Welcome to the GatsbyAutoworx.com Website.

BY ACCESSING OUR SITES, PURCHASING OUR PRODUCTS, AND COMMUNICATING OR OTHERWISE INTERACTING WITH US, YOU ARE ACCEPTING AND CONSENTING TO THE INFORMATION PRACTICES DESCRIBED IN THIS PRIVACY POLICY.

The Information We Collect

As part of you using our website and during the course of our providing products and/or services to you, we may collect, use, store and transfer the following types of information about you:

• Personal Details: including your first name, last name, marital status, title and gender.
• Contact Details: including your billing and shipping addresses, e-mail address and telephone numbers.
• Image Data: including CCTV footage when you visit our Showroom and photographs.
• Financial Data: including bank details and credit/ debit card information when you make a purchase.
• Transactional Data: information on goods purchased either in-person, or online, including payment and card information, billing, deliveries and returns.
• Technical Data: including your IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and other technology on the devices you use to access our website.
• Profile Data: including your username and password.
• Communications: including your correspondence with us and any feedback that you provide us with.
• Marketing Data: your preferences in receiving marketing and communications.
• In-person Transaction Data: products purchased, amount spent, payment information.
• Usage Data: includes information such as: how and when you use our Website, how you moved around it, what you searched for; Website performance statistics, traffic, location, and other communication data.
• As listed above, personal information includes your name, address (both billing and shipping addresses), email address, credit card information, phone number and any other information attributable to an identifiable natural person or household, including the information described in California Civil Code Section 1798.140(o).

We also collect, use and share aggregated data such as statistical or demographic data. Aggregated data may be derived from your personal data but is not considered personal data, as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

Visitors under eighteen (18) years of age are not permitted to use and/or submit their personal information at the Site. GatsbyAutoworx.com does not knowingly solicit, or collect, information from visitors under eighteen (18) years of age.

How and when do we collect your personal information?

We may also receive personal information about you from various third parties that we engage with in order to assist us with providing products and/or services to you, including:

• delivery and address information from our carriers who deliver products to you;
• marketing information from marketing companies who send customer communications and direct marketing materials on our behalf;
• data analytics information from companies that provide us with data analytics services; and
• information on your account, payment and credit history, including information from credit bureaus and service providers we use to process payments.

User Posts and Product Reviews
Any Information that you post to or through a Site, or any social media presence relating to our business (such as a product review, testimonial, or comment) to social media platforms such as Facebook, or using a "share this" feature may be seen, collected, and used by anyone who has access thereto, including, without limitation, your user/screen name. You are responsible for all actions resulting from any Information, including Personal Information, which you post via such a site, forum or social media platforms.


From time to time, we will re-post or otherwise use in our advertising, a consumer’s photos, experiences, stories, or other content from their personal social media account. We will not use your personal social media content without first obtaining your express written permission.

How we use your personal information

We want to ensure you enjoy the best experience of all that Gatsby Autoworx has to offer, whether it be the shopping experience you have on our website or through our communications with you. We believe sharing timely and relevant information with you, provides a more tailored, and so better, experience. 

We achieve this by combining the data we have about you; including how you’ve previously used our website, the products you’ve purchased and how you’ve responded to our direct communications. This enables us to showcase to you a more relevant set of products on our website, and to share with you news of the most relevant products, offers and events.

Data protection laws allow us to do this as part of our legitimate interest in understanding our customers and our promise to provide the highest levels of service.

To achieve this, we use your personal information for the following purposes:

• to register you as a new customer;
• to respond to your enquiries and complaints, and to manage our relationship with you;
• to handle your orders, deliver items and process payments;
• to send you communications required by law, for example information about your orders;
• to send you email notifications when you place a product in your basket and you abandon your browsing before completing your checkout;
• to send you service messages about your order or updates regarding delivery of your order(s),
• to send you marketing communications about our products, services and any ongoing or upcoming promotional offers or events;
• to update our records and maintain any online account you may have with us;
• to administer and protect our business and this site, including to prevent or detect fraud or abuses of our Website(s), and safeguarding your personal and financial data;
• to enrich our picture of who you are and what you like, and to inform our business decisions, we will combine data captured from across our business, third parties and data from publicly available lists;
• for market research, reporting, analysis and modelling so as to improve the products and services we provide and
• to optimise our social media operations;
• to comply with our financial record keeping obligations;
• to protect our customers, premises, assets and partners from crime we use CCTV and other security measures inhouse;
• to develop, test and maintain our systems, services and products;
• to use data analytics to improve our website, products, services and user experiences;
• to select and serve relevant adverts to you or to serve ads to the audience that we want to target, which may include you (information is anonymised beforehand and may be aggregated)
• to comply with legal obligations, or Court Orders, to share data with law enforcement and/or government bodies; and
• to enable third parties to carry out technical, logistical or other functions on our behalf.

