PRIVACY AND DATA PROTECTION
Section 1 - What we do with your information?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
In all cases, your information is used to either (i) service our obligations to you, such as fulfilling your order; and/or (ii) to send information which we believe is of interest and meets our explicit purpose to provide customer service.
Marketing from Claire Vaughan Designs Ltd: Only with your explicit permission (see Section 2 – Consent) may we send you information about our store, new products, news and other updates.
We never share, sell, rent or lease your details to a third party, unless required to do so in Law.
Section 2 - Consent
How do you get my consent, and what is our lawful basis for processing your data?
There are two ways we do this:
(i) when you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only (known as ‘A Contract with the Individual’);
(ii) you submit your details and give your explicit permission to receive marketing and related information through our ‘double opt-in’ sign-up form. This extends a number of options to request the types of information you receive.
Wholesale Customers Only: Your opportunity to submit this information will be included in your first order documentation.
In all cases, such consent will last for no more than 24 months from the date it is given (in writing). You can however withdraw your consent at any time:
How do I withdraw my consent?
If after you opt-in you change your mind, you may withdraw your consent at any time, by contacting us at email@example.com or mailing us at: Lunnon Cottage, Vowchurch Common, HEREFORD HR2 0RL.
You may reasonably ask at any time for information on how we hold your data, and how we use and safeguard it at all times, by emailing firstname.lastname@example.org or mailing us at: Lunnon Cottage, Vowchurch Common, HEREFORD HR2 0RL. We meet the new EU General Data Protection Regulation (GDPR) response times of no more than one month from the date the request is received.
Section 3 - Disclosure
We may disclose your personal information if we are required by law so to do, including if you violate our Terms and Conditions.
Section 4 - Third Party Services
In general, we are assured the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us:
Our online store is hosted on Moonfruit (SiteMaker Software Ltd). They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Moonfruit’s data storage, databases and the general Moonfruit application. We are informed they store your data on a secure server behind a firewall.
We offer customers the opportunity to purchase online through PayPal Inc. Certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
We use an ever-changing range of carriers and distributors to deliver your products and orders as safely and as timely as we can. These include but are not exclusive to: Royal Mail, Hermes, Collect+ and Parcel2Go.com
Email marketing is typically done in-house using a third party provider of automated marketing software, such as Mailchimp. Please see their Privacy Statements for how they process and handle your data, including its use on our behalf. (From 25 May 2018, our use of such service(s) for eMarketing is/are restricted only to ‘double opted-in’ contacts).
Section 5 - Security
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. This includes but is not limited to SSL encryption throughout our website, anti-virus software, firewalls and other related cyber-security facilities. However, we cannot guarantee the security of any data that you disclose online and we will not be responsible for any breach of security unless this is due to our negligence or wilful default.
Section 6 - Cookies
Cookies are small text files that are placed on your computer’s hard drive by websites that you visit. They save and retrieve pieces of information about your visit to the website – for example, how you entered the site, how you navigated through the site and what information and documentation was of interest to you. This means that when you go back to a website, it can give you tailored options based on the information it has stored about you on your last visit.
Some of our cookies are used to simply collect information about how visitors use our website and these types of cookies collect the information in an anonymous form.
To find out more about cookies, including seeing what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
If you do not wish to accept cookies from our website, please leave this site immediately and then delete and block all cookies from this site.
Section 7 - Age of Consent
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site. We understand this is enough to conform to the enhanced requirements under the EU General Data Protection Regulation (GDPR).
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
Section 9 - Questions, Complaints and Contact Information
If you would like to access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Data Controller/Processor, Claire Vaughan, at email@example.com or mail us at Lunnon Cottage, Vowchurch Common, HEREFORD HR2 0RL.
Data Complaints: if you have concerns about our handling or processing of your data, you can contact the Information Commission Office at ico.org.uk
Compiled and last updated April 2018