PRIVACY POLICY
At Square Peg It, your data will never be shared with any other internet users. You have full control over how you want to receive communication from us, and you can modify your preferences at any time. Rest assured, we prioritise the security of your data; we will not sell it to any third parties, and we will only retain it for as long as necessary.
​
We are dedicated to safeguarding your privacy at Square Peg It. If we request you to provide any information that can identify you while using this website, be assured that it will solely be used in accordance with this privacy statement. We may update this policy from time to time by making changes to this page. Any significant changes will be communicated to you, but it is advisable to periodically review this page to ensure you are comfortable with any updates.
​
When Square Peg It collects and processes your personal data, we do so on our own behalf and not on behalf of any third parties.
THE LEGAL BASES
Data protection laws outline several reasons why a company may collect and process your personal data, including:
• Consent – For instance, when you provide consent by ticking a box to receive emails.
• Contractual obligations – For example, when we need your data to fulfill our contractual agreement with you.
• Legal compliance – When the law requires us to process certain data.
• Legitimate interest – We may process your data to pursue our legitimate interests in a manner that can reasonably be expected as part of running our business, and this processing does not infringe upon your rights, freedoms, or interests. An example of this is the operation of the Treat Me loyalty scheme.
WHAT INFORMATION WE COLLECT
We may collect the following information:
-
Your name
-
Contact information including email address
-
Demographic information such as postcode, preferences and interests
-
Other information relevant to customer surveys and/or offers
PURPOSE OF PERSONAL DATA PROCESSING
CREATING AN ONLINE ACCOUNT
Processing purposes for setting up your online account details and communication updates to your account:
Purpose: To establish your online account and keep you informed about any changes or updates related to your account.
Lawful Basis: Legitimate interest - Contractual agreement
​
Signing up for marketing communications during online account creation:
Purpose: To send you product updates, news, competitions, and promotions via email, SMS, and postal direct mail.
Lawful Basis: Legitimate interest - Commercial interest
​
Signing up for email newsletters online (not as part of account creation):
Purpose: To send you product updates, news, competitions, and promotions via email.
Lawful Basis: Consent – Obtained through opt-in at the time of signing up.
COMPLETING AN ORDER FORM ON THE WEBSITE
Processing purpose: Handling your order and providing you with relevant information about your products, delivery, and service.
Lawful basis: Legitimate interest - Contractual obligation.
INFORMATION WE COLLECT & WHY
We require this information to enhance our services and better understand your needs. Here are the specific reasons for processing your data:
​
-
Name and contact details:
-
Purpose: To fulfil our contract with you.
-
How we use it: To send service messages, such as order updates, so you are informed about your delivery.
-
-
Sending information about promotions, products, or services:
-
Purpose: Keeping you up-to-date.
-
How we use it: By email, SMS, or direct mail. You can opt-out anytime.
-
-
Fraud prevention:
-
Purpose: To protect both parties.
-
How we use it: Ensuring security and preventing fraudulent activities.
-
-
Understanding customer preferences:
-
Purpose: To tailor our offerings and improve products/services.
-
How we use it: Analysing customer data to provide what you want.
-
-
Payment information:
-
Purpose: To process payments and refunds.
-
How we use it: For contract fulfilment. All data is anonymised and not retained.
-
-
Contact history:
-
Purpose: Provide customer service support and process returns.
-
How we use it: In accordance with our contract with you.
-
-
Product or experience feedback or research:
-
Purpose: To improve products and services.
-
How we use it: Occasionally requesting reviews to gain valuable insights.
-
Rest assured that we value your privacy, and you can always opt-out or withdraw consent as needed. Your data is used to enhance your experience and ensure our services meet your expectations. For more details, refer to our Security & Cookie Policy.
INFORMATION ABOUT YOUR DEVICE AND HOW YOU USE OUR WEBSITE
How we use this information:
-
Improving our website and setting default options:
-
Purpose: To enhance your shopping experience.
-
How we use it: By customizing default options, such as country and currency.
-
-
Protecting our website:
-
Purpose: To prevent fraud, ensuring mutual protection.
-
How we use it: Implementing security measures to safeguard both parties.
-
SHARING PERSONAL DATA
As previously mentioned, we do not sell any personal information to third parties. However, we may share your data with the following types of companies to provide our services to you:
-
Companies facilitating delivery and order processing:
-
Examples: Delivery companies, warehouses, and payment service providers.
-
-
Professional service providers:
-
Examples: Data agencies, website hosts, and marketing agencies for tasks beyond our capabilities.
-
-
Fraud prevention agencies
-
Companies approved by you:
-
Examples: Social media sites, if you choose to link your account.
-
To ensure the security of your data, we may share it with service providers within and outside the UK and EU. However, any transfer of personal data to service providers outside the EU and UK will only occur when adequate safeguards are in place, typically through the use of Standard Contract Clauses (available upon request).
MARKETING
If you have provided consent, we may send you marketing messages via email, SMS, or direct mail. Additionally, we utilize third-party cookies from Trustpilot on our website. Occasionally, we may use your purchase history, wishlist, or saved items to better understand your preferences and interests. This allows us to tailor our communications and ensure we send you relevant content.
You have the option to opt-out of marketing messages through the following methods:
-
Updating your preferences in My Account settings on our website.
-
Contacting us at squarepegit@gmail.com
To unsubscribe from emails, click the "unsubscribe" link in any marketing email you receive or reply to any SMS with the correct "STOP" message. Please note that while we will promptly update your preferences, it may take a few days for our system to fully process the changes. Rest assured, you will continue to receive important service messages such as order updates even if you opt-out of marketing communications.
KEEPING YOUR INFORMATION
We retain your information for as long as necessary to fulfill the purpose for which it was collected, meet legal and regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions. Once the retention period ends, we will either delete your data completely or anonymize it.
Here are some examples of customer data retention periods:
-
Orders: When you place an order, we will retain the personal data you provide for two years to comply with legal, financial, and contractual obligations.
-
Inactive accounts: If you have not used your account for more than two years, it will be marked as inactive. We will then contact you to inquire whether you wish to keep it open. Unless you respond affirmatively, we will close the account and delete or anonymise the associated personal data.
YOUR RIGHTS
Your rights regarding your personal information:
-
The right to know if we are processing your personal data and to access the personal information we hold about you, which is provided free of charge.
-
The right to be informed: You have the right to be informed about the collection and use of your personal data, as outlined in this privacy policy, including the purpose of processing and the retention period.
-
The right to correct personal data: If your personal data is incorrect, out of date, or incomplete, you can contact us to have it corrected.
-
The right to request data deletion or cessation of processing: In certain circumstances, you can ask us to delete your data or stop processing it. You can make this request by contacting us, and we will respond within 28 days with our decision.
-
The right to opt-out of direct marketing messages: You have the option to stop receiving direct marketing messages. You can update your marketing preferences in your online account, use the unsubscribe link in our emails, or reply 'STOP' to any SMS. We aim to fulfill your request within 28 days.
-
The right to withdraw consent for content-based processing: If we process your data based on your consent, you have the right to withdraw that consent.
-
The right to lodge a complaint with the data protection regulator: If you are in the UK, you can contact the Information Commissioner's Office to lodge a complaint.
Last updated: 26/07/2023