1 - WHAT DOES THIS POLICY COVER?
2 - PERSONAL INFORMATION WE COLLECT
When you visit our Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse our Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to our Site, and information about how you interact with it. We refer to this automatically-collected information as “Device Information”.
We collect Device Information using the following technologies:
“Log files” - track actions occurring on our Site, and collect data including your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
“Web beacons,” “tags,” and “pixels” - electronic files used to record information about how you browse our Site.
Additionally, when you make a purchase or attempt to make a purchase through our Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number). We refer to this information as “Order Information.”
If you have chosen to create an account as part of our purchase process and have selected a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
3 - HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information we collect generally to fulfil any orders placed through our Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).
We use the Device Information we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise our Site (for example, by generating analytics about how our customers browse and interact with our Site, and to assess the success of our marketing and advertising campaigns).
4 - CONSENT
When you provide us with Personal Information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to us collecting it and using it for that specific reason only.
If we ask for your Personal Information for a secondary reason, like marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to say no.
If you would like to access, correct, amend or delete any personal data we hold about you or simply want more information just contact firstname.lastname@example.org
5 - SHARING YOUR PERSONAL INFORMATION
The Grateful Hearts Club will only use the data you share with us for the purpose you consented to.
The only other occasions where your Personal Information may be shared are:
• In the event we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
• If The Grateful Hearts Club or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• If we are required by law to do so or if you violate our Terms of Service.
6 - THIRD-PARTY SERVICE
Listed below are details of the main third-parties we utilise - we recommend you read their privacy policies so you can understand the manner in which these providers will handle your Personal Information.
Our company is hosted on the Wix.com platform. Wix.com provides us with an online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall. You can read more about how Wix uses your Personal Information at https://www.wix.com/about/privacy.
If you choose a direct payment gateway to complete your purchase, then Wix stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Wix’s Terms of Service http://www.wix.com/about/terms-of-use
All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information at https://www.google.com/intl/en/policies/privacy/
You can also opt-out of Google Analytics at https://tools.google.com/dlpage/gaoptout
To provide you with marketing communications we believe may be of interest to you we use services such as Google AdWords’ free conversion tracking features and remarketing codes, and Microsoft’s free tracking features (see Behavioural Advertising for more details).
Our mailing lists are generated by a company called Mailchimp. Details of how they use your Personal Information can be found at https://mailchimp.com/legal/privacy
When we send out orders, shipping details such as addresses and phone numbers are shared with either Royal Mail, Parcelforce or other selected couriers.
Our Site may contain links to other websites. We have no control over how your data is collected, stored, or used by other websites and advise you to check the privacy policies of any such websites before providing any data to them.
7 - BEHAVIOURAL ADVERTISING
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (NAI) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
You can opt-out of targeted advertising by:
• FACEBOOK - https://www.facebook.com/settings/?tab=ads
• GOOGLE - https://www.google.com/settings/ads/anonymous
• BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt-out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at http://optout.aboutads.info/
8 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
9 - DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a 'Do Not Track' signal from your browser.
10 - YOUR RIGHTS
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact email@example.com
Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
11 - DATA RETENTION
When you place an order through our Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. By law, we have to keep basic information about customers for six years after they cease being a customer for tax purposes.
12 - CHANGES
Changes and clarifications will take effect immediately upon their posting on the website. We encourage you to check back regularly. If we make material changes to this policy, we will notify you via email.
If the Site is acquired or merged with another company, your information may be transferred to the new owners so they can continue to sell products to you.
13 - CONTACT US
For more information about our privacy practices, if you would like to access, correct, amend or delete any personal information we have about you. We hope you won't have the need to but if you are dissatisfied in any way, please contact firstname.lastname@example.org and we will resolve the issue as quickly as we can.