Privacy Notice
Introduction
At Great Gadget Store, we respect your privacy and are committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store and protect your personal information when you:
- visit our website
- browse our products
- create an account
- place an order
- make a payment
- contact us
- request a return or refund
- make a warranty claim
- sign up to receive marketing communications
- otherwise interact with our business
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable electronic communications and cookie legislation.
This notice should be read alongside our Terms & Conditions, Shipping & Returns Policy, Warranty Policy and Cookie Policy.
Who We Are
The organisation responsible for your personal information is:
Great Gadget Store
Address:
[BUSINESS ADDRESS]
Email:
[PRIVACY EMAIL]
Telephone:
[TELEPHONE NUMBER]
For data protection purposes, Great Gadget Store is the data controller responsible for personal information collected through our website and in connection with our business activities.
If you have any questions about how we use your personal information, please contact us using the details above.
What Personal Information We Collect
The information we collect depends on how you use our website.
Information You Provide to Us
This may include:
- your name
- billing address
- delivery address
- email address
- telephone number
- account login information
- order information
- information provided when contacting customer services
- information relating to returns and refunds
- information relating to warranty claims
- information contained in messages or correspondence
- any other information you voluntarily provide to us
Order Information
When you purchase a product from us, we may collect and retain:
- your name
- billing address
- delivery address
- email address
- telephone number
- products purchased
- order number
- order date
- price paid
- delivery information
- return information
- refund information
- warranty information
We need this information to process and fulfil your order and to meet our legal and contractual obligations.
Customer Accounts
Our website is operated using the nopCommerce ecommerce platform.
Where you create a customer account, information associated with your account may include:
- your name
- email address
- billing and delivery addresses
- order history
- saved preferences
- account information
- other information you provide through your account
Your account allows you to manage orders and use features provided by our website.
You may request access to, correction of, or deletion of personal information associated with your account, subject to legal and other legitimate reasons why we may need to retain certain information.
Payment Information
We use third-party payment providers to process payments made through our website.
Our payment providers include:
Stripe
Stripe may process payment and transaction information when you select a Stripe payment method.
PayPal
PayPal may process payment and transaction information when you select PayPal as your payment method.
Payment providers may process information such as:
- payment card details
- PayPal account information
- billing information
- transaction information
- payment status
- device information
- fraud-prevention information
- information necessary to authenticate or verify a transaction.
Payment information is processed by the relevant payment provider in accordance with its own privacy and security policies.
We do not ordinarily store your full payment card number or card security code on our own ecommerce systems.
We may, however, retain information about the transaction itself, such as:
- payment method
- transaction reference
- payment status
- amount paid
- date of payment
- information necessary to process refunds or resolve payment disputes
How We Use Your Personal Information
We may use your personal information for the following purposes:
Processing orders
To:
- process your order
- confirm your purchase
- arrange payment
- arrange delivery
- provide order updates
- provide customer support
Customer service
To:
- respond to enquiries
- deal with complaints
- answer questions
- process returns
- process refunds
- handle warranty claims
- communicate with you about products you have purchased
Website operation
To:
- operate our website
- maintain customer accounts
- maintain shopping baskets
- process checkout
- maintain website security
- troubleshoot technical problems
Fraud prevention and security
To:
- detect and prevent fraudulent transactions
- protect our customers and business
- investigate suspicious activity
- prevent misuse of our website
- protect our systems
Legal and regulatory obligations
To:
- maintain appropriate financial and business records
- comply with tax and accounting obligations
- respond to lawful requests from authorities
- comply with applicable laws
- establish, exercise or defend legal claims
Marketing
Where legally permitted, we may use your information to send information about our products, services, offers and promotions.
Where consent is required, we will obtain your consent before sending marketing communications.
Lawful Bases for Processing
We process personal information only where we have a lawful basis to do so.
Depending on the circumstances, our lawful bases may include:
Contract
We process information where it is necessary to enter into or perform a contract with you.
For example, we need your name and delivery address to fulfil an order.
Legal obligation
We may process information where necessary to comply with legal obligations.
For example, we may need to retain financial and transaction records for accounting and tax purposes.
