Data protection - GDPR
GDPR compliance
Effective date: 1 July 2023
This GDPR (General Data Protection Regulation) compliance statement ("Statement") describes how Goofy GoldensÂź ("we", "our" or "us") complies with the GDPR when processing the personal data of individuals. This Statement should be read together with our Privacy Policy, which provides more detailed information about our data processing practices.
1. Legal basis for processing personal data
We only process personal data when we have a legal basis that complies with the GDPR. The legal bases we rely on include:
a) Consent: We obtain individuals' explicit consent before collecting and processing their personal data, and individuals have the right to withdraw their consent at any time.
b) Contractual necessity: We process personal data that is necessary to perform a contract with the individual or to take steps at the individual's request before entering into a contract.
c) Legal obligation: We may process personal data to comply with our legal obligations.
2. Data subjects' rights
2.1 We respect data subjects' rights as provided for by the GDPR. These rights include:
a) Right of access: Individuals have the right to request access to the personal data we hold about them and to obtain information about how we process it.
b) Right to rectification: Individuals have the right to request the correction of inaccurate or incomplete personal data.
c) Right to erasure: Individuals have the right to request the deletion of their personal data in certain circumstances, for example when the data is no longer necessary for the purposes for which it was collected or processed.
d) Right to restriction of processing: Individuals have the right to request the restriction of the processing of their personal data in certain circumstances, for example when the accuracy of the data is contested.
e) Right to data portability: Individuals have the right to receive their personal data in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller.
f) Right to object: Individuals have the right to object to the processing of their personal data based on legitimate interests or for direct marketing purposes.
2.2 Data subjects can exercise their rights by contacting us using the contact details provided in our Privacy Policy. We will respond to such requests within the timeframes required by the GDPR.
3. Security measures
We implement appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or access, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing.
4. Data transfers
If we transfer personal data outside the European Economic Area (EEA), we make sure that appropriate safeguards are in place to protect the data, such as adequacy decisions, the use of standard contractual clauses approved by the European Commission, or obtaining individual consent for such transfers.
5. Complaints
If you believe that our processing of your personal data breaches the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the country where you usually live, work or where the alleged breach took place. In France, the competent supervisory authority is the Commission nationale de l'informatique et des libertés (CNIL). In the United Kingdom, it is the Information Commissioner's Office (ICO).
Â
Privacy policy
At GoofyGoldens, we are committed to protecting the privacy and security of your personal information. This privacy policy describes how we collect, use and protect the personal data you provide when you use our website goofygoldens.com. By accessing or using our website, you accept the terms and conditions of this privacy policy.
1. Collection and use of information
1.1 Collection of personal data:
We collect personal data about you when you provide it to us voluntarily. The personal data we collect may include your name, email address, delivery address, billing address and payment information. We only collect personal data if you choose to create an account on our website or if you give your consent by ticking the "Save my information" option during checkout.
1.2 Use of personal data:
We use the personal data you provide to process your orders, complete your purchases and provide customer support. Your personal data will only be used for the purposes disclosed at the time of collection or as specified in this privacy policy.
2. Data sharing and disclosure
2.1 Sharing with third parties:
We do not sell, trade or otherwise transfer your personal data to third parties without your explicit consent, unless this is necessary to fulfil your orders (for example, sharing delivery information with our delivery partners).
2.2 Service providers:
We may use trusted third-party service providers to perform functions and provide services, such as website hosting, payment processing or customer support. These service providers will only have access to your personal data to the extent necessary to perform their functions and will be required to maintain the confidentiality and security of your data.
3. Data retention and deletion
You have the right to request the deletion of your account and the personal data we hold at any time. After receiving such a request, we will permanently delete your account and the associated personal data from our systems, including your order history. Please note that once your account has been deleted, your personal data and order history cannot be recovered.
4. Data security
We take reasonable measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. However, please note that no method of transmission over the Internet or electronic storage is 100% secure and we cannot guarantee absolute security.
5. Changes to this privacy policy
We reserve the right to update or amend this privacy policy at any time. Any changes will take effect immediately after the updated privacy policy is published on our website. We encourage you to review this privacy policy regularly to stay informed about our information practices.
6. Contact us
If you have any questions, concerns or requests about this privacy policy or our data practices, please contact us at contact@goofygoldens.com.
Â
Data protection policy
Effective date: 1 July 2023
At Goofy GoldensÂź ("we", "our" or "us"), we are committed to protecting the privacy and security of personal data in accordance with applicable data protection laws and regulations. This data protection policy ("Policy") sets out our commitment to safeguarding personal data and explains how we collect, use, disclose and protect personal data.
1. Scope
This Policy applies to all personal data processed by Goofy GoldensÂź, whether collected online or offline, from individuals, customers, employees and any other data subjects whose personal data we process.
2. Data collection and use
2.1
We only collect personal data for specific, lawful purposes. The personal data we collect may include, but is not limited to:
a) Contact details (such as name, address, email address and phone number).
b) Financial information (such as payment details).
c) Demographic information (such as age, gender and preferences).
2.2
We use personal data for the following purposes:
a) Providing the products or services requested.
b) Managing and maintaining customer relationships.
c) Processing and fulfilling orders.
d) Communicating with customers, employees and other stakeholders.
e) Carrying out internal research and analysis to improve our products and services.
f) Complying with legal obligations and protecting our rights and interests.
3. Data disclosure and sharing
We do not disclose personal data to third parties without a legal justification. However, in certain circumstances, we may share personal data with:
a) Trusted third-party service providers who help us provide products or services, such as payment processors, shipping partners and IT support providers.
b) Legal authorities or regulatory bodies where required by law or to protect our legal rights.
4. Data retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
5. Data subjects' rights
We respect data subjects' rights as provided for by applicable data protection laws. These rights include, but are not limited to:
a) The right to access personal data.
b) The right to rectify inaccurate or incomplete personal data.
c) The right to erasure of personal data in certain circumstances.
d) The right to restrict the processing of personal data.
e) The right to data portability.
f) The right to object to processing based on legitimate interests.
g) The right not to be subject to automated decision-making.
6. Changes to this Policy
We reserve the right to update or amend this Policy at any time without notice. Any changes will take effect immediately after the revised Policy is published on our website.