Last updated: January 2024
1. Introduction
ravine-quartz ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our payment processing services.
We operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By accessing our services, you acknowledge that you have read and understood this policy.
2. Information We Collect
2.1 Personal Information
We may collect personal information that you voluntarily provide when you:
- Submit enquiry forms on our website
- Register for our payment services
- Communicate with us via email or other channels
- Subscribe to newsletters or marketing communications
This information may include your name, email address, business name, address, and details about your payment processing requirements.
2.2 Technical Information
When you visit our website, we automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type and version
- Operating system
- Pages visited and time spent on our website
- Referring website addresses
2.3 Transaction Data
If you use our payment processing services, we process transaction data on behalf of our merchant clients. This data is processed in accordance with PCI DSS requirements and applicable financial regulations.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and provide customer support
- To deliver the payment processing services you have requested
- To send administrative information, such as service updates and policy changes
- To improve our website and services based on usage patterns
- To comply with legal obligations and protect our legitimate interests
- To prevent fraud and ensure the security of our systems
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance: Processing necessary to deliver services you have requested
- Legitimate interests: Processing for business operations, security, and service improvement
- Legal obligation: Processing required by applicable laws and regulations
- Consent: Where you have given explicit consent for specific processing activities
5. Information Sharing
We do not sell your personal information to third parties. We may share your information with:
- Service providers: Third parties who assist in operating our website and delivering our services
- Financial institutions: Banks and card networks involved in payment processing
- Legal authorities: When required by law, court order, or regulatory requirement
- Business transfers: In connection with any merger, acquisition, or sale of assets
6. Data Retention
We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Financial transaction records are retained in accordance with regulatory requirements, typically for a minimum of six years.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
8. Your Rights
Under UK data protection law, you have the following rights:
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Request limitation of processing in certain circumstances
- Portability: Request transfer of your data to another organisation
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us using the details provided below.
9. International Transfers
Your information may be transferred to and processed in countries outside the United Kingdom. When such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
ravine-quartz
47 Commerce House
Bishopsgate
London EC2M 3TN
United Kingdom
Email: [email protected]
12. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted at ico.org.uk.