The Groom Collection is committed to protecting your privacy. We use the information we collect about you to process orders and to provide a personalised service to you when you visit our website.
At The Groom Collection, we appreciate that you do not want the personal information you provide to us distributed indiscriminately and here we explain how we collect information, what we do with it and what controls you have.
This policy sets out:
1. What information we collect and how it is used
3. Our promotional updates and communications
4. When we share information with outside parties
5. Where information is stored and how long it is stored for
6. Payment processing
7. How we protect personal information
8. Your rights regarding your personal information
9. Changes to this policy
10. Contacting us
For the purposes of European data protection law, (“Data Protection Law”), the data controller is:
The Groom Collection Limited
423/425 Triq il Kbira,
San Gusepp St Venera
T: +356 21236327
1. WHAT INFORMATION WE COLLECT AND HOW IS IT USED
When you order we need to know:
your name, e-mail address, delivery address, debit/credit card number and expiry date;
your telephone number to enable us to contact you if there is a problem with your order;
your ceremony or degree details.
We sometimes need to know your Student ID number.
We need this information for our contract with you so that we can process and fulfil your order, notify you of your order status and assist you if there is a problem with your order. We also use this information to administer your account with us and verify and carry out financial transactions in relation to payments you make under our contract with you.
When you submit an order on the website, we may also ask you questions about what kind of products and services you would like to be able to buy. If you answer those questions, we may keep a record of your answers for the purposes of our legitimate interests to help us to improve our products and services generally.
We may also use your email and address details to notify you (by email or post) about:
important functionality changes to the website, and about new The Groom Collection products, services and special offers we think you would appreciate, where you have given your consent to receiving this information from us where required by law or otherwise in our legitimate interests, provided these interests do not override your right to object to such communications. If you change your mind and would rather not receive this information please send an email at any time to [email protected].
products, services and special offers offered by our business partners (including banks, hotels, recruitment services providers, and hospitality sector businesses) that we think you would appreciate, where you have given your consent to receiving such marketing material from us at the point we collected your information, If you change your mind and would rather not receive this information please send an email to [email protected].
See also ‘Our promotional updates and communications’ for further information’
We will automatically collect information from you each time you visit our website. This includes: technical information, information about your visit and location data. We use this to ensure in our legitimate interests that content from our website is presented in the most effective manner for you and for your computer or device, and we provide you with the information, products and services that you request from us.
As part of the provision of our services to you and the institutions we work with, we may take group photographs at ceremonies which if you choose to participate, we may in our legitimate interests (provided these interests do not override your right to object to such uses):
(a) display and made generally available for sale on the The Groom Collection website (and any successor to that website);
(b) display and made generally available for sale in other The Groom Collection publications; and
(c) use for promotional purposes.
3. OUR PROMOTIONAL UPDATES AND COMMUNICATIONS
Where permitted in our legitimate interest or with your prior consent where required by law, we will use your personal information for marketing analysis and to provide you with promotional update communications by email or post about our products/services or those of business partners identified to you.
You can object to further marketing at any time by checking and updating your contact details within your account, or selecting the “unsubscribe” link at the end of all our marketing and promotional update communications to you, or by sending us an email [email protected].
4. WHEN WE SHARE INFORMATION WITH OUTSIDE PARTIES
We may disclose your personal information in the following circumstances to:
Organisations who process your personal information on our behalf and in accordance with our instructions and the Data Protection Law. This includes in supporting the services we offer through the website in particular those providing website and data hosting services, distributing any communications we send, supporting or updating marketing lists, and providing IT support services from time to time. These organisations (which may include third party suppliers, agents, sub-contractors will only use your information subject to contractual safeguards and only to the extent necessary to perform their support functions.
Your educational institution (which may be selected by you on our website) with whom we have entered into agreements in relation to the processing of your personal information.
Payment processing providers who provide secure payment processing services. (note your payment card details are not shared with us by the provider).
Our business partners (including banks, hotels, recruitment services providers, and hospitality sector businesses) where you have given your consent to receiving marketing material about their products, services and special offers from them at the point we collected your information, If you change your mind and would rather not receive this information please send an email to [email protected].
We may also disclose your personal information to third parties:
If The Groom Collection or substantially all of its assets are acquired by a third party, in which case personal information held by it about its customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms of supply terms and other agreements with you; or to protect the rights, property, or safety of The Groom Collection, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction and to prevent cybercrime.
5. WHERE IS THE INFORMATION STORED, AND HOW LONG IS IT STORED FOR?
Information which you submit via this website is sent to a computer located in the United Kingdom. This is necessary in order to process the information and to send you the information you have requested.
Information submitted by you may be transferred by us to, and stored at, a destination outside the European Economic Area (“EEA”) that may not be subject to equivalent Data Protection Law.
We retain personal data for as long as you have an account with us or in order to meet our contractual obligations to you or to your academic institution and for six years after that to identify any issues and resolve any legal proceedings.
We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from aggregate information retained or used for these purposes.
Certain records, including graduation ceremony photographs and information, may be considered for longer term retention by our archivists as part of the The Groom Collection historical archive. Records may be kept in part to fulfil our contractual agreements with you and with your institution. Any such records are stored securely and not used to inform decisions about or otherwise affect individuals.
Transfers outside of EEA
We may transfer your personal information outside the EEA:
· In order to enable us to provide goods or services to you and fulfil our contract with you. This includes order fulfilment, processing of payment details, and the provision of support services.
· where it is in our legitimate interests and we have concluded these are not overridden by your rights .
We may transfer your personal information to the following countries outside the EEA:
o Google is certified under the EU-US Privacy Shield. The EU-US Privacy Shield requires Google Analytics and other certified US service providers to provide a similar level of protection of your personal data as would be required in the EU.
· Mastercard’s Mastercard Binding Corporate Rules as approved by the EEA data protection authorities and available at https://www.Mastercard.us/content/dam/mccom/en-us/documents/Mastercard-bcrs-february-2017.pdf require Mastercard to provide a similar level of protection of your personal data as would be required in the EU.
6. PAYMENT PROCESSING
7. HOW DO WE PROTECT CUSTOMER INFORMATION?
To prevent unauthorised access as required by Data Protection Law, we follow strict security procedures in the storage and disclosure of information which you have given us. Our security procedures mean that we may request proof of identity before we are able to disclose personal data to you following a request from you to do so. We use a secure server by which you may place your order or access your account information.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
This website may, from time to time, contain links to other sites. We are not responsible for the privacy policies or the content of such sites.
8. YOUR RIGHTS REGARDING YOUR PERSONALLY IDENTIFIABLE INFORMATION?
You have the right under certain circumstances:
• to be provided with a copy of your personal data held by us;
• to request the rectification or erasure of your personal data held by us;
• to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example);
• to object to the further processing of your personal data, including the right to object to marketing (as mentioned in ‘Our promotional updates and communications’;
• to request that your provided personal data be moved to a third party.
Your right to withdraw consent:
Where the processing of your personal information by us is based on consent, you have the right to withdraw that consent without detriment at any time You can also change your marketing preferences at any time as described in ‘Our promotional updates and communications’ section;
You can also exercise the rights listed above at any time by sending an email to email@example.com or by contacting us using details below.
If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority, (see http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html ). If you’d like to receive more information hereon we gladly direct you to the website of the supervisory authorities http://justiceservices.gov.mt/DownloadDocument.aspx?app=lom&itemid=8906&l=1.
9. CHANGES TO THIS POLICY
10. CONTACT DETAILS
The Groom Collection Limited
423/425 Triq il Kbira,
San Gusepp St Venera
T: +356 21236327
Email: [email protected]