No Products in the Cart
The UK GDPR sets out seven key principles:
Lawfulness, fairness and transparency
Integrity and confidentiality (security)
The UK GDPR sets out eight Rights for Individuals
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling
For more information about GDPR, please visit https://www.gov.uk/data-protection
COLLECTING PERSONAL INFORMATION
Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags or pixels
Disclosure for a business purpose: shared with our processor Shopify and our Card Service business partners
Examples of Personal Information collected: name, billing address, shipping address, payment information, email address, and phone number.
Purpose of collection: to provide products or services to you to fulfil our contract, to process your payment information, arrange for shipping where required, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.
SHARING PERSONAL INFORMATION
We share your Personal Information with service providers to help us provide our services and fulfil our contracts with you, as described above. For example:
We may provide your personal data to our suppliers and service providers that provide certain business services for us and act as “processors” of your personal data on our behalf. In addition, we may disclose your personal data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property, or safety, of our business, our customers or others. This includes, in specific cases, exchanging information with other organisations for the purposes of fraud protection.
We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en.You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by:
FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous
BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads]
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
USING PERSONAL INFORMATION
It is sometimes necessary to collect and use your personal data for the purposes of our legitimate interests as a business, which are to provide you with products and services that are as useful and beneficial as possible, including by personalising our contact with you and making sure we tell you about all the offers that are relevant to you;
better understand our customer base so that we can improve our products and services and marketing activities (which could also benefit you);
comply with our contractual obligations to third parties;
develop and improve our Site to enhance the customer experience;
train our staff so that we can provide you with a better customer service;
respond to any enquiries or complaints you have made, or deal with any dispute which may arise in the course of us providing our products and services to you; and
to ensure that content from our Site is presented in the most effective manner for you and for your computer;
ensure effective operational management and internal administration of our business, document retention, compliance with regulatory guidance and exercise or defence of legal claims.
Where we think there is a risk that one of your interests or fundamental rights and freedoms may be affected, we will not process your personal data unless there is another legal ground for us to do so (either that we have obtained your consent to the processing, or it is necessary for us to perform our contract with you or to comply with our legal obligations).
Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the United Kingdom (“UK”) or European Economic Area (“EEA”), we process your Personal Information under the following lawful bases:
The performance of the contract between you and the site;
Compliance with our legal obligations;
To protect your vital interests;
To perform a task carried out in the public interest;
For our legitimate interests, which do not override your fundamental rights and freedoms.
When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.
If you are a resident of the UK or EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.
We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.
Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making include:
Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.
Your Personal Information may be transferred outside of the UK or EEA for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
a. What cookies are used on this Site?
The cookies we and our business partners use on our Site are broadly grouped into the following categories:
Essential – Some of the cookies on our Site are essential for us to be able to provide you with a service you have requested. An example of this could be a cookie used to enable you to log into your account on our Site or which allows communication between your browser and our Site. Our cookie preference cookie described in the section “How can I reject or opt out of receiving cookies?” is also an essential cookie. You may not be able to use our Site without these cookies.
Analytics – We use analytics cookies to helps us understand how users engage with our Site. An example is counting the number of different people coming to our Site or using a particular feature, rather than the total number of times the site or feature is used. Without this cookie, if you visited our Site once each week for three weeks, we would count you as three separate users. We would find it difficult to analyse how well our Site was performing and improve it without these cookies.
Social Sharing – We use third party cookies to allow you to share content directly on the social networking/sharing sites like Facebook, Twitter or Google+. Examples would be if you wanted to “like” or “tweet” about us or our products or services. Please see our “Third Party Cookies” section below for more details.
Interest-Based Advertising – You will have noticed that when you visit websites you will be shown adverts for products and services you may wish to buy. The money made by website owners for showing third party adverts on their websites often pays for the cost of running the website and therefore usually allows you to use the website without having to pay a registration or usage fee. To try and ensure that the adverts you see are relevant to you third party cookies may be used to collect information about the types of things that interest you, for example websites you visit and the geography that you are based in. Having these cookies does not increase the number of adverts you will be shown, but simply makes the adverts you see more relevant. Please see our “Third Party Cookies” section below for more details.
Third party cookies - Some of the cookies described in the "What Cookies are used on our Site" section above are stored on your machine by third parties when you use our Site. Third parties may also read cookies on your browser to collect information or to serve content or advertisements to you. We have no control over these cookies or how the third parties use them. They are used to allow that third party to provide a service to us, for example analytics. For more information on these cookies and how to disable them, please see:
Internet Advertising Bureau website at http://www.youronlinechoices.com/ where you will be able to opt-out of receiving Interest-Based Advertising cookies from some of the third parties listed below; and/or
If you want to know more about how cookies work and how to manage or delete them, visit the World Wide Web Consortium's website.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by using the details provided below:
Bee Haven Bodycare, 19 Church Lodge, Moneyreagh, Co Down, BT23 6ES
Telephone: 07775 803 226
If you are not satisfied with our response to any enquiries or complaint or believe our processing of your personal data does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) by writing to:
REGIONAL OFFICE - NORTHERN IRELAND
Information Commissioner's Office
14 Cromac Place
Tel: 028 9027 8757 or 0303 123 1114
UK HEAD OFFICE
Information Commissioner's Office
Tel: 0303 123 1113
This policy was last updated in August 2021