1. Overview and Data Controller
This Privacy Policy describes how [Company Name] (“we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit or use our services. For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, we are the “Data Controller” of your personal information. This policy is designed to provide transparency to a global audience, including users in the European Economic Area (EEA), the United Kingdom, and North America.
2. Information We Collect
We collect information that identifies, relates to, or could reasonably be linked to you. This includes:
– Identity Data: First name, last name, username, or similar identifier.
– Contact Data: Billing address, delivery address, email address, and telephone numbers.
– Financial Data: Payment card details and purchase history (processed via secure third-party processors).
– Technical Data: IP address, login data, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
– Usage Data: Information about how you use our website, products, and services.
– Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties.
3. Methods of Data Collection
We use different methods to collect data from and about you, including:
– Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, or email.
– Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing patterns using cookies, server logs, and similar technologies.
– Third Parties: We may receive personal data about you from various third parties such as analytics providers (like Google), advertising networks, and search information providers.
4. Legal Basis for Processing (EEA and UK)
If you are located in the EEA or UK, we only process your personal data when we have a valid legal basis:
– Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you.
– Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
– Legal Obligation: Where we need to comply with a legal or regulatory obligation.
– Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications.
5. Purpose of Data Use
We use your data to: register you as a new customer, process and deliver your orders, manage our relationship with you, enable you to partake in a prize draw or competition, improve our website and customer service, and deliver relevant website content and advertisements to you.