Last updated: August 2018
Information We Collect
For all visitors to our site, we collect aggregated information on pages viewed including IP address, timestamps, logins. For subscribers and customers, we additionally collect registration information including name, email address, telephone number; billing information including address; and information required to sell goods.
For buyers who buy something that is delivered by SendOwl we collect information relating to any transactions recorded by us or returned by the payment gateway including name, email address, billing and shipping address. We do not record buyer card or bank details.
Billing information is recorded as it is necessary to comply with our contractual obligations when providing our service to subscribers and customers.
We process information about our visitors for the legitimate business interests of developing our site to ensure a better experience for our visitors. We also obtain registration information based on the legitimate interest of business administration. When processing your personal data for our legitimate interests, we take appropriate measures to ensure that the interests we pursue are balanced with your interests, rights and freedoms.
With your consent, we may use your personal data to send you marketing materials, except as otherwise permitted by applicable law.
The data recorded is used for the following purposes:
- to respond to your enquiry, ask a question, contact you about your request or other reasons related to offering and improving our services;
- provide checkout capabilities on our site;
- to enable us to communicate with you and sellers;
- send you our monthly newsletter if you have signed up;
- for buyers who buy something that is delivered by SendOwl we collect data so we can provide them with access to their purchase;
- to protect against, identify and help prevent fraud, unauthorized activity, claims and other liabilities; and
- to fulfil our legal and financial obligations.
Your personal data is not shared or sold, in raw or aggregate form, unless either required by law officials (subject to our Terms and Conditions). We have no relationships with ad server companies.
If we plan to use the personal data that you provide to use for any other purpose, we will let you know what this purpose is and our legal basis for doing so.
A cookie is a text file that websites send to a visitor’s computer to uniquely identify the visitor’s browser or to store information or settings in the browser. Cookies may use your IP address, timestamps, logins. Information collected from cookies is used by us to evaluate the effectiveness of our website, analyse trends, and administer our website. This allows us to determine such things as which parts of our website are most visited and difficulties our visitors may experience in accessing our website.
For cookies that are essential, your consent is not required. For the use of the other types of cookies described in this policy, we do ask you for your consent when you first visit our website. You can withdraw your consent or remove these cookies at any time via your browser preferences but you will have to re-login to the SendOwl site if you remove the authentication cookie. To find out more about cookies, including how to see what cookies have been set and how to manage and remove them, visit www.allaboutcookies.org. To explore what cookie settings are available to you, look in the "preferences" or "options" section of your browser's menu.
Data Collection and Storage
SendOwl collects personal data and stores it securely. We also use third party vendors and hosting partners to provide the necessary equipment required to run the service. Specifically: Cloudflare, Amazon Web Service, Rackspace, MailGun, Google Analytics, FreeAgent, HelpScout, Stripe and MailChimp. We have contracts in place with our third party vendors that require them to use personal data only as necessary to perform services on our behalf and to implement appropriate security measures as required by law.
Retention and Withdrawal
We retain your personal data as long as needed for the purposes for which we collected it, plus a reasonable period to take into account the applicable statute of limitation period or to comply with legal requirements.
We may transfer your personal data to recipients in countries other than the country in which the personal data originally was collected. Those countries may not offer the same level of protection to your personal data. When we transfer your personal data to recipients outside of the European Economic Area (“EEA”), we will comply with applicable legal requirements by providing adequate protection for the transfer of personal data, including by (i) entering into the European Commission’s EU Standard Contractual Clauses with the data recipients, or (ii) verifying that the recipient has implemented Binding Corporate Rules or has adhered to the EU-US Privacy Shield Framework. To obtain a copy of the safeguards we have put in place, please contact us as indicated below.
We protect your personal data which we collect and store by implementing administrative, technical and physical security measures. These measures ensure an appropriate level of security and confidentiality for your personal data.
If you would like to unsubscribe from receiving our newsletter, you can click on the “unsubscribe” link included in our email or contact us as indicated below.
Subject to applicable law, you may have certain rights in relation to your personal data. These rights are as follows:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to the processing of your personal data for reasons relating to your particular situation.
- Request restriction of processing your personal data.
- Request to export the personal data that we process based on our contract with you or your consent and transfer it to another company (if technically feasible).
- Withdraw any consent you have previously provided to us.
If you wish to exercise any of the rights set out above, please contact us using the details in the ‘Contact Us’ section.
If you are not happy with our response, you can contact the ICO in the UK, or other data protection regulator in your country.
This policy may be periodically updated. Any changes will be notified by email or by a message on the service seen when you first login. Please review carefully before submitting personal data to our site. The date the policy was last updated is indicated at the top of this page.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at firstname.lastname@example.org or by mail using the details provided below:
122 Arlington Road, London, NW1 7HP, United Kingdom