Need help? Call us now on

01747 826269

Privacy Policy and GDPR

cookies

This Privacy Policy includes important information about your personal data and we encourage you to read it carefully.

We are committed to protecting your privacy and complying with the data protection laws in the United Kingdom, including the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. To enhance your online security, we have made our website 100% secure with SSL on all pages. SSL (Secure Sockets Layer) is the standard security technology for creating an encrypted link between a web server and a browser. This ensures that all data passed between the web server and browsers remains private and secure.

We understand that you care about how your personal information is used and shared, and we appreciate your trust in our services and security. We want you to feel confident that your privacy is protected. This notice explains our online information practices and the choices you have regarding the collection and use of your personal information. By visiting Railwayscenics, you agree to the practices outlined in this Privacy Notice.

The independent authority that upholds information rights in the public interest in the United Kingdom is the Information Commissioners Office (the "ICO"). Further information can be found at https://ico.org.uk.

We agree to take reasonable measures to protect your data in accordance with applicable laws and in accordance with our General Terms and Conditions which can be found at https://www.railwayscenics.com/conditions.php.

Introduction

Railwayscenics are committed to safeguarding the privacy of our website visitors.

This policy applies where we are acting as a data controller with respect to the personal data of our website visitors, where we determine the purposes and means of the processing of that personal data.

We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our website. Our website incorporates privacy controls which affect how we will process your personal data. By using the privacy controls, you can specify whether you would like to receive direct marketing communications.

In this policy, "we", "us" and "our" refer to Railwayscenics.

What personal information does Railwayscenics gather?

During the account creation and the checkout process we ask for the minimum of information from you. The information we obtain from you helps us personalise and continually improve your shopping experience at Railwayscenics.

Information you give us: When you use the Railwayscenics online Model Railway Shop and make a purchase, Railwayscenics will collect and process the information you provide to fulfil your order. To proceed with your purchase, you will need to register as a customer, creating a username and password, and provide contact details such as your first and last names, address, contact phone number, and any other necessary information. This information will also be used for accounting and auditing purposes, as well as to address any inquiries or complaints you may have.

During the registration process, you will have the option to consent to Railwayscenics using your personal data for our own marketing purposes. If you decide to opt-in, you may change your mind at any time, and opt-out of receiving marketing communications and newsletters from us by clicking the unsubscribe link at the bottom of all newsletters, or changing the setting from within your account.

You can also choose not to provide certain information, but then you might not be able to take advantage of many of our website features. If you contact us by email, or through a web page to request information, report a problem or provide feedback on our services or products, we will use the information you provide to respond to your message, address the issue you have raised, and to make improvements to our services. We do not use this information for other purposes.

Should you contact us using our online Contact Us form, we gather your email address and the contents of the message. We only keep that information until your question has been answered, or your query has been resolved. Copies of all emails are then deleted.

How long do we keep your information? The information that we are given when you place an order is usually kept for 6 years from the end of the financial year that you placed the order. This is done because we need to keep tax records in accordance to any tax rules and regulations.

Any information you give us when making an enquiry about our products or services is only kept as long as we need it. Ideally once we have answered your query, we destroy or delete any information you give us.

Personal information accuracy: The information we obtain from the website will be kept up to date. Should we receive notice from you that some of your information has changed, we will update our data in accordance to that given by you. It is also possible for you to access all your account information and to update it yourself by accessing your personal account.

Payment card information

Railwayscenics conform to PCI (Payment Card Industry) Legislation regarding the protection of cardholders data and personal information. All transactions take place outside of our website on a secured server. Personal payment card information is not published in any form on the website and is not accessible to staff at Railwayscenics.

Does Railwayscenics share the information it receives?

We respect your privacy and value your business. We never share your account contact or payment information with any third-party vendor, associate, or service provider unless it is absolutely necessary to complete your transaction and order. Your payment card details are collected and securely stored by our payment service providers. Only the card type and the last four digits of your card number are shared with us for accounting and audit purposes.

We use two payment processors to take payments on the website. The first is PayPal. You can review the PayPal privacy policy at www.paypal.com. We will share information with PayPal only to the extent necessary for the purposes of processing payments you make via our website and dealing with complaints and queries relating to such payments.

We also use a payment processor called Stripe. You can see the Stripe privacy policy at www.stripe.com. We will share information with Stripe only to the extent necessary for the purposes of processing payments you make via our website and dealing with complaints and queries relating to such payments.

To ensure that your credit/debit card is not being used fraudulently our payment providers will actively check the address you provide along with the CV2 value you entered against the card issuers records. In performing these actions, your address and CV2 will be sent to the card issuers systems. The card issuer will then return a response indicating if it has matched or not. We are not responsible for the values returned.

We also share your contact information with our delivery partners, so that items ordered can be delivered to you in a timely manner.

How secure is information about me?

Railwayscenics uses industry standard encryption technologies to securely protect any information when sending and receiving customer data.

Any passwords stored on the site are encrypted and even we cannot see what you have entered. As with most other online shops, we do recommend that you do not use the same password on multiple sites. You are responsible for keeping your password confidential, and you agree not to share that password with anyone else.

In the event of a data breach, we shall ensure that our obligations under applicable data protection laws are complied with where necessary.

Which information can I access?

Railwayscenics provides you with access to a wide range of information about your account and interactions with us. This is primarily for viewing and, in some cases, updating your information. All the information we hold about you is accessible in your account area. You have the right to view, modify, update, and download all the information we hold, directly from your account area.

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance.

How do we store and protect your personal information?

Railwayscenics are committed to protecting your personal information once we have it. We implement physical, business and technical security measures to protect your information. Our hosting service also has measures to stop information theft.

