We understand that how businesses like us collect, use and store your personal data is or utmost importance. To this degree, this policy sets out how we collect data, what we do with the information we collect and why; and what we do to keep it secure as well as your rights over any personal information we hold about you and what we do, to protect your personal privacy.
- Who are we?
When we say ‘we’ or ‘us’ or ‘our’ in this policy, we are referring to Paint the Town Green. See company details below. We control the ways your personal data is collected and the purposes for which your personal data are used by Paint the Town Green and are the ‘data controller’ to meet the UK Data Protection Act 1998 and EU General Data Protection Regulation (GDPR).
- Information we collect from you
We collect information directly (i.e. your name) and indirectly (i.e. information about your use of our products and services) from you when:
You enquire, seek advice and/or purchase and complete a transaction for one of our products and or services either through our website or by email, phone or in person;
or when you provide information directly with us either to verify your credit card, place an order, arrange for a delivery or return a purchase;
or when you reply to our requests for feedback or choose to participate in any one of our offers and/or competitions*, subscribe to an event or register your interest with us at an event we are present at or request to receive marketing communications from us in order that you may continue to be informed, inspired and given continued opportunity to engage with our products offering and services. Without your explicit consent, we will not process your data for this purpose, as from the 25th May 2018.
The following are examples of information we may collect directly and indirectly from you:
- First Name
- Email Address
- Username and Password
- Postal Address
- Information relating to your purchase or how you use our website
- Date of Birth
- Payment information and bank account details
- Future communication preferences
- How we met you i.e. (an event, Instagram)
*Competitions that are solely run by Paint the Town Green only. Any third party involved competition would not apply.
There may be third parties involved in the collection of the above data for the purposes of fulfilling your order i.e. payment providers, who will fulfil their data protection obligations in accordance.
NB: By using our website, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
3) What do we do with your information?
We use the information we collect to provide you with products, offers, news and services and to deliver sales offers or other content tailored to your interests. Below is a list of examples of how we may use the information we collect:
- Answer your questions or respond to your request and/or queries
- Develop new products and services
- Create and manage your account
- Process payment for purchases
- Subscribe you to our email newsletter programme – ONLY if this was made clear to you and your express permission was granted when submitting any form to email process
- Send emails with personalised information about us which we think may be of interest to you with regards the store, new products and other updates – with your expression consent only
- Allow you to participate in social sharing on our websites
- When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address
- When you attend an event that we are are hosting or co-hosting, we may collect the personal information you give us such as your name, address and email address
- When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
4) Keeping you informed about our products and services
From time to time, we would like to tell you about products and services, events and ideas from Paint the Town Green that may be of interest to you. Where you have consented to us doing so, we may do this via any one of the following means: mail, email, sms, online, social media, push notifications via apps or by any other electronic means.
We may however still need to send you service-related messages in accordance with the Terms and Conditions of business that may be administrative or operational. For example, to send you confirmation of your purchases and payments, to inform you about any appointments or to notify you of any disruption and changes to deliveries or to update you of changes to our terms of business. These communications have no marketing purposes and you will receive them even if you have opted out from receiving marketing communications. We may also use your personal information if we have need to contact you after you have sent a request, filled in a form on our website or contacted us on social media.
As well, we may send you a communication seeking your feedback. This is in order that we best placed to manage our relationship with you the customer and to improve our services.
We also process personal data in the course of maintaining and administering our internal records to maintain our records and improve data accuracy.
If you leave our website before the completion of a purchase, we may contact you in order to help you fulfil your purchase.
No matter what you decide now, if you would like to change your marketing preferences, please either do so through you online account or contact us to let us know (see details below).
5) Information sharing
We have always considered ourselves a trustworthy company. We will not pass on your details onto any third parties, or marketers outside of the company. We will share the personal data we collect only within Paint the Town Green.
5.1) Third-party services
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
Certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. We expect our respective third parties to have appropriate technical and organisational measures in place to protect your personal data. It is only in situations where we may be obliged by law to disclose your personal data to a third party i.e. the police and have limited control over how it is protected.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
6) Our website
The website and its owners take steps to ensure the privacy of its users throughout their visiting experience. The website complies to all UK national laws and requirements for user privacy.
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
Cookies are small files saved to the user’s computers hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website.
Some cookies are essential for us to be able to provide you with a service you have requested (i.e. to be enabled to log in to your account). Some cookies are to help us gather information to better understand how users are engaging with our site. This cookie does not distinguish users. Tracking is anonymous. Some cookies are so that we can improve your experience of using our site i.e. remembering your preferences. Some cookies are via third parties i.e. social sharing to allow you to share content. For full clarification on these cookies, you need to read the privacy policies for each platform or you can disable them.
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors.
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
_cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
_storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
6.3) Google Analytics
6.3) External Links
Although this website only looks to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned anywhere in the website.
7) How do I get my name removed from Paint the Town Green mailing list?
Each mailing list we send, will contain details of how you can unsubscribe. If after you opt- in and you change your mind, you may withdraw your consent for us to contact you , for the continued collection, use or disclosure of information at anytime.
You can contact us directly at Paint the Town Green by sending us an email to email@example.com with the word REMOVE in the subject line and the email address that you wish to be removed in the email. Or you can write to us – please see details below Please note that it may take up to 28 days to complete your request.
8) Social Media Platforms
Your social media account ID is shared when you interact with us on social media. Communication, engagement and actions taken through external social media platforms that this website and its owner participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website or its owners may ask for personal details through social media platforms if relevant to an enquiry/comment. Any such requests will be done only via direct messaging channel and will only be stored with the user’s permission. This website and its owners encourage users wishing to discuss any sensitive details to not use social channels but to contact them through primary communication channels such as by telephone or email.
This website may use social sharing buttons which help share web content directly from web pages to social media platforms in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and sae your request to share a web page respectively through your social media platform account.
8.1) Shortened links in social media
This website and its owners through their social media platform accounts may share web links to relevant web pages. By default some social media platforms shorten lengthy urls (web addresses). Twitter for example, due to its limited character count, shortens all urls however long they are to 23 characters which is reflected in its overall character count. Users are advised to take caution and good judgement before clicking on any shortened urls published on social media platforms by this website and its owners. Despite best efforts to ensure only genuine urls are published some social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.
9) Access and correction of your personal information
You have the right to access the personal information that we hold about you (as defined in the EU General Protection Data Regulation 2018) upon receipt of a written request. Before providing personal information to you or another person on your behalf. We will ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information. You have the right to correct your personal information that we hold about you should it be inaccurate or out of date.
10) Right to stop or limit our processing of your data
If you feel that we are not entitled to use it anymore, you have the right to object to us processing your personal information, the right to have your information deleted if the duration for which we hold it is deemed too long or have its processing restricted to certain circumstances. To exercise this right, please contact us directly. See details below.
If any at point you feel that we have processed personal data and are in violation of applicable law, please contact us using the details set out below. If you feel that we have done so and have failed to remedy this violation to your reasonable satisfaction, you have the right to lodge a company with a supervisory authority.
12) How long do we keep your information for?
We will retain a record of your personal information in order that we are able to provide a high quality and consistent service. We will never retain your information for longer than is necessary and will always do so in accordance with law and regulation.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
14) How to contact us
By email: firstname.lastname@example.org
By post: 39a&b Allfarthing Lane, SW18 2AP
By phone: 020 8871 0531
Paint the Town Green Ltd
Company no. 06455258