Privacy & Cookie Policy
Gosh! & Absolutely are committed to protecting the personal data you provide to us and respecting your privacy. We take this responsibility very seriously. However, it is not always possible to 100% guarantee complete security to any data, so be aware that all personal information you provide (on here or any website) should be done with this in mind.
We only collect data when we really need to. We do not sell or distribute your information in any way, nor do we make it public. We only collect and process your data when absolutely necessary. We do not run any mailing lists and we most definitely do not spam our clients in any way!
Contact Information
As part of any products/services you buy from us or any ongoing support you require, we collect contact details that are necessary to allow us to do our work.
Specifically:
- Name
- Address
- Telephone Number
- Email Address
Billing Information
Billing and delivery information includes name, address and contact details above, and financial information as required.
Gosh! & Absolutely uses three payment methods which store information when accepting credit/debit card payments and issuing receipts. These transactions occur either through a direct link to Stripe or PayPal or through a WooCommerce checkout on our WordPress site, or via our IZettle card payment system in-store.
These Third Party businesses store the data you enter when paying for your purchases. Please see below for the Privacy Policies of these companies.
The checkout facility on the website uses WooCommerce (https://woocommerce.com/). As part of this process we store the transaction and billing details on our third party secure server. Our server is secured behind an SSL certificate to help ensure data security.
Gosh! & Absolutely do not store any related data from any contact forms from our customers and site visitors through the website. All contact via email will be stored in our local Email Clients {Outlook and Mail} and on Google Servers as part of the Google Apps service.
The information you provide us is used solely to allow us to support you with your enquiry or order.
Third Party Data Processors
Some data provided through our website is processed through Third Parties. These help with tracking on our site, processing payments and hosting. Take a look below and checkout their own Privacy Policies for more info:
Google Analytics
We use Google Analytics to provide us with our website statistics.
https://www.google.com/intl/en-GB/policies/privacy/
Social Media Platforms
Links to our social media pages are added to our site, and you can see those companies privacy policies below.
Twitter https://twitter.com/en/privacy
Instagram https://help.instagram.com/155833707900388
Facebook https://www.facebook.com/privacy/explanation
Pinterest https://policy.pinterest.com/en-gb/privacy-policy
Payment Processors
We use Stripe, PayPal and IZettle to process our payments via Credit/Debit Card. You can see their privacy policies here:
Stripe https://stripe.com/gb/privacy
PayPal https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev
IZettle https://www.izettle.com/gb/privacy-policy
Emails
We use Google Apps for business, see their policies here:
https://cloud.google.com/security/gdpr/
Cookies
Like almost all websites we uses cookies. We do try to minimise the amount of cookies, but they are useful little text files that are stored on your computer by your browser which can be helpful for us. Cookies collect information about how you browse websites and collect information like your operating system and your IP address. They help with Google Analytics and may collect the pages you visit, dates and times, how long you spend on each page, what you click on within a page and how you found the site. These cookies don’t collect personal data such as names or addresses! By default your browser accepts cookies, but you can disable them like this:
Internet Explorer:
To prevent new cookies from being installed and delete existing cookies: http://windows.microsoft.com/en-GB/internet-explorer/delete-manage-cookies
Firefox:
To prevent new cookies from being installed: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
To delete existing cookies: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-store
Google Chrome:
To prevent new cookies from being installed and delete existing cookies: https://support.google.com/chrome/answer/95647?hl=en
Safari:
To prevent new cookies from being installed and delete existing cookies: http://help.apple.com/safari/mac/8.0/#/sfri11471
General Data Protection Regulation (GDPR)
The aim of the GDPR is to protect all EU citizens from privacy and data breaches in an increasingly data-driven world that is vastly different from the time in which the 1995 directive was established.
Data Breaches
We will report any unlawful data breaches to relevant parties within 72 hours. Data security is of great importance and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected online.
Specifically, we utilise the following systems:
- admin IP whitelisting
- two-step authentication as appropriate
- regular software updates
- enforce strong passwords
- educate clients on security
- Malware and Security software
- Encryption of our website and stored data
Your Rights
Under the Data Protection Act 1998 you have the following rights:
- to obtain access to, and copies of, the personal information that we hold about you
- to require that we cease processing your personal information if the processing is causing you damage or distress
- to require us not to send you marketing communications.
Since the GDPR came into force on 25 May 2018 you also have the following rights
- to require us to erase your personal information
- to require us to restrict or object to our data processing activities
- to receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal information to another data controller; and to require us to correct the personal information we hold about you if it is incorrect.
We are happy to provide you with a copy of any personal data stored about you. And while we would hate to see you leave, if you require us to delete any data please contact us at the address listed below
Data Controller/ Contact info
Gosh & Absolutely
The House that Jack Built
10-11 Southside Street
Plymouth
PL1 2LA
Please take a look at the Information Commissioner’s Office website for a guide to your rights and more info on GDPR https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/