Privacy Policy

Introduction

This privacy policy explains the types of personal data we may collect about you when you interact with us through our website, social media, email, telephone or any other interactions that may occur. It explains how we store and handle your data and how we keep it safe. Sweetheart Stationery (hereafter ‘We’ or ‘Us’) recognises the trust placed on us when you provide your personal data to us and we are committed to handling your data with respect and transparency. Sweetheart Stationery may make changes to this policy from time to time, please check back occasionally and review changes that may have been made. This Policy was last updated on 25th May 2018.

The legal basis for processing your personal data

The law on data protection gives a number of different reasons for which a business may collect and process your personal data. The legal basis of Processing Data for personalized services is Article 6 Paragraph 6  (lit (b)) of the General Data Protection Regulation (GDPR). These reasons include

CONSENT

In specific situations we can collect and process your data after you have given us your consent. You may for instance give us your consent by ticking a box to receive information from us or to receive email updates and newsletters.

CONTRACTURAL OBLIGATIONS

We need personal data from you if you order an item from us for delivery to your home or alternative address. We will collect your data to enable us to perform our contractual obligation to you. We will pass this data to, for instance, a reputable courier for your goods to be delivered to you.

LEGAL COMPLIANCE

We may need to collect and process your data to comply with a legal requirement.

What Personal Information do we collect and hold about you

Your Name

Your Contact details, including, Address, Phone numbers, email address

Subject to your consent, Images of the personalised products we supply to you

We do not collect or process ‘special category’ data such as race, religion, ethnic origin, or sexual orientation etc.

We do not collect or process your Credit or Debit Card or Bank account details. Your payment is made to us through Bank Internet Transfer, PayPal or other third party payment process including Braintree Payments (a division of PayPal) for credit card transactions.

How your personal data is collected

 When you visit our website or social media and order products from us

When you otherwise engage with us on social media. Social media third parties will have their own privacy policies that you should acquaint yourself with.

When you contact us by any other means, for instance email or telephone

The personal data collected will be information about you required to fulfil an order from you, or potential order, such as, but not limited to, your name, e-mail address, billing address, delivery address (if different) telephone number and if different the name of the recipients of the order. We are afraid we cannot accept an order from you if you are unwilling to share this information with us.

How we use your personal data

To process orders that you make with us

To respond to your queries

To deliver your orders. Your personal data will be shared with reputable third party couriers who will have their own privacy policy to protect your data.

To enable us to process new orders for you.

For statistical purposes to enable us to improve our website and social media content.

To administer this website

To comply with contractual or legal obligations. For instance maintaining records of goods you have ordered and we have invoiced.

With your specific consent we may use your personal data, preferences and prior transactions, if any, to keep you informed about products that we feel might be of interest to you.

To respond to requests from the police, government or other regulatory authority investigating suspected illegal activities. In this event, we shall be entitled to transfer your personal data to the relevant criminal prosecution authority.

How we store your personal data

Your data will be stored exclusively on our servers, or those of our commissioned data processing providers. The data will be protected by up to date industry standard procedures to keep it safe and secure and to prevent loss or unauthorised access.

Once we no longer have a requirement to retain your personal data it will be deleted from our servers securely.

Transfer of Personal Data to Third Parties

Your personal data may be disclosed to reputable third parties for the purpose of completing our contractual obligations to you. For example it will be disclosed to reputable couriers who deliver your order from us. We will require those third parties to have their own privacy policies to protect your data.

We will not share your personal data with any third party for the purposes of emailing or marketing

Images of the products we supply to you

To maintain our web and social media sites and to provide you with proof’s to review we take digital images (photo’s) of the products we supply to you, and may from time to time make these image’s available on our website for other potential clients to view. As these products are often personalised and can contain personal data about you we will ask for your specific consent to take these images when we ask you to sign our terms and conditions before our acceptance of your order. You do not have to give us consent and if given you can change your mind at anytime by advising us by email.

 

Your rights with regard to the data we collect and process

The General Data Protection Regulation gives you updated rights about the data we hold with effect from 25th May 2018

You have

  • The right to be informed
  • The right of access
  • The right to rectify
  • The right to erasure
  • The right to restrict access
  • The right to tell us you do not wish to receive marketing information
  • The right to restrict or object to data processing
  • The right to data portability
  • Rights relating to decisions being made about you without human involvement.

 

Our identity and contact details

Sweetheart Stationery

269 Singlewell Road

Gravesend

Kent DA11 7RN

 

Our Data Controllers/Processors are

Mrs Lisa Walker

Mr Thomas Walker

 

Further information

You can contact the Information Commissioners Office at https://ico.org.uk/for-the-public/