Tamed Ocean Privacy Policy: Safeguarding Your Personal Information

Introduction

Welcome to Tamed Ocean. This Privacy Policy explains how we collect, use, protect, and share your personal information when you visit our website or purchase our products.

Who We Are

Company Name: Tamed Ocean Ltd
Registered Address: 64 Whitwell Drive, Burton-on-Trent, DE15 9WZ, United Kingdom
Email: info@tamedocean.co.uk
Phone: 07824034451
Website: https://tamedocean.co.uk

Your Consent

By accessing or using our Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with these terms, please do not use our website or services.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We'll post the revised policy on this page
• We'll update the "Last Updated" date at the top
• For significant changes, we'll notify you via email or website notice
• The revised policy becomes effective 180 days after posting

We recommend reviewing this page periodically to stay informed about how we protect your information.

Information We Collect

To provide you with our products and services, we collect and process various types of personal information. We only collect information that is necessary for specific purposes and with your knowledge.

Personal Information You Provide

When you interact with us, you may provide the following information:

Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Device Information: IP address, browser type and version, device type, operating system
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Location Data: General geographic location based on IP address (country/city level)
• Cookies & Similar Technologies: Small data files that help us provide and improve our services (see our Cookie Policy for details)

Information from Third Parties

We may receive information about you from third-party services when you:

• Sign in using social media accounts (if available)
• Interact with us through social media platforms
• Use payment processors to complete transactions
• Are referred by another customer or business partner

How We Use Your Information

We use your personal information for legitimate business purposes and only as described in this policy. Here's how we use the information we collect:

Order Processing & Fulfillment

• Process and complete your hot tub purchases
• Arrange delivery and coordinate installation services
• Send order confirmations and delivery updates
• Handle returns, refunds, and warranty claims
• Maintain records of transactions for accounting purposes

Customer Service & Support

• Respond to your inquiries and support requests
• Provide technical assistance and troubleshooting
• Send important service announcements
• Resolve complaints and disputes
• Gather feedback to improve our products and services

Website Improvement & Personalization

• Analyze website usage to improve functionality
• Personalize your browsing experience
• Remember your preferences and settings
• Test new features and optimize performance
• Detect and prevent technical issues

Marketing & Communications (With Your Consent)

• Send promotional emails about new products and special offers
• Share hot tub care tips and maintenance advice
• Invite you to participate in surveys or reviews
• Inform you about events or company updates
• Display relevant advertisements on other websites

Legal & Security Purposes

• Comply with legal obligations and regulations
• Protect against fraud and unauthorized transactions
• Enforce our terms of service and policies
• Defend our legal rights in disputes
• Prevent misuse of our website and services

Business Operations

• Manage supplier and manufacturer relationships
• Conduct business analysis and reporting
• Plan inventory and delivery logistics
• Train our customer service team
• Evaluate and improve business processes

Legal Basis for Processing (UK GDPR)

Under UK data protection law, we must have a legal basis to process your personal information. We rely on the following legal grounds:

Contractual Necessity

Processing is necessary to fulfill our contract with you when you purchase a hot tub or use our services. This includes:

• Processing your order and payment
• Delivering your hot tub
• Providing warranty support
• Managing your customer account

Legitimate Interests

We process information when necessary for our legitimate business interests, balanced against your rights:

• Improving our website and services
• Fraud prevention and security
• Direct marketing to existing customers
• Business analytics and planning

Consent

Where required, we obtain your explicit consent for:

• Marketing emails to potential customers
• Non-essential cookies and tracking
• Sharing information with third parties for marketing

Legal Obligation

We process information when required by law, such as:

• Tax and accounting records
• Responding to legal requests
• Health and safety compliance

How We Share Your Information

We do not sell your personal information to third parties. We only share your information in specific circumstances and with trusted partners who help us provide our services.

