Our privacy policy sets out what personal buyer information we receive from EKM Powershop (our website platform), how we use it and under what circumstances, if any, we will share it with other parties. We abide by and are compliant with the Data Protection Act 1998 (herein referred to as “The DPA”) and the General Data Protection Regulation (herein referred to as “The GDPR”) which comes into effect on 25th May 2018. We are committed to keeping buyers’ personal information secure and confidential.

Lawful Basis for Processing Personal Data

We process all personal data lawfully, fairly and in a transparent manner. Under Article 6 of The GDPR, the lawful basis on which we process personal data received is that of “Contract” - whereby processing is necessary in order to fulfill buyer orders and enquiries. We retain information provided, such as transaction information for internal financial accounting purposes. It is a legal requirement to retain this information for a period of 7 years.

Data We Receive: Personally Identifiable Information

We receive personally identifiable information from EKM Powershop only when it is voluntarily submitted by buyers when placing an on-line order or using the online contact form available on our website. The data we receive includes: name, billing address, delivery name, delivery address, e-mail address (in encrypted format), telephone number, date of order, items ordered, value of items ordered, chosen method of delivery. We do not sell or rent personally identifiable information to any third party for any purpose.

How we use buyers’ personal information

We may use any personal buyer information provided by EKM Powershop to:

process and dispatch buyers’ order/s

carry out regulatory checks to meet our legal obligations

prevent and detect crime

develop and improve our products

undertake anonymised statistical analysis (we won’t be able to identify individuals from this data)

We treat all information we hold about buyers as private and confidential. We will not reveal any personal details or details concerning buyers’ orders to anyone not connected with us, unless;

A buyer asks us to reveal the information, or we have a buyer’s permission to do so

We are required or permitted to do so by law

It is required by law enforcement, fraud prevention or credit reference agencies

We may share buyer personal information with our suppliers, service providers and other contractors only to fulfil orders buyers place with us on EKM powershop countrycosmetics.co.uk

We do not knowingly collect or solicit Personal Data from anyone under the age of 18. If you are under the age of 18, please do not access or use the Services, or attempt to send us any Personal Data. If we learn that we have collected Personal Data from an individual under the age of 18, we will delete that information as quickly as possible.

Data Subject Access Requests

Under The GDPR buyers are entitled to obtain from us (the Data Processor for the purposes of The GDPR when selling on Amazon.co.uk) a copy of the data held concerning them and to have any inaccuracies in the data rectified. We are obliged to provide this data to within 1 calendar month of the request and free of charge. However we have the right to refuse or charge for requests that are manifestly unfounded or excessive and repetitive.

Cookies

How we use cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We do not currently use traffic log cookies to identify which pages are being used.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.