Introduction

Welcome to Shopabuddy.uk Privacy Policy.

At Shopabuddy.uk, we value your privacy and are dedicated to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you visit our website, regardless of your location.

Please review this policy in conjunction with any other privacy notices or fair processing policies provided on specific occasions when we collect or process your personal data. This Privacy Policy complements other notices and is not intended to override them.

Important Information and Who We Are

Purpose of This Privacy Policy

This Privacy Policy provides information on how Shopabuddy.uk collects and processes your personal data through your use of our website, including data you provide when signing up for our newsletter, purchasing products or services, or participating in prize draws or competitions. Our website is not intended for children, and we do not knowingly collect data related to children.

Controller
Shopabuddy.uk is the data controller responsible for your personal data (collectively referred to as “Shopabuddy.uk,” “we,” “us,” or “our” in this Privacy Policy). We have appointed a Data Privacy Manager to oversee questions related to this Privacy Policy.

Contact Details
If you have any questions about this Privacy Policy or our data practices, please contact our Data Privacy Manager:

• Name: Sanjeev Bhath
• Email: info@shopabuddy.uk
• Postal Address: 36 Himley Crescent, Wolverhampton, WV4 5DE, UK

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time, the UK supervisory authority for data protection issues (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns before you approach the ICO.

Changes to the Privacy Policy and Your Duty to Inform Us of Changes

We regularly review and update our Privacy Policy. This version was last updated in September 2024. It is important that the personal data we hold about you is accurate and current. Please inform us of any changes to your personal data during your relationship with us.

Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications. Clicking these links or enabling connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to review the privacy policy of every website you visit.

The Data We Collect About You

Personal Data means any information that identifies an individual. We may collect, use, store, and transfer different kinds of personal data about you, including:

• Identity Data: First name, maiden name, last name, username, marital status, title, date of birth, and gender.
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Financial Data: Bank account and payment card details.
• Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data: IP address, login data, browser type and version, time zone setting, location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
• Profile Data: Username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
• Usage Data: Information about how you use our website, products, and services.
• Marketing and Communications Data: Your preferences in receiving marketing from us and third parties, and your communication preferences.

We may also collect and share Aggregated Data for statistical or demographic purposes, which is not considered personal data as it does not reveal your identity. If we combine Aggregated Data with personal data, we will treat the combined data as personal data and apply this Privacy Policy.

We do not collect any Special Categories of Personal Data or information about criminal convictions and offenses. We may collect minimal personal data for prize draws and competitions, and if you win, we may collect additional details to award your prize.

If you fail to provide personal data when required, we may not be able to perform the contract or service, or process your entry into a competition.

How We Collect Your Personal Data

We use various methods to collect data from and about you:

• Direct Interactions: You may provide Identity, Contact, and Financial Data by filling in forms or corresponding with us via post, phone, or email. This includes applying for our products or services, creating an account, subscribing to our services, requesting marketing, entering competitions, or providing feedback.
• Automated Technologies or Interactions: We collect Technical Data automatically as you interact with our website using cookies. For more details, see our Cookie Policy.
• Third Parties or Publicly Available Sources: We receive personal data from third parties and public sources, such as analytics providers (e.g., Google, Facebook), payment and delivery service providers, data brokers, and publicly available records (e.g., Companies House, Electoral Register).

How We Use Your Personal Data

We use your personal data only when the law permits. Common scenarios include:

• Performance of Contract: To fulfill our contract with you or take steps before entering into a contract (e.g., processing orders).
• Legitimate Interests: To pursue our business interests, provided these do not override your rights (e.g., managing customer relationships).
• Legal Obligation: To comply with legal requirements.

We generally do not rely on consent for processing personal data except for direct marketing communications. You can withdraw consent at any time by contacting us.

Purposes for Using Your Personal Data:

If you win a competition, your participation in publicity is not compulsory but appreciated. If you opt out of publicity, we may still need to provide details to the Advertising Standards Authority (ASA) to demonstrate proper administration of the competition.

Disclosures of Your Personal Data

We may share your personal data with:

• External Third Parties: Service providers, professional advisers, HM Revenue & Customs, and regulators.
• Business Transfers: Parties involved in the sale, transfer, or merger of our business or assets. New owners may use your data in line with this Privacy Policy.

We ensure that third parties respect your data’s security and use it only for specified purposes.

International Transfers

We do not transfer your personal data outside the UK.

Data Security

We implement appropriate measures to protect your personal data from loss, misuse, unauthorized access, alteration, or disclosure. Access is limited to employees, agents, and third parties with a business need. We have procedures to handle suspected data breaches and will notify you and regulators as required.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes it was collected for, including legal and regulatory requirements. We may retain data longer in case of complaints or litigation. Our retention policy is available upon request.

In some cases, you can request deletion of your data or we may anonymize it for research or statistical purposes.

Your Legal Rights

Under data protection laws, you have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request correction of incomplete or inaccurate data.
• Erasure: Request deletion of your data where there is no valid reason for processing.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Restriction: Request suspension of data processing in specific scenarios.
• Transfer: Request transfer of data to you or a third party in a structured format.
• Withdraw Consent: Withdraw consent where processing is based on consent.

Requests are generally free of charge but may incur a fee for excessive or repetitive requests. We may request additional information to verify your identity. We aim to respond within one month, but complex requests may take longer.

Glossary

Lawful Basis:

• Legitimate Interest: Business interests balanced against impact on your rights.
• Performance of Contract: Processing necessary to fulfill a contract.
• Legal Obligation: Processing necessary to comply with legal requirements.

Third Parties:

• External Third Parties: IT providers, professional advisers, and authorities.
• Specific Third Parties: As listed in the “Purposes for Using Your Personal Data” table.

Your Legal Rights:

• Access, Correction, Erasure, Objection, Restriction, Transfer, Withdraw Consent.

For any further information or to exercise your rights, please contact us.