Privacy Policy
We, Lyon Equipment Limited, are responsible for EXPED UK and the website www.expeduk.com. We are committed to protecting and respecting your privacy. We want you to understand how we collect and use information about you. We will never sell, share or use your personal information other than as described here.
This policy applies to information we collect from those who contact us via any medium e.g. post, email or use of our online presence. Some personal data we collect may be subject to an additional data protection notification. This will be available to you at the time of the information request.
This Policy describes:1. Who we are
2. What type of information we collect from you
3. How we use this information
4. How we share your personal data
5. Retention of data
6. Data security
7. Your rights
8. Complaints
If you are aged 16 or under, please ask your parent/guardian’s permission and ensure they read this Privacy Policy before you provide us with any personal information.
1. Who We Are
Lyon Equipment Limited are a provider of training courses and certification for working at height, a manufacturer of equipment for rescue and vertical environments and a leading distributor of professional and outdoor brands.
For the purposes of data protection law, the data ‘controller’ is Lyon Equipment Limited, a company incorporated and registered in England and Wales under company number 3107118 and having its registered office address at Unit 3 – 7 Tebay Business Park, Old Tebay, Penrith, CA10 3SS (from now on referred to as Lyon Equipment, or as ‘we’ and related words such as ‘us’ and ‘our’). Our registered VAT number is GB180979520.
This policy relates to Lyon Equipment Limited and all trading names and associated companies of Lyon Equipment Limited.
As a data controller we are responsible for, and control the processing of, your personal data. We are registered as a data controller with the Information Commissioner’s Office (ICO), which is the UK’s supervisory authority for data protection matters. Our registration number is Z7399375.
If you would like to contact us about this notice, including if you wish to receive further information about any aspect of it, our details are as follows:
Email: privacy@lyon.co.uk
Postal: Data Protection, Lyon Equipment Limited, Unit 3 – 7 Tebay Business Park, Old Tebay, Penrith, CA10 3SS
Telephone: +44 (0)15396 26350
If you are exercising any of your privacy rights please make your request in writing and provide us with evidence of your identity. It helps us to deal with your request if you can also provide your full name, date of birth, address and postcode.
2. What Type Of Information We Collect From You
Examples include:
- Identity data, such as first name, last name, gender, username or similar identifier, title and date of birth.
- Contact data, such as address, email address and telephone numbers.
- Financial data, such as billing address, bank account details and credit rating.
- Transaction data, such as information about the particular transaction or other services we provide to you, information about products or services you provide to us and details about payments to and from you.
- Technical data, such as IP address, your login data, browser type and version, time zone setting and location, browser, language, operating system and platform on the devices you use to access our website.
- Usage data, such as information about how you use our website and services
- Marketing and communications data, such as your preferences in receiving marketing from us and your communication preferences.
- Monitoring data, such as on-site CCTV footage, vehicle registration and use of our IT and communications systems.
- Any other information you provide.
Where necessary, we also collect, store and use other more sensitive personal information, examples include:
Relationship information, special access requirements, allergies, food intolerances, medical conditions, prescriptions, surgeries, therapies, medical history and disabilities.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
If you are supplying another person’s details, please ensure you have their explicit consent to do so.
3. How We Use This Information
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- As required to establish and fulfil a contract with you. For example, if you purchase from us or enter into an agreement to provide or receive services. This may include verifying your identity, taking payments, communicating with you, providing customer services and arranging the delivery or other provision of goods or services. We require this information in order to enter into a contract with you and are unable to do so without it.
- To comply with a legal or regulatory obligation that we are subject to.
- To send you direct marketing in relation to relevant products and services. Direct marketing will only be sent where you have given your consent to receive it. You will continue to be able to opt-out of direct marketing at any time.
- Monitor the use of our website, pages visited and duration.
- Process a job application.
- Where we use your personal information based on your consent, you have the right to withdraw it. We will let you know how to do this at the time we gather your consent.
4. How We Share Your Personal Data
We may provide your personal data to the following recipients for the purposes set out in this notice:
- Our service providers, including:
- Our logistics providers, such as those who deliver our orders.
- Email and mail service providers.
- Technical and support partners.
- Credit check agencies.
- Payment processors.
