Privacy Policy
DATA PRIVACY NOTICE 1.0
May 2018 – To Date
This Privacy Policy sets out how we use and protect any information that you give us when you use this website. We are committed to ensuring that your privacy is protected.
Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement. We may change this policy from time to time by updating this page or alerting you via email. The date at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes are effective when we post the revised Privacy Policy.
1. Who we are?
Surf Street Limited are an ecommerce company operating Lowlife of London. Lowlife of London is an online clothing shop. Surf Street Limited is the ‘Controller’ of the personal data you provide to Lowlife of London. This means we decide how your personal data is processed and for what purposes. Our contact details are: Surf Street Limited, 11 Riverside, Sir Thomas Longley Road, Medway City Estate, Kent, ME2 4DP 01634 731304.
Company Registration Number 08482361
VAT Number 160 6410 40
Surf Street Limited is the ‘Controller’ of the personal data you provide to us. This means we decide how your personal data is processed and for what purposes. Our contact details are: Surf Street Limited, 11 Riverside, Sir Thomas Longley Road, Medway City Estate, Kent, ME2 4DP 01634 731304.
2. Your Personal Data - What is this?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (GDPR).
3. Your Personal Data - What we collect
We collect your personal data in order to process your order and deliver your goods to you. The information we collect includes your name & address, the delivery name & address, your email address, telephone number, mobile number and IP address.
Your payment information will be collected and held by one of our payment providers (either WorldPay, Stripe or Paypal). We do not hold your financial debit/credit card information.
If you choose to create an account with us, we will collect your name, address, email address, password, order history, log in details, pages viewed, shopping cart items, wishlist items, Loyalty Club/Brand Guardian preferences and newsletter subscription preferences.
If you decide to write a product review, we will share your review on our website.
We also collect data from your browsing behaviour, which helps us understand how our customers interact with our website. We use this data to help us improve our website design, functionality and enhance our customer experience.
We will not collect any unnecessary personal data from you, only data that is relevant to your order and if requested product preferences.
4. Your Personal Data - How do we process your data?
We adhere to comply with the obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the following purposes: -
Internal record keeping.
To enable us to process your order (we may contact you via email/telephone to discuss your order).
To allow us to distribute your goods (If your order is being delivered via courier and you have provided your mobile telephone number, you will receive a text message from our courier company detailing a time slot for your delivery)
To keep a record of the products you have purchased.
To respond to enquiries and provide customer support.
To administer our loyalty club and communicate information regarding the club with members.
To operate our website and deliver the services that individuals have requested.
To maintain our own accounts and records in line with the legal requirements of HMRC.
Send you emails regarding the status of your order, asking you to review your purchase and invite you to join our loyalty club programme.
If you give us consent to do so, we will use your name and email address to inform you of our future events, promotions, similar products and loyalty club membership information. This information is not shared with any third parties and you can unsubscribe at any time via phone, email or on our website (if you have created an account). Our contact details can be found at the end of this Policy.
We will only email you with marketing messages and promotions if you actively tick the subscription box either at the checkout, in your account login area or at the newsletter subscription request box.
5. What is the legal basis for processing your personal data?
The lawful bases for processing your personal data are:
Contract: Processing your personal data is necessary in order to fulfil a sales contract between the Controller and yourself. You have purchased a product from us and we need to use your personal data in order to process the order and distribute the goods to you. Alternatively, because you have asked us to take specific steps before entering into a contract. If you do not provide the required personal data, we will not be able to fulfil your order.
Contract: Processing is necessary for carrying out obligations under employment or social security law or a collective agreement.
Consent: You have given us clear consent to use your personal data to keep you informed of upcoming events, promotions and details of your loyalty club membership.
Legitimate Interests: We have a real reason to process your data which will be a direct benefit to both you and us. This could include; to identify and protect against fraud; better understand how people interact with our website; to determine the effectiveness of promotional campaigns and advertising; or to enhance or personalise our services for the benefit of our customers; for direct marketing purposes. You have the right to object to this processing if you wish (see below for our contact details).
6. Your Personal Data - Do we share it?
Your personal data will be treated as strictly confidential. We provide your personal data to our distribution partners (domestic - Royal Mail and DPD, international - Transglobal or the national postal service in your country) in order to safely deliver your goods in a timely manner.
Data from your browsing behaviour is shared with Google Analytics which gives us an insight into how our customers interact with our website. We have activated the IP Anonymisation within Google Analytics, so you are not identifiable in Google Analytics.
Your details will be stored on our Payment Providers (WorldPay/Stripe/Paypal) platform.
In order to meet our legal obligations, your personal data is disclosed to the HMRC and if required any government authorises.
If you have given consent to receive our email newsletters, we will store your details on our email marketing agency platform, Pure360, in order to deliver any email communications to you.
We do not share, sell or lease your personal details with any 3rd party organisations for the use of marketing purposes.
7. Your Personal Data - What do we do with your Personal Data?
All your personal data is hosted on servers which are located in the UK and is processed by our UK based employees.
No 3rd parties have access to your personal data unless the law allows them to do so. We have a data protection regime in place to oversee the effective and secure processing of your personal data.
8. Your Personal Data - How long do we keep your data?
Customer orders – permanently, in order to satisfy HMRC requirements, aid with stock control and allow us to administer our loyalty club programme.
Customer enquiries – 2 years post enquiry in order to answer all enquiries. If you request to be informed when a new product is released, this can take up to 24 months.
Newsletter Subscribers – until end of customer relationship (until you notify us that you no longer wish to receive communications from us).
9. How do we keep your personal data secure?
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable electronic and managerial procedures to safeguard and secure the information we collect online. All data is securely stored using RSA 2048 bit encryption.
10. How we use cookies
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Disabling Cookies
If you would like to restrict the use of cookies you can control this in your internet browser. Links to advice on how to do this for the most popular internet browsers are provided below for convenience and will be available for the internet browser of your choice either online or via the software help (normally available via key F1).
Internet Explorer
http://windows.microsoft.com/en-GB/windows7/Block-enable-or-allow-cookies
Google Chrome
https://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=95647&p=cpn_cookies
Mozilla Firefox
http://support.mozilla.org/en-US/kb/Blocking%20cookies
Apple Safari
http://docs.info.apple.com/article.html?artnum=32467
For the exhaustive list of cookies we collect see the ‘List of cookies we collect’ section at the end of this Policy.
11. Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this Privacy Policy. You should exercise caution and look at the Privacy Policy applicable to the website in question
12. What are your rights?
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: -
The right to request a copy of your personal data which we hold about you;
The right to request that we correct any personal data if it is found to be inaccurate or out of date;
The right to request your personal data is erased where it is no longer necessary for the Controller to retain such data;
The right to withdraw your consent to the processing at any time;
The right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability);
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
The right to object to the processing of personal data;
The right to lodge a complaint with the Information Commissioners Office.
If you believe that any information we are holding on you is incorrect or incomplete, please contact us as soon as possible, at the below address. We will promptly correct any information found to be incorrect.
13. Contact Details
To exercise all relevant rights, queries or complaints please in the first instance contact Surf Street Limited on 01634 731304.
If you wish to exercise your right to withdraw consent to use your personal data for marketing purposes, please either:-
Use the ‘unsubscribe’ link at the bottom of your last marketing email.
Unsubscribe via your online account. Log in, select ‘My Account’ then select the ‘Newsletter Subscriptions’ tab. Click on the ‘General Subscription’ opt-in box so this is no longer green. Please then remember to click on the ‘Save’ button.
Contact us on the above telephone number and we will remove you from our mailing list.
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.