Security and Privacy Policy - The Gift Box Crew

Security and Privacy Policy (GDPR AND PECR)

We live in a data-driven world and almost every transaction and interaction you have with most organisations involves you sharing personal data, this can be your name, address; birth date and marital status. You also share data online too, every time you visit a website, search for or buy something, use social media or send an email.

Sharing data helps makes life easier, more convenient and connected. However, your data is your data, it belongs to you so it’s important it is used only in ways you would reasonably expect, and that it stays safe. Data protection law makes sure everyone’s data is used properly and legally.

What is GDPR?

GDPR stands for General Data Protection Regulations and is the new framework for data protection laws. It replaces the previous 1995 data protection directives

What is PECR?

PECR Stands for Personal Electronic Communication Regulations and covers any information sent between parties over a phone line or internet connection. This includes phone calls, faxes, text messages, video messages, emails and internet messaging

This policy provides you with details of how we collect and process your personal data under General Data Protection
Regulations and Marketing under Privacy and Electronic Communication Regulations

Cookies

If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

What type of information do we collect?

Placing an Order

When you place an order information is gathered and may include:-

Personal data

First name; last name; marital status; title

Contact data

Billing address, delivery address telephone numbers, email address
Any feedback you give to us, including by phone, email, post, or when you communicate with us via social media

Financial data

Invoices and payments between us and other details of purchases.
Purchases made via our website are processed by our bank we do not hold card details

As a customer or potential customer, you may want to keep up to date with news items, information guides and new products. To do this we will ask you which methods you want us to use to make contact. This may be through the post, by email, text message, and online using social media or by any other electronic means and will comply with ECR. We will ask you by, ticking a box, clicking an icon, or sending an email. You are entitled to withdraw consent at any time and each message we send to you will give you the opportunity to opt out

Who we might share your information with

Third parties (Data Processors)
To enable us to arrange services as part of our contractual agreements with you

How do we use your information

Where there is a contractual arrangement between us to process your order
Where we need to comply with a legal or regulatory obligation.
For statistical analysis;
To help us understand more about you as a customer, the products and services you use and purchase, and the way you use them.
Find ways to improve our services
Help answer your questions and solve any issues you have.
We will need to retain your personal information in accordance with law and regulation but will not hold it longer than necessary

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. Access and correction of your personal information

For users that register on our website we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service . An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

We will need to retain your personal information in accordance with law and regulation but will not hold it longer than necessary We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.