Privacy policy
PRIVACY AND COOKIE POLICY
Last updated January 2023.
Thank you for choosing to be a part of our community at Run Legacy (“we”, “us”, “our”). We are committed to protecting and respecting your personal data and your right to privacy.
We are Run Legacy Ltd, a company registered in Scotland under company number SC699132 with its registered office at 30/5 Hardengreen Industrial Estate, Dalkeith, United Kingdom, EH22 3NX (“we”, “us” or “our”). This policy applies to you when you visit our website www.run-legacy.com (“Website”), when you engage with us, or when you make a purchase on products on our Website. This policy describes what information we collect, how and why your personal data is collected, used, and shared, the conditions under which it may be disclosed to others and how it is kept secure.
By using our Website you consent to the collection and use of the information you provide to us, as outlined in this policy. If there are any terms in this policy that you do not agree with, you should not use our Website, engage with us, or purchase products on our Website.
If you have any questions or concerns about our collection, use or disclosure of your personal data, please contact us at hello@run-legacy.com
Our obligations
We appreciate that you are trusting us with your personal data and we take your privacy very seriously. As such, we comply with our obligations under the retained EU law version of the General Data Protection Regulation (EU) (2016/679) and the Data Protection Act 2018 (the “data protection legislation”). If any of these laws are replaced or superseded, will also comply with that those.
We are registered with the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). You have the right to make a complaint at any time to the ICO, we would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance by emailing hello@run-legacy.com
The personal data we may collect about you
We use different methods to collect data from and about you including through:
- Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding or engaging with us by post, phone, email, social media or otherwise.
- Automated technologies or interactions. As you interact with our Website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies.
- Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources, such as Google, Companies House, or the electoral register.
How we use your personal data
We will only use your personal data when we can rely on a legitimate (lawful) basis, such as:
- Where we need to perform the contract, we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal obligation.
Purposes for which we will use your personal data
We have set out below the ways we may use your personal data, and which of the legitimate bases we rely on to do so:
|
Purpose/Activity |
Type of data |
Lawful basis for processing including basis of legitimate interest |
|
To register you as a new customer |
Identity Contact |
Performance of a contract with you |
|
To process and deliver your order including: (a) Manage payments, fees, and charges (b) Collect and recover money owed to us |
Identity Contact Financial Transaction Marketing and Communications |
(a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us) |
|
To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey |
Identity Contact Profile Marketing and Communications |
(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) |
|
To enable you to partake in a prize draw, competition or complete a survey |
Identity Contact Profile Usage Marketing and Communications |
(a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) |
|
To administer and protect our business and our Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
Identity Contact Technical |
(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation |
|
To deliver relevant Website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you |
Identity Contact Profile Usage Marketing and Communications Technical |
Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) |
|
To use data analytics to improve our Website, products/services, marketing, customer relationships and experiences |
Technical Usage |
Necessary for our legitimate interests (to define types of customers for our products and services, to keep our Website updated and relevant, to develop our business and to inform our marketing strategy) |
|
To make suggestions and recommendations to you about goods or services that may be of interest to you |
Identity Contact Technical Usage Profile Marketing and Communications |
Necessary for our legitimate interests (to develop our products/services and grow our business) |
Marketing
You may receive marketing communications from us if you have requested information from us or purchased products from us and you haven’t opted out of receiving that marketing. We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.
Where you opt out of receiving these marketing messages, this won’t apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.
Cookies
Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our Website. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
Our Website is hosted by Shopify. Our Website uses the following cookies to optimise your experience on our Website and to provide our services.
Cookies Necessary for the Functioning of our Website
|
Name |
Function |
|
_ab |
Used in connection with access to admin. |
|
_secure_session_id |
Used in connection with navigation through a storefront. |
|
cart |
Used in connection with shopping cart. |
|
cart_sig |
Used in connection with checkout. |
|
cart_ts |
Used in connection with checkout. |
|
checkout_token |
Used in connection with checkout. |
|
secret |
Used in connection with checkout. |
|
secure_customer_sig |
Used in connection with customer login. |
|
storefront_digest |
Used in connection with customer login. |
|
_shopify_u |
Used to facilitate updating customer account information. |
Reporting and Analytics
|
Name |
Function |
|
_tracking_consent |
Tracking preferences. |
|
_landing_page |
Track landing pages |
|
_orig_referrer |
Track landing pages |
|
_s |
Shopify analytics. |
|
_shopify_fs |
Shopify analytics. |
|
_shopify_s |
Shopify analytics. |
|
_shopify_sa_p |
Shopify analytics relating to marketing & referrals. |
|
_shopify_sa_t |
Shopify analytics relating to marketing & referrals. |
|
_shopify_y |
Shopify analytics. |
|
_y |
Shopify analytics. |
|
Name |
Function |
Duration |
|
cookieconsent_status |
Hold information on which cookie accept button is pressed by the visitor. |
1 year |
|
cookieconsent_preferences_disabled |
old information on which cookie groups are currently blocked by the app. |
1 year |
|
__kla_id |
A visitor can be identified when they: - Fill out a signup form - Click a link from a Klaviyo email |
2 years |
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our Website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such websites as www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
Do Not Track
Most web browsers and some mobile operating systems and mobile applications include a Do Not Track (DNT) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.
Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy policy. To determine whether any of the third-party services it uses honour the “Do Not Track” requests, please read their privacy policies
Please note that third parties may also use cookies, over which we have no control. These named third parties may include, for example, advertising networks and providers of external services like web traffic analysis services. These third-party cookies are likely to be analytical cookies or performance cookies or targeting cookies:
- Google Analytics – this is a web analytics service provided by Google, Inc. The cookies used by Google Analytics help us to analyse how users use our Website and to count the number of people who use it. Google Analytics stores your IP address anonymously. Google does not associate your IP address with any personally identifiable information;
- Facebook Ads (the Facebook pixel) – these cookies collect information about how visitors use our Website. This data is collected anonymously and is used to help improve our Website’s functionality; and
- Google Ad Words – these cookies collect information about how visitors use our Website. This data is collected anonymously, to help make our marketing communications more relevant, and is used to improve our Website’s functionality.
You can use your browser settings to block all cookies (including essential cookies), but you may not be able to access all or parts of our Website.
Sharing personal data
We share your personal data with service providers to help us provide our services and fulfil our contracts with you, as described above. For example:
- We use Shopify to power our online store. You can read more about how Shopify uses your personal data here: https://www.shopify.com/legal/privacy.
- We may share your personal data to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
- To enable delivery of the products you have purchased, we will be required to share your Identity and Contact Data with the third party courier services, such as Royal Mail.
- In addition we share your personal data with our third-party service providers to help us operate our business and the Website or administer activities on our behalf, such as sending out newsletters or surveys, processing orders and managing transport services. We may share your information with these third parties for those limited purposes provided that you have given us your permission. In some cases, the third-party providers we use will be acting as a data controller of your information and therefore we advise you to read their privacy policies.
We may disclose your information in the following cases:
- If we want to sell our business, or our company, we can disclose it to the potential buyer.
- We can disclose it to other businesses in our group, as defined in the UK Companies Act 2006
- We can disclose it if we have a legal obligation to do so, or in order to protect other people's property, safety, or rights.
- We can exchange information with others to protect against fraud or credit risks.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We don’t allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Retention
When you place an order through the Website, we will retain your personal data for our records unless and until you ask us to erase this information (as explained later in this policy). We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. The appropriate retention period will vary depending on the type of personal data collected.
International transfers
We may transfer your personal data outside of the UK or the Economic European Area (EEA) where we engage third parties to provide services on our behalf, such as to receive services or deal with payment. Whenever we transfer your personal data out of the UK or the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented, such as only transferring your personal data to countries that have been deemed to provide an adequate level of protection for personal data. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK or the EEA.
Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal data, transmission of personal data to and from our Website is at your own risk. You should only access the Website within a secure environment.
Our Website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our Website as safe as possible.
Embedded content from other websites
Articles on our Website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
This policy applies only to our Website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other websites even if you access them using links from our Website. In addition, if you linked to our Website from a third-party website, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party website and recommend that you check the policy of that third party website.
Your legal rights
Under certain circumstances, you have rights under data protection legislation in relation to your personal data:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
- Right to withdraw consent.
If you wish to exercise any of the rights set out above, please contact us.
You won’t have to pay a fee to access your personal data (or to exercise any of the other rights), but we can charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive, or we can refuse to comply in these circumstances.
We may need you to provide evidence of your identity as a security measure and we may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month, but it could take longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Updates to this policy
We reserve the right to make changes to this policy at any time. If we change this policy, those changes will be published on this page, so please check back occasionally. The updated version will be effective as soon as it is accessible. Should the changes affect processing activities performed on the basis of your consent, we shall collect new consent from you, where required.
Contact
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hello@run-legacy.com or by mail using the details provided below:
Run Legacy Ltd (C/O Crunchers Accountants), 30/5 Hardengreen Industrial Estate, Eskbank, EH22 3NX.