1. About us
tracemaps Limited is the registered name of the company. You can contact us by sending an email to firstname.lastname@example.org if you would like any more information.
2. What is personal data?
Personal data means a piece of information that can be used to identify a person whether used on its own or in conjunction with a second source. This could be a name, an address, or an IP address for example.
3. What personal information do we collect and how is it used?
Depending on your level of interaction with our website tracemaps collect different pieces of information about you. The following information is only used to help us and our partners deliver our service to you and to improve it going forward, it is never sold to other parties.
tracemaps prints are created using location information, such as .gpx files, that have been provided by the customer. In most cases this data contains information on the location of the person who recorded it, at a particular time, on a particular date. This information is used to plot the map that will potentially be purchased by the customer.
Location information uploaded to tracemaps is handled in two stages, first to show visitors a preview of their print pre-sale, and second to produce the print for the customer post-sale.
Once uploaded, pre-sale location information is stored by Amazon Web Services and processed by Syncano. Please see section 4 Third party services for more information.
The lawful basis for collecting location information pre-sale is tracemaps legitimate interest. We cannot provide our services without this information and believe potential customers would reasonably expect us to process their information in this way for this purpose.
Post-sale location information is shared with a third party company called Mapbox who help us to produce some of the graphic elements of our products. Please see section 4 Third party services for more information.
Post-sale this data is retained in case the customer has any issues with their order that was produced or if they would like to make a new order using the same data.
This information is also retained by tracemaps to help us develop our products and services internally. If a new product or service is created using a customer’s data it will not be published without anonymizing the data or by obtaining consent from the owner.
The lawful basis for processing location information post-sale is consent.
Alongside our map creator we offer a bespoke service we call “custom maps” to handle more complicated customer requests. Customers can upload their location information and type a message to explain what they would like us to make.
Section 3.2 above, location information upload, describes how this information is used but in addition, for custom map requests tracemaps ask for a customer’s name, and an email and/or phone number. This information is required so we are able to contact you to discuss your request and provide our service.
The lawful basis for processing location and contact information for custom maps is consent.
When you place an order with us we ask you for your name, address, email address and telephone number so we can arrange delivery of your order and contact you in relation to it if the need arises.
To deliver your order to you we will share your name and address with our delivery partner who is currently Royal Mail. Please see section 4 Third party services for more information.
We do not receive or store any credit or debit card details; these are sent directly to our payment partner Stripe through their payment interface integrated into our website. To take a payment Stripe will request your email address to send you a receipt, they will ask for your card number, its expiry date and its CVC (Card Verification Code) which is used to process the payment to tracemaps. You also have the option to ask Stripe to remember your payment details to make payment with them faster in the future. Please see section 4 Third party services for more information.
The lawful basis for processing customer information is contract.
To keep in touch and let customers and visitors know about new products, services or company updates that may be of interest tracemaps send out emails from time to time to mailing list subscribers.
If you would like to receive this information visitors can subscribe by entering their email address at the bottom of the home page or by putting a tick in the subscribe box at the checkout stage.
tracemaps only send marketing material to visitors and customers that directly consent and if you decide to opt-in you can opt-out at any time by clicking the ‘unsubscribe’ link in one of our marketing emails, or by sending an email to email@example.com.
MailChimp are our email marketing partner and they store and process the email addresses of our subscribers. We do not share our mailing list with anyone else other than MailChimp. Please see section 4 Third party services for more information.
The lawful basis for collecting and storing email addresses for email marketing is consent.
tracemaps have active social media accounts on Facebook, Instagram and Twitter to be able to communicate more easily with customers.
- Facebook - https://www.facebook.com/policy.php
- Instagram - https://help.instagram.com/155833707900388
- Twitter - https://twitter.com/en/privacy
Content posted and shared by visitors on these sites is never removed from the site it was posted on by tracemaps without acquiring detailed consent from the user first.
Users of these web applications have the right to request their data be deleted by using the delete features within the web application or by contacting the social media provider directly.
From time to time visitors and customers may communicate with tracemaps regarding our services in the form of email with questions or suggestions for how we can improve what we do.
We use this information for the development of our services and for training purposes.
The lawful basis for collecting and processing communication and feedback is tracemaps legitimate interest.
4. Third party services
At tracemaps we work with a number of third parties and share some of your personal information with them to help us deliver our services to you.
- Amazon Web Services store all the personal information we hold on their servers https://aws.amazon.com/privacy/
- Syncano carryout the computational processes we perform on your personal information https://syncano.io/#/privacy-policy
- Stripe process your payment information https://stripe.com/gb/privacy
- Royal Mail process your address information for the purpose of delivering your goods https://www.royalmail.com/privacy-notice/
- Google store and process our emails https://policies.google.com/privacy
- Mail chimp store and process our email marketing https://mailchimp.com/legal/privacy/
Your location information is shared with another third party company called Mapbox who help us to produce some of the graphic elements of our products.
Mapbox only receive your location information so it is not directly identifiable.
For the purpose of helping tracemaps to provide our service to you Mapbox request the right to store your location information on their distributed platform. Please read the following excerpt from their terms of service.
You retain ownership of all content that you contribute to the Services via Mapbox Studio, Mapbox Studio Classic, the Dataset API and the Uploads API, excluding any content that you receive from Mapbox ("Your Content").
