Pick Pack Deliver Ltd Customer Privacy Notice
Registered name: Pick Pack Deliver Ltd
We are the controller of your personal data. This privacy notice tells you what to expect us to do with your personal information.
Contact details
Telephone: 0191 487 7838
Email: sales@theprintshoponline.co.uk
What information we collect, use, and why
We collect or use the following information to provide services and goods, including delivery:
Names and contact details
Billing and delivery addresses
Order and transaction information
Payment information required to process your order
When you make a payment through our website, payment card details are processed by our payment providers. We do not store your full payment card details ourselves. Squarespace states that sensitive card data is sent directly to the payment processor's servers.
Lawful bases and data protection rights
Under UK data protection law, we must have a lawful basis for collecting and using your personal information.
Our main lawful basis for collecting and using personal information to provide services and goods is:
Contract – we need to collect and use the information so we can enter into or carry out a contract with you, such as processing your order, taking payment and arranging delivery.
You have rights under UK data protection law, including, where applicable:
Your right of access
Your right to rectification
Your right to erasure
Your right to restriction of processing
Your right to object to processing
Your right to data portability
Your right to withdraw consent where we rely on consent
If you make a request, we will respond without undue delay and, in most cases, within one month.
To make a data protection rights request, please contact us using the contact details above.
Where we get personal information from
We collect personal information directly from you, including when you:
Place an order through our website
Contact us
Provide information needed to fulfil your order
How long we keep information
We keep personal information only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting and reporting requirements.
Customer order and transaction information may be retained for up to 7 years where required for tax and accounting purposes.
We regularly review the personal information we hold and will delete or anonymise information when it is no longer required, unless we have a legal or legitimate reason to retain it. The ICO recommends that organisations establish and document appropriate retention periods and avoid keeping personal data longer than necessary.
Who we share information with
Data processors
Squarespace
Squarespace hosts and operates our website and processes customer information submitted through our website, including information provided when customers place orders or contact us.
Squarespace Payments
Squarespace Payments provides the payment solution for purchases made through our website. It facilitates payment processing and works with payment service providers and other providers to process transactions and support payment security.
Stripe
Stripe provides payment processing services through Squarespace Payments. Stripe processes payment and transaction information to enable customers to make payments for orders placed through our website.
Sift
Sift provides fraud monitoring and detection services in connection with Squarespace Payments. It may process information relating to transactions and customer activity to help detect and prevent fraudulent transactions.
Other organisations we may share personal information with
We may share personal information with:
Organisations we are legally obliged to share personal information with, such as HMRC
Suppliers and service providers where necessary to fulfil customer orders and provide our services
Sharing information outside the UK
Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR and ensure appropriate safeguards are in place.
Squarespace, Inc.
Category: Website hosting and e-commerce service provider
Country: United States
Squarespace states that it may transfer controlled data to the US and relies on the UK Extension to the EU-US Data Privacy Framework for relevant UK transfers.
Stripe, LLC
Category: Payment processing service provider
Country: United States
Stripe states that it participates in the UK Extension to the EU-US Data Privacy Framework and may rely on it for relevant UK-to-US transfers. Alternative safeguards, including the UK International Data Transfer Addendum, may apply where necessary.
Sift
Category: Fraud monitoring and detection service provider
Country: United States and other countries where Sift, its affiliates, service providers or partners operate
Sift states that personal information may be transferred outside the UK, including to the United States, and that appropriate safeguards are used for UK international transfers.
Where our data processors share personal information outside of the UK, they are required to comply with applicable data protection requirements and use appropriate safeguards.
How to complain
If you have any concerns about our use of your personal information, you can make a data protection complaint to us:
Email: sales@theprintshoponline.co.uk
Telephone: 0191 487 7838
If you remain unhappy with how we have used your personal information after raising a complaint with us, you can complain to the Information Commissioner's Office (ICO).
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113