The Administrator of Your Personal Data within the meaning of the provisions on the protection of Personal Data is Monika Kotarska running business at The STRAIGHT From Nature registered in Great Britain. 42 Acorn View, Kirkby In Ashfield, NG17 7RE, Notthingam.
The Administrator limits the use and collection of information to the necessary minimum required to complete the order. Makes every effort to secure Personal Data during the transfer of Data by the Customer’s, using appropriate methods of Data collection, storage and processing procedures, uses a secure and encrypted SSL (Secure Sockets Layer) communication channel protected by digital signatures.
The Personal Data Administrator processes all Data provided to us by Customer’s in a manner consistent with the scope of the authorization given by the Customer’s and the legal requirements.
1. What personal information do We collect and how We use.
Name, surname, address, phone number, email address.
Providing the above Data is voluntary but necessary to registered and create an individual Customer account on the Site, place/process an order, obtain payment, accounting purposes. We may colect as well this Data if You sign up to the newsletter, contact with us, withdraw from the contract or file a complaint.
1a. Registration and create individual personal account – during registration You will be asked for the following personal details: name, address, telephone number, email and password. This Data is used to create an individual Customer account.
The legal basis for the processing of Your Personal Data contained in the User’s account is the performance of a contract for keeping an account in the Store, which You enter with the Administrator based on the rules of the Store.
Your Personal Data included in User account are is processed for the duration of the account, performance of a contract for keeping an account in the Store
You have the right to delete Your account at any time, which will also result in the removal of Your Personal Data from the Database. Remember, however, that deleting an account does not result in the removal of Data about orders placed via the Store.
When placing an order through the Our Store, You must provide Your personal information necessary to complete the order, such as Your name, email address, telephone number and address for the delivery of the order.
The Data provided in the order form will be Stored in the Store’s Database and will be Stored in it until the claims for the sale contract concluded via the Store are time-barred.
Each order is recorded as a separate item in the Database. In addition to Personal Data, order details such as the date of order, subject and value of the order, chosen method of delivery and payment are also recorded bills.
If in connection with the order placed, We issue an invoice to You, then for this purpose We process Your Personal Data to the extent necessary to issue an invoice. The legal basis for the processing of Your Data in this case is the fulfillment of the legal obligation to issue an invoice.
In addition, all invoices are included in the accounting records, and as a result Your Data will be processed naturally within this documentation for the period required by law.
If, in connection with the order placed, We issue an invoice to You, We process Your Personal Data to the extent necessary to issue an invoice.
The legal basis for the processing of Your Data in this case is the fulfillment of the legal obligation to issue an invoice. In addition, all issued invoices are included in the accounting documentation, and as a result Your Data will naturally be processed as part of this documentation for the period required by law.
1d. Data collected during the purchase transaction – before You make a purchase transaction in our Store, We will ask You to choose the payment method in our Store.
Our Store is operated by PayPal and Stripe Payments UK LTD payment service provider.
PayPal – PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg.
Stripe – Stripe Payments UK LTD – 9th Floor, 107 Cheapside, London, EC2V 6DN.
PayPal – https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
Stripe Payments UK LTD – https://stripe.com/gb/privacy
1e. E-mail contact.
If You contact with us by contact form, available on our Online Store, or by our email adress email@example.com, You naturally provide us with Your e-mail address as the sender’s address. In addition, You can also include other personal information in the body of the message.
The legal basis for the processing of Personal Data in this case is Your consent resulting from initiating contact with us.
Your Personal Data provided to us as part of an e-mail contact is processed only to service Your inquiry. The content of the correspondence may be archived.
1f. Email/phone number.
The e-mail address or phone number provided by our Customers/Users in the order form, can be used by us to inform You about any updates related to Your order.
1g. Returns and complaints.
If You withdraw from the contract concluded through the Store or file a complaint about purchased products, You provide us with the Data contained in the withdrawal form or in the complaint form, and We process this Data to implement the procedure of withdrawal from the contract or complaint procedure.
The legal basis for the processing of Your Data is in this case, the fulfillment of Our legal obligations related to the procedure of withdrawal from the contract or complaint procedure.
Forms of withdrawal from the contract and complaint forms are archived by us. The fact of withdrawal from the contract or lodging a complaint is also recorded in the shop system.
