Policy key definitions:
“I”,” me”,” my” – refers to the business owner; Lara Carvalho Trading as Bomull Baby.
“you”, “the user” refer to the person(s) using this website.
GDPR – means General Data Protection Act.
PECR – means Privacy & Electronic Communications Regulation.
ICO – means Information Commissioner’s Office.
Cookies – mean small files stored on a user’s computer or device.
The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore, the way this website processes, stores and protects user data and information will also be detailed within this policy.
- Key principles of GDPR:
- Processing of your personal data
Under the GDPR (General Data Protection Regulation) I control and / or process any personal information about you electronically using the following lawful bases.
Lawful basis: Contract
My purpose for processing, why it is necessary and how I process your information is:
I process your personal details to provide you with any information you have requested or when you make a purchase from the website.
Data retention period: I will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
Sharing your information: I will not share your personal data or sell it to anyone
If, as determined by me, the lawful basis upon which I process your personal information changes, I will notify you about the change and any new lawful basis to be used if required. I shall stop processing your personal information if the lawful basis used is no longer relevant.
- Collection of personal data
You will always be informed in connection with collection of personal data about you. The personal data collected by us may include, for instance, your name, your email address, and similar identification data, information about an online purchase and about your navigation on the website.
In connection with the submission of your data it will always be stated whether the submission is voluntary or necessary for completing the desired action, such as the completion of a transaction in our web shop.
Your personal data is collected in one or several of below cases:
– When you buy goods online at www.bomullbaby.com
– When you participate in one of Bomull Baby’s competitions
If you use your email address in more than one of the above cases, your personal data will only be collected and registered in one place.
Technical information including your Internet Protocol address used to connect your computer to the internet, browser type and version, time zone setting, browser plug-in types, operating system and platform information.
Use of personal data
Use of personal data
Personal data is collected and will be used in connection with:
– Completion of orders in our web shop
– Participation in competitions and/or other events
– Allocation of discount codes
– Collection and evaluation of consumer reviews
– Overview of purchase history
– Other marketing initiatives
Please note, that I will only use your personal data to send marketing material if you prior have given your explicit consent, unless legislation allows us to contact you without your prior consent.
Lara Carvalho trading as Bomull Baby keeps statistics about which areas of the site our users visit and which products the users prefer. This data does not contain personal data.
Knowledge about the users’ use of the website is gained with help from the collected data. This information is used to improve the website. I use data about how my users navigate, to better understand how my users use www.bomullbaby.com and from that I try to improve the website.
I am not able to see where you come from or where you are going on the internet after you leave our site. Furthermore, I collect information about what products my users, as a unit, prefers. This information is also used to improve the website. I do not sell or otherwise disclose information about how my user navigate and uses my website. I do not sell or disclose information about your purchase history to third parties.
- Your individual rights
Under the GDPR your rights are as follows:
the right to be informed – about the collection and use of your personal data.
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
the right not to be subject to automated decision-making including profiling.
You also have the right to complain to the ICO www.ico.org.uk if you feel there is a problem with the way we are handling your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
For the purpose of the Data Protection Act 1998 (“Act”) and the General Data Protection Regulation (GDPR) 2018, the data controller is Lara Carvalho trading as Bomull Baby.
I will only keep your information for as long as I am either required to by law, or as is relevant for the purposes for which it was collected. I have in place appropriate technical and security measures to prevent unauthorised or unlawful access to or accidental loss of or destruction or damage to your information. In particular, I store your personal details on a secure server. I use firewalls on my servers.
This information will not be disclosed to anyone outside Bomull Baby, companies, partners, and other organisations.
I expect the information I hold to be accurate and up to date. You have the right as an individual to find out what information I hold about you and make changes if necessary; you also have the right, assuming we are not obligated by law to refuse, to ask us to stop using the information.
To have your information removed or rectified, please contact firstname.lastname@example.org
The type of information that I will collect on you, and you voluntarily provide to us, will vary depending on whether you are on Bomull Baby’s website, or whether you make a purchase on the website.
I will not store, process or transfer your data outside the parties detailed above unless I have an appropriate lawful reason to do so. Unless I am precluded from doing so by law, you have the right to remove your consent at any time by contacting me and requesting that processing of your details be restricted or deleted. Sometimes I might be required to keep your data for contractual reasons. Otherwise, we will delete your data as soon as practical.
- Children’s Information
Another part of my priority is adding protection for children while using the internet. I encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Bomull Baby does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
- Protection of personal information
Lara Carvalho Trading as Bomull Baby takes precautions, including administrative, technical, and physical measures, to safeguard your Data against loss, theft, and misuse, as well as against unauthorised access, disclosure, alteration, and destruction.
I have implemented reasonable administrative, technical, and physical security controls to protect against the loss, misuse, or alteration of your Data.
- Google Analytics
Please contact email@example.com if you require more information.
- Disclosure of your information
You agree that I have the right to share your personal information with:
Search engine providers that assist us in the improvement and optimisation of our site including external tracking services such as Google Analytics (as mentioned below).
I will disclose your personal information to third parties:
- Where I store your personal data
All information you provide me is stored on secure servers. Unfortunately, the transmission of information via the internet is not completely secure. I will do my best to protect your personal data, I cannot guarantee the security of your data transmitted to my website; any transmission is at your own risk. Once I have received your information, I will use strict procedures and security features to try to prevent unauthorised access.
My website may, from time to time, contain links to other websites (Facebook and Instagram pages). If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
- Access to information
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request on the first occasion will be provided free of charge to you. For any further copies, this will be subject to a fee of £10 to meet costs in providing you with details of the information I hold about you.
To protect your personal information, I take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.