SHOP399PLUS (“we,” “us,” or “our”) respects the privacy of our customers and is committed to protecting the personal information you provide to us. This Privacy Policy explains how we collect, use, and disclose information when you visit our website, https://shop399plus.com/ (the “Site”). This policy also outlines your rights under applicable privacy laws, including the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
1. Definitions
Personal Data: Any information that can identify an individual, either directly or indirectly.
Processing: Any operation performed on personal data, such as collection, storage, use, and transfer.
Data Controller: SHOP399PLUS, the entity responsible for determining the purposes and means of processing personal data.
2. Information We Collect
a) Personal Data You Provide
We collect personal data that you voluntarily provide when interacting with our Site. This may include:
Account Information: Username, password, and preferences.
Payment Information: Credit or debit card details, PayPal information, or other payment details.
Order Information: Product details, order history, and delivery information.
Communications: Any messages you send via our contact forms, email, or phone.
b) Information Collected Automatically
When you visit our Site, we automatically collect certain data through cookies and similar technologies:
Device Information: IP address, browser type, operating system, and device identifiers.
Usage Information: Pages viewed, time spent on the Site, clicks, and other browsing behaviors.
Cookies and Tracking Technologies: Data collected through cookies, pixels, and web beacons to enhance your browsing experience (see Section 5 for more on Cookies).
3. Legal Basis for Processing
Under GDPR, we must have a legal basis for processing your personal data. We process your data under the following bases:
Consent: When you subscribe to our newsletter or agree to cookies.
Contractual Necessity: To process orders, manage accounts, and fulfill our contractual obligations.
Legal Obligation: To comply with applicable laws, such as tax reporting.
Legitimate Interests: To improve our services, enhance security, and conduct marketing activities (as long as these interests do not override your rights).
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
Order Fulfillment: To process and deliver your purchases, handle returns, and provide customer support.
Account Management: To manage your account, provide login access, and update your preferences.
Marketing and Communications: To send promotional materials, newsletters, and product updates. You may opt-out of receiving these communications at any time (see Section 8 on Your Rights).
Personalization: To personalize your experience on our Site, including product recommendations based on your preferences.
Analytics and Improvements: To analyze user behavior, improve website performance, and develop new features.
Legal Compliance: To comply with legal obligations, prevent fraud, and protect our rights.
5. Cookies and Tracking Technologies
Cookies are small text files placed on your device to help us understand how you use our Site. We use cookies for the following purposes:
Essential Cookies: Necessary for the operation of the Site, such as facilitating account logins.
Analytics Cookies: To track and analyze user behavior on the Site, helping us improve user experience.
Marketing Cookies: To deliver personalized advertisements based on your browsing behavior.
You can manage or disable cookies through your browser settings. For more details, visit our Cookie Policy.
6. How We Share Your Personal Data
We may share your personal data with third parties in the following situations:
Service Providers: We share your data with trusted third parties who provide services such as payment processing, order fulfillment, email marketing, and website hosting. These providers are bound by confidentiality agreements and are only authorized to use your data to perform services on our behalf.
Legal Compliance: We may disclose your data if required to do so by law, or if we believe it is necessary to protect our legal rights or comply with a court order or regulatory request.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.
We do not sell or rent your personal data to third parties for marketing purposes.
7. International Data Transfers
SHOP399PLUS operates in the UK, but some of our third-party service providers may process your data outside the European Economic Area (EEA). When we transfer personal data internationally, we ensure that adequate safeguards are in place, such as:
Standard Contractual Clauses: Approved by the European Commission to ensure the protection of your personal data.
Privacy Shield: For data transfers to the United States, where applicable.
8. Your Data Protection Rights
Under GDPR and applicable privacy laws, you have the following rights:
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
Right to Erasure: You can request the deletion of your personal data, subject to legal obligations.
Right to Restriction: You can ask us to restrict the processing of your personal data under certain circumstances.
Right to Data Portability: You can request your personal data in a structured, machine-readable format.
Right to Object: You can object to our processing of your personal data for direct marketing or other legitimate interests.
Right to Withdraw Consent: You can withdraw your consent to data processing at any time.
To exercise any of these rights, please contact us at info@shop399plus.com. We will respond to your request within 30 days, in accordance with applicable data protection laws.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. If you close your account or request deletion, we will remove your data unless we are required to retain it by law.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. These measures include encryption, access controls, and secure servers. However, no method of transmission over the Internet is entirely secure, and we cannot guarantee the absolute security of your information.
11. Children’s Privacy
Our Site is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any updates will be posted on this page, and we will notify you via email or a notice on our website.
13. Contact Us
If you have any questions or concerns regarding this Privacy Policy or how we handle your personal data, please contact us:
