Protecting Your Information and GDPR
If you have any requests concerning your personal information or any queries with regard to these practices please contact us at email@example.com.
ChunkyChips’ named Data Manager in relation to GDPR is Glenn Flowers, who will respond to emails sent to the above address.
(For the avoidance of doubt, this individual contact information is provided solely for access to investigate an individual’s personal data/privacy queries. It is not provided as a marketing or contact address for companies wishing to sell services to ChunkyChips.net. Usage of this contact information for these purposes may be considered a breach of GDPR regulation).
Information we may collect from you
This information may include:
(a) details you give us via the Site, on application forms or by e-mail during conversations with you on the telephone or face to face with one of your representatives;
(b) details you give us so that we can provide you with our services; and
(c) details we receive from other sources, such as our suppliers, channel partners, marketing organisations and credit reference or fraud detection agencies.
In addition, we may collect information about your computer, including your IP address, operating system and browser type, for system administration and to report aggregate information to our suppliers. This is statistical data about our user’s browsing actions and patterns and does not identify any individual.
Use of personal information
We process your personal information for the purposes of:
(a) providing our services to you;
(b) dealing with your enquiries and requests;
(c) administering orders and accounts;
(d) carrying out market research or profiling;
(e) recovering debts;
(f) providing you with information about products and services (see below);
(g) to identify you when you contact us;
(h) to improve and develop our services to you, including the Site; and
(i) as training aides for our employees.
We do not sell, rent or provide your personal data in any manner to any other party outside of our organisation.
From time to time, we may contact you by e-mail, telephone, SMS or MMS about products that we believe may be of interest to you. If you do not wish to receive this information, you may opt-out by sending us an email at firstname.lastname@example.org, calling us on 01268 288188, writing to us at the following address: Carnival Business Park, Basildon, Essex. SS14 3WN or clicking on the “unsubscribe” link at the bottom of any email we send you.
We may also use and disclose information in aggregate (so that no individuals are identified) for marketing and strategic development purposes.
We do not wish to receive any sensitive personal information from you, such as any information regarding your medical or health conditions, race or ethnic origin, political opinions, religious or philosophical beliefs or other sensitive information. We shall not intentionally request, collect or process or control any such sensitive information.
Our services are not aimed at children under 18, being predominantly geared towards businesses and commercial users. We shall not intentionally request, collect or process or control any information about a minor under the age of 18.
Where we store your personal information
Security of your personal information
Any information sent to us is encrypted (scrambled) using Secure Socket Layer (SSL) technology. This is industry standard encryption technology that protects your data whilst being sent over the internet from being intercepted and misused by third parties. When it reaches us, we then encrypt the content and store it on a secure server so that it can only be read by authorised personnel.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
What are Cookies?
A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser.
Cookies collect information about your use of our websites, including things like your connection speed, details of your operating system, the time and duration of your visit and your IP address. We use this information to identify you when you visit the websites and to improve your browsing experience. We will not attempt to personally identify you from your IP address or other information stored on the cookies we use unless required to do so as a matter of law or regulation or in order to protect our or our other customer’s rights.
Cookies fall under two main headings, first party cookies and third party cookies.
First Party Cookies
A First Party Cookie is set by the domain, such as the computer you are using to access the internet, or the specific website that you have visited.
We use the two main types of cookies, persistent and session cookies.
A persistent cookie remains on your device after you have visited our website. These cookies will help us identify you as a unique visitor to our website by storing a randomly generated number.
A session cookie is temporary and only exists for the period you access the website for (or until the browser is closed after visiting our website). This particular type of cookie assists us by helping our website remember your selections and choices whilst visiting our website and therefore avoids you having to re-enter information. This type of cookie does not contain personal information and cannot be used to identify you.
Third Party Cookies
Purpose of Use
We use either of those two types of cookie for the following purposes:
Where use is strictly necessary when accessing the website:
These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas.
To enhance performance of the website:
These cookies collect information about how you use the website, for instance which pages you go to most often, and those pages where you experience an error message. These cookies don’t collect information about you – all the information collected is anonymous and is only used to improve how the website works.
To improve the functionality of the website:
These cookies are used to provide services or to remember settings that you saved to improve your visit to the website. For example, when you fill in a form with your name or other details, these cookies remember that, so you don’t have to type it in each time you come back.
What can I do about Cookies?
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies (such as restricting third party cookies for instance).
However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of the Site and the functionality of the site may be impaired.
Except for essential cookies, all cookies will only be retained for a commercially reasonable period of time.
Disclosure to third parties
We will only disclose your personal information to business partners, government bodies and law enforcement agencies, successors in title to our business and suppliers we engage to process data on our behalf and only to the extent necessary to perform their functions.
Any disclosure of personal information will be made in compliance with current UK data protection legislation, in particular the Data Protection Act 1998.
Other web sites
Under the EU General Data Protection Regulation (GDPR) you have a right to access the personal data held about you. To obtain a copy of the personal information we hold about you, please write to us at ChunkyChips.net, Carnival Business Park, Basildon, Essex. SS14 3WN enclosing a cheque for £10 (to cover the costs of administration and collating the information) made payable to ChunkyChips.Net Limited.
We use reasonable endeavours to ensure the information we hold about you is accurate and up to date. If you believe the information we are holding is incorrect or incomplete, please write to us as soon as possible at the above address or email us at email@example.com. We will use reasonable endeavours to promptly correct any information found to be incorrect.
Security and Privacy of Customer Hosted Data
As an add-on product to our core services, we offer various levels of data hosting services to our customers. When you order these services from us, we will provide you with secure logon information to enable you to access the server(s). Once this information is provided, we have no access to any of the information you choose to upload or share on the server space. We are committed to helping our customers protect the security and privacy of information stored or transferred using our services.
We protect the security and integrity of our wider network, however you remain responsible for the security and maintenance of any data (personal or otherwise) that you maintain on the server space you rent from us. You should regularly change and/or review the security of your server space. We provide our services at the direction of our customers and define our obligations for customer hosted data in our agreements with our customers.
Security is a shared responsibility
It is important for our customers to understand and distinguish between security measures that we implement and operate on the ChunkyChips supported infrastructure, and security measures that our customers need to implement and operate to protect their own data and to comply with specific privacy and security laws and regulations applicable to them i.e. GDPR.
To learn about the variety of security measures and features we use in our Data Centre to help protect ChunkyChips infrastructure and business operations, please visit our Essex Data Centre page and associated Terms and Datasheets.
ChunkyChips hosting services are provided to give our customers complete flexibility over how they configure, secure and deploy their hosted solution based on their individual requirements. We can offer a range of consultancy options to our clients to help them best secure their hosting services, however as standard the responsibility lies with the customer to maintain their server security and data. If you are in any doubt about the security of your website contents and any data you maintain, or compliance with GDPR, we would recommend you consult with your web designer or a third party securiy advisor to achieve this compliance.
What about privacy and protection of customers’ hosted data?
We provide our services at the direction of our customers, but we have no knowledge of the data (including any personal data) that our customers store or otherwise process when using our services. Customers retain full ownership and custody of their data and are in control of the entire lifecycle of their hosted data and how such data is classified, accessed, exchanged or otherwise processed when using our services.
With this in mind, our customers remain responsible for any personal information that customers collect and process. Customers must take all reasonable steps to protect the hosted data and to comply with laws and regulations as they may apply to the hosted data and the customer. Such reasonable steps would include the customer’s encryption of personal or any regulated data.