Privacy & Cookie Policy

​

OneBeyond Retail Limited (referred to as we/our/us) is responsible for the processing of any personal data that is provided through our website (www.oneBeyond.co.uk) and in any subsequent dealings with our company, including instore visits, and it's processing in order to comply with the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

​

Looking after the personal data you share with us is a hugely important part of this, and we want you to be confident that your data is safe and secure and understand how we use it. This privacy policy outlines how your personal information is collected and used.

​

Online

 

OneBeyond Retail Limited collects, processes and/or uses the information provided by you (Personal Data) for the purposes of general office administration and performing the customer contract with OneBeyond Retail Limited, general and long-term customer care and personalised customer service.

​

Access to your personal data is limited to authorised employees as required for the purposes identified below, as well as IT security and maintenance. OneBeyond Retail Limited uses reasonable technical and organisational measures to protect the security and confidentiality of your personal data and regularly reviews and improves these measures as necessary to reflect legal developments and/or improvements in available technology.

​

Our Privacy Policy will be reviewed and enhanced from time to time, and you should check this page to see our most up to date policy.

 

 

What information do we collect?
 

When sending us a contact form request, the data we require from you is:

​

• Your name 

• Your telephone number (optional)

• Your email address

• Your message

​
 

When you visit our website, we know (provided by Google Analytics):

The URL and page titles of the pages you are viewing

 

• Your browser name

• The size of your browser window

• Your screen resolution

• If Java is enabled

• Which version of flash you are using

• Your location (this is derived from the I.P address where the hit originated. The IP address itself is not available in Google Analytics as it is personally identifiable information (PII), which violates the terms of Google)

• The language (derived from the language settings of your browser)

 

What do we use your information for?
 

• To contact you regarding any issues you have raised through our customer contact form

• To resolve any issues with any relevant members of staff, including head office and individual store employees

 

 

How we protect your personal data

 

• We use computer safeguards such as data encryption and firewalls, and we enforce physical access controls to our buildings and files to keep this data safe

• We only authorise access to employees who need it to carry out their job

 

 

Your rights

 

You have the right to request a copy of the personal data we hold about you by writing to OneBeyond Retail Limited, 2 Athena Way, Hoyland, Barnsley S74 0FQ.

​

You have the right to request that your personal data be deleted by writing to OneBeyond Retail Limited, 2 Athena Way, Hoyland, Barnsley S74 0FQ.

 

 

Cookies and similar technologies

 

Cookies are small text files which are transferred from an online website and stored on your computer´s hard drive when you visit certain web pages.

​​

OneBeyond Retail Limited never permanently stores any personal information through cookies that can be used to identify you in any way.

​

Our website uses “Google Analytics”, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses persistent cookies to help us determine the number of people that visit www.OneBeyond.co.uk and to analyse how they use it, so we can determine which pages on our site are the most popular and count visitor numbers.

​

The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on its servers. Google and/or its subsidiaries may use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

​

Google may also transfer this information to third parties where (a) required to do so by law; (b) it has a good faith belief that such disclosure is reasonably necessary to protect the rights, property or safety of Google, its users or the public; or (c) such third parties process the information on Google’s behalf.

 

Google will not associate your IP address with any other data it holds. If you would like to read more about Google Analytics or how Google might use your information, please see www.google.co.uk/policies/privacy.

 

 

Managing cookies
 

Most web browsers are automatically set to accept cookies, but you can choose to reject cookies and/or delete existing cookies by using your browser settings. You can also set your browser to notify you each time new cookies are placed on your computer or other device. You can find more detailed information about how you can manage cookies, including browser-specific instructions on how to restrict or block cookies on the Interactive Advertising Bureau's website www.allaboutcookies.org.

​

Instore

 

Types of data OneBeyond Retail Limited collects

​

The Company will collect and process personal data.

 

Personal data only includes information relating to living individuals, where they can be either:

 

• Directly identified from a piece of information​

• Indirectly identified from a combination of information

​

The personal data we collect includes:

 

• Photographs

• CCTV footage

 

Why OneBeyond Retail Limited collects this data

​

The Company collects this information so it can comply with its legal and health and safety obligations.

 

CCTV monitoring

​

CCTV operates in our stores for the purpose of preventing and detecting crime, ensuring the safety of staff and customers, and protecting company property.

 

Recordings may be shared with competent authorities, solicitors or insurers if necessary. Appropriate signage is displayed in all areas where CCTV is in operation to ensure individuals are aware of the monitoring.

​

Legal basis for processing data

​

There are 6 grounds for lawfully processing personal data. These are:

​​

Consent

Contract

Legal obligation

Vital interests

Public task

Legitimate interest

​

The Company processes the data it collects on the following bases:

 

• Legal obligation

• Legitimate interests

 

Data retention

​

The Company follows the UK GDPR rules on data retention. This means it:

​​

• Only keeps data for as long as it’s needed – all data is retained for the shortest length of time necessary​

• Complies with requests for data to be changed or deleted as long as there are no other legal grounds or overriding legitimate grounds to not do so

• Complies with an individual’s request to see data held on them unless there are exemptions under the UK GDPR that apply obligation

• Carries out data audits to make sure it doesn’t keep data for longer than necessary and to help respond to subject access requests

​

Sharing data

​

There may be occasions where the Company shares data it has collected with third parties. These instances may include, but are not limited to:

​

• When requested to by law​

• Ensuring the safety and/or wellbeing of someone

​

Data subjects’ rights

​

The Company is obligated to inform data subjects of their data protection rights. Data subjects have the right to:

​

• Access – data subjects can request that the Company provide them with the personal data it holds on them​

• Rectification – data subjects can request that the Company correct information on them that they believe to be incorrect

• Erasure – personal data can be deleted under certain conditions​

• Restrict processing – this is where the Company restrict processing of personal data under certain conditions

• Object to processing – this is where data subjects can object to their personal data being processed under certain conditions​

• Data portability – data subjects can request the Company transfer data it collects on them to a third party or to them under certain conditions

• Rights related to automated decision-making and profiling – data subjects have the right not to be subject to decisions based solely on automated processing (including profiling) that have legal or significant effects, and can request human intervention or challenge such decisions

​

Making a complaint

​

If a data subject wishes to complain about how the Company have handled their personal data, they should contact SAR@onebeyond.co.uk.

​

If data subjects remain unhappy with how the Company used their data after raising a complaint with the Company, they can complain to the Information Commissioner’s Office.​

​

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

​

The ICO’s helpline number is 0303 123 1113, or you can make a complaint online.

​

Changes to this notice

​

This notice will be reviewed regularly to ensure the Company continues to comply with the law.  Any changes will be communicated via the company website and handbook

​