- Professional advisers including lawyers, auditors, bankers and insurers who provide consultancy, banking, legal, insurance and accounting services.
- HM Revenue & Customs, regulators and other authorities.
- Credit reference or fraud and crime prevention agencies.
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
- Our professional advisors, such as our auditors and external legal and financial advisors.
- Merger or acquisition partners, to the extent that sharing your personal data is necessary.
- Law enforcement agencies, government or public agencies or officials, regulators, and any other person or entity that has the appropriate legal authority where we are legally required or permitted to do so, to respond to claims, or to protect our rights, interests, privacy, property or safety.
- Any other parties where we have your specific consent to do so.
We may collect, use and share anonymous aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data as it does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
5. Retention Of Data
We will retain your personal data for as long as necessary to fulfil the original purpose, or until you request that we delete your information. This includes the purposes of satisfying any legal, accounting, or reporting requirements.
We consider applicable legal requirements to determine the appropriate retention period for personal data. This includes the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
6. Data Security
Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you do not share your password with anyone.
We have security measures in place designed to prevent data loss, preserve data integrity and regulate access to data. Only authorised Lyon Equipment employees and third parties processing data on our behalf have access to your data.
All data transmitted between our websites and your browser are encrypted and protected with a minimum of 128 Bit encryption on SSL.
We take all reasonable steps to keep your data safe and secure and to ensure the data is accessed only by those who have a legitimate interest to do so. Unfortunately, the transmission of information via the internet is not completely secure. Any transmission is at your own risk. We cannot accept responsibility for any unauthorised access or loss of information that is beyond our control.
Our website may contain links to third party websites. Our privacy policy does not apply to these websites. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website. We encourage you to read the privacy policy of every website you visit.
7. Your Rights
You have the right to object to how we use your personal information. You also have the right to see what personal information we hold about you. In addition, you can ask us to correct inaccuracies, delete or restrict personal information or to ask for some of your personal information to be provided to someone else.
You can make a request to exercise any of your rights in this Privacy Policy free of charge by contacting us at privacy@lyon.co.uk. We will respond to your requests in accordance with our obligations under data protection law.
Right to object: You can object to our processing of your personal information by contacting us on the details provided in Section1.
Access to your personal information: You can request access to a copy of your personal information that we hold, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and, where we obtained it from someone other than you, where we obtained it from. You do not have to pay a fee to access your personal data. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may refuse to comply with your request in these circumstances.
Right to withdraw consent: If you have given us your consent to use personal information, you can update your marketing preferences or withdraw your consent at any time.
Rectification: You can ask us to change or complete any inaccurate or incomplete personal information held about you.
Erasure: You can ask us to delete your personal information where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it.
Portability: You can ask us to provide you or a third party with the personal information that we hold about you in a structured, commonly used, electronic form so it can be easily transferred.
Restriction: You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it.
8. Complaints
We hope that you will be satisfied with the way in which we approach and use your personal data. However, if you have a complaint about the way we handle your personal data, please contact us using the details in Section 1.
If after contacting us you feel your complaint has not been dealt with satisfactorily, the supervisory authority for data protection in the UK is the Information Commissioner’s Office (ICO) which you can contact via their website at www.ico.org.uk or on 0303 123 1113.
Cookies
A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.
We use the following cookies to optimize your experience on our Site and to provide our services.
