Privacy policy

Lasso the Moon Limited ("Lasso") is committed to protecting and respecting your privacy.

This policy (together with Lasso’s terms and conditions, which can be found by clicking here) sets out the basis on which any personal data Lasso collects from you, or that you provide to Lasso, will be processed by Lasso.

Please read the following carefully to understand Lasso’s views and practices regarding your personal data and how Lasso will treat it.

For the purpose of the Data Protection Act 1998 ("Act"), the data controller is Lasso the Moon Limited (registered in England under number 06524257).

Information Lasso may collect from you

Lasso may collect and process the following data about you:

Information that you provide by filling in forms on Lasso’s website at www.lassothemoon.co.uk ("Website"). This includes information provided at the time of registering to use the Website, using Lasso’s service, posting material or requesting further services. Lasso may also ask you for information when you report a problem with the Website.
If you contact Lasso, Lasso may keep a record of that correspondence.
Lasso may also ask you to complete surveys that Lasso uses for research purposes, although you do not have to respond to them.
Details of transactions you carry out through the Website and of the fulfilment of your orders.
Details of your visits to the Website, including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for Lasso’s own billing purposes or otherwise, and the resources that you access.

IP addresses and cookies

Lasso may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to Lasso’s advertisers. This is statistical data about Lasso’s users’ browsing actions and patterns, and does not identify any individual.

For the same reason, Lasso may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help Lasso to improve the Website and to deliver a better and more personalised service. They enable Lasso:

To estimate Lasso’s audience size and usage pattern.
To store information about your preferences, and so allow Lasso to customise the Website according to your individual interests.
To speed up your searches.
To recognise you when you return to the Website.

You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of the Website. Unless you have adjusted your browser setting so that it will refuse cookies, Lasso’s system will issue cookies when you log on to the Website.

Where Lasso stores your personal data

The data that Lasso collects from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for Lasso or for one of Lasso’s suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. Lasso will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to Lasso is stored on Lasso’s secure servers. Any payment transactions will be encrypted. Where Lasso has given you (or where you have chosen) a password which enables you to access certain parts of the Website, you are responsible for keeping this password confidential. Lasso asks you not to share a password with anyone.

The transmission of information via the internet is not completely secure. Although Lasso will do its best to protect your personal data, Lasso cannot guarantee the security of your data transmitted to the Website; any transmission is at your own risk. Once Lasso has received your information, Lasso will use strict procedures and security features to try to prevent unauthorised access.

Security

Security is probably one of the most significant concerns for both the shopper and the retailer during an online transaction. In reality, an online transaction is probably more secure than a card transaction in a shop or conducted over the telephone or by fax, as the information transmitted online is strongly encrypted using complicated logarithm combinations.

The WorldPay payment system uses a combination of both established and innovative techniques to ensure the security and integrity of all sensitive data. Furthermore, WorldPay’s public web servers are certified by Thawte, a public Certificate Authority, ensuring that both the shopper and retailer can have confidence that nobody can impersonate WorldPay to obtain confidential information.

Transaction Encryption

The transfer of the purchase details from the retailers site to Worldpay are encapsulated using WorldPay’s own encrypted and digitally-signed protocol. This uses a combination of standard methods such as PGP, RSA and MD5 to ensure that the information passed is secure and tamper-proof via SSL.

Security for the Shopper

Any communication between the shopper and WorldPay is also encrypted to the maximum strength supported by the shopper's browser using 128 Bit SSL. Shoppers are also protected from fraudulent use of their card in a "card not present" environment, by their card issuers. The card issuers provide the right for shopper to dispute a transaction if the goods/services did not arrive or if the card was used fraudulently.

Data Storage

Data storage on WorldPay systems, and the communication between WorldPay and the worldwide banking networks, is regularly audited by the banking authorities to ensure a secure transaction environment. WorldPay also ensures that we stay up-to-date with the latest versions of any third-party code we use, and continually review our own proprietary code.

Uses made of the information

Lasso uses information held about you in the following ways:

To ensure that content from the Website is presented in the most effective manner for you and for your computer.
To provide you with information, products or services that you request from Lasso or which Lasso considers may interest you, where you have consented to be contacted for such purposes.
To carry out Lasso’s obligations arising from any contracts entered into between you and Lasso.
To allow you to participate in interactive features of Lasso’s service, when you choose to do so.
To notify you about changes to Lasso’s service.

Lasso may also use your data, or permit selected third parties to use your data, to provide you with information about goods and services which may be of interest to you and Lasso or they may contact you about these by post or telephone.

If you are an existing customer, Lasso will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale to you.

If you are a new customer, and where Lasso permits selected third parties to use your data, Lasso (or they) will contact you by electronic means only if you have consented to this.

If you do not want Lasso to use your data in this way, or to pass your details on to third parties for marketing purposes, please tick the relevant box situated on the form on which Lasso collect your data (i.e. the order form or registration form).

Disclosure of your information

Lasso may disclose your personal information to any member of Lasso’s group, which means Lasso’s subsidiaries, Lasso’s ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985.

Lasso may disclose your personal information to third parties:

In the event that Lasso sells or buys any business or assets, in which case Lasso may disclose your personal data to the prospective seller or buyer of such business or assets.
If Lasso or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
If Lasso are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply Lasso’s terms and conditions and other agreements; or to protect the rights, property, or safety of Lasso, Lasso’s customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Your rights

You have the right to ask Lasso not to process your personal data for marketing purposes. Lasso will usually inform you (before collecting your data) if Lasso intends to use your data for such purposes or if Lasso intends to disclose your information to any third party for such purposes.You can exercise your right to prevent such processing by checking certain boxes on the forms Lasso uses to collect your data.You can also exercise the right at any time by contacting Lasso.

The Website may, from time to time, contain links to and from the websites of Lasso’s partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that Lasso does not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Access to information

The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to a fee of £10 to meet Lasso’s costs in providing you with details of the information Lasso holds about you.

Changes to Lasso’s privacy policy

Any changes Lasso may make to Lasso’s privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.

Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed by email via the Contact Us page at www.lassothemoon.co.uk.