We take great care with your personal information and do not sell it or
share it with any other person, company or organisation unless required to
do so for legal reasons.
We collect your personal information so that we can successfully deliver
your timpani sticks to you.
Other information which you provide about your timpani stick choice,
specifications, etc. is used for the purpose of maintaining records about
your purchases in order to give you exceptional
service in the future.
The lawful basis for collecting your information is our contract with you
when you place an order.
Our website is protected by a secure SSL Certificate for your confidence in
Any card details you input on our web site are not seen or held by us. They
are transmitted directly to Worldpay through a secure SSL connection.
We are fully compliant with PCI DSS card industry
David Morbey Timpani & Percussion is registered with the UK Data
Protection Registrar in accordance with the provisions of the UK Data
Protection Act 2018.
You have a legal right to see the information we hold about you, to ask us
to correct any errors and to request the removal of your information.
This policy describes how we will use your personal data when you use our
website at www.timpanisticks.com (the “site”) or use or buy our products
We have provided this policy to ensure that you understand what personal
data we may collect and hold about you, what we may use it for and how we
keep it safe. You have legal rights to access the personal data that we hold
about you and to control how we use it which are also explained.
Who we are and how you can contact us
We are David Morbey Timpani & Percussion, also known as David Morbey
Timpani Sticks. Our office address is at 55 Braemar Place, Aberdeen,
AB10 6EQ, Scotland, UK. The Data Controller is David Morbey.
You can contact us in writing at the above address or by emailing email@example.com
Personal data we collect about you
We may collect:
Personal data you provide to us. You may give us information about yourself
by filling in forms on our web site or by corresponding with us by phone,
fax, e-mail, social media or otherwise. This includes information you
provide when you register and use a David Morbey Timpani & Percussion
account, purchase products, participate in forums or other social media
functions, and if you report a problem with the site or our timpani sticks.
The information you provide may include your name, address, e-mail address,
phone numbers, timpani stick preferences and financial and credit card
Personal data we collect when you use our site
We may collect:
Technical information, including the Internet protocol (IP) address used to
connect your computer or mobile device to the Internet, your login
information, browser type and version, devices used or which connect to your
network from time to time, time zone setting, browser plug-in types and
versions, operating system and platform;
Information about your visit, including the full Uniform Resource Locators
(URL) clickstream to, through and from the site (including date and time);
products you viewed or searched for; page response times, download errors,
length of visits to certain pages, page interaction information (such as
scrolling, clicks, and mouse-overs), and methods used to browse away from
Personal data we receive from other sources
We may work with third parties (including, for example, analytics providers,
search information providers, credit reference agencies) and may receive
information about you from them.
The information that we collect about you as described above falls into two
Personally Identifiable Information which is information that can be used to
identify you as an individual.
Non-Personally Identifiable Information which is information that cannot be
used to identify you as an individual. In general, information listed under
the headings “Personal data you provide to us” and “Personal data we
receive from other sources” will be personally identifiable whilst
“Personal data we collect when you use our site” will be Non-Personally
What we use your personal data for
We use your personal data in the following ways:
1. Personal data you provide to us and the personal data we receive
from other sources
We will use this information:
to provide you with the information and timpani sticks that you request;
to provide you with excellent service and technical information about your
previous timpani sticks when you re-order.
to notify you about changes to our products or to our services or terms;
to manage and administer our business;
2. Personal data we collect when you use our site
We will use this information:
to understand how the site is accessed and used;
to administer the site and for internal operations, including
troubleshooting, data analysis and testing;
to improve the site to ensure that content is presented in the most
effective manner for users;
as part of our efforts to keep the site safe and secure;
When we need your consent to use your personal data
Whilst we always want you to be aware of how we are using your personal
data, this does not necessarily mean that we are required to ask for your
consent before we can use it. In the day to day running of our business we
may use your personal data without asking for your consent because:
we are entering into and carrying out our obligations under a contract with
we need to use your personal data for our own legitimate purposes (such as
the administration and management of our business and the improvement of our
timpani sticks) and our doing so will not interfere with your privacy
Personal data you are legally obliged to provide
You are not under a legal obligation to provide us with any of your personal
data but please note that if you elect not to provide us with your personal
data we may be unable to provide our timpani sticks to you.
We would appreciate you keeping us informed about your current contact
details so that our records are up to date.
Your rights to know what personal data we hold and to control how we use
You have a legal right to know what personal data we hold about you - this
is called the right of subject access. You can exercise this right by
sending us a written request at any time. Please mark your correspondence
“Subject Access Request” and send it to us by post or email using the
details in the “Who we are and how you can contact us” section.
You also have rights to:
prevent your personal data being used for marketing purposes (see “How we
use your personal data for marketing” for further details);
have inaccurate personal data corrected, blocked or erased;
object to decisions being made about you by automated means or to your
personal data being used for profiling purposes (see “Automated decision
making and profiling”);
object to our using your personal data in ways that are likely to cause you
damage or distress;
restrict our use of your personal data;
require that we delete your personal data;
require that we provide you, or anyone that you nominate, with a copy of any
personal data you have given us in a structured electronic form such as a
You will not have to pay a fee to access your personal data (or to exercise
any of the other rights). However, we may charge a reasonable admin fee if
your request is clearly unfounded, repetitive or excessive. Alternatively,
we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your
identity and ensure your right to access your personal data (or to exercise
any of your other rights). This is a security measure to ensure that
personal data is not disclosed to any person who has no right to receive it.
