WHEN WE COLLECT INFORMATION ABOUT YOU
The personal data you have provided, we have collected from you, or we have received from a third party includes:
- Name, address (residential and business).
- Contact details, including telephone numbers and email addresses.
- MailChimp sign-up data, including names and email addresses.
- PayPal data, including name, email and shipping address.
- Transaction data, including the details of products purchased and the date of sale.
- Clicks and page visits on our website, including time spent and your country of origin.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes.
HOW WE COLLECT INFORMATION ABOUT YOU
Most of the personal information we hold about you is that which we collect directly from you, for example:
- When you visit our website and are tracked using Squarespace's analytical tools.
- Every time you interact with us or respond to our communications.
WHAT WE USE INFORMATION ABOUT YOU FOR
We may store and use your personal information for the purposes of:
- Using your PayPal payment details to process payments and refunds (as is necessary for the performance of a contract between yourself and us and/or as is necessary for our legitimate interests).
- Communicating with you about our products, including responding to your enquiries (as is necessary for the performance of a contract between yourself and us and/or as is necessary for our legitimate interests);
- Analysing your use of our website.
- Contacting you via MailChimp with our weekly mailer and event-related marketing materials, as well as occasional marketing materials regarding products and services.
Our "legitimate interests" as referred to above (and below) include our legitimate business purposes and commercial interests in operating our business in a customer-focused, efficient and sustainable manner, in accordance with all applicable legal and regulatory requirements.
WHEN WE USE INFORMATION ABOUT YOU FOR MARKETING PURPOSES
We will send you marketing about new products and services if you have opted in for our MailChimp newsletters.
You can object to receiving marketing emails from us at any time by updating your preferences at MailChimp, or sending us your name and registered email address by email to firstname.lastname@example.org
By giving Gosh Comics LLP permission to contact you we consider that it is within our legitimate interests to send you information about our products and services for marketing purposes.
WHO WE SHARE INFORMATION ABOUT YOU WITH
Where relevant given the nature of the products and services provided to you, we may also share your information with the following categories of third parties:
- Third party service providers who support the operation of our business, such as couriers, hosting providers, IT, marketing service providers, document shredding and destruction companies, bank merchant services and debt collection agencies (as is necessary for the performance of a contract between yourself and us and/or as is necessary for our legitimate interests).
- Regulators and law enforcement agencies, including the police, the Financial Conduct Authority, HM Revenue and Customs or any other relevant authority who may have jurisdiction (as is necessary for compliance with our legal obligations).
HOW LONG WE KEEP INFORMATION ABOUT YOU
We will retain your personal information for a number of purposes, as necessary to allow us to carry out our business. Your information will be kept indefinitely on our main systems while you remain an active customer or owe monies. When you no longer hold an account with Gosh, information may be retained for up to 7 years, after which time it will be archived, deleted or anonymised. These data retention periods are subject to change without further notice, usually because of changes to associated law or regulations. If you have any questions in relation to the retention of your personal data, please contact email@example.com
Under the Data Protection Act 1998 you have the following rights:
- To obtain access to, and copies of, the personal information that we hold about you.
- To require that we cease processing your personal information if the processing is causing you damage or distress.
- To require us not to send you marketing communications.
Once the GDPR comes into force on 25 May 2018, you will also have the following rights:
- To require us to erase your personal information.
- To require us to restrict or object to our data processing activities.
- To receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal information to another data controller.
- To require us to correct the personal information we hold about you if it is incorrect.
Please note that these rights may be limited by data protection legislation, and we may be entitled to refuse requests where exceptions apply.
If you are not satisfied with how we are processing your personal information, you can make a complaint to the Information Commissioner.
You can find out more about your rights under data protection legislation from the Information Commissioner's Office website at www.ico.org.uk