- Online Security Tips
- How and Why We Use Your Data
- Types of Data We Collect
- Your Privacy Choices
- Your Privacy Rights
- Data Security
- Data Storage
- Our Third Party Data Processors
- Third Party Data Processors List
- Our Fulfilment Partner
Online Security Tips
We take your data seriously, and we're sure that you do too, but here are some tips that you can employ to enhance your personal data security.
- Enable private browsing within your web browser. This allows you to browse the internet without leaving behind a trail of history, passwords, cookies, and other assorted bits of data.
- Look for the padlock icon and the https:// element at the start of the URL when browsing and shopping online. This indicates that the website is secure and takes measures to encrypt your personal data.
- Don’t click links carelessly and be aware of revealing personal information to claim ‘free’ offers or to enter quizzes.
- Turn on automatic updates to keep any software up to date with the latest security patches.
- Use a firewall and other security measures such as anti-virus protection across all of your devices.
- Be creative and use complex passwords and change them immediately if you suspect your security has been compromised.
- Make yourself aware of the latest online scams.
- Use a secure web browser such as Google Chrome, Mozilla Firefox or Microsoft Edge.
- Consider turning off features such as ‘autofill’ for forms and web pages. An alternative is to use a secure password management tools are available.
- Turn off ‘cookies’ to improve privacy but be aware that this can have a dramatic impact on the quality and functionality of many websites.
- Use a VPN or Virtual Private Network to encrypt your connection to the internet as well as masking your location. This can have a big impact on your ability to use some websites such as online banking.
- Do not use unsecured WI-FI networks which are commonly found in hotels, airports and restaurants.
- Only download software from trusted sources.
- Turn on two-step authentication whenever possible, websites like Google and Facebook now offer this safety net for your accounts with them.
How and Why We Use Your Data
Data protection laws mean that we can only use your data for certain reasons and where we have a legal basis; either by consent, contract or legitimate interest to do so. Here’s how and why we use your data:
To Process Your Orders
So that we can send you confirmation of your order and any tracking details
To help solve any issues you may have via our live chat support, telephone or email.
With your consent we send emails about new products and offers that may be of interest to you.
Improving Your Shopping Experience
To make your visit to Teddybearland more personal and relevant to you we collect and analyse data, sometimes using third-party applications.
We Do Not Sell Data
We respect your privacy and the trust you have placed in us as guardians of your personal data. We do not, and will never; sell, rent, lease or give away your data or personal information to any third party except where you have given us permission to do so or if the law requires it.
What Does Each Of Those Legal Basis' Mean?
Definition:You have given clear consent for Teddybearland to process your personal data for a specific purpose.
How Do You Get My Consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to say no.
How Do I Withdraw My Consent?
If you have previously given consent forTeddybearland to process your data but have now changed your mind, you can withdraw this consent at any time by emailing email@example.com or by writing to us at the following address; Unit 1 Plum Lane, Dunwear, Bridgwater, UK, TA6 5HL.
Please note: If you withdraw your consent, and if we do not have another legal basis for processing your information, then we will stop processing your personal data. If we do have another legal basis for processing your information, then we may continue to do so subject to your legal rights.
Definition: Processing your data is necessary for a contract you have with us, or because we have asked you to take specific steps before entering into that contract.
Definition: Processing your data is necessary for the legitimate interests of Teddybearland or a third party, these are taken to be:
- - Enhancing data security.
- - Delivering, developing and improving the service offered by Teddybearland.
- - Enabling us to enhance, customise or modify the service offered by Teddybearland.
- - Gaining insights from your behaviour on your journey to, from and around our website.
- - Determining whether marketing campaigns are effective.
Types of Data We Collect
Sometimes you provide us with data, sometimes data about you is collected automatically but there are also elements of personal data that we do not collect.
Data We Collect
Data That Identifies You
Your IP address, browser type and version, time zone, geolocation to identify where you’re located, device type.
Data On How You Use The Teddybearland Website(s)
How you navigate to the Teddybearland website(s) and the URL paths you follow when you are on the website, which pages you viewed and how long you stay on those pages along with other website performance statistics, conversion data.
Time and date of purchase, products purchased, order value.
Data You Give Us
Your name, delivery address, telephone number and email address.
