Privacy Policy | Palm & Wild

Palm & Wild Privacy Policy

Last updated: 2nd September 2020

Palm & Wild operates through www.palmandwild.com (the "Site"). We respect your privacy and are committed to protecting your personal data. This privacy notice will inform you as to how Palm & Wild collects, processes and looks after your personal data when you visit our website (regardless of where you visit it from) and by using our services and purchasing our products. It will also tell you about your privacy rights and how the law protects you.

We are Palm & Wild. We are the controller and are responsible for your personal data (collectively referred to as “Palm & Wild” “we”, “us” or “our” in this privacy notice). If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the contact form on our website or as detailed at the bottom of this notice.

We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy.

Information Collection and Use

Personal data, or personal information, means any information about an individual from which that person can be identified either directly or indirectly.

To fulfil your order, we may collect certain information such as;

Your identity and contact details (email & postal addresses);
Payment information, including details about payments to and from you;
Details of the products ordered;
Information about how you use our website and services;
Technical data about your equipment, browser, browsing actions and patterns;
Your preferences in receiving marketing from us and our third parties and your communication preferences;
Your bank payment details when you purchase our products.

We may use different methods to collect data from and about you including through:

Our day to day business dealings in providing our products and services to you;
Completing forms or by corresponding with us by post, phone, email or otherwise;
If you complete a survey or provide us with feedback;
As you interact with our website, we may automatically collect data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies;
By using publicly accessible sources; and/or
via third parties such as analytics providers and/or your bank or building society or other financial institutions when you pay for our services.

We will only use your personal data when the law allows us to. Information collected may be used and shared in the following ways;

As needed to provide services, such as when your information is used to fulfil your order, to settle disputes, or to provide customer support;
It is necessary to protect your vital interests if you are physically or legally incapable of giving consent;
When you have provided your affirmative consent, which you may revoke at any time, such as by signing up for our mailing list;
If necessary, to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
As necessary for the purpose of legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving our services. Information is used to provide the services you requested and in our legitimate interest to improve our services; and 2) Compliance with our website terms. Information is used as necessary to comply with our obligations under the website terms.

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to provide our services to you. In this case, we may have to cancel a service you have with us, but we will notify you if this is the case at the time.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Generally we do not rely on consent as a legal basis for processing your personal data other than in relation to sending direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us on the details above.

Purposes for Which We Will Use Your Personal Data

We have set out below a description of all the ways we plan to use your personal data:

To register you as a customer;
To assess the quality of our services, manage payments, fees, and charges;
To collect and recover money owed to us for our services;
To manage our relationship with you;
Informing you of changes to our privacy policy or terms and conditions;
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data);
To make suggestions and recommendations to you about goods or services that may be of interest to you.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Information Sharing and Disclosure

Information about our customers is important to our business. Personal information is shared for very limited reasons and in limited circumstances to fulfil the activities of the business. These are as follows:

Service providers. We engage certain trusted third parties to perform functions and provide services to our shop, such as delivery companies. Personal information will be shared with these third parties, but only to the extent necessary to perform these services.
Wix.com. We use Wix.com to power our online store. You can read more about how Wix.com uses your Personal Information here.
Google Analytics. We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here. You can also opt-out of Google Analytics here.
Business transfers. If the business is merged or sold, information may be disclosed as part of that transaction, only to the extent permitted by law.
Professional advisers including lawyers, bankers, auditors, accountants and insurers;
HM Revenue & Customs, regulators and other authorities;
Compliance with laws. Information may be collected, used, retained, and shared if there is a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others.

Marketing Emails

We may use your data to form a view on the products and services which we believe could be of interest to you. You will receive marketing communications from us if you have used our services or purchased a product from us or requested information from us and you have not opted out of receiving that marketing.

We will get your express opt-in consent before we share your personal data with any company outside Palm & Wild for marketing purposes.

You can ask us or third parties to stop sending you marketing messages at any time by contacting us.

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of you using our services or other transactions.

International Transfers

Your information will be held at our offices, by our service providers and in our IT provider’s data centres. Our data centres are based within the UK, but from on the rare occasion, In order for us to provide our services to you, from time to time we may have to share your personal data outside the European Economic Area (EEA). This could include where our service providers are based outside the EEA (for example our IT cloud services), if you are based outside the EEA, if there is an international element to the services we are providing or if one of our employees need to access our data remotely from outside the EEA.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared within Europe;
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe; and/or
Where the transfer is not repetitive, information is limited, the transfer is necessary for our legitimate interests and those interests do not override your own and we have put appropriate safeguards in place to protect your data.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instruction, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. This is usually 6 years.

Third-Party Links

This website may include links to third-party websites, plug-ins and applications which may include social media. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. Please read third party’s privacy notices for further information relating to the collection or sharing of your data. We do not necessarily control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Your Rights

If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. These rights are described below:

Access (commonly known as a “data subject access request”). You may have the right to access and receive a copy of the personal information held about you by contacting us using the contact information below.
Change, restrict, delete. You may also have rights to change, restrict our use of, or delete your personal information. Absent exceptional circumstances (like where we are required to store data for legal reasons) we will generally delete your personal information upon request. Please note that we may ask you to verify any changes to your data such as a proof of change of address or name;
Object. You can object to (i) our processing of some of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent to receive them. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons;
Complain. If you reside in the EU and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority;
Request the transfer of your personal data to you or to a third party, for example if you chose to use another business to provide services to you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

If you wish to exercise any of the rights set out above, please contact us using the contact us form on our website. You will not normally have to pay a fee for this, but we will let you know if we feel that it is fair to charge a fee, for example if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances and will let you know if we feel that this is the case.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our cookie policy below.

Information About Our Use of Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive. For more information about cookies, and how to disable them, visit www.allaboutcookies.org.

The Cookies we use may store your IP address and user agent (operating system and browser) and geographical location.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

Please note that other third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

Digital Advertising

As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page. You can opt out of targeted advertising by visiting the following pages - facebook and google.

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal.

Complaints or Concerns

If you have any queries or concerns about the way, we process your personal data then please contact us using the contact form on our website. We hope that we can resolve any concerns for you, but if you wish to take your complaint further you can contact the Information Commissioners Office (ICO) and further information can be found on their website www.ico.org.uk.

Changes to this privacy policy

We reserve the right to change this privacy policy as we deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the website and you are deemed to have accepted the terms of the privacy policy on your first use of the website following alterations.

Contact

You may contact us by email at info@palmandwild.com or through the messaging services on our shop at www.palmandwild.com.