Privacy Policy for CheGrandt Skincare
Effective Date: 14 August 2023
Introduction
CheGrandt Skincare we are committed to protecting the privacy and personal data of our customers and visitors to our website. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in compliance with the European Union General Data Protection Regulation (GDPR). By accessing our website or using our services, you agree to the terms and conditions of this Privacy Policy.
1. Data Controller
CheGrandt Ltd acts as the data controller for the personal data we collect and process.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
a) Identifiable Information: This includes your name, email address, postal address, telephone number, and other information you provide when contacting us, signing up for newsletters, or placing orders.
b) Payment Information: When you make a purchase, we collect and store payment card information and other necessary details to process your payment securely.
c) Website Usage Information: We gather information about how you interact with our website, including your IP address, browser type, device information, pages visited, and referring URL. We use cookies and similar technologies to collect this information.
3. Purposes and Legal Bases for Processing
We collect and process your personal data for the following purposes:
a) Providing Services: To fulfil your orders, process payments, deliver products, and communicate with you about your transactions.
b) Customer Support: To address your inquiries, provide assistance, and respond to your requests.
c) Marketing Communications: With your consent, we may send you promotional emails or newsletters about our products, offers, or events. You have the right to withdraw your consent at any time.
d) Website Improvement: To analyse and improve our website, enhance user experience, and understand user preferences.
e) Legal Compliance: To comply with applicable laws, regulations, and legal obligations.
4. Data Sharing and Disclosure
We may share your personal data with third parties under the following circumstances:
a) Service Providers: We engage trusted third-party service providers to assist with website operation, payment processing, delivery, and marketing activities. These providers are obligated to handle your data securely and in accordance with applicable data protection laws.
b) Legal Requirements: We may disclose your personal data if required by law or in response to valid requests by public authorities.
c) Business Transfers: If we undergo a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of the transaction. We will notify you via email or prominent notice on our website of any such change in ownership or control.
5. Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place to protect your privacy rights, such as using standard contractual clauses or relying on the Privacy Shield Framework.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We will securely delete or anonymize your data when it is no longer needed.
7. Your Rights
Under the GDPR, you have certain rights regarding your personal data. These rights include:
a) Access: You can request access to the personal data we hold about you.
b) Rectification: You can request correction of any inaccurate or incomplete personal data we have about you.
c) Erasure: You can request the deletion of your personal data under certain circumstances.
d) Restriction: You can request the restriction of processing of your personal data under certain circumstances.
e) Data Portability: You can request a copy of
your personal data in a structured, commonly used, and machine-readable format.
f) Objection: You can object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
g) Withdrawal of Consent: If we rely on your consent to process your personal data, you have the right to withdraw your consent at any time. This withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, please contact us using the information provided in Section 9 of this Privacy Policy. We will respond to your request within the timeframes required by applicable data protection laws.
Please note that certain exceptions and limitations may apply to your rights, and we may require additional information from you to verify your identity before fulfilling your request.
8. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. We regularly review and update our security practices to ensure the ongoing confidentiality, integrity, and availability of your data.
However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us using the following information:
CheGrandt Ltd
Email: admin@chegrandt.com
Tel: 07925 963 002
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal obligations. Any updates or modifications will be posted on our website with a revised effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data.