Effective Date: October 4th 2018
CraftBrews.uk cares deeply about the privacy of its visitors/users, and is fully committed to protect their personal information and use it properly in compliance with data privacy laws. This policy describes how we may collect and use personal information, and the rights and choices available to our visitors/users regarding such information.
We strongly urge you to read this policy and make sure you fully understand it, before you access or use any of our services.
1 Please read carefully
2 What information do we collect?
2.1 Visitor and User Information
We collect two types of information regarding our Visitors and Users:
Un-identified and non-identifiable information pertaining to a Visitor or un-identified User, which may be made available to us, or collected automatically via his/her use of the website (“Non-personal Information”). Such Non-personal Information does not enable us to identify the Visitor or User from whom it was collected. The Non-personal Information collected by us mainly consists of technical and aggregated usage information, such as Visitors’ and Users’ browsing and ‘click-stream’ activity on the Website, session heat maps and scrolls, non-identifying information regarding the Visitor’s or User’s device, operating system, internet browser, screen resolution, language and keyboard settings, internet service provider, referring/exit pages, date/time stamps, etc.
Individually identifiable information, namely information that identifies an individual or may with reasonable efforts cause the identification of an individual, or may be of private or sensitive nature (“Personal Information”). The Personal Information collected by us mainly consists of contact details (e.g., e-mail address or phone number), billing details (name, physical billing address, payment method and transaction details), which are only collected from Users making purchases on the website, details regarding a browsing or usage session (IP address, Geo-location and/or device unique identifier), details regarding connected third party accounts (such as the e-mail or username for a connected PayPal, Google or Facebook account), scanned identification documents provided to us (such as an ID card, driver’s license, passport or official company registration documents), correspondences and any other Personal Information provided to us by Visitors and/or Users through their access to and/or use of the Website. For the avoidance of doubt, any Non-personal Information that is connected or linked to Personal Information (for example, in order to improve the Services we offer) is deemed and treated by us as Personal Information, as long as such connection or linkage exists.
3 How do we collect such information?
There are two main methods we use:
We collect information through your use of the website. When you visit or use our website, including when you browse the Website , register a User Account, upload information and content, we are aware of it and will usually gather, collect and record such uses, sessions and related information, either independently or with the help of third-party services as detailed in Section 6 below, including through the use of “cookies” and other tracking technologies, as further detailed in Section 7 below.
We collect information which you provide us voluntarily. For example, we collect the Personal Information you provide us when you place purchases, when you submit or upload content and/or when you contact us directly by any communication channel (e.g., emails).
We also collect information from third party sources as described in Section 6 below.
4 Why do we collect such information?
We collect such Non-personal and Personal Information for the following purposes:
To provide and operate the Website;
To further develop, customise and improve our Website, based on Visitors’ and Users’ common or personal preferences, experiences and difficulties;
To be able to contact our Visitors and Users with general or personalised service-related notices and promotional messages (as further detailed in Section 8 below);
To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we may use to provide and improve our Website;
To enhance our data security and fraud prevention capabilities and
To comply with any applicable laws and regulations.
We will only use your Personal Information for the purposes set out in Section 4 where we are satisfied that:
our use of your Personal Information is necessary to comply with a relevant legal or regulatory obligation that we have, or
our use of your Personal Information is necessary to support legitimate interests that we have as a business (for example, to maintain and improve our Website by identifying user trends and the effectiveness of Craft Brews campaigns and identifying technical issues), provided it is conducted at all times in a way that is proportionate, and that respects your privacy rights.
No one under age 18 should provide any Personal Information to us through any of our Websites. We do not knowingly collect Personal Information from children under 18. Parents and guardians should supervise their children's activities at all times.
5 Where do we store your information?
Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
6 Sharing personal information with third parties
Craft Brews may share your Personal Information with third parties (or otherwise allow them access to it) only in the following manners and instances:
6.1 Third Party Services:
We do not share your Personal Information with Third Party Services.