1h. Details of transaction You carry out through the Website and of the fulfilment of Your orders.
2. Server Logs.
Using the Store involves sending queries to the server. Each query addressed to the server is saved in the server logs.
Logs include Your IP address, server date and time, information about the web browser and operating system You are using. Logs are saved and Stored on the server.
The Data Stored in the server logs are not associated with specific people using the Website and are not used by us to identify You.
The server logs are only auxiliary material used to administer the site and their content is not disclosed to anyone except those authorized to administer the server.
3. Possible recipients of Customer Data:
a. In the case of a Customer who uses the Online Store with the method of delivery by post or courier, the Administrator entrusts collected Customer Personal Data to a selected carrier or intermediary performing the shipment.
Royal Mail Group Limited
100 Victoria Embankment
Hermes Parcelnet LTD
1 Capitol Close
b. in the case of a Customer who uses the Online Store with an electronic payment method or a payment card, the Administrator entrusts collected Customer Personal Data to the selected entity servicing the above payments in the Online Store.
PayPal – PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg.
Stripe Payments UK LTD – 9th Floor, 107 Cheapside, London, EC2V 6DN.
c. Our Online Store is on hosting company “Hostinger”,
Hostinger International Ltd.
61 Lordou Vironos Street
6023 Larnaca, Cyprus
4. Cookie files.
4a. ”Cookies” allow us to:
– ensure the proper functioning of the Store You expect,
– remember to log in to Your account every time You visit the Store,
– remember Your settings during and between visits to the Store,
– improve the speed and security of using the Store,
– allow You to share content on social networks,
– allow You to play content from external Websites,
– improve the features available to You in the Store,
You can find more details below.
4b. Cookies are small text files that are sent by the Online Store and Stored on Your computer, tablet or smartfon our users. These files contain information related to the use of the Website and the Online Store by Users computer.
The User’s browser places cookies on the hard disk for the purpose of keeping records, and sometimes for tracking information about them. The User can choose not to save cookies or warn them when cookies are sent. If You do this, please note that some parts of the Site may not function properly.
4c. Cookies used by our Online Store may be temporary or permanent.
– Temporary cookies are deleted when the browser is closed, however,
– Permanent cookies are also Stored after the users have finished using the Website and are used to Store information such as password or login, which speeds up and facilitates the use of the Website.
4d. Consent to cookies.
4e. As for own cookies, We use them for the proper operation of the Store, and in particular for the following purposes:
proper operation of the basket and the order process,
determining if You are logged in or not,
remembering Your login,
recording the acceptance of the regulations and marketing consent.
4f. More information about cookies You find on the Website – http://www.allaboutcookies.org/cookies/
5. Google Analytics:
Our Site uses Google Analytics. Google Analytics collects cookies that contain information about visits to the Website and User system profile along with the IP address. This information is passed to Google and Stored on their servers in the United States. The information collected in this respect is completely anonymous and does not allow for the identification of the User.
6. Legal Basis of Data processing:
The basis for the processing of the Customer’s Personal Data is primarily the need to perform the contract to which he is a party or the need to take action at his request before its conclusion. This applies mainly to Personal Data provided in the form when registering an Account, placing Orders. Also in the case of Personal Data provided to us in connection with the Customer’s complaint, the legal basis for their processing is the necessity to perform / service the contract for the sale of advertised goods.
7. What rights do You have?
In relation to the processing of Your Personal data by Us Each of Our Customer has the following rights:
a. has the right to access his Personal Data for verification and updating,
b. has the right to self-complete, edit Your Personal Data after logging in to Your client’s account,
c. has the right to direct e-mail contact with Administrator.
d. has the right to access Your Data and receive a copy thereof,
e. has the right to request the deletion of Personal Data by the Administrator, if they are incomplete, out-of-date, untrue, or no longer necessary to achieve the purpose for which they were collected.
f. the right to limit the processing of Data (You may demand that we limit the processing of Data only to store them or perform actions agreed upon with you, if we have incorrect Data or process them unjustifiably),
g. the right to object to the processing of Data (You have the right to object to the processing of Data on a legitimate interest basis, You should indicate to Us Your particular situation which in Your view justifies cessation of the opposition processing your data for these purposes, unless we prove that the basis of data processing is superior to your rights or that your data is necessary for us to determine, assert or defend claims),
h. the right to receive your Personal Data that you provided to the Administrator and then send it to another Personal Data Administrator of your choice. You also have the right to demand that the Personal Data be sent by the Administrator directly to such administrator, if it is technically possible. In this case, the Administrator will send your Personal Data in the form of a file in csv format, which is a widely used, machine-readable format that allows you to send the received data to another Personal Data Administrator.
i. In order to exercise Your rights, please send Your request to the following e-mail address: firstname.lastname@example.org. Please remember that before you exercise your rights, We will have to identify You accordingly.
j. has the right to request the complete deletion of his account.
