Privacy Policy

---

Introduction

The Big Red Star is committed to protecting the privacy and security of our users' personal information. This Privacy Policy outlines how we collect, use, and safeguard your data in compliance with international laws, including the General Data Protection Regulation (GDPR) and other relevant data protection legislation.

Data We Collect

• Personal Information: We may collect personal details such as name, email address, phone number, and payment information when you register, make a purchase, or contact us.
• Usage Data: Information about how you use our website, including IP address, browser type, and pages visited.
• Cookies: We use cookies to enhance user experience and analyze website traffic. You can manage your cookie preferences through your browser settings.

How We Use Your Data

• Service Delivery: To provide and manage our services, process transactions, and communicate with you.
• Improvement and Personalization: To enhance our offerings and tailor content to your interests.
• Legal Compliance: To comply with legal obligations and protect our rights and interests.

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your data with trusted partners and service providers for processing purposes, ensuring they adhere to strict data protection standards.

International Data Transfers

Your data may be transferred and processed outside the European Economic Area (EEA). We ensure adequate safeguards are in place to protect your information in accordance with GDPR and other international laws.

Data Security

UK Data Protection Act 2018 - Overview

1. Introduction:

• The Act provides a legal framework for data protection in the UK, complementing the GDPR.
• It applies to the processing of personal data by organizations, businesses, and the government.

2. Key Principles:

• Lawfulness, Fairness, and Transparency: Data must be processed lawfully, fairly, and transparently.
• Purpose Limitation: Data should be collected for specified, explicit, and legitimate purposes.
• Data Minimization: Only collect data that is adequate, relevant, and necessary.
• Accuracy: Ensure that data is accurate and kept up to date.
• Storage Limitation: Retain data only as long as necessary for its intended purpose.
• Integrity and Confidentiality: Process data securely to protect against unauthorized or unlawful processing.

3. Rights of Individuals:

• Right to be Informed: Individuals have the right to know how their data is being used.
• Right of Access: Individuals can request access to their personal data.
• Right to Rectification: Individuals can have inaccurate data corrected.
• Right to Erasure: Also known as the 'right to be forgotten.'
• Right to Restrict Processing: Individuals can limit how their data is used.
• Right to Data Portability: Allows individuals to obtain and reuse their data across different services.
• Right to Object: Individuals can object to data processing in certain circumstances.
• Rights related to Automated Decision Making and Profiling: Safeguards against decisions made without human intervention.

4. Data Protection Officer (DPO):

• Organizations may need to appoint a DPO to oversee data protection strategies and ensure compliance.

5. Data Breaches:

• Organizations must report certain types of data breaches to the Information Commissioner's Office (ICO) within 72 hours.

6. Exemptions:

• The Act includes specific exemptions for areas like national security, law enforcement, and journalism.

7. Enforcement and Penalties:

• The ICO is responsible for enforcing the Act, with the power to issue fines for non-compliance.

Your Rights

Under GDPR and other applicable laws, you have the right to:

• Access your personal data and request a copy.
• Rectify inaccurate or incomplete information.
• Request erasure of your data under certain conditions.
• Object to or restrict processing of your data.
• Data portability, allowing you to move your data to another service provider.
• Withdraw consent at any time where processing is based on consent.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will notify you via email or through our website.

Contact Us

If you have any questions or concerns about our Privacy Policy or data practices, please contact us at:

info@thebigredstar.com