Service Providers

We share information with companies that provide services on our behalf:

• Delivery Services: Logistics companies who deliver your hot tub
• Payment Processors: Secure payment gateways that handle transactions
• Email Service Providers: Companies that send emails on our behalf
• Website Hosting: Providers who host our website and store data securely
• Customer Service Tools: Software platforms that help us support you
• Analytics Services: Tools that help us understand website usage

Business Transfers

If Tamed Ocean is involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We'll notify you of any such change and its impact on your privacy.

Legal Requirements

We may disclose your information when required to:

• Comply with legal obligations or court orders
• Respond to lawful requests from government authorities
• Protect our rights, property, or safety
• Protect customers or the public from harm
• Detect, prevent, or address fraud or security issues

With Your Consent

We may share your information with other parties when you give us explicit permission to do so.

How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy and comply with legal requirements.

Retention Periods

Data Deletion

When retention periods expire, we securely delete or anonymize your personal information. Some information may be retained in anonymized form for statistical purposes, which cannot identify you.

Account Closure

If you close your account or request deletion of your data:

• We'll delete most personal information within 90 days
• Some information must be retained for legal compliance
• Anonymized data may be kept for business analytics
• Backup copies may persist temporarily in our systems

Your Privacy Rights

Under UK data protection law (UK GDPR), you have important rights regarding your personal information. Here's what you can do and how to exercise these rights:

Right to Access

You have the right to request a copy of the personal information we hold about you. This includes:

• Confirmation that we're processing your data
• A copy of your personal information in a readable format
• Details about how and why we use your information
• Information about who we share your data with

Right to Rectification

You can ask us to correct any inaccurate or incomplete personal information. We'll update your information promptly and notify any third parties who received the incorrect data.

Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal information when:

• It's no longer needed for the purposes we collected it
• You withdraw consent and there's no other legal basis
• You object to processing and there are no overriding legitimate grounds
• The information was unlawfully processed
• Legal compliance requires deletion

Right to Restrict Processing

You can ask us to limit how we use your information when:

• You contest the accuracy of the data
• Processing is unlawful but you don't want deletion
• We no longer need the data but you need it for legal claims
• You've objected to processing pending verification

Right to Data Portability

You can request to receive your personal information in a structured, commonly used format to transfer it to another service provider. This applies to information you provided to us with consent or for contract performance.

Right to Object

You can object to processing of your personal information when:

• We're processing based on legitimate interests
• We're using your information for direct marketing
• We're processing for scientific or historical research

Right to Withdraw Consent

Where we process your information based on consent, you can withdraw that consent at any time. This won't affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

If you believe we've mishandled your personal information, you have the right to complain to:

UK Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

How to Exercise Your Rights

To exercise any of these rights, please contact us:

1. Email Us: Send your request to info@tamedocean.co.uk with "Privacy Rights Request" in the subject line
2. Provide Details: Include your full name, contact information, and specify which right you're exercising
3. Verify Identity: We may ask for additional information to confirm your identity and protect your data
4. Receive Response: We'll respond within one month (extendable to three months for complex requests)

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience, analyze website traffic, and personalize content.

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize you, remember your preferences, and understand how you use our site.

Types of Cookies We Use

Third-Party Cookies

We use trusted third-party services that may set their own cookies:

• Google Analytics: Website traffic analysis and user behavior
• Facebook Pixel: Social media advertising and conversion tracking
• Payment Processors: Secure transaction processing

Managing Your Cookie Preferences

You have control over cookies:

• Cookie Banner: Accept or reject non-essential cookies when you first visit
• Browser Settings: Configure your browser to block or delete cookies
• Opt-Out Tools: Use third-party opt-out mechanisms for advertising cookies

Other Tracking Technologies

We may also use:

• Web Beacons: Small graphics that help us track email opens and website visits
• Local Storage: Browser storage for preferences and session data
• Analytics SDKs: Tools integrated into our website to measure performance

For more detailed information about our cookie practices, please refer to our separate Cookie Policy (if available) or contact us at info@tamedocean.co.uk

Data Security

Protecting your personal information is a top priority. We implement robust security measures to safeguard your data from unauthorized access, alteration, disclosure, or destruction.

