Privacy & Cookies Policy
Small Stuff is committed to ensuring the utmost protection and security of your privacy and personal information. We will not use your information in ways to which you have not consented.
This Privacy & Cookies Policy sets out how we use and protect this information when you use this website.
WHAT INFORMATION DO WE HOLD?
When you shop with us we will ask you for certain information to ensure your transaction with us is communicated and delivered successfully. We will not collect any information, except where it is specifically and knowingly provided by you.
Examples of information we collect are:
- Contact Details
- IP Address
- Payment Information
- Date of Birth
- Gender Information
- Order Device
- Purchase History
- When you contact us
- Location Data
We may also obtain information surrounding how you use this website to help us improve and develop the site.
We will also use the information to keep you informed of new products, services, promotions or other information which we think you may find interesting or relevant, by using the email address which you have provided. You can stop these at any time by:
- contacting our customer team on firstname.lastname@example.org
- by clicking 'unsubscribe' in any of the marketing messages you receive, or at the found at the bottom of the website.
Please allow a few days for this to take effect.
HOW DO YOU GET MY CONSENT?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
If after you opt-in, you change your mind, you can withdraw your consent for us to contact you - for the continued collection, use or disclosure of your information; or to fully delete you from our records at anytime, by contacting us at email@example.com
WHO IS SHOPIFY?
Our website is hosted/powered on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. All your informations is stored through Shopify's data storage, databases and the general Shopify applications. All informations is stored behind a firewall on a secure server.
Shopify is certified Level 1 Payment Card Industry Data Security Standard (PCI- DSS) compliant. This compliance extends by default to all websites powered by Shopify.
SECURE PAYMENTS ON SHOPIFY
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the PCI-DSS. Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
PayPal - When you choose to pay with Paypal, your financial information is not even shared with us.
Small Stuff will not disclose any of your information to any third parties except in a situation where it is part of providing a service to you. This includes arranging for a product to be sent to you, carrying out security checks and for the purposes of customer research or when you have given us permission to do so.
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies, so you can understand the manner in which your personal information will be handled by these providers.
Small Stuff uses social media. We recognise that social media offers a platform for our company to perform marketing, stay connected with customers and build our profile online.
If you interact with us on social media, you are consenting and allowing us to interact with you. An interaction can be defined as liking or following our SM accounts, commenting or tagging us in photos or post and sharing our content via liking or retweeting. From this interaction, we may collect data that will help enhance your experience with us in the future.
If you tag us in a photograph that we rate, you may be lucky enough for us to share it across our SM accounts - organic or paid. By interacting with us, you are consenting that we can use images or comments royalty free without limitation. If you are unhappy with us sharing your comments or images, please do let us know and we will stop.
To prevent unauthorised access or disclosure, we have put in place procedures to safeguard and secure the information we collect online. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the internet or electronic stores is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards. We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
We only keep your information for as long as we need to or until you specify that you no longer want us to hear from you. If you ask us to stop processing your information for marketing purposes, we may need to retain some of it to ensure your details are kept on our marketing suppression lists.
If you fail to provide personal data
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
We take into account sector specific guidance on marketing, such as that issued by the ASA (Advertising Standards Authority), to make sure that children's date of birth is not shared.
If you would like to know what personal information we hold about you or have any queries about the security or our processing of your information, please contact us on firstname.lastname@example.org
We are committed to ensuring that your information is secure. We are responsible for any personal data (as that term is defined in the Data Protection Act 1988) you submit to our website. We are notified with the UK Information Commissioner's Office under registration number Z8135089, and are regulated by the ICO. If you have any complaints about our security or handling of your personal information whichwe have not been able to resolve with you, you can contact the ICO at www.ico.org.uk.
The most common types of cookies are:
- Website functionality Cookie
- Website Analytic Cookie
- Customer Preference Cookie
- Segmentation and Targeting Cookie
AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependants to use this site.
We do not knowingly collect the data of anyone under the age of consent on our website.
If our website is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to access, amend, delete any personal information we have about you, or simply have further questions, please contact our:
Data Policy Officer at email@example.com
or write to:
Data Policy Officer
Hassocks BN6 9BS