Protecting your personal details on our website.
Last updated: May 2018
Sorbet Ltd (registered number 07310061), whose registered office is at 82 Leathwaite Road, London SW11 6RT, knows that you care how information about you is used and shared and we appreciate your trust in us to do that carefully and sensibly. This notice describes our privacy policy and forms part of our website terms and conditions ("website terms"). By accepting our website terms or by visiting www.sorbetltd.co.uk (the “Site") or if you purchase our products you accept and consent to our holding and processing of your personal details as described in this Privacy Policy.
This Privacy Policy describes how your Personal Data is collected, used, and shared when you visit or make a purchase from us. We are committed to giving you a personalised service that meets your needs in a way that also protects your privacy.
This policy and our practices complies with the the European Privacy and Electronic Communications Directive (Directive 2002/58/EC) and the proposed Regulation on Privacy and Electronic Communications; and the General Data Protection Regulation (EU) 2016/679 as updated, supplemented, substituted or amended from time to time.
DEFINITIONS
Personal Data
Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
Usage Data
Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Cookies
Cookies are small pieces of data stored on a User’s device.
Data Controller
Data Controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed.
For the purpose of this Privacy Policy, we are a Data Controller of your data.
Data Processors (or Service Providers)
Data Processor (or Service Provider) means any person (other than an employee of the Data Controller) who processes the data on behalf of the Data Controller.
We may use the services of various Service Providers (described below) in order to process your data more effectively.
Data Subject
Data Subject is any living individual who is the subject of Personal Data.
User
The User is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.
PERSONAL DATA WE COLLECT
Device Information
When you visit the Site, we automatically collect certain data, including data about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.
Examples of Cookies we use:
* Session Cookies. We use Session Cookies to operate our Service.
* Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
* Security Cookies. We use Security Cookies for security purposes.
For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org/manage-cookies/
“Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
“Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Order Information
When you make a purchase or attempt to make a purchase through the Site or over the telephone, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number). We refer to this information as “Order Information.”
Please note, credit or debit card details supplied to make a purchase are processed separately by our payment gateways Paypal or Sage Pay, and not recorded or held by Sorbet Ltd. For more information, please see Paypal's Privacy Policy and SagePay’s Privacy Policy.
When we talk about “Personal Data” in this Privacy Policy, we are talking both about Device Information and Order Information.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
* Communicate with you;
* Screen our orders for potential risk or fraud; and
* When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
We also use this information to personalise content and ads, to provide social media features and to analyse our traffic. We share information about your use of our site with our social media, advertising and analytics partners such as Klaviyo, Mailchimp, Facebook and Google, who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.
SHARING YOUR PERSONAL DATA
We share your Personal Data with trusted third parties known as "Data Processors" or "Service Providers" to help us use your Personal Data, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Data here: https://www.shopify.com/legal/privacy.
We use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Data here: https://www.google.com/intl/en/policies/privacy/.
You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We use Klaviyo to process your Personal Data for our monthly newsletters and sale reminders. You can opt-in via our Site’s sign-up form or select the option to receive marketing via checkout. You can read more about how Klaviyo uses your Personal Data here: https://www.klaviyo.com/privacy
Please note that when you sign up you can update your preferences or unsubscribe from future marketing at any time by visiting the link at the bottom of our emails or contacting us directly sales@sorbetltd.co.uk
Finally, we may also share your Personal Data to comply with applicable laws and regulations, as part of any fraud investigation, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
BEHAVIOURAL ADVERTISING
As described above, we use your Personal Data to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by:
* FACEBOOK ADS - https://www.facebook.com/settings/?tab=ads
* GOOGLE ADS - https://www.google.com/settings/ads/anonymous * BING ADS - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
* KLAVIYO TARGETED ADS – Opt-in or out of behavioural advertising by registering your preferences in our sign-up form or updating your preferences via the link at the bottom of our emails.
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
DO NOT TRACK
We do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
Facebook and Instagram shopping
When shopping directly via our Facebook or Instagram Shop, Facebook Pixel, a third-party cookie collects and shares customers’ browsing behaviour on our online stores. Browser-based ad blockers can prevent the pixel from collecting data.
YOUR RIGHTS
If you are a European resident, you have the right to access Personal Data we hold about you and to ask that your personal information be accessed, corrected, amended or deleted. If you would like to exercise this right, please contact us through the contact information below.
In certain circumstances, you have the right:
* To access and receive a copy of the Personal Data we hold about you
* To rectify any Personal Data held about you that is inaccurate
* To request the deletion of Personal Data held about you
You have the right to data portability for the information you provide to the Site. You can request to obtain a copy of your Personal Data in a commonly used electronic format so that you can manage and move it.
Please note that we may ask you to verify your identity before responding to such requests.
Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above.
DATA TRANSFER
In order to provide you with our products and services, your data may be processed outside of the EU by our suppliers and 3rd parties providing services to us. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information which in some cases may be through contractual provisions which have been approved by the EU.
Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
DATA RETENTION
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. Your data is required to complete any orders and to process payment and deal with any enquiries about our products and services.
We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, up to 26 months, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
If you do not opt-out of our database for future marketing and information about our products and services, your data is stored up to and until you request for it to be removed.
CHILDREN’S PRIVACY
Our Service does not knowingly address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
LINKS TO OTHER SITES
Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
We do not provide any personally identifiable customer personal data to third-party websites.
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at sales@sorbetltd.co.uk or by mail using the details provided below:
Sorbet Ltd, 82 Leathwaite Road, London SW11 6RT
