the attention of the DPO.

24th May, 2018