Altimus Retailers Ltd is committed to protecting the privacy and confidentiality of personal information. This Privacy Policy outlines how we collect, use, disclose, and protect personal information obtained through our website, as well as the rights and choices you have regarding your information. We comply with all applicable data protection laws in the United Kingdom to ensure the security and integrity of the personal information we handle.

This privacy policy pertains to personal information concerning:

• Visitors to our website
• Customers who make purchases, use our services, or create an account with us
• Our suppliers

WHAT DOES PERSONAL INFORMATION REFER TO?

In the context of our privacy policy, personal information refers to data that is related to an individual and can be used to directly or indirectly identify that person. This includes information such as their name, account number, location, online identifiers, or other specific factors that can be linked to their identity. Furthermore, personal information may also include what is known as special category data. This type of data pertains to sensitive aspects such as an individual's racial or ethnic origin, political opinions, religious beliefs, trade union membership, physical or mental health, and criminal records or allegations.

We want to assure you that, in general, we do not collect special category data from visitors to our website, customers, or suppliers. However, there are exceptions in cases where we identify suspected criminal activities, such as fraudulent claims or the use of stolen payment card information. In such instances, we will record the details of the suspected criminal activity and may take appropriate actions, including refusing to accept orders, processing payments, or providing refunds. We may also report the incident to the relevant bank, payment card issuer, police, or other appropriate authorities.

For more detailed information on how we handle your personal information, we encourage you to refer to the specific sections within our privacy policy.

Information we collect about website visitors & its usage

At Altimus, you have the freedom to explore and navigate without the need to provide your personal contact details. But similar to many other websites, our server logs collect certain information about your visit, including details about your operating system, browser software, IP (Internet Protocol) address, URL (Uniform Resource Locator), as well as the date and time of your visit. To analyse visitor behaviour and enhance your browsing experience, we utilise cookies. For detailed information on how we use cookies, please refer to our dedicated section in the cookies policy.

However, if you choose to engage in any of the following activities, we may require you to provide your contact details, such as your name, address, email address, and telephone number:

• Subscribing to our mailing list
• Submitting an inquiry or requesting a quote or other information
• Placing an order through our website
• Creating an account or logging into a secure area
• Participating in a competition or promotional feature

For competitions or promotional features, we may also request additional details, including your name, address, email address, and telephone number, in order to administer the competition and notify winners.

Please be aware that separate terms and conditions may apply when opening an account or participating in competitions. We recommend reviewing these terms at the relevant time to ensure full understanding and compliance. We respect your privacy and strive to handle your information securely and responsibly. For more comprehensive details on how we collect and use visitor information, please read the below.

GENERAL DATA PROTECTION REGULATION (GDPR)

The General Data Protection Regulation (GDPR), often referred to as the new Data Protection Bill, was implemented on May 25th, 2018, replacing the existing Data Protection Act (1998). While there are similarities between the Data Protection Act and GDPR, there are also not able differences that introduce positive changes in the storage and processing of personal data. These changes apply to both digital and printed forms of data and impact how it is stored and utilized.

LAWFUL BASIS

Under the new regulations, businesses are required to specify the basis on which they believe they should have access to your personal data, which can be either 'Legitimate Interest' or full 'Consent'.

When you provide your personal data to us, we will clearly indicate the purpose for which you are providing it. For example, it could be to complete a sale, process a special order, handle warranty claims, facilitate refunds or exchanges, sign up for our newsletter, join our loyalty scheme, or participate in promotional marketing campaigns that include special promotions and offers. According to this requirement, the consent you initially provide remains valid only for the specified purpose. As we continue to serve you, we consolidate these sources of data so that we have a precise understanding of the permissible uses of your data. As we have always adhered to obtaining consent as the basis for data access, there have been no changes in this regard.

GDPR DATA INCLUSIONS

This Privacy Policy outlines how we collect, use, and protect personal data on our website,www.altimusoutdoor.com. We value your privacy and are committed to ensuring the confidentiality and security of your personal information. Please take the time to read and understand this policy.

