Privacy Policy

The Top Wave Ltd are committed to protecting and respecting your privacy

This Policy explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes.

Any questions regarding this Policy and our privacy practices should be sent to us by using the contact details listed below.

Who are we?

We are The top wave Ltd, we have been proudly trading from Newcastle Upon Tyne, UK. You can read more about our history on the About page of this website

Our registered office and warehouse is located at:

The top wave Ltd
Newcastle Upon Tyne, UK

You can contact us by writing to the above address, or alternatively fill the contact form

How do we collect information from you?

We obtain information about you when you use our website, for example, when you contact us about products and services, or when you place an order with us.

What type of information is collected from you?

The personal information we collect can include your name, address, email address, IP address, and information regarding what pages are accessed and when. If you place an order with us and choose to pay by card, your card information is not processed or stored by us, it is collected by our third-party payment processors, who specialise in the secure online capture and processing of credit/debit card transactions.

How is your information used?

We may use your information to:

• process an order you have placed
• seek your views or comments on the services we provide
• notify you of changes to our services
• send you communications which you have requested and that may be of interest to you. These may include information about new ranges or offers

We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.

The lawful basis for processing your personal data to fulfil orders is a contract basis as laid out in the General Data Protection Regulation (GDPR)

The lawful basis for processing your personal data for marketing emails is a consent basis as laid out in the GDPR. You have the right to withdraw your consent at any time, you can do this by contacting us using the contact details above.

Who has access to your information?

We will not sell or rent your information to third parties.

Third Party Service Providers working on our behalf: We may pass your information to our third-party service providers, agents subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example to send you mailings). However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes. Please be reassured that we will not release your information to third parties beyond the The top wave Ltd requirements unless we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

When you are paying for your order via our website, your payment is processed by a third-party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions. If you have any questions regarding secure transactions, please contact us.

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, or if we’re under a duty to disclose or share your personal data in order to comply with any legal obligation or to enforce or apply our terms of use or to protect the rights, property or safety of our supporters and customers. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.

Your choices

You can choose whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us about new product ranges or promotions, then you can select your choices by ticking the relevant boxes section of our website.

We will not contact you for marketing purposes unless you have given your consent. You can change your marketing preferences at any time by contacting us.

Your rights

You have rights under the GDPR:

• to access your personal data
• to be provided with information about how your personal data is processed
• to have your personal data corrected
• to have your personal data erased in certain circumstances
• to object to or restrict how your personal data is processed
• to have your personal data transferred to yourself or to another business in certain circumstances.

You also have the right to lodge a complaint with a supervisory authority. In the UK, the supervisory authority is the Information Commissioner’s Office (ICO). You can contact the ICO via the ICO website: https://ico.org.uk

Alternatively, you can call the ICO helpline on 0303 123 1113.

Security precautions in place to protect the loss, misuse or alteration of your information

When you give us personal information, we take steps to ensure that it’s treated securely. Any information transmitted between you and our website is encrypted using TLS. When you are on a secure page, a lock icon will appear in web browsers such as Microsoft Internet Explorer.

Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Our Payment Service Provider is Sage Pay (formerly Protx) – the largest independent payment service provider (PSP) in the UK and Ireland.

Sage Pay provides a secure payment gateway (Level 1 PCI DSS), processing payments for thousands of online businesses, including ours. It is Sage Pay’s utmost priority to ensure that transaction data is handled in a safe and secure way.

Sage Pay uses a range of secure methods such as fraud screening, I.P address blocking and 3D secure. Once on the Sage Pay systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards.

Sage Pay is PCI DSS (Payment Card Industry Data Security Standard) compliant to the highest level and maintains regular security audits. They are also regularly audited by the banks and banking authorities to ensure that their systems are impenetrable.

Sage Pay is an active member of the PCI Security Standards Council (PCI SSC) that defines card industry global regulation.

In addition, you know that your session is in a secure encrypted environment when you see https:// in the web address, and/or when you see the locked padlock symbol alongside the URL.

Profiling

The top wave Ltd does not conduct any automated profiling or automated decision making.

Use of cookies

Like lots of websites, the The top wave Ltd website uses cookies. Cookies are small pieces text files we place on your device that help the website to function. We use cookies to:

• Enable the functionality of the website such as the shopping basket and online chat facility.
• Collect aggregated data about how our website is used.
• Collect analytical data about our website (Google Analytics).

Links to other websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third-party site.

Transferring your information outside of Europe

Where The top wave Ltd makes any data transfers outside of Europe, we do so only when there is an agreement in place and that your data remains safe and secure.

Review of this policy

We keep this Policy under regular review.