As a small business Smiles Cross Miles are committed to protecting and respecting your privacy and personal information
The General Data Protection Regulation (GDPR) is an EU privacy law which outlines the reasons why a company may collect and process your personal data, including:
- Consent involving the collection and processing of your personal data for a specific purpose with your consent.
- Contractual Obligations collecting and using personal data to fulfil an order or instructions given by a client, such as delivery details etc.
- Legal Compliance Exchanging data due to legal requirements, i.e. if the police required some information from us.
- Legitimate Company Interest On occasion we may collect data detailing how our website is used in order to improve customer experience.
We will collect data when you visit our website, make an online purchase, create an account, engage with us on social media or contact us via email.
When you place an order or create an account your name, billing details, shipping address, order information, payment information, email and telephone number will be collected.
We use your personal data in order to efficiently process any orders you place with us and respond to queries regarding those orders.
We will never sell your data and will keep it safe and secure.
We will use ‘https’ technology and secure payment gateways to secure access to all transactional areas of our site. Your data will only be held for as long as necessary for the purpose of which it was collected, after which it will be deleted from our system.
In order to fulfil your order there are a few trusted parties who will require your information from us. We will however only supply the information they need to perform specific services (i.e. delivery) and if we cease to use their services any of your data held by them will be deleted or rendered anonymous. These trusted third parties include Royal Mail and Paypal.
As part of our obligation to you, you have the right to request access to any personal data we hold about you, free of charge. You may also request the correction of your personal data, (when incorrect, inaccurate or incomplete) cessation of direct marketing and that we stop any consent-based processing of your data after you withdraw consent.
You have the right to request a copy of any of your personal information held in our records at any time and also for any inaccurate information to be amended. To request either of these options email us at firstname.lastname@example.org. Your information can also be updated via the My Account page.
You have the right to withdraw consent for the use of your personal data by us at any time.