OUR PRIVACY PROMISE
We want to put you in the driving seat when it comes to your data and it’s important to us that you have absolute confidence in how we look after your personal information.
We are committed to managing your personal information with great care and in accordance with the high standards required by data protection legislation including the General Data Protection Regulation and the Privacy and Electronic Communications Regulations.
We respect your right to privacy and your right to understand and control how your personal data is used. We do not and will not sell your data to third parties and will always keep it safe and secure.
Our Privacy Statement sets out the data we will collect from you, how we use it, and how you can exercise your rights in relation to your data.
WHAT KIND OF PERSONAL INFORMATION DO WE COLLECT?
INFORMATION YOU PROVIDE YOURSELF
We collect information that you voluntarily provide to us including:
Your products and other services you previously requested from us.
Details of your interactions with our customer service team, for example if you contact us about your purchase, to change your order details or to give us feedback, including details of any comments or conversations via telephone, email, live chat and social platforms
Your marketing preferences
Your product and service reviews
Your identifier on social channels when you contact us via those platforms
INFORMATION WE COLLECT AUTOMATICALLY
We collect certain information from you automatically when you use our website including:
Operating system and version
Your web browser, version and device
We may also collect information about you using cookies. For more information on our Cookies Policy, please click here.
THE LEGAL BASES FOR USING YOUR PERSONAL INFORMATION
Performance of a Contract
We will use your data to fulfil your service requests and our contractual obligations to you. For example, we will collect your name and address details and pass them on to our couriers so they can deliver your products.
With your Consent
For example, when you actively sign up to receive our newsletter by email or request our deals or other offers to come by post. Where we process your personal information on the basis of your consent, you can withdraw that consent at any time.
We will always balance our legitimate interests against your rights, freedom and interests as an individual. We will only exercise our legitimate interests when this does not materially impact on your rights, freedoms and interests. Where we process your data based on our legitimate interests, you have the right to object at any time.
For example, we may use your contact details to send you direct marketing about similar products and offers which may interest you or use your purchase history to send you personalised and relevant offers. You can unsubscribe from these communications at any time.
We may need to collect, process and in some specific situations share your data in order to comply with our legal obligations and regulatory requirements for example in relation to HMRC regulatory requirements or sharing information with Crime Prevention Agencies to prevent fraud.
WHEN DO WE COLLECT YOUR DATA?
When you access our website
When you create an online account
When you request to use our services on the website or on other marketplaces
When you contact us via telephone, email, live chat, post or on social channels
When you actively sign up to receive our newsletter
When you actively sign up to a social promotion
HOW AND WHY WE USE YOUR PERSONAL DATA
To Deliver Our Service
We will use your name and address and contact details and share these with our drivers to deliver your order.
We will use your email address to send you service emails such as your order confirmation and other updates.
We will store your orders history to help us assist you should you need any help with an ongoing or new order, including dates, addresses and contact details.
We will store details of any communications you have with us via email, Live Chat, post, social platforms or telephone to enable us to deliver the best possible service and to assist you with any orders, problems or complaints.
For Direct Marketing
From time to time we will send our existing customers details of similar products and offers by email and/or post on the basis of our legitimate interest and in accordance with the requirements of Privacy and Electronic Communications Regulations. You can opt out of receiving marketing messages from us when you give us your personal information and thereafter at any time. To unsubscribe, email us at email@example.com.
When you actively sign up and consent to receive our newsletter via our sign up page on the website, we will use your personal information to send you our latest new products, services, news and offers by email. You can withdraw your consent and opt out of receiving our newsletter at any time here.
When you actively request to receive our offers by post we will collect and store your name and address to despatch these to you.
To Improve Your Experience
Information We Collect When You Access the Site
When you access the website we will automatically collect and analyse certain information to optimise your site experience, including your IP address, language and currency preference, operating system and browser version and device.
Feefo Review Platform
We will contact you after we have delivered you with the order, to request your feedback on your overall experience with us. Your feedback will not be published without your explicit consent and you are not under any obligation to provide any feedback.
SHARING YOUR DATA WITH THIRD PARTIES
WE DO NOT AND WILL NOT SELL YOUR DATA TO THIRD PARTIES.
