Privacy Policy

Privacy Policy

Effective Date: 1st January 2025

1. Introduction

Norwood Aquarium Limited ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR).

2. Information We Collect

We collect personal data when you apply for a trade account with us. The data collected includes:

Full name
Email address
Phone number
Business address

3. How We Collect Your Data

Your data is collected directly from you through our trade account application form available on our website.

4. Purpose of Data Collection

We use your personal data for the following purposes:

Order Fulfilment: To process and deliver your orders.
Customer Service: To manage your account and respond to your inquiries.
Marketing Communications: To send you marketing emails related to our products and services. These communications are sent only to trade account holders, and you can opt out at any time by contacting us at [email protected].

5. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. However, we use Monday.com as our Customer Relationship Management (CRM) system to manage customer interactions and data. Monday.com is a third-party service provider that processes data on our behalf.

6. Data Storage and Transfers

Your data is stored securely within Monday.com's CRM system. Monday.com hosts its customer data in Amazon Web Services (AWS) data centers located in the United States, European Union (Germany), and Australia. By default, customer data is stored in the United States. However, Monday.com offers the option to have data hosted in the EU for Enterprise customers.

Please note that data stored outside the UK may be subject to different data protection laws. Monday.com ensures that appropriate safeguards are in place for international data transfers, including adherence to the EU-U.S. Data Privacy Framework.

7. Data Retention

We retain your personal data for as long as you have an active trade account with us. After account closure, we retain invoice data for seven (7) years to comply with UK tax and legal obligations.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Access: Request access to your personal data.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data.
Restriction: Request restriction of processing your data.
Data Portability: Request transfer of your data to another service provider.
Objection: Object to the processing of your data for certain purposes.
To exercise any of these rights, please contact us at [email protected].

9. Cookies

Our website uses functionality cookies to enhance user experience. We have implemented a cookie banner to obtain your consent before placing cookies on your device. You can manage your cookie preferences through your browser settings.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our CRM provider, Monday.com, employs industry-standard security practices, including data encryption in transit and at rest, regular security audits, and compliance with international security standards such as ISO/IEC 27001.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We encourage you to review this policy periodically for any updates.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Norwood Aquarium Limited
Email: [email protected]