Headstand LTD Detailed Privacy Policy
We are delighted that you have shown interest in our business. Data protection is of a particularly high priority for the management of Headstand LTD.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Headstand LTD . By means of this data protection declaration, our business would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
 
Name and Address of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Headstand and other provisions related to data protection is:
 
Headstand LTD
Email: hello@drinkheadstand.com
 Website: www.drinkheadstand.com
Any data subject may, at any time, contact us with any questions and suggestions concerning data protection.
 
We collect:
•  your IP address, and details of which version of web browser you used
•  information on how you use the site, using cookies and page tagging techniques
•  information for the facilitation of order processing and delivery such as delivery addresses
This data can be viewed by authorised people within our business to:
•  Fulfill orders placed on this website or repeat orders via our Club subscription service
•  Improve the form and function of our website
•  Understand our customers for improvement to delivery of marketing activity
 
Cookies
We use cookies for a number of reasons:
1.  For statistical purposes to track how many users we have and how often they visit our websites. We collect information listing which of our pages are most frequently visited, and by which types of users and from which countries.
2.  We use other organisations to collect anonymous user information, sometimes through cookies and web beacons, (information embedded in images which allow them to analyse how the website is being used and the number of visitors).
3.  We and other advertisers may use statistical cookies to track who has seen an advert and clicked on it. You can find more information on this in the online behavioural advertising section of this privacy policy.
4.  We may use ‘Flash’ cookies to store your preferences for your media player (for example, volume and so on). If we don’t use them, you may not be able to watch some video content.
You can turn cookies off but if you do this, you may not be able to use all services on our websites and you might see more pop-ups and other advertising. This is because we won’t be able to limit what you see by using cookies. However, you will still be able to see our editorial content.
5.  We or other companies may use cookies to suggest and deliver content which we believe may interest you.
It is usually possible to stop your browser accepting cookies, or to stop it accepting cookies from a particular website, but you need to be aware that you might lose some of the functionality of that website. All modern browsers allow you to change your cookie settings. These settings will typically be found in the 'options' or 'preferences' menu of your browser.
You can see a complete list of the cookies we use and why by viewing our Cookie policy here.
 
Contact possibility via the website
The website of Headstand LTD  contains information that enables a quick electronic contact to our business, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
 
Links to other websites
www.drinkheadstand.com (and it’s sub-domains) contain links to other websites.
This privacy policy only applies to www.drinkheadstand.com (and it’s sub-domains), and doesn’t cover other website that we link to. These websites, have their own terms and conditions and privacy policies.
 
Legal basis for the processing
Consent - By disclosing your personal information to us using this website or over the telephone, you consent to the collection, storage and processing of your personal information by Headstand LTD  in the manner set out in this Privacy Policy.
Contract – Where Headstand LTD need to process someone’s personal data to fulfill contractual obligations to you or because you have asked Headstand LTD to do something before entering into a contract (eg provide a quote), contract is used as a legal basis.
Legitimate interests – if processing is necessary for your interests, for example keeping customers appraised of new product lines relevant to their business, this is done using legitimate interests as a legal basis.
 
Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, in line with our internal retention policy.
 
Disclosing your information
We may pass on your personal information if we have a legal obligation to do so, or if we have to enforce or apply our terms of use and other agreements. This includes exchanging information with other government departments for legal reasons.
We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.
Any other organisations who access your information in the course of providing services on our behalf will be governed by strict contractual restrictions to make sure that they protect your information and keep to data-protection and privacy laws which apply. We may use service providers to help us run these sites (or services available on the sites).
 
Your rights
You can find out what information we hold about you, and ask us not to use any of the information we collect.
 
Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
 
GDPR and our business customers
A new piece of legislation regarding Data Protection became law In May 2018. General Data Protection Regulations (GDPR) replaced the dated Data Protection previously operated by the ICO.
We shall use appropriate technical and organisational measures to protect against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data. We shall not sub-contract any processing of personal data unless that personal data continues to be subject to an appropriate level of protection. To the extent that we as data processor for you, we shall only process personal data in accordance with your instructions.
We will keep and use it to enable us to run the business and manage our relationship with you effectively, lawfully and appropriately, whilst we are working with you and past this point. This includes using information to enable us to comply with our customer contract, to comply with any legal requirements, pursue the legitimate interests of the Company and protect our legal position in the event of legal proceedings. If you do not provide this data, we may be unable in some circumstances to comply with our obligations and we will tell you about the implications of that decision.
The criteria used to determine the period of retention of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, in line with our internal data retention policy, as long as it is no longer necessary for the fulfilment of or initiation of the services being provided or is no longer necessary for the specific purpose for which it was obtained.