Legitimate interests
We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
- operating and improving our business
- preventing fraud
- protecting our website
- maintaining business records
- dealing with customer enquiries
- managing disputes
- defending legal claims
- improving customer service
Consent
Where consent is required, we will ask you for consent before processing your information for the relevant purpose.
You can withdraw consent at any time.
Withdrawal of consent does not affect processing that took place before consent was withdrawn.
Information We Receive From Payment Providers
Payment providers such as Stripe and PayPal may provide us with information relating to transactions processed through their services.
This may include:
- payment status
- transaction reference
- payment confirmation
- refund information
- limited payment details
- fraud or security information
- information required to resolve payment disputes
We use this information to fulfil orders, process refunds, provide customer support and maintain appropriate business records.
Delivery Information
To deliver your order, we may provide your information to the delivery company responsible for transporting your purchase.
Depending on the service used, this may include:
- your name
- delivery address
- telephone number
- email address
- order reference
- delivery instructions
Our delivery providers may include:
[ROYAL MAIL / DPD / EVRI / DHL / OTHER PROVIDERS]
We will only provide information reasonably required to fulfil the delivery.
Other Service Providers
We may use carefully selected third-party companies to help operate our business.
These may include providers of:
- website hosting
- ecommerce services
- payment processing
- delivery services
- email services
- website security
- technical support
- data backup
- accounting services
- fraud prevention
- professional services
Where a third party processes personal information on our behalf, we take reasonable steps to ensure that appropriate contractual and security arrangements are in place.
Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for our website to function.
For example, essential cookies may be used to:
- maintain your shopping basket
- maintain your login session
- remember checkout information
- maintain website security
- enable essential website functionality
Other cookies may be used for purposes such as:
- analytics
- remembering preferences
- marketing
- advertising
- measuring website performance
Where consent is required, we will ask for your consent before placing non-essential cookies or using similar technologies.
You can manage your cookie preferences through our website's cookie consent mechanism.
Our separate Cookie Policy provides further information about the cookies and similar technologies used on our website.
The ICO's current guidance confirms that strictly necessary technologies, such as those required for an online shopping basket or essential security, can fall within an exception, while non-essential technologies generally require appropriate consent.
nopCommerce
Our online store is built using nopCommerce.
nopCommerce provides the ecommerce software used to operate functions including:
- product browsing
- customer accounts
- shopping baskets
- checkout
- order processing
- customer management
- related ecommerce functionality
Personal information processed through our nopCommerce installation is managed by us as the website operator and data controller.
We configure our nopCommerce installation and associated services to process personal information in accordance with applicable data protection requirements.
Stripe
Stripe provides payment processing services for our website.
When you choose a Stripe payment method, relevant information may be transmitted to Stripe so that the transaction can be processed.
Stripe may process payment information, transaction information, device information and fraud-prevention information as described in Stripe's applicable privacy documentation.
For further information, customers should refer to Stripe's privacy information:
PayPal
PayPal provides payment services that may be available through our website.
When you choose PayPal, relevant information may be shared with PayPal to process your payment and complete the transaction.
PayPal may process information in accordance with its own privacy notice and applicable legal requirements.
For further information, customers should refer to PayPal's privacy information:
Marketing Communications
We may send marketing communications where permitted by law.
These may include:
- new product announcements
- special offers
- promotions
- discounts
- information about our services
Where consent is required, we will obtain your consent before sending marketing communications.
You can unsubscribe at any time by:
- clicking the unsubscribe link contained in our marketing emails
- contacting us at [EMAIL ADDRESS]
Unsubscribing from marketing communications will not prevent us from sending necessary service communications relating to an existing order, return, refund, warranty claim or other transaction.
Sharing Your Information
We do not sell your personal information.
We may share personal information where necessary with:
- Stripe
- PayPal
- delivery providers
- website and hosting providers
- ecommerce service providers
- IT and security providers
- accountants
- insurers
- professional advisers
- legal advisers
- fraud-prevention services
- law enforcement or regulatory authorities where legally required
We only share information that is reasonably necessary for the relevant purpose.
International Transfers
Some service providers we use may process information outside the United Kingdom.
Where personal information is transferred outside the UK, we will ensure that an appropriate legal safeguard is used where required by applicable data protection law.
