07391 748182 [email protected]

Privacy Policy

Susan M. Blum Ltd. (“we“, “our“, or “us“) is committed to protecting and respecting your privacy.

1. THIS PRIVACY POLICY

This privacy policy sets out how we collect, store, process, transfer, share and use data that identifies or is associated with you (“personal information“) when you use our website at www.smblumltd.com (the “Site“), use our online and in-store payments service or otherwise interact with us.

2. ABOUT US

Susan M. Blum Ltd. is the controller of the personal information we hold about you.  We are a company registered in England and Wales under number 11243649 with its registered office at 10 Finsbury Square, 5th Floor, London EC2A 1AF.

We are registered as a controller with the Information Commissioner’s Office under registration number ZA467305.

3. CONTACTING US

If you have any questions, comments and requests regarding this Privacy Policy, you can contact us:

3.1 By post to Susan M. Blum Ltd, 10 Finsbury Square, 5th Floor, London EC2A 1AF

3.2 By phone to 07391 748182

3.3 By email to [email protected]

4. INFORMATION WE COLLECT ABOUT YOU

If you have any questions, comments and requests regarding this Privacy Policy, you can contact us:

The table in the Annex below sets out the categories of personal information we collect about you and how we use that information. The table also sets out the legal basis upon which we rely to process your personal information.

More generally, we:

(a) collect personal information that you voluntarily submit to us, such as your contact details and identification information, when you use our Site or otherwise interact with us by email or in the course of our business activities;

(b) may also collect personal information from third parties, such as background checking service providers, social networks, public databases (where permitted by law), corporate websites and our partners where we carry out joint business activities; and

(c) may automatically collect personal information about how you access and use our Site and information about the device you use to access our Site (such as the pages you visit).

We use the information we collect to correspond with you, perform our agreements (including with you or the organisation you represent), comply with our regulatory responsibilities, carry out marketing activities and day-to-day business activities and operations.

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us, for example a new address or email address.

5. SHARING YOUR PERSONAL INFORMATION

We may share your personal information with the following (as required in accordance with the uses set out in the Annex):

(a) Service providers and advisors: we may share your personal information with SELECTED third parties that perform services for us or on our behalf, which may include providing email, background and anti-money laundering checks, or web hosting services. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

(b) Business partners: we may share your personal information (such as contact details) with our business partners where this is necessary in the normal course of our business and in accordance with the uses set out in the Annex.

(c) In connection with a business transaction: your personal information may be disclosed to third parties in connection with a transaction, such as a merger or sale of all or part of our business.

(d) For legal reasons: we may share your personal information with third parties as required by law or if we reasonably believe that such action is necessary to (i) comply with the law and the reasonable requests of law enforcement; (ii) detect and investigate illegal activities and breaches of agreements; and/or (iii) exercise or protect the rights, property, or personal safety of Susan Blum or others.

6. MARKETING AND ADVERTISING

From time to time we may contact you with information about our services, including sending you marketing messages and asking for your feedback.

Most marketing messages we send will be by email. For some marketing messages, we may use personal information we collect about you to help us determine the most relevant marketing information to share with you.

We will only send you marketing messages if we have your consent or, if consent is not required under applicable law, you have not opted out of receiving marketing messages from us. You can withdraw your consent or opt out of receiving further marketing communications at any time by clicking on the unsubscribe link at the bottom of our marketing emails.

7. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage, including an SSL certificate installed on our Site to encrypt and protect data submitted via forms on our Site. Although we work to protect the security of the personal data we hold, please be aware that no method of transmitting data over the internet or storing data is completely secure.

8. DATA RETENTION

We will store the personal information we collect about you for no longer than necessary for the purposes set out in the Annex in accordance with our legal obligations and legitimate business interests.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, as well as the applicable legal, regulatory, tax, accounting or other requirements.

9. INTERNATIONAL TRANSFERS OF YOUR PERSONAL INFORMATION

We do not normally transfer your personal data outside the UK.

