Privacy Policy

Privacy and Cookie Policy

Who we are

This privacy policy is for the website of Jo Lord, The Hay Runner.

Our website address is: https://thehayrunner.co.uk

What personal data we collect and why we collect it

Comments or messages
When visitors leave comments or send messages to the author or her publisher and sales agents on the site we collect the data shown in the comments or message form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Contact forms
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website using cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for up to one year. You can clear or disable cookies in your browser settings.

Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites such as Facebook where our promotional videos may be hosted, behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Analytics
Our website has been built using WordPress, and we use Google Analytics to help understand customer needs and provide the best service online. By default, WordPress does not collect any analytics data.
Who WordPress may share your data with:
third-party providers with whom we share site data, including partners, cloud-based services, payment processors, and third party service providers.
By default WordPress does not share any personal data with anyone.

Google is committed to complying with applicable data protection laws. They have processes to build privacy into their products from the very earliest stages, including Data Protection Impact Assessments, to meet worldwide requirements including those in the GDPR around Privacy by Design and Privacy by Default. For more information about Google and privacy practices, visit https://cloud.google.com/security/gdpr/

How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data
Visitor comments are checked through an automated spam detection service.
Data related to quote or purchase requests: We do not store credit card details nor do we share financial details with any 3rd parties. When you submit a request for a quote for services or use contact forms on our websites, through communication using telephone, email, post, mobile text or 3rd party online technology as part of the process of doing business, we collect the personal information you give us such as your name, address, phone and email address as part of the process of doing business.

Analytics
When you browse our website, through Google Analytics and/or WordPress, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

Children 
Please note that we are not a site targeted at children or those under the age of 13.

Email marketing
If you have given permission, we may send you emails using Mailchimp or Gmail about our services, products and other updates. Email lists will be kept for up to 2 years, then you will receive a reminder email.

By submitting your personal data, as in data received from website visitors who may give us personal information in the process of completing a signup form, contact form or online quote request or contracts, you agree to the transfer, storing and processing of your data in the EU, United States, or another country depending on the location of servers of the data processors. Eg This website is managed by G-riots arts and is hosted on a UK based server through Siteground. We use Mailchimp for email lists; Google Drive for cloud data storage. We take reasonable steps to ensure that your data is treated securely and in accordance with this privacy policy.

We collect information about you during the checkout process on our store.

What we collect and store
While you visit our site, we’ll track:
* Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
* Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
* Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!
We’ll also use cookies to keep track of basket contents while you’re browsing our site.
When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:
* Send you information about your account and order
* Respond to your requests, including refunds and complaints
* Process payments and prevent fraud
* Set up your account for our store
* Comply with any legal obligations we have, such as calculating taxes
* Improve our store offerings
* Send you marketing messages, if you choose to receive them
If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.
We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 6 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.
We will also store comments or reviews, if you choose to leave them.

Who on our team has access
Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:
* Order information like what was purchased, when it was purchased and where it should be sent, and
* Customer information like your name, email address, and billing and shipping information.
Our team members have access to this information to help fulfill orders, process refunds and support you.

What we share with others
We share information with third parties who help us develop best understanding of your needs as a customer, and to help us provide our orders and store services to you; for example — Google Analytics, WordPress Analytics, Stripe (our secure payment gateway partner), Woocommerce (our ecommerce application), Social media platforms Facebook and Instagram, and Automattic for our contact forms.

Payments
We accept payments through Stripe. When processing payments, some of your data will be passed to Stripe, including information required to process or support the payment, such as the purchase total and billing information.
Please see the Stripe Privacy Policy https://stripe.com/privacy-center/legal for more details.

How we protect your data
Our website is protected with an updated SSL certificate, Wordfence Security and Siteground security protocols. We do not share data with third parties other than those outlined in our policy.

What data breach procedures we have in place
In the event of a personal data breach, we will notify you and GDPR authorities within 72 hours by email or posting a message on our website(s), with information about the extent of the breach, affected data, any impact on our services. A personal data breach may involve loss of personal data or the unlawful accessing or processing of personal data in the event that your data is compromised.

If you have any questions, you can contact us at privacy@thehayrunner.co.uk or by using the contact form on our website.
This policy may be updated from time to time as technologies, products and services change.

join my email list

The Hay Runner, helping people to move freely

or

Pin It on Pinterest