Introduction

This privacy notice provides you with details of how I collect and process your personal data through your use of the following websites:

• Mandy-Morello.com
• TheCarouser.com,
• Shop.TheCarouser.com

including any information you may provide through the websites when you purchase a product or service, sign up to our newsletters or take part in a prize draw or competition.

If you are not happy with any aspect of how Mandy Morello collects and uses your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. Where possible, we ask that you contact us first so we can resolve any issues that you might have.

The Data We Collect
Personal data means any information capable of identifying an individual. It does not include anonymised data. We may process certain types of personal data about you as follows:

• Identity Data may include your first name, maiden name, last name, username, marital status, title, date of birth and gender.
• Contact Data may include your billing address, delivery address, email address and telephone numbers.
• Financial Data may include your bank account and payment card details.
• Transaction Data may include details about payments between us and other details of purchases made by you.
• Technical Data may include your login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access this site.
• Profile Data may include your username and password, purchases or orders, your interests, preferences, feedback and survey responses.
• Usage Data may include information about how you use our website, products and services.
• Marketing and Communications Data may include your preferences in receiving marketing communications from us and our third parties and your communication preferences.

How We Collect Personal Data
We collect data about you through a variety of different methods including:

Direct interactions: You may provide data by filling in forms on our sites or by communicating with us by post, phone, email or otherwise, including when you:

• Order products or services
• Subscribe to our service or publications
• Make an account on our site
• Request resources or marketing be sent to you
• Enter a competition, prize draw, promotion or survey; or
• Give me feedback.

Automated technologies or interactions: As you use our site, we may automatically collect Technical Data about your equipment, browsing actions and usage patterns. We collect this data by using cookies, server logs and similar technologies.

How we use your personal data
We will only use your personal data when legally permitted. The most common uses of your personal data are:

• Where we need to perform the contract between us;
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
• Where we need to comply with a legal or regulatory obligation.

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

• Internal record keeping;
• We may use the information to improve products and services;
• We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided;
• From time to time, we may also use your information to contact you for market research purposes by email. 

Generally, we do not rely on consent as a legal ground for processing your personal data, other than in relation to sending marketing communications to you via email. You have the right to withdraw consent to marketing at any time by clicking the unsubscribe link at the bottom of every email or by emailing accounts@thecarouser.com

Security
We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Mobile device privacy
The following applies to our sites when viewed on a mobile device:
When accessed with a mobile device, our sites may collect information automatically, such as the type of mobile device you have, device identifiers and information about your use of the site. Regardless of the device you use to access the site, it will also collect information you provide, as well as information about your interaction with the site and its content.
​
If location services are activated on your mobile device, our sites may collect information about the location of your device. Your mobile network service providers may collect device-specific information, such as a device identifier, when you use our websites. This information collected by your mobile network service will not be associated with your user account with us, or with your personally identifiable information.

Cookies
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.
​
We may use both “session” cookies and “persistent” cookies on the website. Session cookies will be deleted from your computer when you close your browser. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiry date.
​
We will use the session cookies to keep track of you whilst you navigate the website and to prevent fraud and increase website security. We will use the persistent cookies to enable our websites to recognise you when you visit and keep track of your preferences in relation to your use of our websites.
​
We use Google Analytics to analyse the use of our websites. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated relating to our websites is used to create reports about the use of the website. Google will store this information. Google’s privacy policy is available at http://www.google.com/privacypolicy.html.
​
In most Internet browsers, you can change your settings so that you will be warned each time a cookie is being sent, or so that cookies will be turned off. With cookies blocked, some functions of the site may not operate properly.

Disclosure of your personal data
We may disclose your personal information to any of my employees, officers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this privacy policy.
In addition, we may disclose your personal information:

• to the extent that we are required to do so by law;
• in connection with any ongoing or prospective legal proceedings;
• in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
• to the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling; and
• to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
  Except as provided in this privacy policy, we will not provide your information to third parties.

Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

By law, we must keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

Links to other websites
Our websites may contain links to other websites of interest. However, once you have used these links to leave my site, you should note that I do not have any control over that other website. Therefore, I cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to

• Request access to your personal data;
• Request correction of your personal data;
• Request erasure of your personal data;
• Object to the processing of your personal data;
• Request restriction of processing your personal data;
• Request transfer of your personal data;
  ​
  You can see more about these rights at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
  If you wish to exercise any of the rights set out above, please email accounts@thecarouser.com.
  ​
  You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We try to respond to all legitimate requests within one month. Occasionally it may take me longer than a month if your request is particularly complex, or you have made several requests. In this case, we will notify you and keep you updated.

Policy Amendments
We may update this privacy policy from time to time by posting a new version on my website. You should check this page occasionally to ensure you are happy with any changes. We may also notify you of changes to our privacy policy by email if you have elected to receive these.