Your credit / debit card details, PayPal or Amazon payment details and billing address. We are fully PCI compliant and as such, none of this data is stored by us and any data transfer to third-party payment processors is fully encrypted.
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
Data We Do Not Collect
Sensitive Personal Information
We do not collect sensitive personal data like racial or ethnic origin, political opinions, religious beliefs, health data etc. Nor do we use profiling tools to collect such information.
Whilst we acknowledge that children can access the Teddybearland website we do not actively market our products to children or knowingly collect personal information from children. If you have any concerns regarding this then please email firstname.lastname@example.org
Your Privacy Choices
We’ve detailed ways in which you can choose not to share your personal data with us but please be aware that employing these methods may have a negative impact on your browsing and shopping experience on the Teddybearland website(s) and may also affect your ability to make a purchase.
To Not Provide Us With Any Personal Data
Please be aware that this option means that we will not be able to process any transactions but you will still be able to browse the Teddybearland website(s).
To Turn Off Cookies
You can change the settings in your web browser to turn off / block cookies. You can also delete any cookies that are currently stored via your browser settings.
To Request That Your Data Is Not Used For Marketing Purposes
Before we use your data for marketing purposes you will be asked to provide consent by the means of actively ticking an ‘opt in’ box. You can choose to opt out of marketing communications by clicking the ‘unsubscribe’ link at the bottom of the emails or by emailing email@example.com. Please provide the email address that you wish to be removed from the Teddybearland mailing list.
Your Privacy Rights
You can exercise your rights at any time by sending us an email to firstname.lastname@example.org
You Have The Right To: Access information we hold about you.
- The categories of data we process
- The purposes of the data we process
- The categories of third parties to whom data may be disclosed
- How long the data will be stored and the criteria used to determine that period
We will provide a response to any information requests within one month of the requests being made.
You Have The Right To: Make us correct any inaccurate personal data about you.
Please email email@example.com with full details of the inaccurate data and details of any corrections that you wish to make.
You Have The Right To: Port your data to another service.
On receipt of this request we will provide a copy of your data in a CSV format which you can then provide to another service.
You Have The Right To: Be ‘forgotten by Teddybearland.
You can ask us to erase any personal data we hold about you as long as it is no longer a legal requirement or necessary for us to hold the data for the purposes of your use of the Teddybearland website(s).
You Have The Right To: Lodge a complaint regarding our use of your data.
We are always happy to immediately address any concerns regarding the use of personal data but if we fail at this then you can contact the Information Commissioner’s Office using the details on their website www.ico.org.uk.
You Have The Right To: Object to us using your data to make automated decisions.
We may use data to provide you with a more personal experience and more relevant information when browsing the Teddybearland website(s) or in our marketing communications.
How Secure Is The Data We Collect?
Despite all of the precautions we take and the safeguards we have in place, be they physical, electronic or managerial, any data that you provide is at your own risk. Unfortunately, no data transmission can be guaranteed to be 100% safe.
You are responsible for your username and password, you should make every effort to keep them safe and never disclose them to anyone else.
If you believe your privacy has been compromised, please contact us at firstname.lastname@example.org
Where Is Your Data Stored?
For How Long Is Your Data Stored?
We will hold data for as long as it is legally required or necessary for us to hold the data for the purposes of your use of the Teddybearland website(s).
Our Third Party Data Processors
In the course of you navigating to / around the Teddybearland website(s) and in processing your order we may be required to pass aspects of your data to third parties, all of which are listed below and all of which we have audited to ensure that they are GDPR compliant.
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
If you have any concerns regarding this list or wish to find out more information about how data is processed on our behalf by these third parties then please email email@example.com
A List Of Our Third Party Data Processors
|Marketing / Communication||https://policy.pinterest.com/en-gb/privacy-policy|
|VK||Marketing / Communication||https://vk.com/privacy|
|Youtube||Marketing / Communication||https://policies.google.com/privacy?hl=en-GB#enforcement|
|Marketing / Communication||https://en-gb.facebook.com/business/gdpr|
|Marketing / Communication||https://help.instagram.com/2000935033561463|
Our Fulfilment Partner
Our international sales facilitation and fulfilment partner is Globale U.K. Limited (“Global-e”), a company registered in England and Wales (company registration number 08632376).
Globale address 45 Leather Lane, London EC1N 7TJ, United Kingdom.
Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.