We also do not want to keep your personal information for any longer than we need it, so we only keep it long enough to do what we collected it for. Once we do not need it, we take steps to destroy it unless we are required by UK law to keep it longer.

However, no website or internet transmission is completely secure. We urge you to take your own steps to keep your personal information safe, such as choosing a strong password and keeping it private, as well as logging out of your user account, and closing your web browser when you have finished using the Railwayscenics website on a shared or unsecured device.

Your rights

As a data subject, you have the following legal rights:
(a) the right of access to personal data relating to you
(b) the right to correct any mistakes in your information
(c) the right to ask us to stop contacting you with direct marketing
(d) the right to prevent your personal data being processed in some circumstances
(e) the right to erasure in some circumstances

If you would like to exercise your rights please contact us. We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months. Please note that exceptions apply to some of these rights which we will apply in accordance with the law and provision of such information will be subject to the supply of appropriate evidence of your identity.

Unsubscribing from promotional emails

Customers who wish to stop receiving any marketing email communications or amend their preferences can do so quickly and easily. All marketing emails include an Unsubscribe link. Alternatively, it is possible to alter your settings within your account page on the website. Please note that emails relating to the status of orders or transactions will still be sent and received.

Children

The Website is not intended for use by children, especially those under 16. No one under the age of 16 is allowed to provide any personal information or to use our website without parental consent. Accordingly, it is up to parents to ensure that their children abide by our Terms and Conditions. If you are a parent or guardian and you believe your child has provided us with personal data, please contact us.

What about cookies?

On 26 May 2011, the rules about cookies on websites changed. Railwayscenics may use both "session" cookies and "persistent" cookies on the website. Session cookies will be deleted from your computer when you close your browser. These types of cookies are used to track you whilst you navigate the website, and check your login status and shopping basket. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiry date. These cookies will remember things like your user preferences, settings and information for future visits.

For further information look here on the Information Commissioners Office website.

Most browsers allow you to reject all cookies, whilst some browsers allow you to reject just third-party cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.

Visiting our website and the use of cookies

Cookies are small text files, used by your web browser to store visitor session data on your computer for websites that you visit. They are commonly used on the internet in order to make websites work more efficiently and to enhance user experience, as well as to provide relevant information to our website team.

Cookie consent

When you visit our website for the first time, you will be presented with a cookie information message stating that our site tries to use cookies.

By configuring your browser to accept cookies, we take this as consent to store them and they will be used. Otherwise, cookies will not be used unless, and until you consent by configuring your browser to allow them.

If you have configured your web browser to accept cookies, then you can clear the cookie information message which will store a cookie to say that you have done so (the Site cookie acceptance is detailed below).

You may choose to delete any cookies from your computer between visits to our website. We recommend that if you have concerns about the privacy implications of the cookies this website or any potentially integrated third party sites uses, then you should investigate how to do this by using the cookie management tools in your web browser.

What cookies does the Railwayscenics website use?

Railwayscenics website only uses a few cookies, none of these are classed as intrusive and all are explained below.

Site cookie acceptance: This cookie is used to record if a user has accepted the use of cookies on the Railwayscenics website.

OSCid: This cookie is essential to be able to use our website. It is created as soon as you visit our website, and stores a unique identifier for your session. This session cookie is not permanently stored on your hard drive and expires as soon as you leave the website. This cookie is used to enhance your shopping experience.

Session cookies allow users to be recognised within a website so any page changes or item or data selection you do is remembered from page to page. The most common example of this functionality is the shopping cart feature of any e-commerce site. When you visit one page of a catalogue and select some items, the session cookie remembers your selection so your shopping cart will have the items you selected when you are ready to check out. Without session cookies, if you click CHECKOUT, the new page does not recognize your past activities on prior pages and your shopping cart will always be empty. You can adjust your session cookies through the settings feature of your browser.

Google Analytics Cookies (_utma, _utmb, _utmc, _utmz): Railwayscenics website uses Google Analytics, a web analytics service provided by Google Inc. Google Analytics sets a cookie in order to evaluate your use of the website and compile reports for us on activity on the website. The usage data may include your IP address, geographical location, browser version and type, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your visit. It is using these reports that we base our decisions on where information should be placed to make it easier for you to find.

Google have developed a browser Add-on which excludes Google Analytics recording your activities on any websites using Google Analytics. It is totally free and can be installed on most browsers. Please visit the Google website for more information. Googles privacy policy is available at: http://www.google.com/privacypolicy.html.

Conditions of use policies, and revisions

If you choose to visit Railwayscenics, your visit and any dispute over privacy is subject to this notice and our Website Usage Policy. If you have any concern about privacy of your personal information as used and collected within our website, please send us a thorough description and we will try to resolve it.

Disclosures

We may disclose information about you to any of our employees, officers, agents, suppliers or subcontractors in so far as reasonably necessary for the purposes as set out in this Privacy Policy.

In addition, we may disclose your personal information:
(a) to the extent that we are required to do so by law;
(b) in connection with any legal proceedings or prospective legal proceedings;
(c) in order to establish, exercise or defend our legal rights including providing information to others for the purposes of fraud prevention and reducing credit risk;

Links to other websites

Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links and leave our site, we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites, and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Acceptance of these Conditions

We assume that all visitors of our website have carefully read this document and agree to its contents. If someone does not agree with this Privacy Policy, they should refrain from using our website.

Changes to our privacy policy

Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email and in our newsletter if you are subscribed. Continued use of Railwayscenics website after having been informed of any such changes to these conditions implies acceptance of the revised Privacy Policy. This privacy policy is an integral part of our terms and conditions.