Technical Security Measures

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Secure Servers: Your data is stored on secure servers with restricted access
• Firewalls: Network security systems prevent unauthorized access
• Regular Updates: We keep our systems updated with the latest security patches
• Access Controls: Multi-factor authentication and role-based access for our staff

Organizational Security Measures

• Staff Training: Regular data protection and security awareness training
• Confidentiality Agreements: All employees sign confidentiality agreements
• Access Limitation: Only authorized personnel can access personal data
• Incident Response: Procedures in place to respond to data breaches
• Regular Audits: Periodic security assessments and vulnerability testing

Payment Security

We take payment security seriously:

• Payment card details are processed by PCI-DSS compliant payment processors
• We do not store complete card numbers on our systems
• Transactions are encrypted and monitored for fraud
• We use secure payment gateways certified by major card networks

Your Responsibility

Help us keep your information secure by:

• Using strong, unique passwords for your account
• Keeping your login credentials confidential
• Logging out after using shared devices
• Reporting suspicious activity immediately
• Keeping your contact information up to date

Data Breach Notification

In the unlikely event of a data breach affecting your personal information:

• We'll notify the ICO within 72 hours (as required by law)
• We'll inform you directly if there's a high risk to your rights and freedoms
• We'll provide details about the breach and steps we're taking
• We'll offer guidance on protecting yourself from potential harm

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

If you are under 18, please do not:

• Use our website or services
• Create an account
• Make purchases
• Provide any personal information to us

Parents purchasing hot tubs for family use should ensure children are supervised when using our products and understand our privacy practices.

Third-Party Links & Services

Our website may contain links to third-party websites, services, or social media platforms that are not operated by Tamed Ocean.

What You Should Know

• We have no control over third-party websites or their practices
• This Privacy Policy does not apply to external sites
• Third parties have their own privacy policies and terms
• We're not responsible for their content or data practices

Social Media

If you interact with us on social media platforms:

• Your interactions are governed by the platform's privacy policy
• Information you share publicly may be visible to others
• We may collect publicly available information from your profile
• Social platforms may use cookies and tracking on our site

Embedded Content

Our website may include embedded content from third parties (such as videos or maps). These may collect data about your interaction and set cookies, subject to their own privacy policies.

International Data Transfers

Tamed Ocean is based in the United Kingdom. If you access our services from outside the UK, your information may be transferred to, stored, and processed in the UK or other countries where our service providers operate.

Safeguards for International Transfers

When we transfer personal data internationally, we ensure appropriate protections are in place:

• Adequacy Decisions: Transfers to countries deemed to have adequate data protection
• Standard Contractual Clauses: EU-approved contracts with service providers
• Binding Corporate Rules: For transfers within multinational organizations
• Your Consent: Where you've explicitly agreed to the transfer

Your Rights Still Apply

Regardless of where your data is processed, you maintain all the privacy rights described in this policy. You can contact us about international transfers at info@tamedocean.co.uk

Questions, Concerns & Complaints

We're committed to resolving any privacy concerns you may have. If you have questions about this policy or how we handle your information, we're here to help.

Data Protection Officer / Privacy Contact

For all privacy-related inquiries, please contact:

Tamed Ocean Ltd - Privacy Team
Email: info@tamedocean.co.uk
Phone: 07824034451
Address: 64 Whitwell Drive, Burton-on-Trent, DE15 9WZ, United Kingdom

How We Handle Your Inquiries

1. Acknowledgment: We'll acknowledge your inquiry within 2 business days
2. Investigation: We'll thoroughly review your concern and gather relevant information
3. Response: We'll provide a substantive response within 30 days (may extend to 3 months for complex matters)
4. Resolution: We'll work with you to resolve the issue and, if needed, take corrective action

If You're Not Satisfied

If our response doesn't address your concerns, you have the right to:

• Request escalation to senior management
• Lodge a complaint with the ICO (see contact details in "Your Rights" section)
• Seek advice from a consumer protection organization