Privacy Notice
Last updated: 21st September 2021

Your data is important – for you and for us. We take our responsibility for your personal data seriously and this privacy notice explains how we receive, process and share your personal data when you use this website or interact with us in relation to it or the products offered through it. 

Who are we? 
Danbury Mint is a trading name of MBI Inc., a limited liability Delaware, USA Corporation, with UK establishment number BR002125. Our UK office address is:

Jubilee House
Davis Road
Chessington
KT9 1TT
ICO Registration: Z571049X

What data do we process? 
Personal data is information that relates to an identified or identifiable individual. 
The personal data we may process about you includes. 
•    basic contact details, for example, name, email address, phone number
•    account related information, for example, password and shopping history 
•    information relating to your searches on our website and your orders (including your preferences), for example, information on items purchased
•    information collected to process any payments, for example, credit card and account numbers, and transaction details
•    shipping, and other information you provide[, and information required for customs clearance], for example, address and tracking details  
•    information relating to your enquiries, communications and opinions, for example, when you contact us with a query about an order
•    information on social media profiles, through which you have interacted with us, for example, opinions in comments you leave on our website or our social media pages
•    information relating to your use of our website -  please see our ‘Cookie Policy’ for more information 

How do we collect your personal data?
We collect your personal data from you when you use our website, including when you create an account. 
We may also collect your personal data automatically when you use our website, for example, when information is generated in relation to your transactions such as the date of a transaction and its value. 
We may receive your personal data from third parties, for example, payment service providers and those other parties set out in the section titled ‘When and why do we share your data?’ below. 
We may also collect your personal data through Facebook, Twitter, Instagram and Pinterest or other social media platforms when you use tools to tag us and mention us in your posts, statuses and comments through your accounts on these platforms, and when you provide us with your personal data on our accounts on these platforms - for example, when you comment on one of our posts on Facebook. 

What do we use your data for? 
The following is a list of the purposes for which we process your personal data, and the lawful bases on which we carry out such processing:

Purpose

Lawful basis

To set up, administer and manage your account with us

Necessary for the performance of our contract with you

To manage and fulfil your orders

Necessary for the performance of our contract with you  

To manage and respond to communications, including customer support queries

Our legitimate interests in running our business

To send you service messages about our website and services

Necessary for the performance of our contract with you

To send you electronic marketing communications, for example, via email or text

Consent

To send you marketing communications via post

Our legitimate interests in advertising our products 

To tailor communications and/or advertising provided to you in accordance with your preferences

Consent

To listen to, record, view or keep records of calls, email, and text/social media messages and process any relevant information for the purposes of training and quality assurance

Our legitimate interests in ensuring our services and website are effective and as useful to you as possible

To prepare and analyse statistics relating to the use of our website and services by you and other users, to investigate complaints, to seek and analyse feedback and to assess the quality of our interactions with you. This might involve listening to, recording, viewing or keeping records of calls, email, and text/social media messages.

Our legitimate interests in ensuring our services and website are effective and as useful to you as possible

To run our everyday operations, for example, accepting and managing orders and dealing with suppliers  

Our legitimate interests in running our business

To administer and protect our business and the website including troubleshooting, data analysis, implementing security measures and system testing

Our legitimate interests in running our business, provision of administration and IT services, including network security

In connection with a sale or possible sale of the whole of or part of our business or the restructuring of our business

Our legitimate interests in facilitating any such possible or actual transaction or restructuring

To consider and manage any job applications we may receive from you

Your consent

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

We may also process your personal data (a) to comply with any legal obligations we are under; and (b) for additional purposes in the future, but only if such purposes are compatible with those listed above and if we believe that the same lawful basis applies.

In certain circumstances, you may be obliged to provide us with your personal data under a statutory or contractual requirement. This might include, but is not limited to, personal data we require to enter into an agreement with you or your business; for tax and accounting purposes; and to enable us to fulfil our compliance and other obligations under relevant legislation or regulation. Failure to provide us with personal data required under a statutory or contractual requirement may prevent us from entering into or performing our obligations under a contract with you or your business.
 

When and why do we share your data?
 
