Privacy Notice: Your Data Protection Rights
The type of personal information we collect?
The personal information that we collect from you, the customer, depends on the the context of your interactions with us and the services, products and features you use on our website. We currently collect and process the following information:
Names
Phone Numbers
Email Addresses
Usernames
Passwords
Contact Preferences
Contact or Authentication Data
Billing and Shipping Addresses
Debit/Credit Card Numbers.
We do not process any sensitive information.
We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as your debit/credit card numbers) and the security code associated with said card. All payment data is stored by Stripe and Paypal. You may find the privacy notice links here: https://stripe.com/gb/privacy and https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
All personal information that you provide to us must be true, complete and accurate and you must notify us of any changes to such personal information.
How we get the personal information and why we have it?
In short most of the information you provide us with - such as your IP address and/or your browser or devices characteristics - is collected when you visit our website.
We automatically collect certain information when you visit, use or navigate our website. The information automatically provided does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating systems, language preferences, referring URLS, device names, country, location, information about how and when you use our services and other technical information. Information is primarily needed to maintain the security and operation of our services, and for our internal analytics.
Like many businesses, we also collect information through cookies and similar technologies. Please find our full cookie policy here.
In short we use the information that you have given us in order to provide, improve and administer our services and to help us to further communicate with you, for security and fraud prevention, to comply with law. We may also process your information for other purposes with your consent.
We use all information provided, depending on how you interact with our services including:
To facilitate your account creation and authentication, including managing your account. We may use this information so you can create and log into your account, as well ensure that it stays in working order.
To help deliver and facilitate delivery of services to you the user. We may process your information to provide you with the best possible service.
The respond to any enquiries/offer any support to users. We may process your information here to respond to your enquiries and to help solve your potential issues you may have with our services.
To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies and other similar information.
To fulfil and manage your orders. We may use to information to fulfil and manage your orders, payments, returns, refunds and exchanges made through our website.
To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our services.
To send you marketing and promotional communications. We may use your information you send to us for our marketing purposes, if this is in accordance with your personally set marketing preferences. You can always opt out of our marketing emails at any time.
To identify usage trends. We may process information about how you use our services to better understand how they are being used so we can improve them.
To save or protect an individual’s vital interest. We may process your information when necessary to save or protect you as an individual’s vital interest, such as to prevent harm.
When and with whom do we share your personal information?
In short, we may share information you provide, mentioned throughout the privacy notice with third parties.
We may share information and data you provide with third party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. We of course have contracts in place with our third parties, which are designed to help safeguard and protect your personal information. This means that they cannot do anything with your personal information. They will not share your personal information with any organisation apart from us and they also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The categories of third parties we may share personal information with are as follows:
Ad Networks
Sales & Marketing Tools
Payment Processors
Order Fulfilment Service Providers
Data Storage Service Providers
Data Analytics Services
What legal bases do we rely on to process your personal information?
In short, we only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.
Under the General Data Protection Regulation (GDPR), we are required to explain the valid legal bases we rely on in order to process your personal information The lawful bases we rely on for processing this information are:
Your consent. We may process your information if you have given us permission to do so for a specific purpose. You are able to remove your consent at any time. You can do this by contacting us at (info@jcnbcrafts.com).
We have a contractual obligation. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our services or at your request prior to entering into a contract with you.
We have a legal obligation. We may process your information when we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency or to exercise or defend our legal rights.
We have a vital interest. We may process your information where we believe it is necessary to protect your vital interests of a third party, such as situations involving potential threats to the safety of any person.
We have a legitimate interest. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not go against your interests and fundamental rights. For instance we may process your personal information to send users information about special offers and discounts on our products and services.
How do we store your personal information?
In short, your information is securely stored. We have implemented appropriate and reasonable technical security measures designed to protect the security of any personal information.
We keep your personal information for as long as it is necessary for the purposes set out in this privacy notice. Unless a longer retention period is required or permitted be law (such as for tax, accounting or other legal requirements) we will typically dispose of your personal information no longer than three months past the termination of a user’s account.
When we have no further ongoing legitimate business interests for your personal information, we will either delete or anonymise such information.
Your data protection rights
Under data protection law, you have rights including:
Your right of access. You have the right to ask us for copies of your personal information.
Your right to rectification. You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure. You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing. You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing. You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability. You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at info@jcnbcrafts.com to initiate this process.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us via our contact details.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk