Privacy policy
Disclaimer: This document was created as a template for information purposes only. By using it, you agree to this disclaimer and take into account that Webnode is not responsible for any actions taken or use based on the content of this website. We strongly recommend you to seek legal advice and adjust this document to suit the needs of your business.
The e-shop [Blanche Creates….] on the website [….] company ID […] based in […] processes personal data provided by Customer to fulfill and additionally confirm Terms and Conditions, to process electronic orders and shipments and for the necessary communication during a period required by law.
General provisions
1. Personal data controller, in compliance with GDPR (hereinafter referred to as „Regulation“) is […..], company ID [….], based in [….] (hereinafter referred to as „Controller“);
2. The contact details of the Controller are: e-mail: [……], tel.: [………];
3. Personal data is any information that relates to an identified or identifiable natural person.
The source of personal data
1. Controller processes personal data obtained with consent from Customer and collected through the contract to purchase and fulfillment of the electronic order created in the e-shop […].;
2. Controller processes only the identifying and contact details of Customer which are necessary for the fulfillment of the contract to purchase;
3. Controller processes personal data for the shipping and accounting purposes and for the necessary communication between the contracting parties for the duration required by law. Personal data will not be made public and will not be transferred to other countries.
Purpose of data processing
Controller processes personal data of the Customer for following purposes:
1. Registration on the website [….] in compliance with Chapter 4, Section 2 of GDPR;
2. For fulfillment of the electronic order created by Customer (name, address, e-mail, telephone number);
3. To observe law and regulations arising from the the contractual relationship between Customer and Controller;
4. Personal data are necessary for the fulfillment of contract to purchase. Contract cannot be concluded without the personal data.
Duration of personal data storage
1. Controller stores personal data for the period necessary for fulfillment of rights and obligations arising from the contractual relationship between Controller and Customer and for the duration of 3 years following the conclusion of contractual relationship;
2. Controller must delete all personal data after the expiration of the period required for the storage of personal data.
Recipients and processors of personal data
Third parties processing personal data of the Customer are subcontractors of the Controller. Services of these subcontractors are indispensable for the successful fulfillment of the contract to purchase and processing of the electronic order between Controller and Customer.
Subcontractors of the Controller are:
- Webnode AG (e-shop system);
- Shipping company;
- Google Analytics (website analytics);
Rights of Customer
In compliance with the Regulation, Customer is entitled to:
1. The right of access to personal data;
2. The right to rectification of personal data;
3. The right to erasure of personal data;
4. The right to object to processing of personal data;
5. The right to data portability;
6. The right to withdraw consent to the processing of personal data in writing or by e-mail sent to: [….];
7. The right to lodge a complaint with the supervisory authority in case of suspected breach of the Regulation.
Security of personal data
1. Controller declares to take all technical and organizational precautions necessary for the protection of personal data;
2. Controller has taken technical precautions to secure data storage spaces, in particular securing access to computer with a password, using antivirus software and performing regular maintenance of computers.
Final provisions
1. By placing an electronic order on the website [….] Customer confirms to be informed about all the conditions of personal data protection and accepts them to the full extent;
2. Customer accepts these rules by ticking the checkbox in the order purchase form;
3. Controller can update these Rules at any time. New, updated version has to be published on his website.
These Rules come into effect on [Date]
Privacy
This privacy policy sets out how Blanche Creates uses and protects any information that you give Blanche Creates when you use this website.
Blanche Creates is utterly committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
This policy is effective from 15th May 2018 in compliance with GDPR legislation.
WHY WE NEED YOUR DATA AND WHAT WE USE IT FOR
Customers
If you have bought from our online store, we need your name and address to ship your order to you and your email address to contact you in the event of a query with your order and to notify you of when it has been fulfilled. If you would like to receive tracking information, there is an additional optional phone number field.
We need to hold onto your data to comply with tax laws in the UK. The legal bases for us holding this information is for the purpose of fulfilling a contract and as part of our legitimate business activities.
We will retain information on the number of orders, the value of those orders, the number of visits you have made to our shop (using your IP address), the referral website or link that brought you to our site, if applicable.
We hold your IP address to help us with fraud prevention as it helps us to see whether an order has been made from a different territory from the billing address.
Newsletter subscribers
There way of subscribing to our newsletter to find out about shop updates and other Blanche Creates news.
You can use the sign up form on the front page of the website (which is a double opt-in)
These are the ways we obtain your consent and there is an unsubscribe button on every newsletter sent via EcoMail.
We also collect information about your activity once you have received the email. This includes whether you have opened the email and if you have clicked links within the email you have clicked
HOW LONG WE KEEP YOUR DATA
Customers
We are required under UK tax law to keep customers' basic personal information for a minimum of 6 years after a transaction, after which time it will be destroyed. Your information we use for marketing will be retained until you notify us that you no longer wish to receive this information, at which point we will delete your data.
Newsletter subscribers
We will hold and use your information until you tell us you would like to unsubscribe, or for us to delete your information. To do this, click unsubscribe on any newsletter email or email me.
SECURITY
To protect your personal information, we take reasonable precautions to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
COOKIES
Cookies are small files which are placed on your computer's hard drive. Cookies help this website to analyse traffic and visitors and help our site respond to you as an individual.
We occasionally use Google Analytics for a general overall picture of where users are located in the world, which pages they're looking at and which device they're accessing the website from.
THIRD PARTIES
We absolutely do not share your data with third parties unless:
we are obliged to for the day-to-day running of the business
to keep help us conduct marketing campaigns
We use Webnode as an e-commerce platform to process orders.
We use EcoMail to run marketing campaigns. They have a strong data privacy and security.
YOUR RIGHTS
If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, please contact us.
CONTACT DETAILS
email : blanchecreates@gmail.com