Legal Policies

Who We Are

Dorothy Watt (a Trading Style of Crossroads Homeopathy) ("We") are committed to protecting and respecting your privacy.

​

This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

​

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purpose of these regulations, the data controller is Crossroads Homeopathy.

​

Our nominated representative is Dorothy Watt, who can be contacted at hello(at)dorothywatt(dot)com

​

Our website address is: https://dorothywatt.com

What Personal Data We Collect and Why We Collect It

We may collect and process the following data about you:

​

- Information that you provide by filling in forms on our site. This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you enter a competition or promotion sponsored by Dorothy Watt and when you report a problem with our site.
- If you contact us, we may keep a record of that correspondence.
- We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
- Details of transactions you carry out through our site and of the fulfilment of your orders.
- Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

Legal Basis for Processing

We collect and process your personal data on the following lawful bases:

- Consent: Where you have explicitly consented to us processing your data (for example, subscribing to our mailing list or leaving a comment).
- Contract: Where processing is necessary to fulfill a contract with you or take steps at your request before entering a contract (for example, processing payment or delivering services you've ordered).
- Legitimate Interest: Where we have a legitimate business interest in processing your data and this is not outweighed by your rights and interests (for example, maintaining our website security and preventing fraud).
- Legal Obligation: Where we are required to process your data to comply with UK law.

IP Addresses

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor's IP address and browser user agent string to help spam detection.

​

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact Forms

The data obtained by the contact form will not be stored on our server and will not be forwarded to anyone. The contact form processor will only send us an email including your name and your email at the moment of sending, and the information you've provided in the contact form text area.

Embedded Content from Other Websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

​

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Third-Party Services and Data Processors

We use the following third-party services which may process your personal data:

- Gravatar - provides profile pictures for comments. See their privacy policy at https://automattic.com/privacy/
- Wix - our website platform, which provides hosting and website functionality
- Email services - for sending you communications and managing enquiries
- Payment processors - for processing transactions (if applicable)

These services act as data processors on our behalf and are contractually committed to protecting your data in accordance with GDPR requirements.

Where We Store Your Personal Data

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.

​

Where your data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) with our data processors, to protect your data in accordance with GDPR requirements.

By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

​

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

​

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Uses Made of the Information

We use information held about you in the following ways:

- To ensure that content from our site is presented in the most effective manner for you and for your computer.
- To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
- To carry out our obligations arising from any contracts entered into between you and us.
- To allow you to participate in interactive features of our service, when you choose to do so.
- To notify you about changes to our service.

If you are an existing customer, we will only contact you by electronic means (email or SMS) with information about goods and services similar to those which were the subject of a previous sale to you.

If you are a new customer, we will contact you by electronic means only if you have consented to this.

​

If you do not want us to use your data in this way, please tick the relevant box situated on the form on which we collect your data (the order form or registration form).

Disclosure of Your Information

We may disclose your personal information to third parties:

- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Dorothy Watt, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- If Dorothy Watt or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.

How Long We Retain Your Data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

​

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Data Breaches

In the event of a personal data breach, we will inform you and the relevant data protection authority without undue delay (and no later than 72 hours) if we are required to do so under GDPR. We will provide you with information about the nature of the breach and steps we are taking to address it.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of Access: You have the right to ask us to confirm what personal data we hold about you and to request a copy of that data. We will respond to requests within 30 days.

​

Right of Rectification: You have the right to ask us to correct any inaccurate personal data we hold about you.

​

Right to Erasure: You have the right to ask us to delete your personal data in certain circumstances (e.g. if the data is no longer necessary for the purpose it was collected, or if you withdraw your consent).

​

Right to Restrict Processing: You have the right to ask us to limit how we use your personal data in certain circumstances.

​

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format, and to request that we transfer it to another organisation.

​

Right to Object: You have the right to object to us processing your personal data for certain purposes, including for marketing.

​

Right to Not Be Subject to Automated Decision Making: You have the right to opt out of decisions based solely on automated processing of your data.

​

Right to Lodge a Complaint: If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

​

To exercise any of these rights, please contact us at hello(at)dorothywatt(dot)com

​

Our site may, from time to time, contain links to and from the websites of our partner networks, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Changes to Our Privacy Policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email.

Contact Us

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to hello(at)dorothywatt(dot)com