Cookies Necessary for the Functioning of the Store
| Name | Function | Duration |
|---|---|---|
| _ab | Used in connection with access to admin. | 2y |
| _secure_session_id | Used in connection with navigation through a storefront. | 24h |
| _shopify_country | Used in connection with checkout. | session |
| _shopify_m | Used for managing customer privacy settings. | 1y |
| _shopify_tm | Used for managing customer privacy settings. | 30min |
| _shopify_tw | Used for managing customer privacy settings. | 2w |
| _storefront_u | Used to facilitate updating customer account information. | 1min |
| _tracking_consent | Tracking preferences. | 1y |
| c | Used in connection with checkout. | 1y |
| cart | Used in connection with shopping cart. | 2w |
| cart_currency | Used in connection with shopping cart. | 2w |
| cart_sig | Used in connection with checkout. | 2w |
| cart_ts | Used in connection with checkout. | 2w |
| cart_ver | Used in connection with shopping cart. | 2w |
| checkout | Used in connection with checkout. | 4w |
| checkout_token | Used in connection with checkout. | 1y |
| dynamic_checkout_shown_on_cart | Used in connection with checkout. | 30min |
| hide_shopify_pay_for_checkout | Used in connection with checkout. | session |
| keep_alive | Used in connection with buyer localization. | 2w |
| master_device_id | Used in connection with merchant login. | 2y |
| previous_step | Used in connection with checkout. | 1y |
| remember_me | Used in connection with checkout. | 1y |
| secure_customer_sig | Used in connection with customer login. | 20y |
| shopify_pay | Used in connection with checkout. | 1y |
| shopify_pay_redirect | Used in connection with checkout. | 30 minutes, 3w or 1y depending on value |
| storefront_digest | Used in connection with customer login. | 2y |
| tracked_start_checkout | Used in connection with checkout. | 1y |
| checkout_one_experiment | Used in connection with checkout. | session |
Reporting and Analytics
| Name | Function | Duration |
|---|---|---|
| _landing_page | Track landing pages. | 2w |
| _orig_referrer | Track landing pages. | 2w |
| _s | Shopify analytics. | 30min |
| _shopify_d | Shopify analytics. | session |
| _shopify_s | Shopify analytics. | 30min |
| _shopify_sa_p | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_sa_t | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_y | Shopify analytics. | 1y |
| _y | Shopify analytics. | 1y |
| _shopify_evids | Shopify analytics. | session |
| _shopify_ga | Shopify and Google Analytics. | session |
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
ANALYSIS TOOLS AND ADVERTISING
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.
The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities.
IP anonymization
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
Browser plug-in
You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent. Moreover, you have the option prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
Objection to the recording of data
You have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google Analytics deactivation.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en
Demographic parameters provided by Google Analytics
This website uses the function “demographic parameters” provided by Google Analytics. It makes it possible to generate reports providing information on the age, gender and interests of website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data.”
Facebook Pixel
To measure our conversion rates, our website uses the visitor activity pixel of Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyse the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.
For us as the operators of this website, the collected data is anonymous. We are not in a position to arrive at any conclusions as to the identity of users. However, Facebook archives the information and processes it, so that it is possible to make a connection to the respective user profile and Facebook is in a position to use the data for its own promotional purposes in compliance with the Facebook Data Usage Policy. This enables Facebook to display ads on Facebook pages as well as in locations outside of Facebook. We as the operator of this website have no control over the use of such data.
The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in effective advertising campaigns, which also include social media.
In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/
You also have the option to deactivate the remarketing function “Custom Audiences” in the ad settings section underhttps://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.
If you do not have a Facebook account, you can deactivate any user based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/
PLUG-INS AND TOOLS
Google-Maps
The "Google Maps" component of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google", is used to display the location of local dealers who have the product searched for.
When the dealer locations are displayed using the "Google Maps" component, a connection is established to a Google server for the purpose of displaying the map. Through the connection, Google can recognise from which website a request is sent and to which IP address the display of the directions is transmitted.
It cannot be ruled out that external Google servers in the USA are used for this purpose.
The legal basis for this is Art. 6 para. 1 lit. a DSGVO. In accordance with Art. 7 (3) DSGVO, the user can revoke this consent at any time by not using the function of displaying the local dealers or, if integrated, by setting the consent manager of the website accordingly.
In addition, it is possible to stop the Google Maps service by deactivating JavaScript in the browser.
It is pointed out that in this case the map display can no longer be used. The use of "Google Maps" and the information obtained via "Google Maps" is subject to the Google terms of use and the additional terms and conditions for Google Maps.
Google provides further information, in particular on the options for preventing the use of data, under the following links: https://policies.google.com/privacy
YouTube
Our website uses plug-ins of the YouTube platform, which is operated by Google. The website operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit a page on our website into which a YouTube plug-in has been integrated, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited.
Furthermore, YouTube will be able to place various cookies on your device. With the assistance of these cookies, YouTube will be able to obtain information about our website visitor. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. These cookies will stay on your device until you delete them.
If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest.
For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en
Google Web Fonts (local embedding)
This website uses so-called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.
Google Maps
Via an API, this website uses the mapping service Google Maps. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer.
We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR.
For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en