Information we collect
When you create a new user account we collect your name and email address. If you place an order for a product that requires payment, we collect your credit card billing address, and email address on our server, but all secure details are conducted by our payment partner, WIXstores or Paypal. If you have chosen to send products to another person we hold their name & address. Depending on your activity with us, we may also collect your online purchase history, product and company review data.
Anonymised data about your visit on the website is collected through third party web analytics services, including Google Analytics. Such information gathered from these analytics services includes pages visited, the origin of your visit and other data relating to how you access our website. There is no personally identifiable data held within Google Analytics.
An IP address is a number that is assigned to your computer when connected to the Internet. The servers that serve our web site automatically identify your computer by its IP address. This is used exclusively to highlight orders that appear abnormal, (i.e. multiple credit card numbers being used) in order to identify the source of fraudulent orders.
If you connect with us on social media, your account ID is shared with us so we can interact with you. If you email us, your email address is shown to us to allow us to respond to you.
How we use the information
We will only collect and use your personal data where we have a legal basis to do so, and the information we collect will primarily be used to process orders and if necessary, to contact you regarding the status of your orders. We will only collect personal data from you when we have your consent to do so; when we need to contact you regarding your order(s); when we have a legitimate interest to do so, that doesn’t override your right to privacy; when we have a legal obligation to do so.
We may send you marketing communications and promotional offers if you have opened an account or purchased with us and opted-in to receiving marketing emails from us; or if you have signed up to our mailing list. You can withdraw your consent to receive marketing materials at any time. You can unsubscribe from our email marketing newsletter by clicking on the unsubscribe ink in the footer of any marketing emails you receive from us, or if you have an account with us you can change your marketing preferences in your account settings. You can also call or email us and ask to be removed from our mailing list if you supply your email address or account details.
Requesting access to your personal data
As part of the new GDPR regulations, you have a right to request access to the personal data we hold about you. If you would like to request a copy of your data, please do so using our contact form and we will respond to your request within 30 days. We have the right to refuse or charge for requests that are manifestly unfounded or excessive.
Requesting personal data to be erased
You have a right to request your personal data to be erased where the personal data is no longer required for processing or legal requirements. We will not erase your data as we need to maintain your transactional data for our legal obligations, but we will anonymise your records overwriting your personal data. Once this has been done it will be impossible to restore a single customer from our database.
Security of your personal information
We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss to personal data. Our website is secured by encryption so your data is not accessible when you are transmitting it.