Privacy & Cookie Policy

Data Protection and Terms of Use for Bluesky (UK) Ltd trading as BlueSky, company registration number 07763362, registered office Horizon House, Estate Road Five, Grimsby, DN31 2TG.

This Privacy Notice explains in detail the different types of personal data that we might collect about you and how we use cookies on our websites.

1. Who are we?

For simplicity throughout this notice ‘we’ and ‘us’ means Bluesky (UK) Ltd.
We are BlueSky and this policy applies to any contact you make with us in connection with any of our products and services on this website.

2. When might we collect your personal data?

We might collect your personal data in the following situations:

i. When you visit our websites and buy products or services from us.

We use a third-party service, Google Analytics, to collect standard internet information and details of visitor behaviour patterns. We do this so that we can find out things such as how many people have visited our websites and which parts of the websites they looked at and interacted with. We only process this information in a way that does not directly identify anyone.
If we do need to collect your personal data through our website, for example if you enter your details and ask us to contact you, we will be very clear about what information we are collecting and what we intend to do with it.
When accessing our website, we will process data in server log files. This data derives from your computer equipment and may include personal data. We process the following data:

• the operating system of your terminal equipment
• the browser used by you
• the name of your provider
• your IP address
• data and time of access
• accesses pages and search terms (if applicable)
• the source that referred you to our website (referrer) for example Google, other websites, and social media sites

This processing activity is necessary to ensure the operation of our website, to optimise the content and deliverability of our website, and to provide the necessary information to public bodies in case of a cyber-attack. The legal basis for processing this data is our legitimate interest.

Tracking and Cookies
Our website uses cookies and similar technologies that store information on your terminal equipment or accesses such information for the following purposes:

• providing our website analytics and personalisation – tracking
• (re-)marketing / data sharing with third parties
• remembering the notifications, you have seen so that we do not show them to you again.
• recognising you whenever you visit our site
• allowing you to navigate between pages efficiently
• measuring how you use our site so that we can update and improve it to give you the best possible experience

Providing our website
We use cookies and similar technologies to ensure certain features of our website. This is strictly necessary for us to be able to provide our website. By doing this, we can, for example,

• save your preferred language version of our website or similar settings for your next visit
• distribute requests to our website across multiple web servers (load balancing)
• provide a uniform context (session) to multiple requests to our website, in order to facilitate login-secured parts of our website or checkout / payment processes
• save your consent regarding tracking tools and active / deactivate tracking tools according to your choice

When we process your personal data to maintain the integrity of our websites and to assess the number of visitors to our website we do so because we believe it is necessary for our legitimate interests.

Analytics and personalisation – Tracking
We use cookies and similar technologies to evaluate user behaviour on our website and to adapt it according to this.

Provided you have given your consent, we process information on your terminal equipment and the browser you are using (in the case of the website) every time you interact with our website. For example, we can find out which language settings you use on our website, whether you use a smartphone or a desktop computer or from which country you access our website.

In addition, we process information about how you interact with our website, for example, from where you are referred to our website, how long you use our website and the path you take through individual sub-pages. For example, we can record whether you found us via a search engine (and if so, under which search term) how long you spent browsing the content of a particular page and how many pages you visited in total.

We use this information to create analyses of user behaviour on our website and to optimise the website accordingly.

Our legal basis for this processing activity is your consent. You may withdraw or change your consent for future processing at any time by changing your tracking settings. Additionally, you may change your browser settings regarding cookies and similar technologies.

We use the following products for analytics and personalisation:

• Google Analytics / Google Optimize
  Google Analytics and Google Optimize are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf (data processor). Our configuration of Google Analytics and Google Optimize does not allow Google to use data that is gathered through Google Analytics or Google Optimize to improve Google products and services.
  Please find more information about the cookies that are used by Google Analytics and their respective storage periods here. Google Optimize also uses the cookies that are set by Google Analytics (please refer to the documentation here).
• (Re-)Marketing / data sharing with third parties
  We use cookies and similar technologies to record which users use our website to form groups (“audiences”) and to address these audiences on other online platforms with personalised advertising.
  We use the following cookies:
  • _ga, _gat, _gid, _gac_* – Google Analytics
  • session_id, fileToken – which is used authenticate users and allow the website to display account information. It is also required for shopping cart functionality.
  • frontend_lang, odoo_no_push, tz – this is to remember the language, region and timezone for the users of our website
  • im_livechat_history, im_livechat_previous_operator – this is for the live chat functionality.
  • utm_campaign, utm_source, utm_medium – this tracks how visitors arrived at our website and link visits to marketing campaigns.