Your rights:
Under the GDPR data subjects have a number of rights:
•  The right to be informed about whether their personal data is being processed by us;
•  The right of access to the personal data that we store about them;
•  The right to rectification of their personal data should it prove to be inaccurate;
•  The right to erasure of their personal data under specified circumstances;
•  The right to restrict the processing or their personal data under specified circumstances;
•  The right to data portability – the ability to have their personal data transferred to another data controller;
•  The right to object to having their personal data processed by us (under specified circumstances); and
•  The right not to be subject to automated decision-making, including profiling. ([entity name] does not use automated decision-making or profiling).
More detailed information on data subjects’ rights can be obtained by contacting the Data Protection Team using the contact details at the top of this privacy notice.

As a data subject, if you are not satisfied with the action we have taken in relation to exercising your rights, or if you believe that your data has been misused or that we have not kept it secure, you may complain to the Information Commissioners Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate). https://ico.org.uk/concerns
 
Full Website Privacy Policy
Headstand LTD is committed to protecting your privacy and promises not to share any information we collect with any third party.
However, as our online shop is mail order, it is necessary for us to gather certain pieces of personal information in order to fulfill our service and make your shopping experience as simple and easy as possible.
Immediately below is a brief summary of how we collect info and use it.
Further down the page is a detailed explanation.
 
The information we do collect - and how it is collected:
When you place an order, we need to know certain information. To fulfill orders we need to know your name, e-mail address, telephone number and full delivery address and billing address. We store this information securely so that it makes your online shopping quick, and effective. It also allows us to contact you should anything untoward happen with your order.
At our checkout, we ask for your credit or debit card number, expiry and start date, issue number (if applicable) and security code. We ask for this each time and do not retain in accordance with current data protection legislation. We also ask for a dispatch address if you require your order to be sent as a gift, or to a place of work.
We may also use the information we collect to occasionally notify you of site updates and also seasonal offerings through the year. If you would rather not receive this information, please tick the relevant field in the 'Your Account' section.
 
Protecting our customers' financial information:
When you place an order with your credit or debit card, it is done using a secure connection to our payment provider. We do not take or hold your credit card details. If you would rather not send your credit/debit card details over the Internet then please contact us for arrangements.
We strongly recommend that you do not email an order to us containing credit card information, because most email is sent un-encrypted and so is not secure.All our customer data held online is encrypted and held in a secure environment.
 
Important information about "cookies"
"Cookies" are small pieces of information that are stored by your browser on your computer's hard drive - and are required by our site so you can store items into your shopping basket. We have developed our site so that you can retain items in your shopping basket for another occasion even if you do not wish to buy at that time. Our cookies do not contain any personally identifying information.
You can disable cookies if you wish using the options in your internet browser, but you will not be able to use our online ordering service if you do.
 
Consent
By using our web site, you consent to the collection and use of this information by Headstand LTD. If we decide to change our privacy policy at any time, we will post those changes on this page so you are always aware of what information we collect and how we use it.
If for whatever reason you feel that Headstand LTD has not adhered to the principles as stated above, please contact us.
 
BACKGROUND
This Policy applies as between you, the User of this Website and Headstand LTD  the owner and provider of this Website. This Policy applies to our use of any and all Data collected by us in relation to your use of the Website.
1.  Definitions and Interpretation
In this Policy the following terms shall have the following meanings:

2.  Scope of this Policy
This Policy applies only to the actions of Headstand and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media websites.
 
3.  Data Collected
Without limitation, any of the following Data may be collected by this Website from time to time without user submission:
3.1  [IP address (automatically collected);]
3.2  [web browser type and version (automatically collected);]
3.3  [operating system (automatically collected);]
3.4  [a list of URLs starting with a referring site, your activity on this Website, and the site you exit to (automatically collected)]
 
4.  Our Use of Data
4.1  Any personal Data you submit will be retained by Headstand for 5 years.
4.2  Unless we are obliged or permitted by law to do so, and subject to Clause 5, your Data will not be disclosed to third parties. This includes any affiliates and / or other companies within our group.
4.3  All personal Data is stored securely in accordance with the principles of the General Data Protection Regulation 2016. Fore more details on security see Clause 11 below.
4.4  Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following reasons:
4.4.1  [internal record keeping;]
4.4.2  [improvement of our products / services;]
4.4.3  [transmission by email of promotional materials that may be of interest to you;]
4.4.4  [contact for market research purposes which may be done using email, telephone, fax or mail. Such information may be used to customise or update the Website.]
 
