Last updated: 10th January 2021

 

Sarah's attic (“us”, “we”, or “our”) operates https://sarahsattic.co.uk/ (the “Site”). This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site.

 

We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy. We collect, use, and are responsible for certain personal information about you. In doing so we are regulated under the General Data Protection Regulation (GDPR), which applies across the European Union (EU), and we are responsible as ‘controller’ of that personal information for the purposes of those laws.

 

Information Collection And Use

​

While using our Site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally, identifiable information may include but is not limited to your name (“Personal Information”).

 

Log Data

​

Like many site operators, we collect information that your browser sends whenever you visit our Site (“Log Data”).

​

This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics.

​

In addition, we may use third party services such as Google Analytics that collect, monitor and analyse this. 

 

3rd Parties and International Transfers

​

We use third parties for the delivery of our service and therefore from time to time your information will be passed onto third parties for that purpose.

​

The third parties that we use for the delivery of our services and references to their privacy policies are:

​

Square Up - Privacy Policy for Users Who Apply or Sign Up for a Square Account (squareup.com)

PayPal - Privacy Statement for PayPal Services

Wix

​

Our company is hosted on the Wix.com platform. Wix.com provides us with an online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall. 

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

​

PCI Compliance

Wix is Payment Card Industry Data Security Standards (PCI DSS) compliant and is accredited as a level 1 service provider and merchant. 

The PCI DSS is an information security standard for organizations or companies that accept credit card payments. This standard helps to create a secure environment by increasing cardholder data, thus reducing credit card fraud. For more information about PCI compliance click here. 

​

ISO Compliance:

ISO 27001 Compliance
Wix has been audited and certified as ISO 27001 compliant. The ISO 27001 certification outlines industry best practices for managing security risks. 

ISO 27018 Compliance
Wix has been audited and certified as ISO 27018 compliant. The ISO 27018 certification outlines industry best practices for handling personally Identifiable Information (PII) in a public cloud computing environment.

​

TLS Certification

Wix uses Transport Layer Security (TLS) encryption to help protect your online financial transactions.

​

Beyond this, we do not and will not sell your information to other parties for any purpose, we will share your information with law enforcement organisations or others such as the NHS where we have a vital interest to do so or a legal obligation.

​

When your personal data needs to be transferred to an overseas country or organisation that is not part of the EEA (European Economic Area), we will always ensure that there are adequate levels of protection and similar legislation with regards to data protection. Each country might have different laws and regulations with regards to data protection, however, we will always ensure that the country and/or organisation of destination always has appropriate measures in place to safeguard your data.

The information we process is stored within the EEA.

 

Communications

​

We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information about Sarah's Attic. You may unsubscribe from marketing communications at any time via the link in your email’s footer. Contact will be made with you regarding orders you have placed when your subscription rolls over, and confirmation of your unsubscription if you decide to do so. 

​

Information collected via email marketing campaigns is used to refine future email campaigns and supply the user with more relevant content based on their activity.

 

Cookies

​

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.

​

Like many sites, we use “cookies” to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our site.

 

Security

​

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

 

External links

​

Although this website only looks to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website. (External links are clickable text/banner/image links to other websites)

​

The owners of this website cannot guarantee or verify the contents of any externally linked website despite their best efforts.

​

Users should therefore note they click on external links at their own risk and this website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.

 

Shortened Links in Social Media

​

This website and its owners through their social media platform accounts may share web links to relevant web pages. By default, some social media platforms shorten lengthy URLs (this is an example: http://bit.ly/zyVUBo).

​

Users are advised to take caution and good judgement before clicking any shortened URLs published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine URLs are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.

​

Social Media Platforms have their own privacy policies and terms and conditions, please ensure you read these to understand how they use your data.

​

Users are advised to use social media platforms wisely and communicate/engage with them with due care and caution in regard to their own privacy and personal details.

​

This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

​

This website may use social sharing buttons that help share web content directly from web pages to the social media platform in question.

 

Marketing

​

We will eventually like to send you marketing information about new items, events and more. Where we have your consent, this will be done by email. 

​

If you have previously agreed to be contacted by Sarah's Attic marketing communications, but wish to unsubscribe, you can do so by contacting us at sarahsatticshop@gmail.com, or clicking unsubscribe at the bottom of any of our emails. 

 

Changes To This Privacy Policy

​

This Privacy Policy is effective as of 10 January 2021 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

​

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgement of the modifications and your consent to abide and be bound by the modified Privacy Policy.

​

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us or by placing a prominent notice on our website.

 

Contact Us

​

If you have any questions about this Privacy Policy, please contact us at sarahsatticshop@gmail.com. We hope that any queries can be quickly resolved.