Privacy Policy – School Wellbeing Cards Limited

Hello there!

Thank you for checking out our privacy policy.  At School Wellbeing Cards Limited we take your privacy seriously.  We’re committed to protecting your privacy and handling your information in a responsible way while you use our website, purchase our goods or use our services.

We encourage you to read this policy alongside any other privacy notices we might provide, so you're fully in the loop about how and why we use your information.

SECTION 1 – WHO IS IN CHARGE OF YOUR DATA

The controller of your data is School Wellbeing Cards Limited and we can be contacted on:

Email address:  schoolwellbeingcards@outlook.com

Address: Station View House, 41 Brunswick Road, Shoreham-By-Sea, West Sussex, BN43 5WA

SECTION 2 – WHAT TYPE OF DATA DO WE COLLECT ABOUT YOU?

‘Personal data' is information that identifies you. If we've removed your identity (by making the data anonymous), it won’t be classed as personal data. We might collect, use, store, and share various types of personal data about you as follows:

• Identity details such as first and last name and your title;
• Contact details such as your billing address and delivery address and email address;
• Technical information such as your internet protocol (IP address), your login data, browser type, version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access our website;
• Marketing information such as your preferences on receiving marketing from both us and third-parties, along with your communication preferences;
• Financial information such as your bank account and payment card details;
• Usage information about how you use our website, products and services;
• Account details such as your username, password, purchases or orders made by you; and
• Information about transactions like details about payments to and from you, and other details of products and services you have purchased from us.

Aggregated Data:  We may also use the above information, without any of your identifiable details, to produce aggregated data. An example incudes statistical or demographic data, that can help us understand our client needs better.  If we combine this data with your personal data at any point so you do become identifiable, we treat this as personal data and use this in accordance with this policy.
Special Category Data:  We do not collect any special category data about you, such as health data, information about your race, religious beliefs, sex life or sexual orientation, political opinions or trade union memberships, criminal convictions/offences, and your genetic and biometric data.

‍
SECTION 3 - WHAT DO WE DO WITH YOUR INFORMATION?When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address. When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system. Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.We rely on one or more of the following lawful conditions to process your data as outlined above:

• To fulfil our contract with you;
• For our legitimate interests; or
• To comply with legal obligations.

In some scenarios, we’ll ask for your consent, especially for collecting sensitive data. In most circumstances, generally, we do not obtain your consent for processing your personal data.  If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no. If we send you marketing communications and you no longer wish to receive them, you can opt out anytime by following the steps below.
We may process your personal data for more than one lawful reason at a time, depending on the specific purpose for which we are using your data.  If you’d like more information on the specific legal ground we are relying on, on occasions where we rely on more than one legal ground, please feel free to contact us.

‍
How do I withdraw my consent? If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at schoolwellbeingcards@outlook.com or mailing us at: Station View House, 41 Brunswick Road, Shoreham-By-Sea, West Sussex, BN43 5WA

‍SECTION 4 - DISCLOSUREWe take your data's security seriously and only allow certain people to access it.
We may share your personal data with the parties set out below for the purposes as stated further above.

• Service providers, acting as processors who provide IT and system administration services, such as Shopify and InPrint and their fulfilment and distribution providers.
• Professional advisers, acting as processors or joint controllers, including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
• HM Revenue & Customs, regulators and other authorities, acting as processors or joint controllers, based who require reporting of processing activities in certain circumstances.

All of the above third parties have a requirement to respect the security of your personal data. We do not permit them to use your personal data for their own purposes – they are only permitted to process your data for specified purposes in line with our instructions. We may disclose your personal information if we are required by law to do so.

‍SECTION 5 – INTERNATIONAL TRANSFERS

‍We may transfer your data outside of the United Kingdom/EEA, but only when we can be sure it is protected.
Many of our external third parties are based outside the United Kingdom/EEA and so their processing of your personal data will involve a transfer of data outside the United Kingdom.
Whenever we transfer your personal data out of the United Kingdom, we make sure it is protected by at least implementing one of the following safeguards:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the United Kingdom
• Where we use certain service providers, we may use specific contracts approved by the UK Information Commissioner’s Office and the European Commission which give personal data the same protection it has in Europe.

Please contact us if you want further information on the specific process used by us when transferring your personal data out of the United Kingdom.

‍
SECTION 6 - SHOPIFY

‍Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

‍Payment: If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).

‍SECTION 7 - THIRD-PARTY SERVICES AND LINKS

‍In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So, if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located. As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act. Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service. Links - When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

‍SECTION 8 - SECURITY

‍To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL). Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

‍SECTION 9 – DATA RETENTION

‍We only keep your data as long as necessary for the reasons we collected it.
By law we have to keep basic information about our customers (including contact information, identity details, financial information and data relating to your transactions with us) for six years after they cease being customers for tax purposes.
For information that does not fall under the definition of basic, to determine the appropriate retention time, we look at what kind of data it is, how sensitive it is, the risks if it's misused, why we need it, and if there are other ways to achieve the same goals. We also consider applicable legal, regulatory, tax, accounting and other requirements.

‍
SECTION 10 – COOKIES

‍Cookies help make our website work better for you, remembering your preferences and improving your experience. You can control cookie settings in your browser.  Cookies make your browsing experience on our site as smooth as possible, because they remember your preferences.
Our website uses cookies to distinguish you from other users of our website. Please refer to our Cookie Policy here to learn more:

‍
SECTION 11 - AGE OF CONSENTBy using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

‍SECTION 12 – LEGAL RIGHTS

‍You have the following rights regarding your personal data:
Access: You can request a copy of the personal data we hold about you. This is known as a "data subject access request."
Correction: If the personal data we have about you is incomplete or incorrect, you can ask us to correct it.
Erasure:  You can ask us to delete your personal data. It's important to note, however, that there might be legal reasons that prevent us from fulfilling this request. If such reasons exist, we will inform you when you make your request.
Objection: In certain situations, you have the right to object to the processing of your personal data.
Restriction of Processing: You can request that we restrict the processing of your personal data under specific circumstances.
Data Portability: You have the right to request the transfer of your personal data directly to you or to a third party of your choice.
Withdrawal of Consent: At any point where we rely on your consent to process your personal data, you have the right to withdraw this consent. Withdrawal of consent will not affect the legality of the processing done before the consent was withdrawn. Should you withdraw your consent, we might be unable to provide you with certain products or services. We will inform you if that is the case when you withdraw your consent.
If you wish to exercise any of the rights set out above, please contact us.
We won’t charge any fees for you to request access to your personal data. However, a reasonable fee may be charged if your request is clearly unjustified, repetitive or excessive. We also reserve the right to not comply in this scenario.    We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

SECTION 13 - CHANGES TO THIS PRIVACY POLICYWe reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

‍SECTION 14 - COMPLAINTSIf there’s something you’re not happy with, let’s chat and try to fix it. You've also got the right to talk to the Information Commissioner's Office (ICO) at (www.ico.gov.org.uk), but we hope to resolve any issues directly. Please contact us on the details below to discuss your complaint.
SECTION 15 - QUESTIONS AND CONTACT INFORMATIONIf you would like to exercise your rights detailed in section 12, or simply would like more information about our privacy practices, contact our Privacy Compliance Officer, Jerricah Holder, at schoolwellbeingcards@outlook.com or by mail at Station View House, 41 Brunswick Road, Shoreham-By-Sea, West Sussex, BN43 5WA
Thank you for reading our Privacy Policy.