Data privacy is of high importance for SpiralGFX Limited and we want to be open and transparent with our processing of your personal data. We therefore have a policy setting out how your personal data will be processed and protected.
WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?
SpiralGFX Limited, is the controller of the personal data you submit to us and responsible for your personal data under applicable data protection law.
Unit 17 Chorley Central Business Park
Company registration number: 129 334 68
WHAT TYPES OF PERSONAL DATA DO WE PROCESS?
We will process any data you provide to us, including the following categories:
- contact information such as name, address, e-mail address and telephone number
- order information
- IP address
- what products and offers you have clicked on
- shopping history
- how you navigated and clicked on the site
WHY DO WE USE YOUR PERSONAL DATA?
We will use your personal data to manage your purchase online at SpiralGFX Limited by processing your orders and returns via our online services and send you notifications of delivery status or in the event of any problems with the delivery of your items.
We will also use your data in order to handle complaints and warranty matters for products.
Your personal data is being used to identify you and to validate your legal age for shopping online, 18 plus.
Automated decision making
When you apply for credit as a method of payment, we will perform an automated decision-making process regarding your credit application.
We will use your personal data to send you marketing offers and invitations through e-mails and text messages.
In order to optimise your experience of SpiralGFX Limited we will provide you with relevant information, recommended products, send you reminders of products left in your shopping cart and send you personalised offers. All these great services are based on your previous purchases, what you have clicked on and information you have submitted to us.
We will use your personal data to manage your queries, to handle complaints and warranty matters for products and technical support matters through e-mail, our chat function, telephone and through social media.
We may also contact you if there is a problem with your order.
Development and improvement
We will use data to evaluate, develop and improve our services, products, and systems for all our customers. For this purpose, we will not analyse your data on an individual level, all processing will be done on pseudonymised data.
This includes analysis to make our services more user-friendly, such as modifying the user interface to simplify the flow of information or to highlight features that are commonly used by our customers in our digital channels and to improve IT systems in order to increase the security for our visitors and customers in general.
The analysis is also used to develop and constantly improve the logistics flow of goods by forecasting purchases, stocks and deliveries as well as our resource capacity from a sustainability point of view by streamlining purchasing and scheduling of deliveries.
Fulfilment of legal obligations
We will use your personal data to comply with obligations in laws, court rulings and decisions from authorities.
This includes using your personal data to collect and verify accounting data to comply with our accounting rules.
Prevention of misuse and crime
We will use your personal data for loss prevention management by securing that terms and conditions are being followed and to detect and prevent misuse of our services.
We will also use your personal data via video surveillance for security reasons. This data will be used to be able to follow up on incidents and to prevent and report criminal offences in our stores.
Your personal data will be used to prevent and investigate abuse of our services online and losses and fraud, by analysing online shopping behaviour.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
The data that we collect from you is stored within the European Economic Area (“EEA”) but may also be transferred to and processed in a country outside of the EEA. Any such transfer of your personal data will be carried out in compliance with applicable laws.
We don’t sell, trade or share your data for marketing purposes to a third party. Data that is forwarded to third parties, is only used to provide you with our services.
“Your personal data that is forwarded to third parties, is only used to:
- provide you with the services mentioned above
- communication agencies to send your order confirmation
- warehouse and distribution suppliers in connection with the delivery of your order
- payment service providers for your payment
Data that is forwarded to third parties is only used to provide you with the service mentioned above, to media agencies and technical suppliers for distribution of physical and digital direct marketing.
Please be aware that many of these recipient companies have an independent right or obligation to process your personal data.
For transfers outside the EEA, SpiralGFX Limited will use Standard Contractual Clauses and Shields as safeguards for countries without adequacy decisions from the European Commission.
How long do we save your data
We will save your data to be able to comply with your rights towards us and in compliance with the rules in your country.
After a 6-year period your personal data will be deleted.
WHAT ARE YOUR RIGHTS?
Right to access
You have the right to request information about the personal data we hold on you at any time. You can contact SpiralGFX Limited and we will provide you with your personal data we hold.
Right to rectification
You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed.
Right to erasure
You have the right to erase any personal data processed by SpiralGFX Limited at any time except for the following situations:
- you have an ongoing matter with Customer Service
- if you are suspected or have misused our services within the last three years
- if you have made any purchase, we will keep your personal data in connection to your transaction for book-keeping purposes
Your right to object to direct marketing
You have the right to object to direct marketing, including profiling analysis made for direct marketing purposes.
You can opt out from direct marketing by following the instructions in each marketing e-mail.
When you do so, SpiralGFX Limited won’t be able to send you any further direct marketing offers, or information based on your consent.
Right to complain with a supervisory authority
If you consider SpiralGFX Limited to process your personal data in an incorrect way you can contact us. You also have the right to raise a complaint to a supervisory authority.
Finance provided by Klarna Bank AB (publ).
Learn more about finance – Klarna.com.
All Markets Except Switzerland
In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice