Privacy Policy

Pop and Vibe Privacy Policy

Privacy Policy

1. Introduction

• This Privacy Policy describes how popandvibe.co.uk  (“we,” “us,” or “our”) collects, uses, and protects your personal data. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.  
•  

2. Data Controller

• Pop and Vibe is the data controller responsible for your personal data.
• Contact details: info@popandvibe.co.uk

3. Information We Collect

• Information you provide:
  • Name, address, email address, phone number, payment details, order history.
  • Information provided when you create an account, place an order, or contact us.
  • Any information you provide when you leave reviews or participate in surveys.
• Information we collect automatically:
  • IP address, browser type, operating system, device information, browsing activity.
  • Cookies and similar tracking technologies.
  • Information about your interactions with our website.

4. Legal Basis for Processing

• We process your personal data based on the following legal bases:
  • Contractual necessity: To fulfil your orders and provide our services.
  • Consent: For marketing communications and certain cookies.
  • Legitimate interests: To improve our services, prevent fraud, and ensure website security.
  • Legal obligations: To comply with applicable laws and regulations.

5. How We Use Your Information

• To process and fulfil your orders.
• To provide customer support.
• To manage your account.
• To personalize your experience on our website.
• To send you marketing communications (with your consent).
• To improve our website and services.  
• To prevent fraud and ensure website security.
• To comply with legal obligations.

6. Data Sharing

• We may share your personal data with:
  • Shipping carriers.
  • Payment processors.
  • Marketing platforms.
  • IT service providers.
  • Legal and regulatory authorities.
• We only share data with third parties that comply with UK GDPR.

7. Data Security

• We implement appropriate technical and organizational measures to protect your personal data.
• This includes encryption, access controls, and regular security assessments.  
•  

8. Data Retention

• We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.  
•  

9. Your Rights

• Under the UK GDPR, you have the following rights:
  • Right to access: You can request a copy of your personal data.
  • Right to rectification: You can request that we correct any inaccurate data.  
  • Right to erasure: You can request that we delete your personal data.
  • Right to restriction of processing: You can request that we limit the processing of your data.  
  • Right to data portability: You can request to receive your data in a machine-readable format.  
  • Right to object: You can object to the processing of your data.
  • Right to withdraw consent: You can withdraw your consent at any time.
  • Right to complain: You can lodge a complaint with the Information Commissioner’s Office (ICO).

10. Cookies and Tracking Technologies

• We use cookies and similar technologies to enhance your browsing experience.
• You can manage your cookie preferences through your browser settings.  
• A seperate cookies policy should be available on the website.

11. Changes to this Privacy Policy

• We may update this Privacy Policy from time to time.
• We will notify you of any significant changes.  

12. Contact Us

• If you have any questions about this Privacy Policy, please contact us at info@popandvibe.co.uk

Important Notes:

• Accuracy: Ensure all information is accurate and up-to-date.
• ICO: familiarize yourself with the UK information commisioners office, and their guidelines.
• Legal counsel: It is strongly advised that you have this policy checked by a legal professional.
• Cookie policy: create a seperate cookie policy.
• Regular review: review this policy often, to ensure it is still relevant.