Data Protection Policy
we hope you have as much fun reading this as we enjoyed writing it...
Murielle’s Antiques are acting as a data controller with respect to your personal data, We capture personal data entered across all channels: through our website or apps.What we do with your data
In this section we explain how we may process your personal data. All personal data we process falls into one or more of the following categories:
- Order data
- Transaction data
- Financial data
- Internal social data
- Usage data
- Communication data
- Enquiry data
- Digital marketing data
We may process your order data ("order data"). The order data may include your name, billing address, delivery address, phone number and email address. The order data will be processed for the purposes of delivering your goods to you. The legal basis for this processing is the performance of a contract between you and us.
We may process your transaction data (“transaction data”). The transaction data may include information relating to your previous purchases. The transaction data may include your name, billing address, delivery address, telephone number, email address and purchase history. It may be processed for the purposes of supplying the purchased goods and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us.
We may process financial information (“financial data”) you share with us. The financial data may include your encrypted card details, name and billing address. The financial data may be processed for the purposes of processing speedy check-out, easy refunds and to prevent fraud. The legal basis for this processing is the performance of a contract between you and us.
We may process information that you post for publication on our website or app, such as wall posts or product ratings and reviews ("internal social data"). This internal social data is public, and may be processed for the purposes of enabling interaction on the website or app between customers. We may also use your posts or reviews in our marketing materials to help us tell other customers about our products and services. In instances where internal social data is stored in an unstructured format (such as free text reviews and wall posts) it is exempt from our data retention rules, however may be deleted upon request. The legal basis for processing internal social data is consent.
We may process data about your use of our website or app, and reaction to our emails and services ("usage data"). The usage data may include your geographical location (we can see what town you are browsing from but not the address), browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The sources of the usage data are our analytics packages (including, but not limited to Google Analytics) and email service providers. This usage data may be processed for the purposes of analyzing the use of the website, emails and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.
We may process information that you provide to us for the purpose of subscribing to our direct marketing communications ("communication data"). The communication data includes your name, email address, postal address, phone number or marketing preferences. This communication data may be processed for the purposes of contacting you with service notifications, such as that your order has been processed, or contacting you with relevant offers and messages. The legal basis for this processing is performance of a contract for service notifications and legitimate interests for direct marketing communications.
We may process information contained in any enquiry you submit to us regarding goods and/or services ("enquiry data"). This enquiry data may be processed for the purposes of providing clarification, resolving issues or marketing relevant goods to you. The legal basis for this processing is the performance of a contract between you and us and to ensure we are responding to your enquiry.
We may process information that you provide to us for the purpose of improving our digital marketing ("digital marketing data"). We may use digital marketing data in a number of different ways: either to advertise our products to you on third party websites such as Facebook, Instagram or Pinterest or to advertise our products to similar customers (lookalikes) on third party websites such as Facebook and others. We may also use digital marketing data to exclude you from seeing advertisements from third party websites such as Facebook. The digital marketing data may include your name, email address, billing address, phone number, date of birth, gender, and the user ID of any social platforms you have connected with us on. The legal basis for this processing is our legitimate interests, namely providing better services and enhancing our customer base.
Should you wish to pick up your goods at our physical address please note that CCTV operates here to protect our goods and equipment. If necessary, CCTV recordings will be passed on to:
Third parties, which are required to show adequate grounds for disclosure of data within the above criteria, may include, but are not limited to:
- statutory authorities with powers to prosecute, for example Customs and Excise, Trading Standards
- claimants in civil proceedings
- accused persons or defendants in criminal proceedings
- other agencies, (as agreed by the Data Controller and notified to the Information Commissioner) according to purpose and legal status
We will not sell or pass on your personal data unless to companies approved by you, such as Facebook, Instagram or Pinterest and other social media sites (if you choose to link your accounts to us) or to delivery companies (mainly Royal Mail and Parcel2go.
Financial transactions relating to our website, app and stores are handled by our card payment service providers. Murielle’s Antiques have no access to your card details as they are stored with Shopify, our platform provider. We will share transaction data with our payment service providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.
In addition to the specific disclosures of personal data we may disclose your personal data with law enforcement and fraud prevention agencies, so we can help tackle fraud or where such disclosure is necessary for compliance with a legal obligation to which we are subject, in order to protect your vital interests or the vital interests of another natural person, or in connection with the establishment, exercise or deference of legal claims, whether in court proceedings or in an administrative out-of-court procedure.
How long we keep your data
If you have registered on our website but not purchased from us, the length of time we will retain your data is dependent upon whether you have opted into our marketing communications. If you have opted in, we will retain your data for 2 years since your last interaction; if you have not opted in, we will retain your data for 30 days from registration.
Whilst you are an active customer (a customer that has completed one or more transactions) we will retain your data for as long as needed to give you the best possible customer service. We will anonymise your personal data 7 years after your last transaction (sale or refund) provided you have not interacted with us for 2 years. In certain circumstances we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, to resolve disputes and enforce our agreements.
Data Protection Officer
Murielle’s Antiques is a sole trader - as a small business we do not have a data protection officer. Should you have any questions about the above, please get in touch via email: murielle.dumschat (at) yahoo.co.uk