Where necessary we will share your data with trusted service providers who will process your data on our behalf. For example, we will share your data with our couriers to deliver your packing materials if you ordered any, to our payment providers who will process your payment and screen the transaction for fraud, to our email provider to send emails or with other professional contractors and service providers necessary to run our business.
We work closely with our suppliers and product/service providers to ensure your data is protected and secured according to the high standards required by data protection legislation and the guiding principles of this privacy statement. Our product/service providers:
May only process your data strictly for the exact purpose specified by us.
Will only receive the minimum personal information required to perform that function.
Must secure your data in accordance with data protection legislative requirements.
Must delete or anonymise all data should we cease to use their service, subject to regulatory requirements.
Are subject to the same standards contained in this privacy statement.
HOW WE PROTECT YOUR DATA
The security of your data is of the utmost important to us and we take the protection of your personal information seriously.
We use physical, electronic and procedural safeguards to secure your data when stored and transmitted. These include modern data encryption, firewalls alongside other security devices - as well as strict internal security procedures to protect your personal information. We may at times ask you to verify your identity as part of our security procedure.
Where you have request a service or product from Furniture Checklist, it is important to protect against unauthorised access to it by keeping your password safe and logging off when you complete your session.
WHERE YOUR DATA MAY BE STORED AND PROCESSED
Sometimes we may need to store or transfer your data to third party suppliers in countries outside of the European Economic Area. Where we do so, we take great care in ensuring your personal information is protected and secured to the same high standards and with the same safeguards as though it was being stored or processed inside the EEA, for example by using standard contractual clauses approved by the European Commission. For example if you need us to move you outside EEA, we might share your contact details with couriers to deliver your packing products if you ordered any.
HOW LONG DO WE KEEP YOUR DATA?
We will store your personal data for as long as you have an account with us or as long as it is necessary to provide our products / services, resolve disputes, comply with regulatory requirements and otherwise necessary to allow us to conduct our business. If you have a question about specific retention periods for certain types of personal information, please email us at firstname.lastname@example.org
YOUR RIGHTS RELATING TO YOUR DATA
It’s important to us that when it comes to your data that you understand and can control how we use your personal information. You have and may exercise the following rights in relation to how we use your data.
The right to know how your data is used by us - as set out in this privacy statement.
The right to access your data. You have the right to request of a copy of the data we hold about you. You can do so by emailing us at email@example.com. We will respond to a request to access your data within 28 days.
The right for the data that we hold about you to be accurate and up to date – and the right to rectify any information we hold about you that is incorrect. You can update your personal information via your online account or by contacting our customer service team at firstname.lastname@example.org
In some circumstances you can ask us to erase, block or restrict the personal information we hold about you or object to ways in which we are using your personal information. Further, where we are using your personal information on the basis of your consent, you may withdraw that consent at any time. Where we use your personal information based on our legitimate interest, you have the right to object at any time. For help and more information, please contact email@example.com
The right to lodge a complaint with your Data Protection Regulator. In the UK, this is the Information Commissioner’s Office http://www.ico.org.uk/concerns
PRIVACY OF CHILDREN ON OUR WEBSITE
Our website is not intended for use by children under the age of 18. We will not knowingly collect any data from any person below the age of 18.
CHANGES TO OUR PRIVACY STATEMENT
We may modify or update this statement from time to time to ensure compliance with new data protection legislation and where necessary to reflect changes in policy or customer feedback. Where there are important changes to this policy we will notify you via a notice on our website. We recommend that you review this statement regularly to learn more about how we are using your information.
Furniture Checklist is the Data Controller when you access our website and use our service. If you:
Have any questions or concerns about how we use your data.
Would like to exercise your rights as set out above.
Please contact us at firstname.lastname@example.org or write to us at Furniture Checklist, 71-75 Shelton St, London, WC2H 9JQ.
SECTION 1 - WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.
SECTION 2 - CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at email@example.com or mailing us at:
71-75 Shelton Street London GB WC2H 9JQ
SECTION 3 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 4 - SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
SECTION 5 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Our store uses Google Analytics to help us learn about who visits our site and what pages are being looked at
SECTION 6 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 7 - COOKIES
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
PREF, persistent for a very short period, Set by Google and tracks who visits the store and from where
SECTION 8 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at firstname.lastname@example.org or by mail at
[Re: Privacy Compliance Officer]
71-75 Shelton Street London GB WC2H 9JQ