The legal basis for collecting and processing your personal information
The law on data protection sets out a number of different grounds on which we can collect and process your personal information. The table below sets out when we rely on these different grounds:
|Contractual obligations||When we enter into a contract with you we need your personal data to be able to fulfil the contract e.g. if we agree to buy your CDs, we will need your account details to be able to pay you and may also need your address details to arrange for our courier to collect your items.|
|Legal compliance||We may be required by law to retain some of your personal data e.g. fraud prevention.|
|Legitimate interests||We may use your personal data for our legitimate interests e.g. keeping details of your purchase history so that we can provide you with a personalised service.|
|Consent||Where you have given us your consent e.g. where you have ticked a box to say you would like to hear from us about special offers.|
Your rights over the way in which we use your data will vary depending on which ground we are relying upon. Please see the Withdrawing consent and Your rights sections.