If you wish to change how we use your data, please contact us using the contact details at the end of this notice. Please note that if you choose not to share your personal details with us, or refuse certain contact permissions, we might not be able to provide some of the services you’ve asked for.

By law, when processing your personal information, a company is required to have a “legal basis” for doing so. The legal basis we use to process your personal information will generally be one or more of the following:

• Contractual basis: it is necessary to enable us to comply with our contractual obligations to supply you with products and/or services;
• Legitimate interest: it is necessary for our legitimate business interests in administering our relationship with you and running our business effectively. Where legitimate interest is our legal basis for processing your data, we will take into account any potential impacts on your rights, freedoms, and interests;
• Legal compliance: it is necessary to enable us to comply with a legal or regulatory obligation; or
• Consent: where we have asked for and gained your consent to use your information for particular purposes e.g. to send you marketing communications.

If you fail to provide information that we have requested, we may be unable to provide some products and services to you. For example, if you failed to provide us with your full address, it would not be possible for us to fulfil your delivery, or if you failed to provide us with your payment card details then we will not be able to process your payment. For further information on the specific legal basis we are relying on in relation to any of the individual processing activities we have highlighted above, please contact us using the details in the ‘How to Contact Us’ section.

Withdrawing of consent

Where consent is our legal basis for processing your personal information, you can withdraw your consent at any time, and we will then stop that particular processing your information. If you wish to withdraw your consent, then please contact us using the details in the ‘How to Contact Us’ section, at the end of this privacy notice.

How do we use your personal information for marketing purposes?

You can unsubscribe from marketing emails using the ‘unsubscribe’ link in any marketing email we send you. You can ask us to stop sending you marketing messages (whether by email or post) by changing your preferences in your Gatsby Autoworx Account. 

Because we plan our communications in advance, it may take up to several weeks for your request to become effective. If you continue to receive our communications after expressing an opt-out preference, please let us know so that we can investigate the situation. We will, however, continue to send transaction-based communications if you place an order, request information, request customer support; or make similar requests.

When do we share your personal information?

You can unsubscribe from marketing emails using the ‘unsubscribe’ link in any marketing email we send you. You can ask us to stop sending you marketing messages (whether by email or post) by changing your preferences in your Gatsby Autoworx Account. 

Because we plan our communications in advance, it may take up to several weeks for your request to become effective. If you continue to receive our communications after expressing an opt-out preference, please let us know so that we can investigate the situation. We will, however, continue to send transaction-based communications if you place an order, request information, request customer support; or make similar requests.

Our Website may contain links to other websites whose information practices may be different to ours. You should consult the privacy notices of those third-party sites as we have no control over information that is submitted to, collected, or processed by them.

How do we use cookies?

A cookie is a short string of text that a website stores in your browser’s cookie file on your computer's disk.

Examples of things that cookies can help to do are:

• remember what is in your shopping basket when you shop online;
• support you in logging into a website;
• analysing web traffic; and
• tracking your browsing behaviour.

Details of how our website uses cookies is contained in our Cookie Policy. 

Data Collection Tools. You may be able to opt-out of the automatic collection of some Information by referring to your web browser's or mobile device's options or settings menu. However, doing so may disable many of the portions, features, or functionality of our Online Services. For example, most web browsers automatically accept cookies, but you have the choice to set your browser to accept or reject cookies. Each browser is different, so check the "Help" menu of your browser to learn how to change your cookie preferences or visit http://www.allaboutcookies.org for more information.

