Straw Bag Company Privacy Policy

Introduction

1.1 The Straw Bag Company ("we", "us", "our") is committed to safeguarding the privacy of our customers and website visitors. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.2 By accessing or using our website, www.strawbagcompany.com ("Website"), or purchasing our products, you agree to the collection and use of your personal data as outlined in this policy.

1.3 This Privacy Policy applies to:

Visitors to our Website.
Customers who purchase from us.
Individuals who communicate with us via email, phone, or social media.
Subscribers to our marketing communications.
International customers purchasing or browsing from outside the UK.

Information We Collect

2.1 Personal Data
We may collect and process the following personal data:

Identity Data: Includes your first name, last name, username or similar identifier, title, date of birth, and gender.
Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
Financial Data: Includes payment card details; however, we do not store full payment card information as payments are processed securely via Stripe.
Transaction Data: Includes details about payments to and from you and other details of products you have purchased from us.
Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Website.
Profile Data: Includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
Usage Data: Includes information about how you use our website, products, and services.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

2.2 Special Categories of Personal Data
We do not intentionally collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). If such data is ever required for a legitimate reason, we will obtain explicit consent from you.

How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

Direct Interactions: You may provide us with your Identity, Contact, and Financial Data by
filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data
you provide when you
- Purchase our products or services.
- Create an account on our website.
- Subscribe to our newsletter.
- Request marketing to be sent to you.
- Enter a competition, promotion, or survey.
- Give us feedback or contact us.
Automated Technologies or Interactions: As you interact with our website, we may automatically
collect Technical Data about your browsing actions and patterns using cookies, server logs, and similar
technologies. (See Section 7 for more details on cookies.)
Third Parties or Publicly Available Sources: We may receive personal data about you from
various third parties, including
- Analytics providers such as Google Analytics (Technical Data).
- Payment providers such as Stripe (Transaction Data).
- Shipping partners such as EMS (Contact and Delivery Data).
- Advertising networks and marketing service providers (Marketing Data).
- International shipping partners for deliveries outside the UK.

How We Use Your Data

We use your personal data for the following purposes:

Order Processing & Fulfilment:To process and deliver your purchases, including payment processing, order confirmations, and shipping updates.
Customer Support:To respond to queries, manage complaints, and provide technical assistance.
Marketing & Promotions:To send you updates on new products, special offers, and promotions (only if you have opted in).
Account Management:To enable users to create and manage accounts for an improved shopping experience.
Legal Compliance:To comply with legal and regulatory obligations, including tax and fraud prevention.
Website Analytics:To monitor Website traffic, improve user experience, and optimise services.
Security & Fraud Prevention:To protect against fraudulent activities, account misuse, and unauthorised access.

International Data Transfers

5.1 Customers outside the UK should be aware that their personal data may be transferred to and processed in the UK, where our servers are located.

5.2 Where data is transferred outside of the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or data protection agreements with our partners.

5.3 Customers purchasing from outside the UK agree to the transfer and processing of their data in compliance with applicable UK laws.

Your Rights

Under UK data protection laws (UK GDPR), you have the following rights:

Access: Request a copy of your personal data we hold.
Correction: Update or correct inaccurate personal details.
Deletion: Request deletion of your data, subject to legal requirements.
Objection: Object to data processing for marketing purposes.
Data Portability: Request your data in a structured format.
Withdraw Consent: Opt out of marketing communications at any time.
Lodge a Complaint: You have the right to file a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has not been handled in compliance with UK GDPR.

To exercise your rights, please contact us at sales@strawbagcompany.co.uk.

Cookies and Tracking Technologies

7.1 Our Website uses cookies to enhance user experience, analyse website traffic, and support marketing efforts.

7.2 Types of cookies used:

Essential Cookies:Required for website functionality (e.g., cart storage, account login).
Analytics Cookies:Help us understand visitor behaviour and improve the Website.
Marketing Cookies:Used for personalised ads and promotions.

7.3 You can manage your cookie preferences via your browser settings.

Data Security

8.1 We implement strict security measures to protect your personal data against unauthorised access, alteration, or disclosure.

8.2 Secure Socket Layer (SSL) encryption is used to safeguard transactions.

8.3 Access to personal data is restricted to authorised personnel only.

Third-Party Links

9.1 Our Website may contain links to external sites. We are not responsible for their privacy practices and encourage users to review their privacy policies.