We may share your data with the following third parties:

•    Governmental and regulatory bodies such as HMRC, the Financial Conduct Authority, the Information Commissioner’s Office or other bodies for the purposes of crime prevention and regulatory compliance
•    Businesses that supply services to us such as debt recovery agencies, storage, back up and web services providers, IT software and maintenance providers or other back office functions
•    Carefully selected firms whose products may be of interest to you. We may share your email address and buying profile with Facebook to allow marketing messages to be relevant and timely. We may share your data with Direct Select (102) Limited, trading as UKChanges, to assist with maintaining the accuracy of personal data. We work with Epsilon Abacus (registered as Epsilon International UK Ltd), a company that manages the Abacus Alliance on behalf of UK retailers. The participating retailers are active in the clothing, collectables, food and wine, gardening, gadgets and entertainment, health and beauty, household goods, and home interior categories. Members of the alliance share information including names, addresses and purchase information. Epsilon Abacus analyse this pooled information to understand a consumer’s wider buying patterns. From this information, Danbury Mint can tailor our customer communications, sending you suitable offers that should be of interest to you, based on what you like to buy. 
•    Our advisors, including in connection with enforcing any contract we have in place with you, to investigate and defend ourselves or others against any third-party claims or allegations. 
•    Potential purchasers or investors and our and their advisors in relation to a business transaction, such as a merger, change of control or sale of our business or assets.
•    Social media platforms for the purposes and the legitimate interests of facilitating our operations and promoting our offerings including on, Facebook, Twitter, Instagram and Pinterest, for example, when we share a post that you commented on. 

Is personal data transferred outside the UK?

We operate in the UK as an establishment of MBI Inc. We will transfer your personal data to the US in the course of running our business, including for purposes of managing your account and any orders you make, maintaining a record of your purchases with us and generally operating our website and providing our services to you. 

When your data is transferred internationally, we are required to ensure you are afforded equivalent protection in respect of your personal data to that provided in the UK and EEA.
Generally, we will put in place appropriate safeguards when making international transfers, for example, by using specific contractual clauses which have been approved by the European Commission and/or the UK Government together with supplementary measures if we deem it necessary in the circumstances, for example, further contractual commitments or enhanced security. 

We are following the developments in this area of law and will be putting in place any necessary new, different and/or additional measures for any such transfers.
 
We are following the developments in this area of law and will be putting in place any necessary new, different and/or additional measures for any such transfers.

How long do we keep your data? 

We will keep your data for as long as we have a reasonable business need to do so in order to manage our relationship with you. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal and accounting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.  

Marketing communications 

You are able to select your choices for communication when you sign up to our email list or register with us and we will not email you marketing communications unless you have had the chance to opt out or have given us your explicit consent. Additionally, we will offer you the opportunity to opt out of receiving email marketing communications from us every time we contact you. If you unsubscribe from our email marketing communications, we will maintain a record of your unsubscribe request and associate it with your email address to ensure you do not receive future communications.

What rights do I have?

You have the following rights under data protection legislation. If you have any questions about your rights, or you wish to exercise any of these rights, please email info@danburymint.co.uk.. We may require you to provide forms of identity should you wish to exercise one of your rights below.

Access: Upon request, you are entitled to confirmation that we process your personal data and to a copy of such personal data. 

Rectification: If the personal data we hold on you is incorrect, you have the right for it to be rectified. You may also update your personal data through your account settings.

Erasure: You can request us to erase your personal data where there is no compelling reason for us to continue processing it, and in certain other circumstances.

Restriction: You may request a restriction on the processing we undertake on your personal data.  This right will only apply if: (a) we no longer have a lawful basis on which to process your personal data; (b) your personal data is inaccurate; or (c) you object to our processing of your personal data and there is a reason for us to continue holding the data.

Objection: You may object to our processing of your personal data if our processing is carried out on the basis of our legitimate interests. Please note, however, that should we determine that our interests are so compelling as to override your objection we may continue to process your personal data. 

You may object to receiving direct marketing at any time. 

Portability: You may have the right to receive some of your personal data in machine readable format.  This right extends to you being able to request that such data is sent to a third-party controller.

Withdrawing consent: If the lawful basis we rely on to process your personal data is consent you have the right to withdraw this consent. Please email us at info@danburymint.co.uk.to withdraw consent for the processing of your personal data.
To withdraw your consent for the processing of your personal data by a third party, please contact the relevant organisation.

Your right to be informed: You can contact us to find out more or to ask any questions you may have about our use of your personal data.

How do I complain? 

We would always hope to resolve any complaint you have quickly and effectively. Should you wish to take your complaint further, you have the right to complain to your national supervisory authority. In the UK, this is the Information Commissioner’s Office (https://ico.org.uk).