You may opt-out from allowing us to have access to your location data by adjusting the permissions in your web browser or mobile device, though some features of our Sites may not function properly if use or availability of location data is impaired or disabled.

To change your preferences for cookies used by third-party ad serving companies, visit https://www.networkadvertising.org/understanding-online-advertising/what-are-my-options.

How do we keep your information secure?

We employ appropriate security measures to prevent unauthorised access to information that we collect including for example, secure online order forms, encryption of personal data, technical testing of systems.

We are committed to handling your personal information with high standards of information security. We take appropriate steps to maintain the security and integrity of any information we collect. We seek to use reasonable technical and administrative measures to protect Personal Information within our organisation. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us.

Be aware that information transmitted over the internet may not always be secure and that it is critical that you always take measures to protect your information. 

Such measures may include:

• Using strong, complex and unique passwords (at least 8 characters with upper and lowercase alphabetical, as well as numbers and special characters.
• Using different passwords across online accounts
• Ensuring that your mobile devices and computers are updated with the most recent security patches and that you have installed virus and other malware protection technologies.
• Not clicking on links and attachments from senders that you do not recognise.

Please also note that due to the nature of the internet, email correspondence with us may not be entirely secure, so please do not send any sensitive information such as credit card details, or passwords, via email.

We use many information security safeguards to keep your personal information secure, including but not restricted to the following:

• Connections between internal systems and the internet are protected by firewalls;
• data in transit is encrypted to industry standard;
• access to systems and data is password protected, and restricted on a need-to-know basis, so employees can only access the data they need in order to perform their job;
• your payment card data is always encrypted;
• offices, secure areas and data centres are protected with physical access controls;
• we continually monitor our systems for vulnerabilities and signs of attack, and carry out penetration tests regularly to assess the strength of our defences;
• we enforce physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal information; and
• before divulging your personal information in response to a telephone call or email enquiry, we ask you for proof of identity in order to ensure that we do not provide your personal information to someone else.
  

Data retention

You have the following rights in relation to the personal information that we hold about you:

• The right to request access to your personal information (commonly known as a “data subject access request”).
• This enables you to request a copy of the personal information we hold about you and to check we are processing it lawfully.
• The right to request correction of the personal information we hold about you. This enables you to request that we correct any incomplete or inaccurate information that we hold about you.
• The right to request erasure of your personal information in some circumstances. This enables you to request that we erase your personal information where there is no good reason for us continuing to process it.
• The right to object to us processing your personal information. This enables you to object to us processing your personal information where we are relying on our legitimate interest as a legal basis for processing, or where we are using your personal information for direct marketing purposes.
• The right to restrict our processing of your personal information. This enables you to ask us to suspend the processing of your personal information in certain circumstances.
• The right to data portability. In certain circumstance this enables you to request that we provide you, or a third party, with a copy of the personal information that you provided to us in a structured, commonly used, machine-readable format.
• The right to stop us using your personal information for direct marketing by a specific channel or all channels.
• Where you have given us your consent for any processing activity, you may withdraw that consent at any time, and we will stop any processing which relied on that consent.
• The right to request that we review any decision made solely on the basis of automatic processing of your data, where no person was involved either in the processing, nor in reviewing the outcome of the processing.

To protect the confidentiality of your information, we will ask you questions to verify your identity before proceeding with any requests to exercise your rights under this Gatsby Autoworx Privacy Policy.

For more information on your legal rights or if you would like to exercise these rights, please contact us using the contact details at the end of this notice.

California Consumer Privacy Act (CCPA) Addendum

If you are a resident in California, this addendum to the Gatsby Autoworx Privacy Policy sets out additional rights and information about your data privacy.

As used in this Addendum personal data, shall means personal information as defined under the CCPA, controller shall mean business as defined under the CCPA, data subject shall mean consumer as defined under the CCPA.
 As a business covered by the CCPA, we do not sell personal data. As set out above, we may share Technical Data and Usage Data with third party advertisers for the purpose of sending relevant adverts on other websites such as social media.