Our legal basis for this processing activity is your consent. You may withdraw or change your consent for future processing at any time by changing your tracking settings.

Additionally, you may change your browser settings regarding cookies and similar technologies.

Our marketing partners are separate controllers for the data processing that they carry out for their own purposes. The marketing partner will provide you with their own data protection information.

We use the following products for (re-)marketing, and we share data with the following third parties:

• Google Ads / Doubleclick
  Google Ads / Doubleclick is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). More information about cookies set by Google can be found here. Please also refer to the Google Privacy Policy.

The lawful basis we rely upon for processing your data when you allow optional cookies is consent.

i. When you buy products or services from us over the phone
We will only collect the personal data that we need to complete the transaction with you and the bases for processing your personal data would be because there is a contractual need to do so, and it is in our legitimate interests.

ii. When you respond to any of our social media postings or campaigns

We rely on consent and legitimate interests for processing your personal data in this situation. If you follow us or interact with us on any of our pages on social media platforms such as Facebook, Instagram etc. any information you provide will be subject to our privacy notice as well as the privacy notice of the social media platform. We strongly advise you to check the privacy policies of the social media platforms to ensure that you know what they can do with any personal data you provide them with.

iii. When you visit any of our premises that are protected by CCTV

For your safety and the safety and security of our business partners we may record your images on CCTV. We will keep CCTV images only for as long as is necessary and then will delete them from our system completely. We process this personal data because it is in our legitimate interests to do so.

iv. When any of our suppliers or business partners share your information with us

This might be in situations such as when our delivery partners as you to sign to accept delivery of something that you have ordered from us. We would ask for your personal data to be shared with us because it would be in our legitimate interests.

v. If you have contacted us asking for information about any of our products or services

We rely on consent for processing your personal data when you have contacted us.

vi. If you apply to work with us

We will collect personal information about candidates from a variety of sources including you, recruitment agencies, your referees, and any DBS background check provider (if you are applying for a role where we require a DBS check)

a) The types of personal data we collect.

We will never ask you for information that is not essential. The personal data we might ask for includes:

• your name, address, email address and telephone number
  o your bank account details (where we need these to be able to credit your account with a refund).
• if you have a web account with us, we will keep details of your login (these will be kept in an encrypted format so that no one else can use them)
• if you contact us by phone, we may keep a written note of the conversation either on computer or on paper. We may also record any complaints or issues that you might have when you contact us.
• if you apply to work for us, we will ask for a copy of your CV, your covering letter, and the information you provide on your application form. As part of the selection process, we will also keep details of any information you supply
  during your interview with us.

We may also ask for the following “special
categories” of more sensitive personal information including:

• information about your health including medical conditions and health and
• sickness records.
• details of any criminal convictions and offences.

b) What will we use your data for?

To be able to maintain our relationship with you we might need to store or process the personal data you have provided us with, or we might need to pass it on to one or more of our business partners so that we can meet your requirements more effectively. We may also use your data to improve our products or to inform you of special offers. Your personal data will only ever be used for the purposes of customer management, product surveys or marketing to the appropriate degree. We will not sell your data in any way to third parties. If we do have to use the services of third parties, e.g., for marketing and advertising products, we will have to pass your data to those third parties. We will make sure that they have security measures in place to keep your data safe.

The sorts of organisations we might share your personal data with include:

• delivery couriers and postal firms
• IT companies who support our systems and website
• professional service providers, such as marketing agencies, advertising partners and website hosts, who help us run our business.
• social media sites to show you products that might be of interest to you, including if you choose to link your account with us. We may use your personal data within social media via their advertising platforms or via third party agencies to show you products/services/content that might be of interest to you, including if you choose to link your account with us. Social media advertising tools allow us to target you based on, but not limited to, your interests / likes, your demographic, your email address, and activity on our websites. To share this relevant content with you we might share an email address that you have provided to us in some way such as registering for a competition or signing up to our email database. When you upload your customer data lists in social media sites, the information is hashed (the conversion of your data into randomised code). If you no longer want to receive marketing information from us via social media sites, please see Section 9 “Your Rights” below.

