This policy will explain areas of this website that may affect your privacy and personal details, how we process, collect, manage and store those details and how your rights under the GDPR are adhered to.
The DPA & GDPR May 2018
This website complies with the DPA (Data Protection Act 1998) and already complies with the GDPR (General Data Protection Regulation), which comes into effect from May 2018.
What information do we collect?
When you make a purchase we need certain information from you to fulfil our contract with you: your name, address, email address and phone number. When you browse our store, we automatically receive your IP address in order to communicate with your browser. This also gives us some geographical information we use for analytical and accounting purposes. Additionally, your browser sends us some information about your OS and browser, which allows our website to be displayed correctly on your system.
We process payments through two gateways: Paypal [https://www.paypal.com/en/webapps/mpp/ua/privacy-full] and Stripe [https://stripe.com/gb/privacy]. We never have access to your credit card information or bank details.
When will we disclose your personal data to a third party?
We will only disclose your personal data if we need to do so in order to fulfil your order, eg. to a courier service, or if required to do so by law. Of Cabbages and Kings will never pass on or trade the information we have for profitable purposes.
Website visitor tracking This website uses tracking software, Google Analytics and AddThis Analytics [http://www.addthis.com/privacy/privacy-policy/], to monitor its visitors to better understand how they use it. The software will save a cookie to your computers hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information.
Downloads and media files Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine downloads are available users are advised to verify their authenticity using third-party anti-virus software or similar applications.
Contact and communication Users contacting us through this website do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use.
Social media usage and policy We adopt a Social Media Policy to ensure our business and our staff conducts themselves accordingly online. While we may have official profiles on social media platforms users are advised to verify the authenticity of such profiles before engaging with, or sharing information with such profiles. We will never ask for user passwords or personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media.
How can I update or delete my details?
If you create an account when you make a purchase you can login at any time and update your personal information. If you would like your data to be deleted please email firstname.lastname@example.org. We will then delete your data that we have access to, please note that we will not delete your data until the 180 day window for credit card chargebacks has passed and that some anonymised transaction data does need to be preserved for tax purposes.