Depending on the circumstances, this may include:
- an adequacy decision
- appropriate contractual safeguards
- the UK International Data Transfer Agreement
- the UK Addendum to the EU Standard Contractual Clauses
- another lawful transfer mechanism
How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
Different types of information may be retained for different periods.
For example, we may retain:
Order and transaction information
For as long as reasonably necessary to fulfil legal, accounting, tax, warranty and dispute-resolution requirements.
Customer account information
While your account remains active and for an appropriate period afterwards where necessary for legitimate business or legal purposes.
Customer service correspondence
For as long as reasonably necessary to deal with the enquiry, complaint, return, warranty claim or potential dispute.
Marketing information
Until you unsubscribe, withdraw consent where applicable, or the information is otherwise no longer required.
When personal information is no longer required, we will securely delete it or anonymise it where appropriate.
Data Security
We take reasonable technical and organisational measures to protect personal information against:
- unauthorised access
- accidental loss
- destruction
- alteration
- unauthorised disclosure
- other unauthorised processing
These measures may include:
- secure connections
- access controls
- password protection
- restricted administrative access
- software and security updates
- backups
- monitoring
- appropriate security procedures
Payment information is processed through established payment providers such as Stripe and PayPal rather than being routinely stored by us in full.
No internet transmission or electronic storage system can be guaranteed to be completely secure.
Your Data Protection Rights
Under applicable data protection law, you may have rights including:
Right of access
You can ask for a copy of the personal information we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete information.
Right to erasure
In certain circumstances, you can ask us to delete your personal information.
Right to restriction
In certain circumstances, you can ask us to restrict the processing of your information.
Right to data portability
In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format.
Right to object
You may have the right to object to certain types of processing, including processing based on legitimate interests and direct marketing.
Right to withdraw consent
Where we rely on consent, you may withdraw your consent at any time.
Rights concerning automated decision-making
Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
These rights are subject to certain legal conditions and exemptions.
Exercising Your Rights
To exercise your data protection rights, please contact:
Great Gadget Store Support
Email: [PRIVACY EMAIL]
Address: [BUSINESS ADDRESS]
We may need to request additional information to confirm your identity before responding to your request.
We will normally respond within the timeframe required by applicable data protection legislation.
You will generally not be charged for exercising your rights.
However, applicable law may allow us to charge a reasonable fee or refuse a request where a request is manifestly unfounded or excessive.
Complaints
If you have concerns about how we have handled your personal information, please contact us first:
Great Gadget Support
Email: [PRIVACY EMAIL]
Address: [BUSINESS ADDRESS]
We will try to resolve your concerns.
You also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's independent supervisory authority for data protection.
Information Commissioner's Office
Children's Privacy
Our website is intended for general consumers and is not specifically directed at children.
We do not knowingly collect personal information from children where such collection would require parental or guardian consent unless the appropriate legal requirements have been satisfied.
If you believe that a child has provided personal information to us inappropriately, please contact us.
Third-Party Websites
Our website may contain links to third-party websites, including payment providers, manufacturers, delivery companies and social-media services.
We are not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy notice of any third-party website you visit.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time.
Changes may be necessary because of:
- changes to our business
- changes to our website
- changes to the services we use
- new technology
- changes to data protection legislation
- changes to regulatory guidance
The latest version will be published on our website.
The "Last Updated" date at the top of this Privacy Notice will be amended whenever significant changes are made.
Where appropriate, we will notify customers of significant changes.
Contact Us
If you have any questions about this Privacy Notice or how we process your personal information, please contact us:
Great Gadget Store Support
Address:
[BUSINESS ADDRESS]
Email:
[PRIVACY EMAIL]
Telephone:
[TELEPHONE NUMBER]
Website:
[WEBSITE ADDRESS]
Data Protection Contact:
[NAME / CUSTOMER SERVICE TEAM]
In simple terms, we collect your information because we need it to operate our online store.
We use it to:
- take and process your orders
- process payments through Stripe or PayPal
- deliver your purchases
- communicate with you
- handle returns and refunds
- deal with warranty claims
- prevent fraud
- keep our website secure
- comply with legal requirements
- provide and improve our services
We do not sell your personal information.
You have rights over your personal information and can contact us if you want to know what information we hold about you or how we use it.
