1. Information We Collect

1.1 Personal Information

We may collect several types of information from and about users of our website, including:

• Contact information (such as name, email address, mailing address, and phone number)
• Account information (such as username and password)
• Transaction information (such as payment details, purchase history, and shipping information)
• Profile information (such as preferences, product interests, and demographic information)
• Communications (such as customer service inquiries and survey responses)

1.2 Usage Information

We may automatically collect certain information about your equipment, browsing actions, and patterns when you interact with our website, including:

• Log information (such as IP address, browser type, operating system, referring pages, and access times)
• Device information (such as device identifiers, location information, and mobile network information)
• Usage data (such as traffic data, communication data, and the resources that you access and use on the website)
• Cookies and similar technologies (as described in our Cookie Policy)

2. How We Collect Information

2.1 Direct Collection

We collect information directly from you when you:

• Register for an account
• Place an order
• Subscribe to a newsletter
• Fill out a form
• Participate in a survey or promotion
• Contact customer service

2.2 Automated Collection

We automatically collect certain information when you visit, use, or navigate our website. This information does not reveal your specific identity but may include device and usage information. We collect this information using the following technologies:

• Cookies: Small data files stored on your device. For more information, see the "Cookies and Similar Technologies" section below.
• Log Files: Track actions occurring on the website and collect data including your IP address, browser type, referring pages, and date/time stamps.
• Web Beacons: Small electronic files that allow us to count users who have visited certain pages and analyze website usage patterns.
• Analytics Tools: Third-party services such as Google Analytics that collect, monitor, and analyze usage and activity data.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Business partners (such as payment processors and shipping providers)
• Marketing and advertising partners
• Social media platforms (when you connect your account with our services)
• Public databases and commercially available sources

3. How We Use Your Information

We may use the information we collect for various purposes, including to:

3.1 Provide and Manage Services

• Process and fulfill your orders and transactions
• Create and manage your account
• Provide customer support and respond to inquiries
• Facilitate communication between users and our services
• Send administrative notifications, such as order confirmations and updates

3.2 Improve Our Services

• Understand how users interact with our website
• Identify usage trends and areas for improvement
• Develop new products, services, and features
• Conduct research and analysis to enhance user experience
• Troubleshoot technical issues and debug our systems

3.3 Personalize Your Experience

• Tailor content and recommendations based on your preferences
• Remember your settings and preferences
• Provide location-based services
• Recognize you across different devices

3.4 Marketing and Communication

• Send promotional communications about new services, special offers, or other information
• Deliver targeted advertisements
• Measure the effectiveness of our marketing campaigns
• Conduct surveys and collect feedback

3.5 Legal and Security Purposes

• Protect against, identify, and prevent fraud and other illegal activities
• Comply with legal obligations and enforce our terms and policies
• Establish, exercise, or defend legal claims
• Ensure the security of our systems and services
• Verify your identity and prevent unauthorized access

We will only process your personal information when we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your personal information. In most cases, we will process your personal information based on:

• Your consent
• The performance of a contract with you
• Compliance with a legal obligation
• Our legitimate interests, provided that these do not override your fundamental rights and freedoms

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Payment processing
• Order fulfillment and delivery
• Customer service
• Data analysis and research
• Email delivery and hosting
• Marketing and advertising
• IT and system administration

These service providers are authorized to use your personal information only as necessary to provide these services to us and are contractually obligated to keep your information confidential and secure.

4.2 Business Transfers

If we are involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose your information to:

• Enforce our terms and policies
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the public

4.4 With Your Consent

We may share your information with third parties when you have given us your consent to do so. For example, we may share your information with business partners for their marketing purposes if you have explicitly agreed to this.

4.5 Aggregated or Anonymized Data

We may share aggregated or anonymized information that does not directly identify you for various purposes, including business intelligence, marketing, and research. This information may be shared with third parties for their own purposes.

5. Cookies and Similar Technologies

5.1 What Are Cookies

Cookies are small data files that are placed on your device when you visit a website. Cookies are widely used by website owners to make their websites work, and to provide information about how their websites are used.

5.2 Types of Cookies We Use

We use the following types of cookies:

• Essential Cookies: These cookies are necessary for the website to function properly and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms.
• Performance Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
• Functionality Cookies: These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.
• Targeting Cookies: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites.

5.3 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. However, if you limit the ability of websites to set cookies, you may worsen your overall user experience, since it will no longer be personalized to you. It may also stop you from saving customized settings like login information.

To manage your cookie preferences or to opt-out of certain cookies, please use the cookie consent tool on our website or adjust your browser settings.

5.4 Other Tracking Technologies

In addition to cookies, we may use other similar technologies, such as web beacons (sometimes called "tracking pixels" or "clear gifs"), which are tiny graphics files that contain a unique identifier that enable us to recognize when someone has visited our website or opened an email that we have sent them.

6. Data Security

We have implemented appropriate technical and organizational measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our services is at your own risk. You should only access our services within a secure environment.

6.1 Security Measures

Our security measures include:

• Encryption of sensitive data
• Secure Socket Layer (SSL) technology
• Firewalls and intrusion detection systems
• Regular security assessments and vulnerability testing
• Access controls and authentication procedures
• Staff training on data protection and security practices

6.2 Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

When we no longer need to use your information, we will remove it from our systems or anonymize it so that it can no longer be associated with you.

6.3 Data Breach Procedures

In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law. We have procedures in place to identify, assess, and respond to security incidents in a timely manner.

7. Your Data Protection Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:

7.1 Access and Information

You have the right to request information about the personal data we hold about you and to obtain a copy of this data.

7.2 Rectification

You have the right to have inaccurate personal information corrected or completed if it is incomplete.

7.3 Erasure (Right to be Forgotten)

In certain circumstances, you have the right to request the deletion of your personal information, for example, if the data is no longer necessary for the purposes for which it was collected or if you withdraw your consent.

7.4 Restriction of Processing

You have the right to request the restriction of processing of your personal data in certain situations, such as when you contest the accuracy of the data.

7.5 Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit this data to another controller.

7.6 Objection

You have the right to object to the processing of your personal data in certain circumstances, such as for direct marketing purposes or when processing is based on legitimate interests.

7.7 Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact us using the contact information provided at the end of this Privacy Policy. We will respond to your request within the timeframe required by applicable law.

Please note that in some cases, we may not be able to fully comply with your request, such as if it would impact the privacy rights of others or if we are legally entitled to deal with the request in a different way.

7.9 Complaints

If you believe that our processing of your personal information infringes data protection laws, you have the right to lodge a complaint with a supervisory authority responsible for data protection in your country.

8. Third-Party Links

Our website may contain links to third-party websites and services that are not owned or controlled by Northern Railway Logistics. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

We strongly advise you to review the privacy policy of every site you visit. We do not control and are not responsible for the privacy practices of these third parties, which may differ from our own.

9. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this page. We will also notify you of material changes via email or a prominent notice on our website, prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Information

If you have any questions about this Privacy Policy, or if you would like to exercise any of your data protection rights, please contact us:

Our Data Protection Officer can be contacted at dpo@northerailway.co.uk