If your personal information is transferred outside of the UK to where our third-party service providers have operations, the transfer will be made pursuant to appropriate safeguards, such as standard data protection clauses adopted by the UK Information Commissioner’s Office. If you wish to enquire further about the safeguards used, please contact us using the details above.

10. YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

In accordance with applicable privacy law, you have the following rights in respect of your personal information that we hold:

(a) Right of access. You have the right to obtain access to your personal information.

(b) Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.

(c) Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.

(d) Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.

(e) Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.

(f) Right to object. You have a right to object to any processing based on our legitimate interests in certain circumstances. You can also object to our direct marketing activities for any reason by clicking the “unsubscribe” link set out in any marketing communication you receive. Unsubscribing from marketing communications will not unsubscribe you from system notifications which we need to send as part of the Service we provide. From time to time we may need to contact you by email or via our support team.

(g) Right to withdraw consent. If you have provided consent to any processing of your personal information, you have a right to withdraw that consent.

Please note that the above rights are not absolute and we may be entitled to refuse requests, wholly or partly, where exceptions under the applicable law apply.

If you wish to exercise one of these rights, please contact us using the contact details above.

11. COOKIES AND SIMILAR TECHNOLOGIES

Our Site uses cookies to distinguish you from other users of our Site. Please refer to our Cookies Policy for more information as to the way in which we use cookies on our Site.

12. LINKS TO THIRD PARTY SITES

This Site may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Site, we encourage you to read the privacy policy of every website you visit.

13. COMPLAINTS

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

14. CHANGES TO THIS POLICY

We may update this privacy policy from time to time and so you should review this page periodically. When we change this privacy policy in a material way, we will update the “last modified” date at the end of this privacy policy. Changes to this privacy policy are effective when they are posted on this page.

This privacy policy was last modified on 20 February 2024.

ANNEX – PERSONAL INFORMATION WE COLLECT

Category of personal information
How we use it
Legal basis for processing
Contact details (name, business, email, phone number)
To enter into a commercial relationship with you (for example, to provide our services and/or to contact you about them where necessary) and to manage our ongoing commercial relationship with you (for example, dealing with any enquiries you have made and/or ensuring you are using our services in the most effective and proper way).

To send you email newsletters, interesting blogs, news, webinars, and to keep you up-to-date about our services which we think will interest you.

To administer our Site (including troubleshooting and resolving technical issues)To communicate with you regarding changes to our policies, other terms and other administrative information

Such processing is in our and your legitimate interests to ensure you or the organisation you represent is provided with our services in accordance with our contract with you or that organisation.

Either consent (if required under applicable law) or our legitimate interests, namely marketing and advertising to our contacts and customers to grow our business.

Such processing is necessary for our legitimate interests, namely to ensure we are able to resolve any issues you have in accessing our Site or using our services.

Such processing is necessary for our legitimate interests, namely to ensure you are aware of any changes to our policies, terms and other such technical updates.

Technical information (IP address, browser type, internet service provider, device identifier, your login information, time zone setting, browser plug-in types and versions, preferred language, activities, operating.
• Analytics
• Improve our Site to ensure that content is presented in the most effective manner for you
• Marketing and Advertising
• To ascertain your preferences
Consent.
system and platform, and geographical location);

Usage data (clickstream to, through and from our Site, pages you viewed and searched for, page response times, length of visits to certain pages, referral source/exit pages, page interaction information (such as scrolling, clicks and mouse-overs), date and time pages are accessed, and website navigation and search terms used)

All data
To administer and protect our business, website and services (including fraud prevention and detection, troubleshooting, data analysis and system testing) and to keep our website and services secure.
To enable us to comply with any legal or regulatory requirements and otherwise to comply with any relevant regulator or competent authority.
All data
To enable us to comply with any legal or regulatory requirements and otherwise to comply with any relevant regulator or competent authority.
To comply with our legal obligations.
Copyright © 2024 Susan M. Blum Ltd. All Rights Reserved.