Privacy Policy

At RS ComForTIs Orthotic Insoles Orthotic (https://rsorthotic.co.uk), your privacy is our priority. This Privacy Policy outlines how we collect, use, protect, and share your personal data. We are committed to safeguarding your privacy in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. By using our website, you consent to the practices outlined in this policy.

1. Information We Collect

We collect two types of data from users:

Personal Information

When you make a purchase or interact with our website, we may collect personal details such as:

• Full Name
• Email Address
• Phone Number
• Billing and Shipping Address
• Payment Information (processed securely through trusted payment providers)
• Account Information (if you create an account)

Non-Personal Information

We also gather non-personal data such as:

• IP Address
• Browser Type
• Device Information
• Website Usage Data
• Cookies and Tracking Technologies (for improving user experience)

2. How We Use Your Data

We use your personal data for the following purposes:

• Order Processing: To process and deliver orders, as well as to communicate about your order status.
• Customer Support: To respond to inquiries, resolve issues, and improve our services.
• Personalization: To enhance your browsing experience by remembering your preferences and providing customized content.
• Marketing: To send you promotional materials, newsletters, and updates (only if you’ve opted in). You can unsubscribe at any time.
• Compliance: To comply with legal obligations, such as fraud prevention, tax reporting, and other regulatory requirements.

3. Legal Basis for Data Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: For marketing and other non-essential purposes, we process your data only with your consent.
• Contractual Necessity: For order processing and customer support.
• Legitimate Interests: For ensuring website security and improving our services.
• Legal Obligation: To meet legal and regulatory requirements.

4. How We Protect Your Information

We are committed to ensuring that your personal data is secure. We use a range of technical, physical, and organizational security measures, including:

• SSL Encryption: To protect your sensitive data during transmission.
• Secure Payment Processing: We use PCI-DSS-compliant third-party payment processors to ensure the security of your payment information.
• Firewalls & Intrusion Detection: We deploy security systems to protect our website from unauthorized access and cyber threats.
• Regular Security Audits: To identify and address potential vulnerabilities.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website. Cookies help us remember your preferences, analyze website traffic, and tailor our services to your needs.

You can control the use of cookies via your browser settings. For more details on how we use cookies, please refer to our Security Policy.

6. Sharing Your Information

We respect your privacy and do not sell or rent your personal data to third parties. However, we may share your information in the following cases:

• Service Providers: With trusted third-party providers who help us process orders, provide customer service, or improve our website.
• Legal Compliance: If required by law or legal process (e.g., in response to a court order).
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

These third parties are obligated to protect your data and only use it for the purposes for which it was provided.

7. Your Data Protection Rights

As a resident of the UK, you have the following rights under the GDPR:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete information.
• Right to Erasure: You can request that we delete your personal data under certain circumstances.
• Right to Restrict Processing: You can request that we limit the processing of your personal data.
• Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your personal data for specific purposes, including marketing.

If you wish to exercise any of these rights, please contact us at support@rsorthotic.co.uk.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements.

• Order Information: We will keep your order information for up to 7 years for accounting and legal purposes.
• Marketing Data: If you have opted into marketing communications, we will retain your information until you unsubscribe.

9. International Data Transfers

We do not transfer your personal data outside the UK or the European Economic Area (EEA) unless necessary for the provision of our services (e.g., payment processing) and where adequate safeguards are in place to protect your data.

10. Third-Party Links

Our website may contain links to external sites that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of third-party websites. Please review the privacy policies of these websites before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. Any changes will be posted on this page with the updated date. Please check this page periodically for any updates.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you would like to exercise your data protection rights, please contact us:

RS Orthotic Customer Support
Email: Contact@rsorthotic.co.uk
Phone: +44 7775 7547 20
Office Hours: Monday - Friday, 9:00 AM - 5:00 PM