When you make a purchase, or attempt to make a purchase, through our website we collect certain information from you, such as your name, email address, phone number, billing address, shipping address, payment information and the product you have chosen. This information is ‘order information' and is submitted by you when placing an order or if you sign up for marketing information.
We may also collect information such as your name and your contact details if you contact us via email with a query or for any other purpose that relates to Take the Biscuit and may involve us corresponding with you.
We automatically collect some information about you when you visit the website. This includes information about your web browser, IP address, time zone, frequency with which you access the website and the way in which you interact with it.
We use the order information that we collect from you in order to process and fulfil any orders you place through the website (including processing payments, arranging shipping and providing confirmation if required) and to provide customer support.
If you sign up for marketing communications or newsletters then we will also use your name and email address in order to send you this information.
Information that is automatically collected about your device may be used to help us screen for potential risk and fraud and to help us understand how to improve and optimise our site.
We will share your order information with a third party payment provider (see below) who process payments made over the internet, to enable the processing of a user's order, payment and refund.
Our Online Store is hosted by Ecwid which allows our users to make purchases and submit data in a secure manner. Ecwid is always run using a secure HTTPS connection and is PCI DSS Level One Certified, which is the highest international standard for secure data exchanges for online stores and payment systems. All payments are processed using WePay using a secure protocol. Ecwid does not store your financial information.
Any third party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us and which allow us to fulfil the processing of your order and your receipt of it.
Any third party providers will have their own privacy policies and we direct you to their websites and policies in order for you to understand how they might use that data.
In addition, we may also share your information to comply with applicable laws and regulations, and if we have good reason to believe that it is necessary to: a) respond to legal process and to government requests; b) enforce our agreements, terms and policies; c) prevent, investigate and address fraud or other illegal activity; or d) protect the rights, property and safety of our customers or others.
We may store and process you information through third-party hosting services in the US and other jurisdictions. As a result, we may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If we are deemed to transfer information about you outside of the EU, we rely on Privacy Shield as the legal basis for the transfer as Google Cloud is Privacy Shield Certified.
When you place an order through our website we will maintain your order information for our records for the length of time necessary to fulfil your order. We may require to keep this information longer for legal and regulatory obligations. We will retain it as long as necessary for this purpose unless you ask us to delete it. If you want us to delete your information please contact us using the details below.
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. You have the right to access the information we hold about you and to ask that this information be corrected, updated or deleted. If you would like to exercise these rights you should contact us using the contact details below.
For purposes of EU Data Protection Laws, Rachel Kitchen and Tobias Showan (T/A Take the Biscuit) is the data controller of your personal information.