RETAIL PRIVACY POLICY

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.

When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system. You cannot be identified by this information and it is presented to us through Google Analytics to help us to understand browsing habits on this site only.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.

HOW DO YOU GET MY CONSENT?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

HOW DO I WITHDRAW MY CONSENT?

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at hello@carrieelspeth.co.uk or mailing us at:

Carrie Elspeth Ltd

Unit 45 Vale Business park

Llandow

Vale Of Glamorgan

CF71 7PF

Each email we send has the option to unsubscribe from future marketing promotions.

We may disclose your personal information if we are required by law.

Our store is hosted on Wix.com, Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Wix’s data storage and databases. They store your data on a secure server behind an Enterprise Grade firewall.

If you choose a direct payment gateway to complete your purchase, then Shopify temporarily stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

For more insight, you may also want to read Wix’s Terms of Service or Privacy Statement. You can find those here (for terms of use) and here (for privacy)

Carrie Elspeth Ltd do not store or have access to your credit card details. Our site is powered by Wix who are certified Level 1 PCI DSS compliant. More information specifically pertaining to our direct payment gateway, Worldpay, can be found here.

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

We want to be as open and transparent with our users as possible, so below is a list of third party platforms we use with a short explanation of why we use them and their associated Privacy Policies:

Wix - This is the host platform that we use for our Carrie Elspeth retail website (carrieelspeth.co.uk) which means that it is the primary source for transactions made. Shopify is a certified Level 1 PCI DSS compliant platform. Wix’s Privacy Policy

Google Analytics - We use Google Analytics to better understand audience behaviour on our websites and to help us improve the user experience. No personally identifiable data is collected through this service. Google Analytics Privacy Policy The information Google Analytics collects on our behalf is;

• Date and time of your visit;

• type and version of the browser you use;

• operating system;

• your Internet Protocol (IP) address

• the full URL clickstream to, through and from our website (e.g. websites that you have visited and products viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page);

• time zone setting; and

• plug in types and version for system administration.

This anonymous data enables us to further develop and enhance our website. We do not make any attempt to find your identity as a result of your visit to our website. We will not associate any data collected in this way with any personally identifying information from any other source in order to identify you.

Google Adwords - We utilise Google Adwords and other similar Google services for advertising purposes, which includes remarketing through the use of cookies (see Section 7 of this policy for more information on how we use cookies). No personally identifiable data is collected through this service. Visit Google’s Privacy Policy for a full understanding of the data shared by Google to advertisers.

Facebook - We utilise Facebook for advertising purposes, which includes remarketing through the use of cookies (see Section 7 for more information on how we use cookies). No personally identifiable data is collected through this service. Facebook Privacy Policy

Worldpay - The payment gateway that we use to process credit card payments when checking out on carrieelspeth.co.uk. Worldpay has been audited by an independent PCI Qualified Security Assessor (QSA) and is certified as a PCI Level 1 Service Provider. Worldpay privacy policy

PayPal - Used to process PayPal transactions when checking out on carrieelspeth.co.uk. PayPal has achieved PCI DSS compliance certification. PayPal Privacy Policy

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

If you have an account with us, we encourage you to regularly update your password.

What are Cookies?

We’re not talking about the cookie that you eat (unfortunately). Cookies are text files containing small amounts of information which allow our site to recognise your device and are downloaded to your device when you visit a website if you agree to the site doing so. Cookies are then sent back to the website on each subsequent visit, or to another website that recognises that cookie.

Cookies are useful because they allow a website to recognise a user’s device and are widely used in order to either make websites, work more efficiently, let you navigate between pages, remember your preferences, and generally improve your user experience.

Our site uses cookies to distinguish you from other users of carrieelspeth.co.uk. This helps us to provide you with a better experience when you browse our website and make improvements. Some of the cookies we use are "analytical" cookies. They allow us to recognise and count the number of visitors and to see how visitors move around the site when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Cookies do not contain confidential information such as your home address, telephone number or credit card details. We do not exchange cookies with any third party websites.

Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies and download them onto your device when you log on to our site. If you don’t want to allow us to download any cookies onto your device, simply click the link below which will give you information on how to do this;

Change Browser Settings

If you don’t change your browser settings and continue to use our site, we will assume that you consent to us continuing to download cookies onto your device.

Whether or not you allow us to download cookies is up to you, but if you choose to disable cookies by changing your Browser Settings, our Website and its features may not necessarily work in the same way or produce the same personalised experience. If you delete all of your cookies, you will have to update your preferences with us again. If you use a different device, computer profile or browser you will have to tell us your preferences again.

You can find more information about cookies at: www.allaboutcookies.org and www.youronlinechoices.eu

We also use cookies to provide us insight into website traffic through Google Analytics and determine overall performance and effectiveness of marketing campaigns from such platforms as Facebook and Google Adwords. This is used as quantitative data to create a better user experience and at no point do we obtain your personal data from such platforms.

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, contact our Privacy Compliance Officer at hello@carrieelspeth.co.uk or by mail at

Carrie Elspeth Ltd

Unit 45 Vale Business park

Llandow

Vale Of Glamorgan

CF71 7PF