Types of Personal Data We Collect

The following categories encompass the personal data we collect:

Identity Data: We collect your title, first name, last name, email ID, and an encrypted version of your login/password. If you engage with us through social media, your social media username may also be included.

Contact Data: We collect your billing address, delivery address, email address, and telephone numbers.

Financial Data: We do not store payment card details. Our online transactions are processed through Sage Pay (for credit card payments) and PayPal. Please refer to the privacy policy of Sage Pay for more information regarding their handling of your financial data.

Transaction Data: We collect details of payments made by you, as well as information about products and services you have purchased from us.

Profile Data: We collect your username, password, purchase/order history, preferences, feedback, survey responses, and any additional profile data we have added using analytics and profiling techniques.

Technical Data: We collect technical information related to the devices you use to access our website, including your internet protocol (IP) address, login data, browser type and version, time zone setting, location, browser plug-in types and versions, operating system, platform, and other technology information.

Usage Data: We collect information about how you use our website, products, and services.

Marketing and Communications Data: We collect your preferences for receiving direct marketing communications from us and third parties, as well as your communication preferences.

Aggregated Data: We also collect, use, and share Aggregated Data, which is statistical or demographic information that does not directly or indirectly disclose your identity. Aggregated Data may be derived from your personal data but is not considered personal data under the law. For instance, we may use your Usage Data to calculate the percentage of users accessing a specific website feature. If we combine or link Aggregated Data with your personal data in a way that directly or indirectly identifies you, we treat the combined data as personal data and handle it in accordance with this privacy policy.

Special Categories of Personal Data: We do not collect any Special Categories of Personal Data about you, such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, or genetic and biometric data. Additionally, we do not collect information about criminal convictions and offenses. All personal data included in designs or products created on altimusoutdoor.com will be treated as ordinary personal data.

HOW IS YOUR PERSONAL DATA COLLECTED?

We utilise various methods to gather data from individuals, both directly and indirectly. These include:

Direct Interactions: You may provide us with your Identity, Contact, and Financial Data through various means such as filling out forms, communicating with us via post, phone, email, chat, or social media. If you visit our physical store, we will collect necessary details from you during service provision, and we will seek your consent to use the provided information. These interactions occur when you:

• Subscribe to our newsletter
• Make inquiries or request information
• Create an account on our website
• Place orders for our products or services
• Request marketing materials
• Engage with us on social media
• Enter competitions, promotions, or surveys
• Contact customer services
• Leave comments or reviews on our products or services
• Return faulty products
• Enrol in our loyalty program
• Request an electronic copy of a receipt
• Place a special order through our store
• Receive boot fitting services or other medical services, such as Biomechanical assessment, Chiropody, Osteopathy

Occasionally, we may request proof of identity and payment clearance for security purposes. In such cases, we ensure that no personal information is stored on our server, and the data is securely disposed of after processing.

Data from Third Parties: We may receive personal data from third parties who are legally permitted or have obtained your consent to share such information with us. This may include data obtained from social media platforms or review sites.

We only use your personal data in compliance with applicable laws and regulations. We rely on the following legal grounds to process your personal data:

• Contractual Obligations: We use your personal data to fulfil a contract we have with you or to take necessary steps before entering into a contract.
• Legitimate Interests: We process your personal data when it is necessary for our legitimate interests, provided it does not override your rights and interests.
• Consent: We obtain your consent to use your personal data for specific purposes.
• Legal and Regulatory Obligations: We may process your personal data to comply with legal or regulatory obligations.

Please note that the description above regarding the collection and usage of personal data is subject to applicable laws and regulations.

HOW WE USE YOUR PERSONAL DATA

We utilise your personal data for the following purposes:

1. Performance of Contract: We process your personal data when it is necessary to fulfil the contractual obligations that we have entered into or are about to enter into with you. For example, when you make a purchase of our products, a contract is established, and we require your data to complete the transaction effectively.
2. Legitimate Interests: We may process your personal data when it is necessary for our legitimate interests or the legitimate interests of a third party, provided that your interests and fundamental rights do not outweigh those interests. This ensures that we can carry out certain activities that benefit our business or the business of others. For instance, we may conduct fraud screening during the check-out process to safeguard against fraudulent activities.
3. Legal or Regulatory Obligations: We process your personal data when we need to comply with legal or regulatory obligations imposed upon us. For instance, we maintain sales records for tax compliance purposes, as mandated by law.

