Who we are
Our website address is https://tollgenealogy.com. I am Rachel King, the founder of Toll Genealogy. I can be contacted at firstname.lastname@example.org. I am the data controller and am responsible for your personal data.
What personal data we collect and why we collect it
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
If you use the Contact form, your name and email address will be captured. Contact form submissions will be kept for up to one month for customer services purposes, but no information submitted through them is used for marketing purposes unless specifically requested by you.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
No sensitive personal data within the GDPR is collected from you.
Who we share your data with
Those who we do or may share your personal data with include:
- Survey companies (to receive feedback from customers on courses – no data is currently shared with any survey company)
- Product hosting platforms (to help you access the products that you purchase – no data is currently shared with any product hosting platform)
- Other website design, management, and programming services (none at this time)
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include rights to:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to the processing of your personal data.
- Request restriction of the processing of your personal data.
- Request transfer of your personal data.
- Right to withdraw consent.
You can see more about these rights at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you wish to exercise any of the rights set out above, please email email@example.com.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We should be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Information submitted through any marketing opt-in form such as a request for a free product will be processed through Convertkit, which resides outside of the European Union. Convertkit is PrivacyShield Certified. ConvertKit processes “personal data” under the GDPR, including identification and contact data, financial information, and IT information such as an IP address. It does not process sensitive personal data.
Contact address: Toll Genealogy, International House, 24 Holborn Viaduct, London, EC1A 2BN.
What third parties we receive data from
We may receive personal data about you from various third parties and public sources as set out below:
- analytics providers such as Google based outside the EU;
- search information providers such as Google based inside OR outside the EU.
You will receive marketing communications from us if you have:
- requested information from us or purchased goods or services from us; or
- if you provided us with your details and ticked the box at the point of entry of your details for us to send you marketing communications; and
- in each case, you have not opted out of receiving that marketing.
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by emailing firstname.lastname@example.org at any time.
Where you opt out of receiving our marketing communications, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.
Last updated 11 July 2021