Privacy Policy

Wild & Without is committed to the respectful use and responsible protection of personal data. This privacy policy explains how information about you is collected, stored, and processed when you use the Wild & Without website, and provides ways you can exercise your data subject rights.

The privacy notice describes to you:

• who we are
• how to contact us
• what personal data we collect and how we use it
• the categories of third parties with whom we share your personal data
• how we retain your information and keep it secure
• your rights and how to exercise them

1. Who we are

For the purposes of data protection law, the “controller” is Wild & Without.

If you would like more information about this policy, or to exercise your data subject rights, please contact us using the following details:

E-mail: [email protected]

2. Data we collect

Newsletter subscriptions

This data is collected when you subscribe to the Wild & Without newsletter.

• The following data is provided to us:
  • Email address
• The data is stored in third-party services
• We retain this data indefinitely, unless a data subject right is exercised
• We process this data for digital marketing
• We process this data under the legal basis of consent

General enquiries

This data is collected when you contact us by email.

• The following data is provided to us:
  • Name
  • Email address
• Any other information provided
• The data is stored in third-party services
• We retain this data indefinitely, unless a data subject right is exercised
• We process this data under the legal basis of legitimate interests, contractual necessity, and legal obligations

Behaviour tracking

This data is collected when you use the Wild & Without website.

• The following data is provided to us:
  • Marketing information
  • Technical information
  • Usage data
• The data is stored in cookies and third-party services
• We retain this data indefinitely, unless a data subject right is exercised
• We process this data for website optimisation, digital marketing, and content provision
• We process this data under the legal basis of legitimate interests and consent

3. Who we share data with

We may provide your personal data to the following recipients for the purposes set out in this notice.

• Service providers
  • Digital office services: Google Mail, Google Drive
  • Marketing services: Media.net, Mailchimp
  • Analytics services: Google Analytics
  • Content services: Google Fonts
• Any parties where we are legally required or permitted to do so
• Any other parties where we have your specific consent to do so

4. How we keep data secure

Wild & Without has security measures in place to prevent data loss, to preserve data integrity, and to regulate access to the data. Only authorised employees and third parties processing data on our behalf have access to your personal data.

The security measures we have in place include:

• Training and enforcement of data security practices
• Restriction of access to personal information
• Use of secure technologies (e.g. SSL, encryption)
• Animosity and aggregation of data
• Regular reviews of information collection, storage and processing practices to protect against unauthorised access
• Regular reviews of information collection, storage and processing practices to protect against unauthorised access
• Scenario planning and crisis-management exercises to ensure we are ready to respond to cyber security attacks and data security incidents.

5. Data transfer outside the EEA

Although we are based in England, we may transfer your personal information to a location (for example, to a secure server) outside the European Economic Area, if we consider it necessary or desirable for the purposes set out in this notice.

In such cases, to safeguard your privacy rights, transfers will be made to recipients to which a European Commission “adequacy decision” applies (this is a decision from the European Commission confirming that adequate safeguards are in place in that location for the protection of personal data), or will be carried out under standard contractual clauses that have been approved by the European Commission as providing appropriate safeguards for international personal data transfers, or by the adoption of EU-US Privacy Shield.

6. Your information rights

Data protection laws provide the following rights for individuals:

• Right to be informed about how your personal data is collected and used
• Right of access to your personal data
• Right to rectification of your personal data so that it is true, accurate and complete
• Right to erasure of your personal data
• Right to restrict or object to…
• processing of personal data for direct marketing
• our continued processing of your personal data
• decisions being taken by automated means which significantly affect you
• Right to portability of your personal data in a commonly used format.

Their rights are subject to certain limitations that exist in law. Further information about for data subject rights are available on the ICO’s website.

If you would like to exercise any of these rights, please contact us using the details in section 1.

7. Lodging a complaint

You have a right to lodge a complaint with the supervisory authority, the ICO.