Privacy Policy

Foreword

Numskull Designs is committed to protecting your privacy. This Privacy Policy, together with our Terms and Conditions, explains what personal information we collect, along with how and why it will be used. Numskull Designs is committed to complying with GDPR and the Data Protection Act and as such, we will continually update this policy to reject any changes made.

About Numskull Designs

Numskull Designs is manufacturer specialising in the design and manufacturing of officially licenced gaming, film, TV and book merchandise. Numskull Designs is owned and operated by Rubber Road Ltd. Rubber Road Ltd has two offices located in the UK and those addresses are as follows:

Distributing Warehouse: Rubber Road Ltd, Unit A, Viking Industrial Estate, Rolling Mill Road, Jarrow, Tyne and Wear, NE32 3DP

Head Office: Rubber Road Ltd, Attimore Barn, Ridgeway, Welwyn Garden City, Herts, AL7 2AD.

The company is registered in England under company number 156630214. All general enquiries can be made at hello@numskull.com in writing to the Head Office address above or by calling +44 (0) 1707 502280. All data protection queries can be made to Deborah Challis, Data Protection Officer at deborah.challis@yellowbulldog.co.uk, in writing to the Head Office address above or by calling +44 (0) 1707 502280.

Who do we collect information from?

We collect and process information from individuals, including:

Those who sign up to our newsletter

Those who register their warranty

Those who register their interest for specific products

Those who enter details in any of our forms

If you have consented to our use of cookies, we will also collect information about you when you browse our website. Please view our Cookie Policy for more information.

Our Legal basis for processing

In order to operate our business, we need to collect personal information. We will only collect the information that is needed for a specific purpose and have an identified legal basis for doing so. The detail on this is as follows:

Contract:

When you register for warranty, we collect and store your personal information in order to provide you with that service if you need to make a claim.

Failure to provide certain information may prevent us from fulfilling any contractual obligations to you. For example, without keeping a record of your details when registering your warranty, we’d be unable to see if you’re eligible and provide you with a solution in the event of a claim.

Consent:

When you sign up for our newsletter, you opt-in to receiving communications from us. We will collect and store your personal data to contact you about items we think may be of interest to you.

If you provide your personal details to us in other ways, for example, register your interest for a new product or take part in a competition, then we may use your personal details to contact you about it and similar products, provide a personalised service, and/or provide information we think may be of interest you, under the lawful basis of Legitimate Interest.

We obtain your consent for this processing using a Soft Opt-in. You may opt out of these emails at the point of entering your details for a purchase or at the point we contact you by unsubscribing.

Where we use consent as the legal basis for processing your data, you have the right to withdraw your consent at any time, for any reason.

Legal Obligation:

If you make any data subject requests under the DPA or GDPR, we will collect your personal data in order to comply with the law.

How long do we keep your information?

Your information is only kept for as long as you are a Numskull Designs customer and for as long as we are legally required to keep it thereafter.

You can request that you no longer wish to be a Numskull Designs customer and have all of your details removed at any point, however please note that some data we are legally required to keep hold of for a specific time period. Once this time has passed, your data will be securely disposed of.

If you would like your data to be erased at any time, please contact Deborah Challis, Data Protection officer at the following details:

deborah.challis@yellowbulldog.co.uk

Attimore Barn, Ridgeway, Welwyn Garden City, Herts, AL7 2AD

+44 (0) 1707 502280

Sharing your information:

We will never sell any of your personal data to any third party. However, we do share your data with the following types of third parties as an essential part of providing services to you:

Service providers such as website hosts and marketing partners

We may also provide companies with anonymised information and analytics however we always ensure this information cannot identify you.

Any information shared to these third parties is done securely with safeguards in place to protect your data.

Protection of your data

Only authorised Numskull Designs staff are able to access your personal information. Numskull Designs has appropriate security measures in place to prevent personal information from being accidentally lost or used in an unauthorised way.

Numskull Designs reserves the right to transfer your information to countries outside the European Economic Area (EEA). If there is a requirement for us to do so, this transfer will be protected in the same way that it would be in the UK or EU. The countries outside of the EEA that your data is passed to and why is as follows:

Boston, USA (Klaviyo). Klaviyo is our Email Service Provider (ESP) and we would be unable to provide you with any updates on your order or any marketing messages without sharing your data to them.

California (WordPress). Our website is run through WordPress and we would be unable to process your data without sharing your data to them.

Both of these companies meet the GDPR conditions, relying on the European Commission’s Standard Contractual Clauses which enables the lawful transfer of personal data from the EU to both the US and Canada.

WordPress has procedures in place to deal with any suspected data security breaches. You will be notified of any suspected security breach where we are legally required to.

Your rights

You have rights relating to how we process your personal information. These are as follows:

Right To Rectification (Accuracy Of Information):

We have an obligation to ensure the information we hold about you is accurate. If you believe the data we hold is not accurate, contact us and we will correct it for you.

Subject Access Request (Seeing Your Information):

You have a right to know what personal information we hold about you (or any child under 13 that you have parental responsibility for).

Right To Erasure (Removing Your Information):

Under some circumstances, you have a right to have your personal data erased. You may request this by contacting us.

Right To Restrict Processing (Stop Using Your Information):

If you would like us to stop using your data but do not wish for us to delete it, you can request that we restrict the way in which your data is used.

Right To Object (Object To Your Data Being Used):

You can stop your data being used for marketing purposes, statistical purses, our legitimate interests or any task that is not essential, at any time. According to the GDPR, all Right to Object requests should be considered whilst balancing your rights with our legitimate interests.

Right To Data Portability (Transfer Your Data):

In some cases, you can ask us to transfer your data to another business.

Automated Decision Making:

Automated Decision Making is a decision that has been made automatically without any manual work. Numskull Designs uses Automated Decision Making in regard to customer status. You have a right to have any decisions made automatically reviewed by a real person.

These are Active, High Risk and Loyal and are made by our ESP, Klaviyo based on your last activity with us. The only impact this may have on you is the type of communications you then receive from us.

If you would like to exercise any of these rights, please contact us. We will typically respond to you within one calendar month, unless the request is difficult or time consuming. Under these circumstances, we will notify you of the delay and regardless will respond within 90 days of your original request. Our contact details are at the end of this policy.

Security

The transmission of non-sensitive details (such as your email address) made via the internet is not guaranteed 100% secure, except where you see the green padlock in the address bar. Although we will do our best to protect your personal data, we cannot guarantee the security of any data transmitted to our site (unless you see the aforementioned padlock icon). Once we receive your information, we implement appropriate and proportionate technical and organisational security measures to protect your data. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential.

Which information do we collect and process about you?

Contact with Numskull Designs

Personal Information we may collect and process

Visiting our website

We’ll collect your IP address, country location, cookie ID and browsing data. We collect this to enable us to see that you’ve been on our site, where you have been on our site and to make sure you’re on the correct website for your region (we won’t know it’s you by name). This allows us to make your browsing more personalised, and improve our website, products, services and marketing. We

The information is collected on our behalf by the following companies:

– Google Analytics

– WordPress

– Klaviyo

– Google recaptcha

– Twitter

– HotJar

– Facebook

These companies cannot use data for any reason other than the above and they cannot transfer your data anywhere else. Only select people will have access to this.

If you sign up for our newsletter on our homepage, we’ll collect the email address that you sign up with along with any other details you choose to provide, i.e. name, interests, etc. We collect this data to send you news and updates that you have you have consented and requested to receive.

If you register your product for warranty, we’ll collect your name, contact email address, name of the product and your date of purchase. We collect this data to contact you about your product when necessary i.e. for a claim, and to verify your purchase.

If you register your interest in future product releases, we’ll collect your name, contact email address along with any other details you choose to provide, i.e. brands you’re interested in. We collect this data to send you updates about specific products you have consented and requested to receive.

The information is collected on our behalf by the following companies:

– WordPress

– Klaviyo

These companies cannot use data for any reason other than the above and they cannot transfer your data anywhere else. Only select people will have access to this.

Cookies

For detailed information on the cookies on our website, please view our Cookie Policy.

Contact Details

If you have any questions, concerns or complaints, or if you would like more information about anything mentioned here, please contact our Data Protection Officer:

Deborah Challis