We may also contact you to ask you for further information in relation to
your request to speed up our response.
We will try to respond to all legitimate requests within one month.
Occasionally it may take us longer than a month if your request is
particularly complex or you have made a number of requests. In this case, we
will notify you and keep you updated.
You can find full details of your personal data rights and the circumstances
in which you are able to exercise them on the Information Commissioner’s
Office website at www.ico.org.uk.
Automated decision making and profiling
We do not make use of automated decision making or profiling.
When we will share your personal data with others
We do not share your data with any other companies or third parties or
individuals except exceptionally with third parties on a one-off basis, for
If David Morbey Timpani & Percussion or substantially all of its assets
are acquired by a third party, in which case personal data held by us about
our customers will be one of the transferred assets;
if we are under a duty to disclose or share your personal data in order to
comply with any legal obligation or in order to enforce or apply our terms
and conditions and other agreements entered into with you or to protect the
rights, property, or safety of David Morbey Timpani & Percussion, our
customers or others. This includes exchanging information with other
companies and organisations for the purposes of fraud protection and credit
When we share your information with a third party it will be for a specific
purpose which has been expressly agreed between us and the third party. We
do not permit third parties to use your information for any purpose other
than the purpose specifically agreed between us and them.
How we keep your personal data safe
We take every care to ensure that your personal data is kept secure. The
security measures we take include:
Our primary electronic database is not connected to the internet;
Storing your personal data on our secure servers;
Using specialist third party payment providers to process payments made
through our site (see the section on “Making payments through our
Keeping paper records stored in our locked offices;
Maintaining up to date firewalls and anti-virus software to minimise the
risk of unauthorised access to our systems;
Please remember that if you have registered an account you are responsible
for keeping your passwords secure. If you have chosen a password which
enables you to access certain parts of our website (or log in to your
account), you are responsible for keeping this password confidential. Please
do not to share your passwords with anyone.
Unfortunately, sending information via the internet is not completely
secure, but we use an SSL secure connection with a trusted security
certificate for the whole site to minimize your risk. Although we will
do our best to protect your personal data, we cannot guarantee the security
of personal data sent to our website; you send us personal data at your own
risk. Once we have received your personal data, we will use procedures and
security features to try to prevent unauthorised access.
Making payments through our site
All our payments are made through third party payment processors over a
secure connection. Only the payment processors store your full payment card
number or account information. During the order process you will be directed
on to pages hosted by our payment processor. Such pages will have the
trademark of the payment processor displayed (Currently “Worldpay”).
How we use your personal data for marketing
We do not share your personal data with third parties for marketing
We do not send out direct marketing.
Accessing and managing your data and preferences through your account
You can view and update your personal data through your account and we
encourage you to take the time to log in to your account periodically for
this purpose. If you have any questions about how to manage your data and
settings through your account please contact us using the details set out in
the “who we are and how to contact us” section of this policy.
When we will send your personal data to other countries
Your personal data may be transferred to, and stored at, a destination
outside the European Economic Area ("EEA") by us or by our
sub-contractors. Where we, or our sub-contractors, use IT systems or
software that is provided by non-UK companies, your personal data may be
stored on the servers of these non-UK companies outside the EEA. We will
take all steps reasonably necessary to ensure that your data is treated
How long we keep your personal data
Many of our customers re-order timpani sticks many years after the original
date of making and find it useful that we maintain records of their previous
purchases and timpani stick specifications. We therefore keep
your personal data indefinitely to ensure this service is available for your
future requests. If you do not wish your personal data to be stored
indefinitely, then please let us know at the time of ordering your timpani
sticks or contact us using the details set out in the “who we are and how
to contact us” section of this policy. In this case your personal
data will be deleted from our records after a period of six years from the
date of your last order or the closure of your web based account (whichever
is later) except when we still need the data to continue to provide you with
services you have requested from us, comply with our legal obligations,
resolve disputes or enforce agreements.
Please note that we may anonymise your personal data or use it for
statistical purposes. We keep anonymised and statistical data indefinitely
but we take care to ensure that such data can no longer identify or be
connected to any individual.
and may use web beacons to assess which pages you access when browsing the
site. This helps us to provide you with a good experience when you browse
the site and also allows us to improve the site. We also allow selected
Links to third party sites
Our web site may, from time to time, contain links to and from websites we
consider may be of interest to you. If you follow a link to any of these
websites, please note that these websites have their own privacy policies
and that we do not accept any responsibility or liability for these
policies. Please check these policies before you submit any personal data to
How you can make a complaint
If you are unhappy with the way we have used your personal data please
contact us to discuss this using the contact details set out in the “Who
we are and how to contact us” section of this policy.
You are also entitled to make a complaint to the Information
Commissioner’s Office which you can do by visiting www.ico.org.uk. Whilst
you are not required to do so, we encourage you to contact us directly to
discuss any concerns that you may have and to allow us an opportunity to
address these before you contact the Information Commissioner’s Office.
How we keep this policy up to date
We will review and update this policy from time to time. This may be to
reflect a change in the products we offer or to our internal procedures or
it may be to reflect a change in the law.
The easiest way to check for updates is by looking for the latest version of
this policy on our web site.
Each time we update our policy we will update the policy version number
shown at the end of the policy and the date on which that version of the
policy came into force.
This is policy version 2018-05, which came into effect on 25 May 2018.