Privacy, Cookies And Security Policy
Who is Responsible for Processing your Personal Data?
Squish Gifts Limited trading as Squish Gifts as the data controller. This is the legal entity responsible for how you personal data is collected, stored and processed (collectively referred to as 'Squish Gifts", "we", "us" or "our" in this privacy notice).
Managing Your Personal Data
When you share your personal information with us, you have a right to expect that information to be treated with total confidentiality. Whether you have supplied your personal details online, by phone or by email. We will use your personal data for the purposes for which they were initially requested and only with a lawful reason to do so.
It is your responsibility to ensure that your personal data provided to us is accurate and up to date. You can update your personal contact details, including email address and phone number, by visiting My Account online or, by emailing our customer services firstname.lastname@example.org
Processing Your Personal Data Outside of the EU
If your order is for delivery outside the EEA, it will be necessary to transfer your personal data outside the European Economic Area (the EEA) to complete (deliver) your order. In some cases, countries outside the EEA may not have such well-developed data protection laws as those in the EEA.
Using Your Personal Data for marketing Purposes
With your consent and based on your marketing preferences, we use your email to send you details of our latest products and promotions. We also use marketing profiling techniques to determine product offers that may be of interest to you, whether that be by email or social media. To change your marketing preferences, email email@example.com.
Obtaining Your Consent
We will obtain your consent to send you details of our latest products and promotions via Email Marketing when you register your details, signing up to our email newsletters, request product information from us.
Using Your Personal Data to Improve Your Online Shopping Experience
We want to make sure that we only contact you with online content that you will find relevant and interesting. For this to work effectively, we collect information about your browsing activity using Cookies when you are using our website. These Cookies pass back to us your browsing information using your Internet Protocol ("IP") address as the identifier, which we combine with other anonymised, non-personalised and aggregated data, allowing us to determine what content and product information is most relevant to you when you are shopping online.
Profiling is a term used to describe a form of data processing where significant volumes of data made up of lots of different data types - such as browser history from Cookies, age, gender, size, transaction history, demographics and buying habits - are all used in an aggregated, anonymised an non-personalised form to evaluate and predict, based on statistical analysis, what you may or may not want to purchase from us by assigning you to a profile type. We use this technique to understand what drives you to buy from us and the types of products you are most likely to be interested in whether that be by email or social media.
Delivering Your Goods
We will use your personal contact details such as name, postal address, phone number and email address that you provide to us in respect of delivering products or services to you. We will share this information with our suppliers who directly despatch orders to you or our delivery partners who may contact you to arrange a convenient delivery time and provide you with updates as to when they will arrive.
We actively use social media platforms as a way of connecting, and getting closer to our customers to hear and understand what our customers think about us and our products and services. Occasionally, we may contact you directly via those social media platforms if we would like to share your comments or pictures with other customers or publish them in our marketing materials. We will always ask you if you are happy for us to use your data in this way and will keep any data that you provide to us, such as email address, confidential and secure.
Right of Access
You may wish to access a copy of the personal data we hold about you - known as a Subject Access Request. You can do so by email a request to firstname.lastname@example.org. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We will respond to your Subject Access Request as soon as possible and, in any event, within the statutory 30 days. However, in the event that we need more information from you to verify your identity, which we must do to ensure we disclose your personal data to the right person, the 30 day response period will only commence from the time that we have validated your identity. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Right of Erasure
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Right to Object to Processing
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Right to Request correction of Your Personal Data
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Right to Withdraw Consent
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.