Data controller
The data controller responsible for this website is Positive Dyslexia, who can be contacted at 1 Heathpark Drive Windlesham Surrey GU20 6JA.
This website contains links to third-party websites, which have their own data controllers and privacy policies. This privacy policy applies only to this website.
Lawful basis for processing
For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.
Individual rights
The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.
Security
The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. We use Transport Layer Security (TLS, also known as SSL) to encrypt any data you supply to us through our website. Additional technical measures are described at the relevant points in this privacy policy.
Disclosures
In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.
Changes to this privacy policy
We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.
Data collected when you contact us
Data collected by our shop
Accounts
When you place an order you can either create a guest account or register for a full account. A registered account allows you to log in to your account in future and view your order history, or place further orders without needing to enter your details again. You can also choose to create a registered account without placing an order. When you register for an account we collect your name, e-mail address, telephone number, and company.
We send Mailchimp your name and e-mail address to allow us to send you e-mails concerning your order. You may also opt in to receive our newsletter. You may opt out at any time by clicking the unsubscribe link at the bottom of the newsletter. For more information on how Mailchimp handles the data it collects, see Mailchimp’s privacy policy.
You can download the data we have collected about you by going to your account page and following the link to download your data.
You can close your account by going to your account page and following the link to close your account. If you close your account we will retain records of any orders you have placed (as described below), but will delete any other data you have supplied.
Consent given by data subject
You have supplied us with this data in order to create an account
Orders
When you place an order we collect your name, e-mail address, telephone number, company, delivery and billing addresses, and any comments you choose to leave.
Performance of a contract
To enable us to enter into a contract with you and fulfil our obligations under it
Compliance with a legal obligation
To maintain a record of financial transactions for taxation purposes
Reviews
When you submit a product review through a ‘Write a review’ form on our site, we collect your name and product review. We may choose to publish your name and review on our site.
If you close your account we will delete any reviews you have submitted.
Consent given by data subject
You have given your consent by ticking the box on the ‘Write a review’ form
Payment through PayPal
When you make a payment through PayPal, we send PayPal your name, billing address, and e-mail address. After you enter your card details, PayPal attempts to take payment and tells us whether the payment was successful. For more information on how PayPal handles the data it collects, see PayPal’s privacy policy.
Performance of a contract
To enable you to pay for your purchase
Data collected by third parties on our behalf
Spoton.net
Our site is hosted by Spoton.net Limited (registered company number 06139437 in England and Wales). Spoton.net logs all requests in order to determine the causes of reported faults and to detect and block suspicious traffic. The log records the time of the request, your IP address, the requested resource, the referring site (if specified by your browser), and your browser’s user agent string (which will usually include the name and version of your browser and operating system). Log files are deleted after ninety days.
Compliance with a legal obligation
To comply with the GDPR obligation to implement appropriate technical measures to protect data
Cloudflare
Our site is served through Cloudflare. Cloudflare helps our site load faster by storing copies of our content in data centres around the world, and defends our site from attacks by logging requests to detect and block suspicious traffic. For more information on how Cloudflare handles the data it collects, see Cloudflare’s privacy policy.
Compliance with a legal obligation
To comply with the GDPR obligation to implement appropriate technical measures to protect data
Google Ads
We use Google Ads to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. Google collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Google handles the data it collects, see Google’s Business Data Responsibility Site.
To opt out of Google Ads tracking on our site, see the Google Ads section of our cookie policy. To opt out of Google Ads tracking on all sites, see Google’s Ad Settings.
Pursuance of our legitimate interests
To allow us to analyse the effectiveness of our advertising
Google Analytics
We use Google Analytics to track visitor interaction with our site in order to produce statistical reports. Google collects details of the pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.
To opt out of Google Analytics tracking on our site, see the Google Analytics section of our cookie policy. To opt out of Google Analytics tracking on all sites, use the Google Analytics Opt-out Browser Add-on.
Pursuance of our legitimate interests
To allow us to analyse how visitors interaction with our site in order to improve our site and our services
Meta Pixel
We use Meta Pixel to track visitor interaction with our site in order to measure the success of our advertising and target it more effectively. Meta collects details of the adverts with which you interact, pages you view and the time you viewed them, the features of your browser, and your IP address. For more information on how Meta handles the data it collects, see Meta’s privacy policy.
To opt out of Meta Pixel tracking on our site, see the Meta Pixel section of our cookie policy. To opt out of Meta Pixel tracking on all sites, see Meta’s Ad Preferences.
Pursuance of our legitimate interests
To allow us to analyse the effectiveness of our advertising
Other data collected by third parties
Mapbox maps
When you view a page containing Mapbox maps, your browser connects to Mapbox. For more information on how Mapbox handles the data it collects, see Mapbox’s privacy policy.
YouTube video player
When you view a page containing the YouTube video player, your browser connects to YouTube. For more information on how Google (the operator of YouTube) handles the data it collects, see Google’s privacy policy.
Comments
When you submit a comment through a ‘Leave a comment’ form on our site, we collect your name, e-mail address, and comment. We may choose to publish your name and comment on our site. Comments are submitted to the Akismet anti-spam service in order to detect and block spam. For more information on how Automattic (the operator of Akismet) handles the data it collects, see Automattic’s privacy policy.
You can delete a comment by contacting us with your request.
Consent given by data subject
You have given your consent by ticking the box on the ‘Leave a comment’ form