Limited to the purpose of hosting your content so that we can provide the Services to you, you hereby grant Mapbox a non-exclusive, worldwide, royalty-free, fully paid-up, transferable and sub licensable right and license to use, copy, cache, publish, display, distribute, modify, create derivative works, and store Your Content and to allow others to do so. This right and license enables Mapbox to host and mirror your content on its distributed platform. You warrant, represent, and agree that you have the right to grant Mapbox these rights.
You retain ownership of your personal information which upon your request to tracemaps can be arranged to be deleted. However please note that due to the distributed nature of cloud hosting this may not take effect immediately.
5. How long does tracemaps keep your data
tracemaps only keep your personal information only as long as we need to in order to fulfill three main purposes; To provide our services to you, to keep adequate records of the services we have provided for accounting and legal reasons and to help us improve our services going forward. The length of time specific information is retained for is described below.
Location information is retained in case the customer has any issues with their order that was produced or if they would like to make a new order using the same data. This information is also retained by tracemaps to help us develop our products and services internally.
Location information may be held until a website user requests for it to be deleted.
Customer information is retained to keep a record of an order for accounting purposes.
Email addresses are held for as long as the customer is subscribed to our email marketing.
If a customer opts-out of our email marketing their details are deleted from our contact list as soon as possible. This can be done automatically if the user clicks on the unsubscribe link in a marketing email or it can usually be done within 48 hours if they send an email to firstname.lastname@example.org.
All contributions to our social media pages are retained unless deleted by the contributor.
All communication and feedback received by email is retained by tracemaps for training and the improvement of our products and services.
All visitors and customers of tracemaps have the right for their data to be deleted upon their request. If you would like to make this request please email email@example.com and we will make the necessary arrangements.
6. What are your personal information rights?
You have statutory rights relating to any of your personal information that tracemaps hold, these rights have been listed below;
- Your right to be informed if your personal data is being used
- Your right to get copies of your data
- Your right to get your data corrected
- Your right to get your data deleted
- Your right to limit how organisations use your data
- Your right to data portability
- The right to object to the use of your data
- Your rights relating to decisions being made about you without human involvement
- Your right to access information from a public body
- Your right to raise a concern
Find out more about each of these at the ICO website here https://ico.org.uk/your-data-matters/.
tracemaps have read these rights and created and implemented this policy to address them. If you wish to follow up on any of these aspects or have a concern about how they are implemented do not hesitate to get in touch by emailing firstname.lastname@example.org.
7. How do tracemaps acquire your Consent?
tracemaps acquire consent to collect and process personal data for the following uses.
- Creating a custom map
- For customers who purchase a map or gift card
- For email marketing subscribers
For creating a custom map consent is obtained by a positive opt-in tick box located at the Submit stage of a visitors custom map request.
For customers who purchase a map or gift card consent is obtained by a positive opt-in tick box located at the checkout stage of the map or gift card creator.
For email marketing subscribers consent is obtained by a positive opt-in action to enter their email address into a specific text entry box on the home page and click of a subscribe button.
8. How do I withdraw my consent?
If after you opt-in you change your mind you may withdraw your consent for us to store and process your information at any time by contacting email@example.com. Consent for email marketing can also be removed by clicking on the unsubscribe link within a marketing email.
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
When you click on links on our website, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
tracemaps take the security of personal data seriously and have implemented organisational and technical measures to prevent your data being inappropriately lost, misused, accessed, disclosed, altered or destroyed.
Following an analysis or the risks presented by our processing the following information describes how tracemaps keep your data secure.
Personal data sent to tracemaps is stored and backed up by Amazon Web Services who employ industry leading practices to prevent security breaches. These measures include network firewalls, data encryption, and penetration testing. More information on Amazon Web Services’ security measures can be found here https://aws.amazon.com/security/.
Payment information is not received by tracemaps and is processed securely and directly by Stripe. Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. More information on Strips’ security measures can be found here https://stripe.com/gb/privacy.
Emails are protected by googles’ advanced security infrastructure making use of encryption and threat detection measures amongst other policies. More information can be found here https://privacy.google.com/intl/en-GB/your-security.html?categories_activeEl=sign-in.
Mapbox host location information of our customers on their network. Their website is served exclusively by HTTPS protocols and their infrastructure runs inside state of the art data centers designed and operated by Amazon Web Services. More information can be found here https://www.mapbox.com/platform/security/.
Syncano run their processes on behalf of tracemaps. Syncano has put in place appropriate physical, electronic and administrative procedures to safeguard and secure the information from loss, misuse, unauthorized access or disclosure, alteration or destruction.
Royal Mail only process address information for the purpose of delivering good to customers. More information can be found here https://www.royalmail.com/personal/identity-verification/your-security.
Mail chimp store and process tracemaps email marketing at multiple world class data centers located in the United States. Their sites feature biometric scanners and they use DDOS mitigation strategies amongst others. More information can be found here https://mailchimp.com/legal/privacy/.
Data stored and processed locally provides us with a third data backup should there be a problem with our cloud storage service. This data is kept behind password protected accounts that are regularly updated with strong passwords on secure physical premises.
tracemaps regularly review our data security practices improving and updating them where necessary.
12. Age of consent
By using this site, you represent that you are at least the age of majority in your country or region of residence, or that you are the age of majority in your country or region and you have given us your consent to allow any of your minor dependents to use this site.
If our company is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
14. Questions and contact information
If you would like to access, correct, amend or delete any personal information we have about you, register a complaint, or to simply request more information please send an email to firstname.lastname@example.org and we will get back to you as soon as possible.