If You want to delete Your account, please contact us at email@example.com or firstname.lastname@example.org
Deleting an account is irreversible and means deleting all Customer Data. It will no longer be possible to recreate the deleted account.
k. You have the right to lodge a complaint with the Head of the Office for Personal Data Protection if You believe that the processing of the Personal Data relating to You violates the provisions of the GDPR.
8. How long We will keep Your Data.
Your Personal Data will be Stored for the period of performance of the services provided by the Administrator and for the period resulting from the statute of limitations of claims, Consumer rights, bookkeeping or other rights in this respect.
9. Disclaimer: Links.
Our Website may contain links to other Websites.
The STRAIGHT From Nature does not control such Websites and is not responsibile for their contents. The STRAIGHT From Nature inclusion of links does not imply any endoresment of the material on such Websites or any association with their operators. All links made to such other sites are made at Your own risk and we accept no responibility for any linked sites.
10. Final Provisions:
a. The Administrator makes every effort to secure Personal Data during the transfer of Data by the Customer, using appropriate methods of Data collection, storage and processing procedures, uses a secure and encrypted SSL (Secure Sockets Layer) communication channel protected by digital signatures.
b. However, the action taken by us may turn out to be nsufficient if You do not observe the safety rules Yourself. In particular every of our Customer must keep login and pasword for the Website confidential and not share them to other thierd parties.
c. Please remember that the Online Store will not ask You to provide them, except to provide them when logging in to Website. In order to prevent unautorized persons from using Your account, please log out after using the Website.
d. Please note, credit card details are not retained Online. The only information Stored is a Customer’s transaction history, name, adress and email adress.
e. The Users acnowlegges that transmitting information on the internet is inherently dangerous, and We can not guarantee the security of Data sent over the internet.
f. Each of our Customer are responsibile for maintaining the confidentaly of the password used to acces our Website.
Our store use reCAPTCHA.
A reCAPTCHA is a short online typing test that is easy for humans to pass but difficult for robotic software programs to complete—hence the test’s actual name, Completely Automated Public Turing test to tell Computers and Humans Apart. The purpose of a reCAPTCHA is to discourage hackers and spammers from using auto-filling software programs on websites.
More information about reCAPTCHA – You can find on: https://www.lifewire.com/what-is-a-captcha-test-2483166
12. Contact with Us:
At any time, You can contact the Administrator by sending a message by traditional mail to the Administrator’s address indicated at the beginning of the Policy or electronic mail email@example.com, firstname.lastname@example.org
The Administrator Stores correspondence for statistical purposes and for the best and quickest response to appearing inquiries, as well as in the scope of complaint settlements and decisions made on the basis of notifications about administrative interventions in the indicated Account. The addresses and Data collected in this way will not be used for communication for purposes other than the implementation of the application.
In the case of contact with the Administrator in order to perform specific actions (eg. submitting a complaint using the form), the Administrator may again ask the person to provide Data, including Personal Data, e.g. in the form of name, surname, e-mail address, etc. to confirm its identity and allow for the return of contact in a given matter and to perform the requested action. Providing these Data is not mandatory, but it may be necessary to perform activities or obtain information that is of interest to the person.
a. changes in the binding provisions, in particular in the area of Personal Data protection, telecommunications law, services provided electronically and regulating consumer rights, affecting the rights and obligations of the Administrator or the rights and obligations of the Data subject;
b. development of functionality or Electronic Services dictated by the progress of internet technology, including the application / implementation of new technological or technical solutions affecting the scope of the Policy.
c. each time the Administrator places information about changes in the Policy as part of the Online Store. With every change, the new version of the Policy will appear with a new date.