Privacy & Cookies Policy
Last updated 13th January 2019.
1. The information we collect, how we use it, and the legal basis for processing
If you previously used the Incredible Nutshell online shop we will have collected various personal information from you as you use this site, and may have used it for the following purposes:
To carry out our contract with you.
1.1. At registration we collect personal details sufficient to enable us to process any orders you may place, including your email address, phone number, and postal delivery address. This data is stored electronically so we can recognise you as a registered customer, and to automate some of the data entry in the checkout process to make your shopping experience a better one. All such data has now been deleted with the exception of that detailed at 1.5 below, if you have a query about a past order we will do our best to assist from our paper records.
When we believe it is in your legitimate interests
1.2. We may use the contact details you supplied to contact you if we become aware of any potential safety issue with a product you have bought.
When we believe it is in our legitimate interests
1.3. Email correspondence with you will be stored for reference. We do this to monitor the service that we provide to you and to resolve any customer complaints.
1.4. Telephone calls with you may be recorded by voice or transcript. We do this for monitoring the service that we give to you and any customer complaints.
Where we have a legal obligation to do so
1.5. We store your name and summary information on what you have bought in electronic form, and we keep the paper copy of your delivery notes, as part of the business records we are required to keep by law.
2. Who we share your personal information with.
2.1. Your payment information is sent directly from you to our payment service provider, Stripe - we do not have access to your full payment card details.
2.2. Your contact details, delivery addresses and shopping history will have been shared with our Internet store provider, Trana Ltd.
2.3. We may share information with credit reference agencies and fraud prevention schemes.
2.4. We may share information with debt collection agencies.
2.5. We may need to share the accounting information described under 1.5 above with HM Revenue and Customs.
In the event that we do share information with external third parties, we only share such information as is required for the purposes and take reasonable steps to ensure recipients shall only process the disclosed personal information in accordance with those purposes.
We will never disclose your information to any third party for marketing purposes.
3. How long we keep your personal information
3.1. Profile information for registered customers has been deleted.
3.2. For data that we have a legal obligation to retain, we will keep it for as long as we are required to do so, which is typically seven years.
3.3. If you have opted in to marketing communications, we will keep your details until you tell us you no longer wish to receive such messages from us in future, and we may need to keep a record of opted-out addresses in order to verify that we are not communicating with anyone who has opted out.
4. Your rights
4.1. You have the right to access the information that we hold about you. To obtain a copy of any personal data we hold, or to receive your data in a structured form that can be transferred to another data controller, please contact us by email or post.
4.2. You have the right to request that we correct any information we hold which is inaccurate. In most cases the only data we now retain is the accounting information we are required to retain about your completed orders, but if you are unsure you can contact us for assistance.
4.3. You have the right to ask us to erase any personal data that we hold about you, with the exception of data we are legally obliged to retain, or which we need to retain to be able to make or defend a legal claim. If you would like us to do this, please contact us by email or post, however note that in most cases all the data we still hold about customers since the closure of the online shop will fall under one of the above exclusions.
4.4. You have the right to object to our processing of your personal data. We are no longer "processing" data about any customers, we only hold the records we are required to retain to satisfy HMRC.
4.5. You have the right to opt out of marketing communications, but we no longer intend to use any data from our online shop for marketing purposes.
Our contact details can be found on the "where to find us" page of the main shop website.
5. Automated decision making
5.1. We do not perform any automated decision making or profiling based on the data you provide.
5.2. Our payment provider may perform automated fraud checks when deciding whether to accept a particular payment.
6. International transfers of data
6.1. The processing of your payments by our payment service provider may involve the transfer of your payment information outside the EU. The provider, Stripe, is certified under the EU-US "privacy shield framework", details are available in their own policy.
7. If you are not satisfied
7.1. If you have a complaint about the way we have handled your personal data and you have not been able to resolve it directly with us, you have the right to raise your complaint with the Information Commissioner's Office at http://www.ico.org.uk
To use our website you will need to have cookies enabled on your web browser. We do not use or create cookies that can be used by themselves to identify you.
A cookie is a text-only string of information that a website transfers to the cookie file of the browser on your computer's hard disk so that the website can remember who you are. A cookie will typically contain the name of the domain from which the cookie has come, the "lifetime" of the cookie, and a value.
The two types of cookies used on this website are:
- Session Cookies - temporary cookies that remain in the cookie file of your browser until you leave the site.
- Persistent cookies - remain in the cookie file of your browser for much longer (though how long will depend on the lifetime of the specific cookie).
Session cookies are used:
- To allow you to carry information across pages of our website and avoid having to re-enter information.
- To allow you to maintain a shopping basket
Persistent cookies are used:
- To remember who you are so you do not have to login on a return visit.
- To allow you to maintain a shopping basket if you are not logged in as a registered user.
- By Google Analytics, a third party service provider. We use Google Analytics to collect information about how visitors use our website. The cookies they set do not collect information that identifies the visitor. All information collected is aggregated and therefore anonymous. We use this information to improve our website and your shopping experience.
You can find out more about cookies by visiting http://en.wikipedia.org/wiki/HTTP_cookie.