In general, we do not solely rely on consent as the legal basis for processing your personal data, except when required by law, such as for specific direct marketing communications. If our legal basis for processing your data is consent, you have the right to withdraw your consent at any time.

For more detailed information regarding the specific lawful bases we rely on to process your personal data, please consult the section titled "Explanation of the Legal Bases We Depend on for Personal Data Processing."

EXCLUSIONS UNDER GDPR - FINANCIAL DATA

At Altimus Retailers, we understand the importance of protecting your personal information, especially when it comes to financial data such as credit and debit card details. We want to assure you that we take the security of your data seriously and comply with all relevant regulations governing its protection.

Data Processing

Once your data is transmitted to us, we assume the role of the 'Data Controller' as defined by the Data Protection Bill. This designation places upon us the highest level of responsibility to ensure the utmost care in safeguarding your privacy. Rest assured that we handle your data with the utmost caution and diligence.

Storage and Usage

We do not store any form of payment card details within our systems. All online transactions are processed through trusted third-party providers: Sage Pay for credit and debit card payments, and PayPal. We encourage you to review Sage Pay's privacy policy for more information on how they handle your data.

Marketing Communications

We respect your communication preferences and will only send marketing emails if you have explicitly opted to receive them. We do not engage in unsolicited marketing communication, ensuring that you have control over the information you receive from us.

Data Sharing

We do not share your personal information with any third party for any purpose, except for trusted third parties involved in handling financial data. Your privacy is of utmost importance to us, and we take necessary steps to ensure that your data remains secure.

Data Accessibility

Your personal, location, and transactional data are collected through our business systems, and the responsibility lies with the Data Controller within Altimus Retailers Ltd, specifically our Privacy Team. If you believe there are any errors in your data or wish to amend it, or if you want to withdraw your consent for us to retain your data, you can exercise your rights through processes such as a 'Subject Access Request' or the 'Right to be Forgotten.' For any other inquiries, our Privacy Team is always available to assist you. Please reach out to us via email at customerservice@altimusoutdoor.com. At Altimus Retailers, we strive to maintain a positive relationship with you while prioritising your privacy and ensuring a secure environment for your personal information.

SUBJECT ACCESS REQUEST (SAR)

As an esteemed customer of Altimus Retailers, you have the right to request a copy of your personal data through a process known as a Subject Access Request (SAR). We take your data privacy seriously and strive to ensure a transparent and efficient SAR process. To initiate a SAR, simply send an email to customerservice@altimusoutdoor.com with the subject line "SAR Request." Our dedicated team will promptly assist you in this matter.

Upon receipt of your SAR, we will diligently validate your identity to maintain the utmost security and prevent unauthorized access to personal data. Once your identity has been successfully validated, we will provide you with a FREE copy of all the personal data we hold on you within 30 days. The data will be presented in a machine-readable format, such as Microsoft Excel or PDF, for your convenience.

In certain instances where the SAR request is complex or encompasses a significant number of data points, we may require an additional two months to process your request. In such cases, we will communicate the reasons for the extension within the initial 30-day period. It is important to note that if we deem a request to be manifestly unfounded, excessive, or repetitive, we may charge a reasonable administration fee for further copies of the same information. However, rest assured that we will provide a clear justification for any such charges. If persistent and excessive requests continue, we retain the legal right to refuse subsequent requests. In the event of any disagreement regarding our decision, you have the option to contact the Information Commissioner's Office to present your claim. To ensure efficient management of SAR requests and maintain accurate records, we log each request within our systems. This allows us to effectively track the frequency of individual requests and provide an enhanced level of service.

RIGHT TO BE FORGOTTEN

At Altimus Retailers, we acknowledge and respect your rights under the General Data Protection Regulation (GDPR), including the right to have your personal data deleted if it is no longer relevant or necessary for the purpose it was collected. If your data was initially obtained based on your consent, you also have the right to withdraw that consent at any time.

If you choose to revoke your permission for us to use your personal data, you can exercise your Right to be Forgotten. This process involves the complete removal of all your personal details from our systems. Once deleted, this information will be permanently inaccessible to both you and us. It is important to note that if you establish a new relationship with us in the future and provide fresh permissions, none of your previous personal data will be retained or accessible at that stage.

To initiate the Right to be Forgotten process, please submit a request by emailing us atcustomerservice@altimusoutdoor.com with the subject line "SAR Request." Our dedicated team will handle your request promptly and ensure the necessary actions are taken to delete your personal data from our systems. It is important to understand that while we honour your request for data deletion, we may still be obligated under other applicable laws to retain certain transactional data previously associated with you as an individual.

CCTV

At Altimus Retailers, we prioritize the safety and security of our customers and our property. To fulfill this commitment, our retail store is equipped with closed-circuit television (CCTV) recording equipment. It is important to note that the primary purpose of this equipment is to maintain a safe environment and protect against potential incidents, rather than identifying individuals based on their images. As such, the usage of CCTV footage falls outside the scope of the General Data Protection Regulation (GDPR).

In certain circumstances, if necessary, the captured CCTV footage may be shared with law enforcement agencies, such as the police, as part of an official investigation. This cooperative approach allows us to assist law enforcement authorities in maintaining public safety and ensuring the well-being of our customers and premises.

THE USE OF COOKIES

WHAT ARE COOKIES?

Cookies are a type of little file that websites can install on your computer, mobile device, tablet, or other hardware. They keep track of your prior visits to the website, which makes it simpler for you to retain preferences and makes it possible for some functions, like the shopping basket, to function. Additionally, cookies may alter the content or adverts you view on the website. Our goal is to make sure that using our website will give you a satisfying browsing and shopping experience.

Cookies don't hold any data that may be used to identify an individual. Instead, they help us make product recommendations that are relevant to you and other users of your devices by remembering prior purchases, page views, and account information. These suggestions and preferences are produced automatically and are unrelated to any private data we may have about your interests. You have the choice to accept or reject cookies before they are used. By changing your browser's settings to delete or prevent new cookies, you may also get rid of any already-installed cookies. The only purposes of any cookies we employ are to benefit you, the users of your devices, and us. We don't use third-party cookies to collect website use data.

TYPES OF COOKIES

Session cookies: These cookies are temporarily stored on your device while you browse our website. They are automatically deleted once you close your browser. Session cookies play a vital role in ensuring the smooth functionality of our site during your current visit, enabling features such as maintaining your session and keeping track of your progress.

Persistent Cookies: These cookies are saved on your computer or device and remain there even after you close your browser. Persistent cookies enable us to remember you from one visit to the next, enhancing your browsing experience. They store information such as your preferences and allow us to provide personalized content and relevant recommendations based on your previous interactions with our website.

HOW TO PREVENT OR REMOVE COOKIES

You have the option to block or disable cookies in your browser settings and can delete stored cookies whenever you wish. To find specific instructions for your browser, refer to the "help" section in your browser's menu or visithttp://www.allaboutcookies.org/

IMPACT OF DISABLING COOKIES

Please note that disabling cookies in your browser may limit your ability to fully utilize our website. Some or all areas of the website may not function correctly.

DETAILS OF COOKIES WE USE

Below, you will find a breakdown of the specific cookies employed and their respective functions:

Essential Cookies: These cookies are essential for the proper functioning of our website. They serve various functions, including keeping you logged in to your account, retaining items in the shopping basket, ensuring accurate information display, and recording your acceptance of cookies.

Analytics: We utilize Google Analytics to gain insights into visitor behavior, including understanding how users arrived at our site, monitoring session duration and return visits, and managing website traffic. These cookies collect anonymous information and assist us in optimizing our website based on user preferences.

