Privacy policy

Voordat ik dit omzet: dit is een juridisch document, en Sectie 8 verwijst specifiek naar de CCPA (California Consumer Privacy Act), een Amerikaanse wet die niet van toepassing is op een Britse webshop. Voor het VK geldt de UK GDPR en de Data Protection Act 2018, met andere rechten en andere termijnen. Ik pas dit hieronder aan naar de UK GDPR-basis, maar ik ben geen jurist: laat dit privacybeleid, zeker Sectie 8, controleren door een solicitor of compliance-specialist voordat je het live zet. Fouten hierin kunnen echte juridische gevolgen hebben.

Privacy Policy

Section 1 – What do we do with your data?
When you purchase something from our store, we collect the personal information you provide, such as your name, address, and email address, as part of the buying and selling process. When you browse our store, we automatically receive your computer's Internet Protocol (IP) address to help us understand your browser and operating system. Email marketing (if applicable): with your explicit consent, we may send you emails about our store, new products, and updates. You may opt out at any time.

Section 2 – Consent
How do I give consent? When you provide personal information to complete a transaction, verify your payment method, place an order, arrange delivery, or return a purchase, you consent to our collecting and using that information for that specific purpose only. If we request your personal information for another purpose, such as marketing, we will ask for your explicit consent or provide you with an opportunity to decline.

How can I withdraw my consent? If you change your mind after opting in, you may withdraw your consent for us to contact you or continue collecting, using, or disclosing your information at any time by contacting us at info@susanandsarah.co.uk.

Section 3 – Disclosure
We may disclose your personal information if required by law or if you violate our Terms of Service.

Section 4 – Shopify
Our store is hosted on Shopify Inc., which provides the online e-commerce platform that enables us to sell our products and services to you. Your data is stored through Shopify's data storage, databases, and general application on secure servers protected by industry-standard safeguards.

Payment: if you choose a direct payment gateway to complete your purchase, your payment data is processed securely in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Transaction data is retained only as long as necessary to complete your purchase and fulfil legal or accounting obligations.

Section 5 – Third-party services
In general, third-party providers used by Susan & Sarah will only collect, use, and disclose your information as necessary to perform the services they provide to us. Certain providers, such as payment gateways and delivery partners, have their own privacy policies. We encourage you to review those policies to understand how your personal information is handled. Some providers may operate in jurisdictions different from yours, meaning your data may be subject to the laws of those jurisdictions. Once you leave our website or are redirected to a third-party site, this Privacy Policy no longer applies.

Links: our website may contain links to external websites. We are not responsible for the privacy practices of such websites and encourage you to review their privacy policies.

Google Analytics: we use Google Analytics to analyse website traffic and user behaviour in order to improve our services and website performance.

Section 6 – Security
We take reasonable technical and organisational precautions to protect your personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. While no method of transmission over the internet is 100% secure, we follow industry best practices to safeguard your data.

Section 7 – Cookies
We use cookies and similar technologies to operate and improve our website, remember preferences, and analyse usage. You can configure your cookie preferences through your browser settings or our cookie banner. Disabling cookies may affect certain website functionalities.

Section 8 – Your privacy rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:

  • Right to be informed: you have the right to know how your personal data is collected and used.
  • Right of access: you may request a copy of the personal data we hold about you.
  • Right to rectification: you may request that we correct inaccurate or incomplete data.
  • Right to erasure: you may request that we delete your personal data, subject to legal obligations.
  • Right to restrict processing: you may ask us to limit how we use your data in certain circumstances.
  • Right to data portability: you may request your data in a format that allows you to transfer it to another provider.
  • Right to object: you may object to certain types of processing, including direct marketing.
  • Rights related to automated decision-making: you have rights regarding decisions made about you solely through automated means.

To exercise any of these rights, please contact us at info@susanandsarah.co.uk. We will respond within one month, as required by UK GDPR. If you are unhappy with how we handle your data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Section 9 – Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time. Changes take effect immediately upon posting on this page. If Susan & Sarah is acquired or merged with another company, your information may be transferred to the new entity to continue providing services.

Contact
For any privacy-related questions, please contact us at:
Email: info@susanandsarah.co.uk
Customer Service Hours: Monday – Friday: 9:00am – 5:00pm (UK time)
Saturday & Sunday: 10:00am – 3:00pm (UK time)

Susan & Sarah, BJ Ecommerce