Protecting your personal details on our website.
Last updated: May 2018
This policy and our practices complies with the the European Privacy and Electronic Communications Directive (Directive 2002/58/EC) and the proposed Regulation on Privacy and Electronic Communications; and the General Data Protection Regulation (EU) 2016/679 as updated, supplemented, substituted or amended from time to time.
Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Cookies are small pieces of data stored on a User’s device.
Data Controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed.
Data Processors (or Service Providers)
Data Processor (or Service Provider) means any person (other than an employee of the Data Controller) who processes the data on behalf of the Data Controller.
We may use the services of various Service Providers (described below) in order to process your data more effectively.
Data Subject is any living individual who is the subject of Personal Data.
The User is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.
PERSONAL DATA WE COLLECT
When you visit the Site, we automatically collect certain data, including data about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.
Examples of Cookies we use:
* Session Cookies. We use Session Cookies to operate our Service.
* Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
* Security Cookies. We use Security Cookies for security purposes.
For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org/manage-cookies/
“Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
“Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
When you make a purchase or attempt to make a purchase through the Site or over the telephone, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number). We refer to this information as “Order Information.”
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
* Communicate with you;
* Screen our orders for potential risk or fraud; and
* When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
We also use this information to personalise content and ads, to provide social media features and to analyse our traffic. We share information about your use of our site with our social media, advertising and analytics partners such as Klaviyo, Mailchimp, Facebook and Google, who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.
SHARING YOUR PERSONAL DATA
We share your Personal Data with trusted third parties known as "Data Processors" or "Service Providers" to help us use your Personal Data, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Data here: https://www.shopify.com/legal/privacy.
We use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Data here: https://www.google.com/intl/en/policies/privacy/.
You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We use Klaviyo to process your Personal Data for our monthly newsletters and sale reminders. You can opt-in via our Site’s sign-up form or select the option to receive marketing via checkout. You can read more about how Klaviyo uses your Personal Data here: https://www.klaviyo.com/privacy
Please note that when you sign up you can update your preferences or unsubscribe from future marketing at any time by visiting the link at the bottom of our emails or contacting us directly email@example.com
Finally, we may also share your Personal Data to comply with applicable laws and regulations, as part of any fraud investigation, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
As described above, we use your Personal Data to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by:
* FACEBOOK ADS - https://www.facebook.com/settings/?tab=ads
* GOOGLE ADS - https://www.google.com/settings/ads/anonymous * BING ADS - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
* KLAVIYO TARGETED ADS – Opt-in or out of behavioural advertising by registering your preferences in our sign-up form or updating your preferences via the link at the bottom of our emails.
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
DO NOT TRACK
We do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
If you are a European resident, you have the right to access Personal Data we hold about you and to ask that your personal information be accessed, corrected, amended or deleted. If you would like to exercise this right, please contact us through the contact information below.
In certain circumstances, you have the right:
* To access and receive a copy of the Personal Data we hold about you
* To rectify any Personal Data held about you that is inaccurate
* To request the deletion of Personal Data held about you
You have the right to data portability for the information you provide to the Site. You can request to obtain a copy of your Personal Data in a commonly used electronic format so that you can manage and move it.
Please note that we may ask you to verify your identity before responding to such requests.
Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above.
Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. Your data is required to complete any orders and to process payment and deal with any enquiries about our products and services.
We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, up to 26 months, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
If you do not opt-out of our database for future marketing and information about our products and services, your data is stored up to and until you request for it to be removed.
Our Service does not knowingly address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
LINKS TO OTHER SITES
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
We do not provide any personally identifiable customer personal data to third-party websites.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at firstname.lastname@example.org or by mail using the details provided below:
Sorbet Ltd, 82 Leathwaite Road, London SW11 6RT