Security Cookies: These cookies play a crucial role in safeguarding our website against potential attacks and identifying fraudulent activity. By employing security cookies, we can ensure a secure browsing experience for our users.

Functionality: Cookies within this category enable various functionalities on our website. They contribute to automated email services, ensure proper website display across different devices, and manage processes such as orders, collections, deliveries, product reviews, surveys, live chat, and video content.

Performance Monitoring: We use performance monitoring cookies to track visitor progress, identify any errors or issues that may arise, and link user actions with website usage and performance. Some of these cookies may collect information such as IP addresses, browser details, and device types to help us improve our website's performance.

Social Media: These cookies are employed to track viewed products and may display related advertisements when visitors access platforms such as Facebook and Twitter. Additionally, they facilitate sharing or liking items through social media buttons, enhancing your ability to engage with our content.

Please note that the cookies mentioned above are used exclusively to enhance your browsing experience and provide relevant functionality on our website.

SECURITY

We are fully committed to ensuring the security of your information. To prevent unauthorised access or disclosure, we have implemented appropriate physical, electronic, and managerial procedures to safeguard and secure the data we collect online.

SHARING YOUR INFORMATION

We do not sell your personal information to third parties unless we have obtained your permission or are required to do so by law. However, in order to provide our products and services to you, we may share your data with certain companies.

OVERSEAS TRANSFER OF INFORMATION

The information we collect from you may be transferred to and stored at destinations outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or our suppliers. In such cases, we and our permitted third parties will impose obligations on the recipients of the data to protect your information to EEA standards or require them to adhere to international frameworks for secure data sharing. We have implemented appropriate safeguards to ensure the protection of your information during such transfers. If you require more information about the safeguards we rely on, please contact us atcustomerservice@altimusoutdoor.com

MARKETING MESSAGES AND UNSUBSCRIBING

We strive to provide you with the best possible experience and may use your information to offer products or services that we believe may interest you. You will receive marketing messages from us if you have requested information, made purchases, or provided consent to receive such communications. However, you can unsubscribe from these marketing messages at any time. Even if you choose to stop receiving marketing messages, you will still receive important service communications, such as order updates and delivery information.

To unsubscribe from our mailing list or change your preferences, you can:

• Email customerservice@altimusoutdoor.com and include your full name, address, and account number (if applicable).
• Click the unsubscribe link provided in our email or SMS messages.
• Log in to your account and update your preferences in the My Account section of our website.

ALTIMUS RETAILERS ONLINE ADVERTISING

As an esteemed online retailer, we employ online advertising strategies on third-party websites to effectively communicate information about our extensive range of products and services. It is crucial to note that these targeted banners and advertisements are meticulously tailored based on the information we possess regarding your previous purchases or browsing activity on our website. However, we would like to emphasise that the privacy policies outlined by these third-party websites govern the collection and handling of personal information by their respective platforms. It is important to acknowledge that our Privacy Policy solely pertains to the information we collect through our own services.

YOUR LEGAL RIGHTS

We place significant importance on your rights regarding the handling of your personal information, and it is essential for us to ensure your understanding of these rights and provide guidance on how to exercise them. Should you wish to exercise your rights, express a complaint, or seek clarification, we kindly request that you reach out to us using the following contact information:

Email: customerservice@altimusoutdoor.com

Telephone: 01183040050

Write to: Altimus Retailers Customer Service, 176, High Street Kensington, London, W8 7RG

To safeguard against unauthorised disclosure, we may need to request specific details from you to verify your identity and confirm your entitlement to access your personal data or exercise other applicable rights. This security measure is implemented to protect your information. In the spirit of adhering to Data Protection Legislation, we strive to respond to all legitimate requests within one month. However, in the case of complex requests or the submission of multiple inquiries, the processing time may be longer. Should such circumstances arise, we will promptly inform you of the situation and ensure that you are kept informed of the progress being made. We remain committed to upholding your privacy rights and appreciate your cooperation in reaching out to us regarding any concerns or queries you may have.