Privacy Policy
Privacy Policy
Article 1 – Personal Information Collected
This Privacy Policy describes how your personal information is collected, used and shared when you visit or make a purchase on winderly.co.uk.
When you make a purchase from our shop, as part of our buying and selling process, we collect the personal information you provide to us, such as your name, your address and your email address.
When you browse our shop, we also automatically receive your computer's Internet Protocol (IP) address, which provides us with information about the browser and operating system you are using.
Email marketing (where applicable): with your permission, we may send you emails regarding our shop, new products and other updates.
Article 2 – Consent
How do you obtain my consent?
When you provide us with your personal information in order to complete a transaction, verify your credit card, place an order, arrange a delivery or process a return, we assume that you consent to our collecting it and using it for that specific purpose only.
If we ask for your personal information for a secondary reason, such as for marketing purposes, we will either ask you directly for your explicit consent or give you the opportunity to decline.
How do I withdraw my consent?
If, having given us your consent, you change your mind and no longer consent to us contacting you, collecting your information or disclosing it, you may notify us by contacting us at contact@winderly.co.uk.
Article 3 – Disclosure
We may disclose your personal information if we are required to do so by law or if you violate our General Terms and Conditions of Sale and Use.
Article 4 – Shopify
Our shop is hosted on Shopify Inc. They provide us with the online e-commerce platform that enables us to sell our services and products to you.
Your data is stored in Shopify's data storage systems and databases, and within the general Shopify application. Your data is held on a secure server protected by a firewall.
Payment:
If you complete your purchase through a direct payment gateway, Shopify will store your credit card information in that instance. This information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Information relating to your purchase transaction is retained for as long as necessary to complete your order. Once your order has been completed, the purchase transaction information is deleted.
All direct payment gateways comply with PCI-DSS standards, as managed by the PCI Security Standards Council, which is the result of a joint initiative by companies such as Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help to ensure the secure handling of credit card information by our shop and its service providers.
Article 5 – Third-Party Services
In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to enable them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect of the information we are required to provide to them in connection with your purchase transactions.
In relation to such providers, we recommend that you read their privacy policies carefully so that you may understand how your personal information will be handled by them.
It should be noted that certain providers may be located or have facilities situated in a jurisdiction different from your own or ours. Accordingly, if you choose to proceed with a transaction that requires the services of a third-party provider, your information may be governed by the laws of the jurisdiction in which that provider is located or in which its facilities are situated.
For example, if you are located in the United Kingdom and your transaction is processed by a payment gateway located in the United States, your information used to complete the transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our shop's website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or the General Terms and Conditions of Sale and Use of our website.
You may leave our website by clicking on certain links present on our site. We accept no responsibility for the privacy practices of those other sites and recommend that you read their privacy policies carefully.
Article 6 – Security
To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not lost, misused, accessed, disclosed, altered or destroyed inappropriately.
If you provide us with your credit card information, it will be encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption. Although no method of transmission over the internet or electronic storage is 100% secure, we comply with all PCI-DSS requirements and implement additional standards generally recognised by the industry.
Cookies
The following is a list of the cookies we use. We have set these out here so that you have the opportunity to choose whether or not you wish to allow them.
_session_id – unique session identifier, allows Shopify to store information relating to your session (referrer, landing page, etc.).
_shopify_visit – no data retained, persists for 30 minutes from your last visit. Used by our website provider's internal statistics tracking system to record the number of visits.
_shopify_uniq – no data retained, expires at midnight (based on the visitor's location) on the following day. Calculates the number of visits to a shop by each unique customer.
cart – unique identifier, persists for 2 weeks, stores information relating to your shopping basket.
_secure_session_id – unique session identifier.
storefront_digest – unique identifier, indefinite duration; if the shop has a password, this is used to determine whether the current visitor has access.
Article 7 – Age of Consent
By using this site, you confirm that you are at least the age of majority in your state or province of residence, and that you have given us your consent to allow any minor dependants in your care to use this website.
Article 8 – Changes to This Privacy Policy
We reserve the right to modify this privacy policy at any time; please therefore review it frequently. Changes and clarifications will take effect immediately upon their publication on the website. If we make changes to the content of this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances we disclose it, where applicable.
If our shop is acquired by or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
GDPR
Customers' personal data (address and order details) will be passed on to the partners responsible for the delivery of products.
In order to offer personalised offers, your personal information will be used anonymously.
To amend, view or delete your data, please send us a request to the following email address: contact@winderly.co.uk.
Questions and Contact Details
If you wish to access, correct, amend or delete any personal information we hold about you, lodge a complaint, or if you simply wish to obtain further information, please contact our privacy compliance officer at contact@winderly.co.uk.