Zimdays - remembers the days...

RESPECTING YOUR PRIVACY AND SECURITY

PRIVACY AT ZIMDAYS.COM

1. Online Privacy Practices

Your right to privacy is important to us. We are keen to strike a fair balance between your personal privacy and ensuring you obtain full value from the services we may be able to market to you.

We are registrated under the Data Protection Act 1998 and aim to ensure that we comply with all protection the Act affords to you. Further information on the Data Protection Act is available on the internet at www.dataprotection.gov.uk.

2. Subscription to our services

In some areas of our Website, we ask you to provide information that will enable us to enhance your site visit or reply to you after your visit. This would include where you subscribe to our online newsletters or provide feedback to us through the contact form or when you complete any on line survey we may offer from time to time. When you do, so we ask you to give us your name, e-mail address and other personal information that will be needed to supply the services to you. In relation to on line newsletters you can ‘unsubscribe’ at any time.

We may use your personal data for future e-mail mailing, support, notification of a new service, general correspondence regarding service and correspondence which may relate to you. If you would rather not receive future marketing e-mails from us please update your personal settings under ‘My Zimdays’ in the Website.

The information you provide will be kept confidential and will be used only to support your customer relationship with us. We do not disclose or sell your information outside our corporate group except if we sell the whole or part of our business.

3. Transactions on our Website

Making sure you can buy safely on line is a priority for us and we have made strenuous efforts to ensure that security is one of our highest priorities. We have devoted a great deal of effort to ensure that our online security measures help to safeguard your information. We use industry-standard Secure Sockets Layer (SSL) technology to allow for the encryption of:

Potentially sensitive information such as your name and address

Critically-sensitive information like your credit card number

All financial transactions on our website are handled by WorldPay www.worldpay.co.uk and are subject to WorldPay terms and conditions. We hope that once you understand the measures we take to help ensure secure transactions and privacy, and the steps you can take yourself, you will be as happy about the safety of your on line transaction and order information as we are.

We have no desire to infringe your privacy while using our Website and we will never provide your personal information to anyone else except if we sell our business in whole or in part.

4. Cookies

We do use cookies (defined below) for collecting user information from the Website and we will collect any information about you except that required for system administration of the Web server and otherwise as described above.

Cookies

A cookie is a message given to a web browser by a web server. The message is then stored by the browser in a text file called cookie.txt. Each time the browser requests a page from the server, this message is sent back. A cookie’s main objective is to identify users and personalise their visit by customising web pages for them, for example by welcoming them by name next time they visit the same site. A site using cookies will usually invite you to provide personal information such as your name, e-mail address and interests.

5. Further Information on Data Protection and Personal Privacy

For further information from us on data protection and privacy contact: The Compliance Officer, Zimdays Limited, Chiltern House, Station Road, Henley on Thames, Oxfordshire RG9 1AT, UNited Kingdom.

Email: compliance@zimdays.com

SECURITY AT ZIMDAYS.COM

Security Statement Policy

Zimdays Limited (the ‘Company’, ‘we’, ‘us’, ‘our’) has a management commitment to information security within the organisation and provide clear direction and responsibilities and procedures in this respect.
There is a compliance officer who deals with security of information and personal data.
All employees are briefed on the importance of personal data and security and confidentiality of information obtained.
We control physical security in relation to the information and personal data that is contained at our facilities and restrict access to the site, buildings, computer rooms, office desk, technology areas, equipment and other facilities where unauthorised access by people could compromise our security.
All proprietary or confidential information, including personal data, is contained on computer and any that is contained and stored on manual files are locked up and secure.
We seek to control access to the information and personal data, including existing procedures for authorising and authenticating users as well as software controls for restricting access and techniques for protecting data such as encryption. Encryption is used in connection with our payment facilities for customers.
We monitor and log access so as to assist in detection and investigation of security breaches and any attempted breaches where they occur.
We maintain a business continuity plan as a contingency plan which identifies our business functions and assets (including personal data) which would need to be maintained in the event of disaster and set out the procedures for protecting and restoring them if necessary.
Our staff are trained on security systems and we have relevant procedures in place. Accordingly staff are aware of information security issues and they can go to the compliance officer with any issues relating to the Data Protection Act/Privacy or personal data.
In respect of detection investigation of breaches where they occur, we have in place controls which should alert us to a breach in security. We endeavour to investigate every breach of security.
The personal data and information are currently stored on our secure system.
We are taking and will endeavour to continue to take all reasonable steps in order to protect our information and all personal data. However, the Company cannot guarantee the security of any personal information or data disclosed to it or collected by it.