5.  Third Party Websites and Services
5.1  Headstand may, from time to time, employ the services of other parties for dealing with matters that may include, but are not limited to, payment processing, delivery of purchased items, search engine facilities, advertising and marketing. The providers of such services do have access to certain personal Data provided by Users of this Website.
5.2  [Any Data used by such parties is used only to the extent required by them to perform the services that Headstand requests. Any use for other purposes is strictly prohibited. Furthermore, any Data that is processed by third parties shall be processed within the terms of this Policy and in accordance with the General Data Protection Regulation 2016.]
 
6.  Links to Other Websites
This Website may, from time to time, provide links to other websites. Headstand has no control over such websites and is in no way responsible for the content thereof. This Policy does not extend to your use of such websites. Users are advised to read the privacy policy or statement of other websites prior to using them.
 
7.  Changes of Business Ownership and Control
7.1  Headstand may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of Headstand. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was originally supplied to us.
7.1   In the event that any Data submitted by Users is to be transferred in such a manner, you will not be contacted in advance and informed of the changes.
 
8.  Controlling Use of Your Data
8.1  Wherever you are required to submit Data, you will be given options to restrict our use of that Data. This may include the following:
8.1.1  use of Data for direct marketing purposes; and
8.1.2   sharing Data with third parties.
 
9.  Your Right to Withhold Information
9.1  You may access the Website without providing any Data at all. However, to use all features and functions available on the Website you may be required to submit certain Data.
9.2  You may restrict your internet browser’s use of Cookies. For more information see Clause 12.
 
10.  Accessing your own Data
You have the right to ask for a copy of any of your personal Data held by Headstand (where such data is held). Contact us at hello@drinkheadstand.com
 
11.  Security
11.1  Data security is of great importance to Headstand and to protect your Data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure Data collected via this Website.
 
12.  Cookies
12.1  This Website may place and access certain Cookies on your computer. Headstand uses Cookies to improve your experience of using the Website and to improve our range of products AND/OR services. Headstand has carefully chosen these Cookies and has taken steps to ensure that your privacy is protected and respected at all times.
12.2  All Cookies used by this Website are used in accordance with current UK and EU Cookie Law.
12.3  Where possible, before the Website places any Cookies on your computer, subject to sub-Clause 12.4 AND/OR sub-Clause 12.7, you will be presented with notice of cookies use via our news section on the home page By allowing the placing of Cookies you are enabling Headstand to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of the Website may not function fully or as intended.
12.4  Certain features of the Website depend upon Cookies to function. UK and EU Cookie Law deems these Cookies to be “strictly necessary”. Your consent will not be sought to place these Cookies. You may still block these cookies by changing your internet browser’s settings as detailed below.
12.5  This Website uses analytics services provided by Google. Website analytics refers to a set of tools used to collect and analyse usage statistics, enabling us to better understand how Users use the Website. This, in turn, enables us to improve the Website and the products AND/OR services offered through it. You do not have to allow us to use these Cookies, as detailed below, however whilst our use of them does not pose any risk to your privacy or your safe use of the Website it does enable us to continually improve our business.
12.6  be possible to obtain your prior consent. You may remove these Cookies and prevent future use of them by following the steps set out below.
12.7  The analytics services used by this Website use Cookies shown at this link.
12.8  You can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third party cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser or visit www.aboutcookies.org
12.9  You can choose to delete Cookies at any time however you may lose any information that enables you to access the Website more quickly and efficiently including, but not limited to, personalisation settings.
12.10  It is recommended that you ensure that your internet browser is up-to-date and that you consult the help and guidance provided by the developer of your internet browser if you are unsure about adjusting your privacy settings.
 
13.  Changes to this Policy
Headstand reserves the right to change this Policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the Policy on your first use of the Website following the alterations.
 
For any further information or to discuss anything covered within this policy please contact hello@drinkheadstand.com