Privacy Policy

1. Definitions

This privacy policy is based on the terminology used by the European legislator for the General Data Protection Regulation (GDPR). Key terms include:

• Personal Data: Any information relating to an identified or identifiable natural person.
• Data Subject: Any identified or identifiable natural person whose personal data is processed.
• Processing: Any operation performed on personal data, including collection, storage, use, and deletion.
• Controller: The entity determining the purposes and means of data processing.
• Consent: Freely given, specific, informed and unambiguous indication of the data subject's wishes.

2. Name and Address of Controller

3. Collection of General Data and Information

Our website collects general data when visitors access it, including:

• Browser types and versions
• Operating system information
• Referrer websites
• Sub-pages visited
• Access date and time
• IP addresses
• Internet service provider information

This data is used for content delivery, website optimisation, system security, and law enforcement purposes when necessary.

4. Contact via Website

Personal data submitted through contact forms or email is stored to process enquiries and respond to you. There is no transfer of this personal data to third parties.

5. Erasure and Blocking of Personal Data

Data is retained only as long as necessary for stated purposes. Once retention periods expire or purposes are fulfilled, personal data is blocked or erased per legal requirements.

6. Rights of the Data Subject

A. Right of Confirmation

You may request confirmation regarding whether your personal data is being processed.

B. Right of Access

You have the right to obtain free information about stored personal data and receive copies, including details about processing purposes, data categories, recipients, and storage duration.

C. Right to Rectification

You may request correction of inaccurate personal data without undue delay and can request completion of incomplete information.

D. Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data when:

• Data is no longer necessary for original purposes
• Consent is withdrawn and no other legal basis exists
• You object and no overriding legitimate interests apply
• Data was processed unlawfully
• Erasure is required by law

E. Right of Restriction of Processing

You may request processing limitations when data accuracy is contested, processing is unlawful, or you have objected to processing.

F. Right to Data Portability

You may receive your personal data in a structured, commonly-used, machine-readable format and transmit it to another controller.

G. Right to Object

You may object to processing based on legitimate interests or direct marketing purposes. We shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds.

H. Right to Withdraw Consent

You may withdraw consent to data processing at any time by contacting us.

7. Google Analytics

This website uses Google Analytics with IP anonymisation enabled. IP addresses are abbreviated when accessed from EU or EEA member states. The service analyses website traffic and user behaviour.

Google Analytics places cookies on your device to track visits, access times, location, and visit frequency. You can prevent cookie setting through browser adjustments or install the Google Analytics opt-out browser add-on.

8. Social Media Integrations

Our website may integrate components from Facebook, Instagram, and other social media platforms. When you visit pages containing these components, the respective platform may be notified of your visit.

If you are logged into these platforms, they may track which specific pages you visit. You can prevent this transmission by logging out of social media accounts before visiting our website.

For more information, please refer to each platform's respective privacy policies.

9. Legal Basis for Processing

Processing is based on:

• Article 6(1)(a) GDPR: Explicit consent for specific purposes
• Article 6(1)(b) GDPR: Performance of contracts
• Article 6(1)(c) GDPR: Legal obligations
• Article 6(1)(d) GDPR: Protection of vital interests
• Article 6(1)(f) GDPR: Legitimate interests pursued by the controller

10. Legitimate Interests

Where the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest is to carry out our business in favour of the well-being of all our employees and shareholders.

11. Storage Period

Personal data is retained according to statutory retention periods. After expiration, data is routinely deleted unless still necessary for contract fulfilment or initiation.

12. Automated Decision-Making

As a responsible company, we do not use automatic decision-making or profiling.

13. Cookie Policy

This section explains how Numi Scan Gosforth uses cookies and similar technologies on our website. It forms part of this Privacy Policy.

What cookies are

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, improve performance, and provide information to the site owner about how the site is used.

Types of cookies we use

• Strictly necessary cookies: Required for the website to function: for example, remembering whether you've dismissed a banner or completed a contact form. These cannot be turned off.
• Analytics cookies: Help us understand how visitors use our site (which pages they visit, how long they stay, where they come from) so we can improve the experience. Data is aggregated and anonymous.
• Functional cookies: Remember preferences such as your scan-type interest or whether you've seen our offers banner. They make the site easier to use on return visits.
• Marketing cookies: Used (with your consent) to measure the effectiveness of campaigns, including any social or search ad activity. We do not sell your data to advertisers.

Third-party cookies

Some cookies are set by third-party services we use to deliver the website experience: for example, Google for analytics and map embeds, our online booking provider, and any social embed (Facebook, Instagram). These third parties operate under their own privacy policies, which we recommend you review.

Managing or refusing cookies

You can control cookies through your browser settings. Most browsers let you block all cookies, block third-party cookies only, or clear cookies on exit. Be aware that turning off strictly-necessary cookies may stop parts of the website working. For per-browser instructions, see your browser's help documentation.

Consent

Where required by UK and EU law, we ask for your consent before setting non-essential cookies. You can withdraw consent at any time by clearing your cookies in your browser. Withdrawing consent does not affect the lawfulness of processing already carried out.

Changes to this cookie section

We may update this section as the cookies we use change. The "last updated" date at the top of the policy reflects the most recent revision.