GDPR (General Data Protection Regulation) Policy

Introduction

At Rapha3 (referred to as "we," "our," or "us"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, www.rapha3.co.uk (the "Site").

This policy applies to all users of the Site, whether you are a customer, a visitor, or otherwise interacting with us online. By using the Site, you agree to the practices outlined in this policy.

We are committed to complying with the General Data Protection Regulation (GDPR), which governs how we collect, store, and process personal data.

1. What Personal Data Do We Collect?

We may collect and process the following types of personal data:

Identity Data: Name
Contact Data: Email address
Technical Data: IP address, browser type and version, time zone, browser plug-in types, and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage Data: Information about how you use our website, products, and services.
Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

We only collect personal data that is necessary for the services we provide and in accordance with your consent or legal obligations.

2. How Do We Use Your Personal Data?

We use your personal data for the following purposes:

To provide and manage our services: Including customer support.
To improve our website: To ensure that our website is operating effectively and to develop new features based on your usage patterns.
To send marketing communications: We may send you updates, newsletters, or promotional content if you have opted-in to receive these communications.
To comply with legal obligations: For example, record-keeping purposes.
For contractual purposes: To fulfill a contract or enter into a contract with you, such as processing a purchase.

We process your personal data only for the purposes mentioned above and in compliance with GDPR.

3. Lawful Basis for Processing Personal Data

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following lawful bases:

Consent: Where you have given us explicit consent to process your personal data (e.g., when subscribing to our newsletter).
Contractual necessity: When the processing is necessary for the performance of a contract with you, such as processing an order.
Legal obligation: When we need to process your data to comply with a legal requirement (e.g., tax reporting).
Legitimate interests: For our legitimate interests (e.g., improving our services, marketing, and fraud prevention), provided that these interests do not override your fundamental rights and freedoms.

4. How We Share Your Data

We may share your personal data with the following third parties for the purposes outlined in this policy:

Service providers: We may share your data with third-party service providers who help us run the website, process payments, send emails, or perform other business operations.
Legal authorities: We may disclose your data to government authorities, regulatory bodies, or law enforcement agencies if required by law.

We will not sell, trade, or rent your personal data to third parties.

5. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or for as long as required by law. Once your data is no longer needed, we will securely delete it.

6. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You have the right to request copies of your personal data.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erase: You have the right to request that we erase your personal data, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data