PRIVACY POLICY
Castle View Cigars Ltd
This document constitutes the formal privacy notice of Castle View Cigars Ltd. In this policy, the terms "we", "our", or "us" refer to Castle View Cigars Ltd.
Company Registration Details:
Introduction and Scope
Legal Bases for Data Processing
The law obligates us to define and notify you of the specific legal bases (from the six defined by GDPR) under which we process distinct categories of your personal information. We shall immediately cease processing your data if the relevant legal basis is no longer applicable. Should the basis change, we shall, where legally required, notify you of the change and the new basis for continued processing.
1. Contractual Obligation
When you create a customer account, purchase a product or service, or formally agree to our terms, a legal contract is established. To fulfil our obligations under this contract, the processing of the information you provide is necessary. This information may include personal data, which we use to:
We process this information based on the existence of a contract or your request for preliminary steps before entering a contract. We may also aggregate this data for general performance monitoring, ensuring no individual remains personally identifiable in this aggregated form. We shall continue this processing until the contract is terminated.
2. Consent
In situations where no contractual relationship exists, such as when you browse the Site or request information about our business, your actions may constitute consent for us to process information that may be personal in nature.
Unless you have consented to use your data for a specific, identifiable purpose, we do not process your information in a personally identifying manner. If granted explicit permission, we may occasionally share your data with selected, relevant third-party associates.
We process data on this basis until you formally withdraw your consent or where consent can no longer be reasonably assumed to exist. Consent may be withdrawn at any time by contacting us at edinburgh@castleviewcigars.co.uk. Withdrawal may impact your ability to fully utilise our services or website functionality.
3. Legitimate Interests
We may process information where a legitimate interest exists for either you or the Company. Before processing on this basis, we diligently consider:
Examples of processing based on legitimate interests include:
4. Legal Obligation
We are required to comply with statutory and legal obligations. Consequently, we must process your information when necessary to meet legal requirements, such as providing data to legal authorities upon their request or pursuant to a search warrant or court order.
Specific Uses of Provided Information
5. Information Shared Publicly (User-Generated Content)
Our platform permits you to publish information intended to be read, copied, or used by others (e.g., product reviews, blog comments, testimonials).
6. Content Complaints and Moderation
Our website is a publishing platform. We attempt to moderate user-generated content but may not do so instantaneously. Upon receipt of a complaint concerning content, we shall investigate. If deemed justified or legally necessary, we shall remove the content during the investigation. We reserve the right to exercise judgement regarding the balance of free speech rights and the rights of the complainant. Complaints deemed vexatious will not receive correspondence.
7. Payment Information
The Company neither accepts nor processes payment information directly. Our employees and contractors never access this data. At the point of transaction, you are seamlessly transferred to the secure payment environment of our processor Elavon Merchant Services. Although this page may visually align with our brand, its control and security are managed exclusively by the payment processor.
8. Job Applications and Employment Data
Information submitted in connection with a job application may be retained for up to three years for future consideration. For employed personnel, data collected during the employment period is used solely for purposes relevant to the employment contract. Post-employment files will be retained for six years before destruction or deletion.
9. Support and Communication
When you contact our support team (via phone or email), we collect the data provided to generate a comprehensive reply. We record the request and our response to enhance business efficiency and service quality. Personally identifiable data (e.g., name, email) is retained to maintain a communications history.
10. Complaint Resolution
Upon receiving a formal complaint, all submitted information is recorded and utilised strictly for resolving the matter. If the complaint reasonably necessitates contacting a third party, we may, at our sole discretion, share a minimum amount of relevant information. We may also compile non-identifiable statistics from complaint data to assess service performance.
11. Affiliate and Business Partner Information
Data provided in your capacity as an affiliate or business partner is used exclusively to track referrals, calculate commission payments, and facilitate commission transfers. We undertake to preserve the confidentiality of this information and the terms of our relationship and expect reciprocity from affiliates and partners.
Automated Data Collection
12. Cookies
Cookies are small text files stored on your device by your web browser. They facilitate personalised experiences and provide us with usage statistics for site improvement.
We use cookies for the following functions:
13. Personal Identifiers from Browsing Activity
We log requests made by your web browser to our servers. This recorded data includes, but is not limited to, your geographical location, Internet Service Provider (ISP), IP address, device type, and screen resolution. This aggregate data is used to assess content popularity and service performance. If combined with other prior visit information, this data could potentially be used for personal identification, even if you are not actively signed into the Site.
14. Re-marketing
The Company does not currently engage in re-marketing activities.
Disclosure and Data Sharing
15. Information from Third Parties
Although we generally do not disclose your personal information to third parties, we occasionally receive non-personally identifiable data derived from your activity via third-party services we utilise.
16. Third-Party Advertising
We prohibit third-party advertising on our website; consequently, no third-party technology is used for the purpose of collecting information about you via the Site.
17. Credit Reference
To actively combat fraud, we reserve the right to share relevant information with credit reference agencies concerning clients who improperly instruct their card issuer to cancel payment without first providing us with an acceptable reason or opportunity for resolution/refund.
18. International Data Transfer
Our websites are hosted in the United Kingdom. However, we may engage in outsourced services in jurisdictions outside the European Union (EU). Consequently, data obtained within the UK or EU may be processed outside these territories.
We implement the following safeguards for data transferred outside the EU:
Customer Rights: Access and Removal
19. Access to Personal Information
20. Removal of Information
If you require the removal of personally identifiable information from our systems, please contact us at edinburgh@castleviewcigars.co.uk. Please note that this action may consequently restrict the level of service we are able to provide.
21. Verification of Identity
In order to safeguard your personal data, we shall undertake reasonable measures to verify your identity before granting access to, editing, or deleting any personally identifiable information upon request.
Other Key Provisions
22. Site Use by Minors
23. Data Encryption
We employ 256-bit Secure Sockets Layer (SSL) certificates to verify our identity and encrypt all data exchanged between your browser and our servers. You can confirm the use of SSL by observing the closed padlock symbol or corresponding trust mark in your browser’s URL bar during data transfer.
24. Complaint Resolution Procedure
25. Data Retention Period
Except where otherwise specified, we retain your personal information only for the duration required to:
26. Compliance and Governing Law
This Privacy Policy has been compiled to comply with the laws and legal jurisdictions in which we conduct business. Ultimately, the decision to use our website rests with the Customer.
27. Policy Review
We reserve the right to update this Privacy Policy as necessary. The terms applicable to you are those posted on our website on the date of your usage. We advise retaining a printed copy for your records. All questions regarding this policy should be directed to edinburgh@castleviewcigars.co.uk.