Privacy Policy

Pretty Groovy Designz website is owned by Sophie Walker, owner of Pretty Groovy Designz, who is a Data Controller of your personal data.

Contact information:

If you would like to contact us to understand more about this Policy, you may send an email to hello@prettygroovydesignz.com.

Our store is hosted on Hostinger.com. They provide us with the online e-commerce platform that allows us to sell our products and Services to you. Payments are handled by Stripe. We have adopted this Privacy Policy, which determines how we are processing the information collected on this website, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using Pretty Groovy Designz website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

Personal information we collect, use and why:

When you visit Pretty Groovy Designz, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We also collect or use the following information to:

1. provide services and goods, including delivery:

   • Names and contact details

   • Names and ages for certain personalised products

   • Addresses

   • Payment details (including card or bank information for transfers and direct debits)

2. dealing with queries, complaints or claims:

   • Names and contact details

   • Addresses

   • Payment details

   • Purchase or service history

   • Financial transaction information

3. comply with legal requirements:

   • Name

   • Contact information

   • Financial transaction information

   • Any other personal information required to comply with legal obligations

Lawful bases and data protection rights:

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

· Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.

· Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

· Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.

· Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.

· Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.

· Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.

· Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

• Personalised product such as name, age, colours and styles preferred for items purchased

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

• Address to be able to send replacement product if appropiate. Refund purchase costs for product & postage if a problem is identified. To improve quality of items to customers

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for legal requirements are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

• To only collect the necessary data for receiving payment for items purchased. Address to be able to deliver the item purchased, Transaction information to allow any refunds. Purchase history to inform by email if preferred style of products are in stock or due to be stocked. Preferences like name, colour & preferred themes only as necessary to provide relevant items to be purchased or refunded

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Where we get personal information from:

• We get personal information directly from you.

How long we keep information:

• Order information including items purchased, name, delivery address, any personalisation requests, the costs etc will be kept for a minimum of 7 years in order to comply with tax return records.

Who we share information with:

1. Stripe - This data processor and service provider does the following activities for us: Stores payment transaction data which allows payments to be taken from customers for orders through this website.

2. Hostinger - This service provider does the following activities for us: Stores all website data within this e-commerce store, such as products phot's and descriptions and order management information.

Sharing information outside the UK

As data is shared with Stripe and Hostinger, personal data may be sent outside of the UK.

Hostinger stores all our e-commerce store data, including your orders, securely within its own platform infrastructure. All sensitive information is handled according to Hostinger’s strict security and privacy standards. You can review Hostinger’s security and privacy standards by visiting their official Privacy Policy and Terms of Service on the Hostinger website https://www.hostinger.com/uk/legal/privacy-policy.

Stripe provides the payment functionality on our website, they store your payment /financial transaction details relating to your orders from Pretty Groovy Designz. Stripe, Inc. (“SINC”) is self-certified under the Data Privacy Framework. When Personal Data originating from the EEA, the UK or Switzerland is transferred to SINC, SINC will receive the Personal Data under the Data Privacy Framework and, when processing that personal data, will comply with the data privacy principles and relevant supplemental principles set out in the Data Privacy Framework. Stripe’s Data Privacy Framework Policy is available at https://stripe.com/legal/data-privacy-framework.

For further information, please contact us using the contact information provided above.

Links to other websites:

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Cookies:

The website uses cookies to help personalise your online experience. By accessing Pretty Groovy Designz, you agreed to use the required cookies.

A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you.

We may use cookies to collect, store, and track information for statistical or marketing purposes to operate our website. You have the ability to accept or decline optional Cookies. There are some required Cookies that are necessary for the operation of our website. These cookies do not require your consent as they always work. Please keep in mind that by accepting required Cookies, you also accept third-party Cookies, which might be used via third-party provided services if you use such services on our website, for example, a video display window provided by third parties and integrated into our website.

Legal disclosure:

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, respond to a government request or if we sell or merge this business, we may disclose your information as part of that transaction, only to the extent permitted by law.

How to complain:

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint