PRIVACY POLICY

You can contact us at any time to change your preferences. This includes requests to object to processing, to be forgotten (right to be deleted), for your data to be corrected, or to transfer your data to another platform. We take your rights seriously and will always reply promptly and professionally.

We operate in line with the EU GDPR (May 2018) Data Protection guidelines. We are committed to maintaining your personal rights and allow all users to change or withdraw their consent options at any time. We will also advise you on how to complain to the relevant authorities, namely the Information Commissioner's Office.

- When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.

- When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

- Email marketing (if applicable): With your permission, we may send you emails about our business, new products, offers and other updates.

We use recognised third parties to take payment, manage our company accounts, and provide banking services. In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Where valid, appropriate, verified, and subject to legal obligations, third parties are also expected to complete rectification or erasure requests within 72 hours of receipt.

We will store transaction, payment, and order data for up to 7 years or for as long as required by UK financial and company regulations. These third parties may operate outside the EU.

Our email database is hosted by Mailchimp. They provide us with the platform that allows us to send out our newsletters and general updates via email. Your data is stored securely on Mailchimp’s servers. For more insight, you may also want to read Mailchimp’s Privacy Statement (https://mailchimp.com/legal/privacy)

Our store and subscription service is hosted on Stripe. They provide us with the online e-commerce platform that allows us to sell our products and services to you. For more insight, you may also want to read Stripe’s Privacy Statement (https://stripe.com/gb/privacy).

If you choose a direct payment gateway to complete your purchase, then Stripe stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

Once you have given your data and/or explicit consent, you can however still control whether or not you continue to receive communications or see such advertisements from us. The simplest way to remove amend your preferences and withdraw consent is to contact us directly, however you can also unsubscribe from receiving e-mail communications from us by using the instructions in any email communication we send you (usually an 'unsubscribe' or 'STOP' link).

You can opt out at any time from communications by e-mailing us at: privacy@200degs.com

Social media: You can configure your advertising preferences on social media by accessing your settings or preference options on the relevant platform.

We are a data controller in relation to the information that you provide us with. As a result, we are legally responsible for how that information is handled.

We will always endeavor to comply with the Data Protection Act 1998, the GDPR (2018) and PECR in the way we use and share your personal data. Among other things, this means that we will only use your personal data:

- fairly and lawfully,

- as set out in the legislation and this policy,

- to the extent necessary for these purposes.

If you have any requests concerning your personal information or any queries about our privacy policy, website or service, please contact us using the details given above. We are friendly and professional and will always help.

Under the Data Protection Act, we are also permitted to share some information with third parties who use such data for non-marketing purposes (including credit and risk assessment and management, identification and fraud prevention, debt collection and returning assets to you). This would include the data you provide to us today, at any time in the past and in the future.

If you have any questions or comments about this Privacy Policy, wish to exercise your information rights in connection with the personal data you have shared with us or wish to complain, please contact The Data Protection Officer at 200 Degrees Holdings Ltd. Where valid, appropriate, verified, and subject to legal obligations, we will complete objection, rectification or erasure requests within 72 hours of receipt by us. We will process SARs within 20 days, SAR responses are usually free but we reserve the right to charge for excessive or unfounded requests. We fully comply with Data Protection legislation and will assist in any investigation or request made by the appropriate authorities.

This policy may be updated from time to time – where material changes occur we will contact you on the email address provided. You have the right to remove consent at any time.