PRIVACY NOTICE

Langoustine the box is a small Scottish business, based in St. Monans, Fife, aiming at delivering to you the best of the fresh shellfish landed in the East Neuk of Fife. In order to do so, we need to collect personal data about you. This privacy notice is to explain what type of data we collect about you, how and why we collect it, what we do with it and what are your rights about it.

WHAT INFORMATION IS BEING COLLECTED?
When you place an order on our website, you and us are concluding an online sale contract. In order to enable us to comply with our obligations towards you (the supply of your order), we will need you to tell us:
- your name
- your surname
- your address for billing and delivery (they could be the same or different)
- your e-mail address
You may choose to give us a phone number as well, to facilitate contact during delivery.
These are collected when you set up an account on our website, which you need to do if you want to buy from us. During the setup of your account, you will be asked to tick a box to confirm that you have read this Privacy Notice.
Additionnaly, when you choose to pay by card, you are asked to enter your card details on a page hosted by our payment services provider (see "Is your information shared?" to learn more about them) which stores and processes your card details, encrypted through the Payment Card Industry Data Security Standard (PCI-DSS), only as long as is necessary to complete your purchase transaction.

WHAT DO WE DO WITH YOUR INFORMATION?
The information you give us is processed, and the lawful basis for this processing is that we are concluding a sale contract together.
By processing we mean that:
- your delivery address is used to perform the delivery of your order (it is stored in the SatNav we use for finding where to deliver your order), as is your phone number in case it is necessary to contact you quickly during delivery
- your name, surname, billing address and e-mail address are used for invoices, to send you confirmation emails and invoices, to send you newsletters (should you have opted-in for these)
- your password is stored on our data processor servers, encrypted and we cannot access it
- when you pay by card online, your card details are checked by our payment services provider (see the following section to learn more about them) who use them to contact your card scheme and process your payment; your card details are not stored anywhere on our website or the servers hosting our website; in order to identify your transactions we only have access, through our payment service provider's secured website, to the first six and last four digits of your payment card and its expiry date
- all of the above (except card details) and information about your past purchases placed on our website are stored on the servers of our website host (see the following section to learn more about them)

IS YOUR INFORMATION SHARED?
For the purpose of running the website and processing payments, some of your information is shared with two other organisations:
- Ille Point Net SARL is a french company based in Prades who provides us with the website hosting, they are a data processor and as such have specific data protection regulations to comply with; they are legally binded to us by contract not to use your information in other ways than to store it (on their secured servers, behind firewall) and keep it protected before erasure; they will not share it with other organisations
- Lloyds Bank Cardnet is a division of Lloyds Bank and provides us with card payment services, they are a data controller in their own right so have to comply with the same data protection regulations as we have to; we then recommend that you read their privacy notice so you can understand the manner in which your personal information will be handled by them

WHAT ARE YOUR RIGHTS?
You have the right to:
- be informed about what we are doing with your data
- access your data
- correct any incorrect data we are holding about you
- ask us to delete your data
- ask us to stop using your data in certain ways
- object to our uses of your data
And you have the right to invoke any of these rights at any time over any aspect of your data. You can do this through what is called a Subject Access Request (SAR): simply contact us either by e-mail info then @ then langoustinethebox.co.uk or by phone 07931251185 and tell us what you want to do about your data.