Privacy Policy
This site is owned and operated by Popcorn Shed Limited of 30 City Road, London EC1Y 2AB. (“we” or “our”).
We are committed to protecting and respecting your privacy.
This policy (together with our terms of use) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting www.popcornshed.com (“our site”) you are accepting and consenting to the practices described in this policy.
For the purpose of the Data Protection Act 1998 (the Act), the data controller is Popcorn Shed Limited.
What personal data is being collected and why?
- While using our service, we may ask you to provide us with certain personal information that can be used to contact or identify you, including but not limited to your name, office postal address, email address, and employer. We collect this personal information for the purpose of providing the service, identifying and communicating with you, responding to your requests/inquiries, servicing your purchase orders, and improving our service.
- When signing up to our website, we collect your name, office postal address and email address. This is for the purpose of providing our service, identifying and communicating with you, responding to your requests/inquiries, servicing your purchase orders, and improving our service. We may also collect information about your usage of the Website and information about you from the messages you send to us. This information is again collected for the purpose of providing our service, identifying and communicating with you, responding to your requests/inquiries, servicing your purchase orders, and improving our service.
- When signing up to receive email communications from us we collect your name and email address with your explicit consent. This personal information is collected for the purpose of serving you the requested emails and ensuring that they are personal and relevant.
What is the legal basis for processing activities?
1. If you are using our service as a customer or have signed up to our website, then the following legal bases apply:
GDPR Article 6 (1) (f) ‘processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interest are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of the personal data’
PECR citation 22(3) ‘A person may send or instigate the sending of electronic mail for the purposes of direct marketing where—
(a)that person has obtained the contact details of the recipient of that electronic mail in the course of the sale or negotiations for the sale of a product or service to that recipient;
(b)the direct marketing is in respect of that person’s similar products and services only; and
(c)the recipient has been given a simple means of refusing (free of charge except for the costs of the transmission of the refusal) the use of his contact details for the purposes of such direct marketing, at the time that the details were initially collected, and, where he did not initially refuse the use of the details, at the time of each subsequent communication.
2. If you have signed up to receive emails from us then the following legal basis applies:
GDPR Article 6 (1) (a) ‘the data subject has given consent to the processing of his or her personal data for one or more specific purposes’
Who will the personal data be shared with?
We may employ third-party companies to facilitate our service, to provide the service on our behalf, to perform service-related services and/or to assist us in analysing how our service is used. Examples may include processing and storing data, delivering messages, processing credit card payments, analysing data, providing marketing assistance and providing customer service. These third parties may have access to your personal information but only to perform specific tasks outlined in this privacy policy on our behalf. It is our understanding that the third parties we employ take the appropriate measures to ensure that personal information is safeguarded. The third parties we employ are listed below.
- We use third-party provider, MailChimp, to deliver our e-newsletters. Please see MailChimp’s privacy policy for more information about how the company processes personal data.
- We use e-commerce provider, Shopify, to process our online sales. Please see Shopify’s privacy policy for more information about how they process personal information.
- We use third party provider Privy to collect email address from our website. Please see Privy's privacy policy for more information about how they process information.
How long will personal data be retained?
- If you are a customer or have signed up to our service via our website, your data is kept for as long as is necessary for us to provide our services to you and as long as it is deemed as a legitimate interest. You have the right to object to the processing of your data for these purposes and are free to opt-out of direct marketing at any time.
- If you have signed up to receive emails from us, your data is kept only for as long as we have your consent. You are free to unsubscribe from emails at any time and request your right to erasure.
Accessing your personal data
We acknowledge your right to access your personal information. You may access, update, correct or withdraw the personal information you provide to us by emailing a request to hello@popcornshed.com
Changes to our privacy policy
We reserve the right to update or change our Privacy Policy at any time so you may wish to check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy. If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided, or by placing a prominent notice on our website.
Cookies
We sometimes use the information we collect from you to track patterns of behaviour of visitors on our site. We do this by using ‘cookies’. Cookies are small piece of information that speeds up the interaction between websites and enables the system to recognise your device on future visits. Although it puts your items in to the shopping bag and remembers who you are and what you like at future visits, it does not store any details about your credit cards. At Popcorn Shed we use them to simply give you as a customer a better and more personalised site experience; so you can view and edit your shopping bag and get offers that are more relevant to you