Many obligations under the CCPA are addressed in other provisions of the Gatsby Autoworx Privacy Policy. This Addendum aims to address the gaps for California residents and the terms used in this Addendum are either defined in the Gatsby Autoworx Privacy Policy, or in the text of the CCPA. As well as the rights set out in the 'Your Legal Rights' section, under CCPA you also have the following rights:

• When exercising a data subject access request, to know both the categories of personal information and the specific personal information we collect;
• The right to have your personal information deleted, subject to some legal limitations set out in the CCPA;
• The right to request disclosure of the personal information collected; and
• The right to opt out of the sale of your personal information (to note as highlighted above we do not sell personal).

If you are a resident in California and wish to exercise your rights, please refer to the 'How to Contact Us' section below.

State Specific Rights

Residents of the States of California, Colorado, Connecticut, Utah and Virginia, are afforded additional rights pursuant to applicable state law.

Your California Privacy Rights
In addition to the CCPA, if you are a resident of the State of California, certain other privacy-related rights may apply to you in accordance with the California Privacy Rights Act (“CPRA”), including the right to correct personal information we have collected about you, the right to opt-out of our use/sharing of your sensitive personal information, the right to know how long we retain your sensitive and non-sensitive personal information. The right to know what sensitive personal information about you we have collected, whether your sensitive personal information was shared with third-parties in the preceding year and, if so, what categories of sensitive personal information were shared, as well as the categories of third parties with whom we shared that sensitive personal information.

Browser “Do Not Track” Signals. Most browsers contain a “do-not-track” setting. In general, when a “do-not-track” setting is active, the user’s browser notifies other websites that the user does not want her/his personal information and online behaviour to be tracked and used, for example, for interest-based advertising. As required by California Online Privacy Protection Act (“CalOPPA”), we are required to inform you that, as is the case with most websites, we do not honour or alter our behaviour when a Site user has activated the “do-not-track” setting on her/his browser; provided, however, that you may have certain rights with respect to the use of automated technologies to deliver targeted advertising to you, as well as to create profiles about you using your personal information.


Your Colorado Privacy Rights
If you are a resident of the State of Colorado, certain privacy-related rights may apply to you in accordance with the Colorado Privacy Act (“CPA”), including the right to opt-out of our sale/sharing of your personal information, as well as the right to know what personal information about you we have collected, whether your personal information was shared with third-parties in the preceding year and, if so, what categories of personal information were shared, as well as the categories of third parties with whom we shared that personal information.


Your Connecticut Privacy Rights
If you are a resident of the State of Connecticut, certain privacy-related rights may apply to you in accordance with the Connecticut Data Privacy Act (“CDPA”), including the right to opt-out of our sale/sharing of your personal information, as well as the right to know what personal information about you we have collected, whether your personal information was shared with third-parties in the preceding year and, if so, what categories of personal information were shared, as well as the categories of third parties with whom we shared that personal information.


Your Nevada Privacy Rights
Nevada State residents have the right to submit opt-out requests to website operators instructing those website operators not to sell any “covered information” that the website operators have collected about Nevada State residents to any third-party data broker(s). Covered information includes a consumer’s name, postal and email address, telephone number and Social Security Number.


Your Virginia Privacy Rights
If you are a resident of the State of Virginia, certain privacy-related rights may apply to you in accordance with the Virginia Consumer Data Protection Act (“VCDPA”), including the right to opt-out of our sale/sharing of your personal information, as well as the right to know what personal information about you we have collected, whether your personal information was shared with third-parties in the preceding year and, if so, what categories of personal information were shared, as well as the categories of third parties with whom we shared that personal information.


Your Utah Privacy Rights
If you are a resident of the State of Utah, certain privacy-related rights may apply to you in accordance with the Utah Consumer Privacy Act (“UCPA”), including the right to opt-out of our sale/sharing of your personal information, as well as the right to know what personal information about you we have collected, whether your personal information was shared with third-parties in the preceding year and, if so, what categories of personal information were shared, as well as the categories of third parties with whom we shared that personal information.

Your Privacy Preferences

If you have any questions about this Gatsby Autoworx Group Privacy Policy, would like further details on any of the information contained in this Privacy Policy, or to exercise any of your legal rights, please contact us by email.

Whilst we would appreciate the opportunity to deal with your concerns before you do so, if you are unhappy with how we have used your personal information you have the right to lodge a complaint at any time.