Dropcart Privacy and Cookies Policy
We are the data controller of the personal data provided to us.
2. Whose personal data do we collect?
By ‘personal data’ we mean identifiable information about you, such as your name, email address, telephone number, delivery address, billing address and your IP address.
We will collect your personal data in a number of ways:
- when you make an enquiry, provide feedback or otherwise contact us with a question or comment;
- when you purchase products from us;
- when you register an account on our website or otherwise use our website;
- when you engage with us on social media;
- when you provide a review or testimonial to us.
When you contact us by email or post, we may keep a record of the correspondence and we may also record any telephone call we have with you.
When you use our website, we automatically collect and store information about your device and your activities. This information could include:
- technical information about your device used to access our website, such as type of device, web browser or operating system;
- your preferences and settings such as time zone and language
- how long you used the website and which services and features you used.
We do this in accordance with the Cookies policy set out below.
3. Lawful use of your personal data
- consent (where you choose to provide it),
- performance of any contract with me have with you, including our Terms and Conditions [link];
- compliance with any legal obligations we may have; and
- legitimate interests. When we refer to legitimate interests we mean our legitimate business interests in the normal running of our business which do not materially impact your rights, freedom or interests.
We use your personal data to allow you to access our website, respond to your questions or comments, and to fulfill your order for goods including processing payments, returns and refunds in accordance with our Terms and Conditions [link].
We use your personal data to comply with any legal obligations, demands or requirements, for example, as part of anti-money laundering processes or to protect a third party’s rights, property, or safety.
4. Who do we share your data with?
For our legitimate interests, we may share your personal data with any service providers, sub-contractors and agents that we may appoint to perform functions on our behalf and in accordance with our instructions, including payment providers (currently SapePay and Paypal), IT service providers, accountants, auditors and lawyers.
We shall provide our service providers, sub-contractors and agents only with such of your personal data as they need to provide the service for us and if we stop using their services, we shall request that they delete your personal data or make it anonymous within their systems.
5. Where we hold and process your personal data
Some or all of your personal data may be stored or transferred outside of the European Economic Area (the EEA) for any reason, including for example, if our email server is located in a country outside the EEA or if any of our service providers are based outside of the EEA.
If we do store or transfer your personal data outside the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA and under applicable laws.
We shall process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage. We do this by using appropriate technical or organisational measures, for example, all information you provide to us is stored on our secure servers and our employees are required to comply with all applicable data protection laws.
Notwithstanding our efforts, you acknowledge that no system can be completely secure. Therefore, although we take these steps to secure your personal data, we do not promise that your personal data will always remain completely secure.
7. Your rights
You have a number of rights under applicable law. Some of these rights are complex, and not all of the details have been included below. Further information can be found here
To exercise any of these rights, please email us at firstname.lastname@example.org
You have the right to obtain from us a copy of the personal data that we hold for you. You can also require us to correct errors in the personal data that we process for you if it is inaccurate, incomplete or out of date. If you have an account on our website, you can of course obtain a copy of your personal data and/or correct your personal data through your account.
You can request that we transfer your personal data to another organisation.
You also have the right at any time to require that we delete your personal data that we hold for you, but please note if you do this, we shall not longer be able to process any order that you make wish to make or have made for goods.
Please note, we reserve the right to charge an administrative fee if your request in relation to your rights is manifestly unfounded or excessive.
If you have any complaints in relation to this Privacy & Cookies Policy or otherwise in relation to our processing of your personal data, please us. We shall review and investigate your complaint and try to get back to you within a reasonable time. You can also contact the Information Commissioner, see www.ico.org.uk or if you are based outside of the United Kingdom, please contact your local regulatory authority.
8. Retention of personal data
We retain your personal data in accordance with applicable laws. The length of time we keep your personal data depends on what it is and whether we have an on-going business need to retain it (for example, to comply with applicable legal, tax or accounting requirements).
We shall retain your personal data for as long as we have a relationship with you and for a period of time afterwards where we have an on-going business need to retain it, in accordance with our data retention policies and practices. Following that period, we shall make sure it is deleted or made it anonymous within our systems.
A cookie is a small text file containing a unique identification number that is transferred (through your browser) from a website to the hard drive of your computer. The cookie identifies your browser but will not let a website know any personal information about you, such as your name and/or address. These files are then used by websites to identify when users revisit that website
Cookies placed in your browser’s memory are called session cookies and cookies placed on your computer’s hard drive are called persistent cookies. Session cookies are deleted when you close your browser, while persistent cookies remain on your hard drive, even after closing your browser. Session cookies are generally used to improve the user experience when using a website. Persistent cookies are generally used to store user preferences between browser sessions.
For full details on the cookies used on our website please click here
We also use social media buttons and/or plugins on this site that allow you to connect with your social network in various ways. For these to work the relevant social media sites (such Twitter, Facebook and Google +) will set cookies through our website which may be used to enhance your profile on their site or contribute to the data they hold for various purposes outlined in their respective privacy policies.