Where we do share your data, we provide only the information that is needed for the specific purpose and the person that we share your information with will only be able to use your data for that specific purpose. The third parties will be people we trust to ensure that your privacy is respected at all times and if we stop working with them, they will be expected to delete your data or make sure that it is anonymised.

We will only pass your data to third parties for their own purposes if you have expressly given us permission to do so unless we have a legal obligation to share information such as with the police or other regulatory or Government bodies.

Where we have your personal data as part of our recruitment process, we will use your personal data to assess your skills, qualifications, and suitability for the role you have applied for and to carry out checks and references. We will also use it during this process to communicate with you, to keep records about the hiring process and to comply with legal or regulatory requirements. During the recruitment process we rely on legitimate interests as a reason for processing your personal data. If we ask you to provide sensitive personal information during the recruitment process this will be used only in the following ways:

• we will use information about your disability status to consider whether we need to provide appropriate adjustments during the recruitment process, for example whether adjustments need to be made during a test or interview.
• we will use information about your race or national or ethnic origin, religious, philosophical, or moral beliefs, or sexual orientation, to ensure meaningful equal opportunity and monitoring.

3. The legal reasons for collecting your personal data
Data protection laws allow companies to collect your personal data for several different reasons. We will only collect your personal data if we have a legal reason for doing so. This might be one or more of the following:

Consent – This is where you have consented to us having your personal data. You might have agreed that we can send you such things as details of our promotions or products and services or our newsletters. You can at any time change your mind and tell us that you no longer want to hear from us or that you want to change the way you receive information from us by updating your preferences, there are 2 ways you can do this:

a. Click on the link to the unsubscribe in the footer of any of the emails you currentlyreceive from us

b. Or send an email to customerservice@blueskysolutionsuk.com and include:

i. your full name.

ii. the email address which you registered when you joined the mailing list.

iii. any changes you would like to make to your communication preferences.

Compliance – In order to comply with legal requirements such as health and safety laws, we may need to collect and process your data.

Contractual obligations – If we have a contract with you, we will need to collect and process your personal details so that we can fulfil our contract.

Legitimate interest – This is where we might use your personal data to meet a reasonable business interest as long as we are not significantly impacting your rights. This would include things such as using your personal data to send you personalised offers based upon your purchasing history.

4. How we keep your personal data safe

We will always treat your personal data with absolute respect and care. We will make sure that our websites and apps are secure by using appropriate technical and organisational
measures across all brands including up-to-date encryption, restricted access to the data that we hold and conducting regular software updates.

All our employees have been briefed on data protection laws and are contractually obliged to protect your personal data. We have made sure that all our suppliers and business partners have a legal obligation to be as diligent as we are about protecting your personal data.
We will never keep your personal data for any longer that we need to. We have reviewed our processes to make sure that when we no longer need your personal data for the purpose for which it was collected, we will delete it from our systems.

5. Transferring your personal data outside the UK.

We do not currently transfer personal data outside of the UK. If we need to do so we will notify you on our website by an amendment to this policy.

6. Automated decision-making processes

We do not currently use any automated decision-making processes and we do not envisage doing so; however, we will update this privacy policy and give you full details if we do intend to do this.

7. Your rights

When we process your personal data, you have a number of rights. These are:

• you have the right to copies of any of the personal data that we hold about you.
• if any personal data we hold is incorrect or incomplete you can ask us to correct it
• you can ask us to delete any personal data.
• you may object to us processing any personal data or restrict how it is processed.

If you contact us to ask us to do any of these, we will need you to verify your identity before we can make any changes or supply any information to you.

To do any of these things please contact us at:

Premier Customer Service Team
Bluesky (UK) Ltd, Horizon House, Estate Road Five, Grimsby, DN31 2TG
E-mail: customerservice@blueskysolutionsuk.com

If you any concerns about the use of your personal data, you can contact the Information Commissioner’s Office on telephone number 0303 123 1113 or you can access further information and advice on the ICO website at www.ico.org.uk