6.2 Law Enforcement, Legal Requests and Duties:
Where permitted by local data protection laws, Craft Brews may disclose or otherwise allow others access to your Personal Information pursuant to a legal request, such as a subpoena, legal proceedings, search warrant or court order, or in compliance with applicable laws, if we have good faith belief that the law requires us to do so, with or without notice to you.
6.3 Protecting Rights and Safety:
Craft Brews may share your Personal Information with others if we believe in good faith that this will help protect the rights, property or personal safety of Craft Brews, any of our Users, or any member of the general public, with or without notice to you.
6.4 Social Media Features and Framed Pages:
Our Website include certain Social Media features and widgets, such as the “Facebook Like” button, the “Share this” button or other interactive mini-programs (“Social Media Features”).These Social Media Features may collect information such as your IP address or which page you are visiting on our Website, and may set a cookie to enable them to function properly. Social Media Features are either hosted by a third party or hosted directly on our Services. Your interactions with these third parties’ Social Media Features are governed by their policies and not ours.
In addition, our Website may enable you to share your Personal Information with third parties directly, such as via page framing techniques to serve content to or from Third Party Services or other parties, while preserving the look and feel of our Website and Services (“Frames”). Please be aware that if you choose to interact or share any Personal Information via such Frames, you are in fact providing it to these third parties and not to us, and such interactions and sharing too are governed by such third parties’ policies and not ours.
6.5 Craft Brews Subsidiaries and Affiliated Companies:
In addition, should Craft Brews or any of its affiliates undergo any change in control, including by means of merger, acquisition or purchase of substantially all of its assets, your Personal Information may be shared with the parties involved in such event. If we have good faith that such change in control might materially affect your Personal Information stored with us, we will notify you via e-mail and/or prominent notice on our Website of this event and certain choices you may have regarding your Personal Information.
To clarify, Craft Brews may share your Personal Information in manners other than as described above, pursuant to your explicit approval, or if we are legally obligated to do so. Moreover, Craft Brews may transfer, share, disclose or otherwise use Non-personal Information in its sole discretion and without the need for further approval.
Craft Brews, together with its marketing, analytics and technology partners, uses certain monitoring and tracking technologies (such as cookies, beacons, pixels, tags and scripts). These technologies are used in order to maintain, provide and improve our Services on an ongoing basis, and in order to provide our Visitors and our Users with a better experience. For example, thanks to these technologies, we are able to maintain and keep track of our Visitor’s and Users’ preferences and authenticated sessions, to better secure our Services, to identify technical issues, user trends and effectiveness of campaigns, and to monitor and improve the overall performance of our Website.
Cookies: In order for some of these technologies to work properly, a small data file (“cookie”) must be downloaded and stored on your device. By default, we use several persistent cookies for purposes of session and user authentication, security, keeping the User’s preferences (e.g., regarding default language and settings), connection stability (e.g., for uploading media, using e-Commerce features, etc.), monitoring performance of our website and marketing campaigns, and generally providing and improving our website.
If you want to delete or block any cookies, please refer to the help and support area on your internet browser for instructions on how to locate the file or directory that stores cookies. Please note that deleting our cookies or disabling future cookies or tracking technologies may prevent you from accessing certain areas or features of our Website, or may otherwise adversely affect your user experience.
Clear Gifs: We and certain Third Party Services may employ a software technology called “clear gifs” (a.k.a. Web Beacons/Web Bugs), which enables them and us to improve our Website by measuring their effectiveness and performance. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, however are not stored on your device, but instead embedded within Services.
Flash and HTML5: We and certain Third Party Services may also employ certain tracking technologies known as “Flash cookies” and “HTML5”, mainly for advertising purposes. Various browsers may offer their own management tools for removing or blocking such technologies. Additional information about managing Flash cookies is available here.
(Please note that this website is not provided by Craft Brews and we therefore cannot ensure its accuracy, completeness or availability).
Behavioral Targeting/Re-Targeting: Certain Third Party Services and ad networks may display advertising on our Website, or manage our advertising on other websites. Such parties may use certain tracking technologies to collect certain information about your activities on the Services and different third party Services to provide you with targeted advertising based on your interests and preferences. You may opt-out of receiving targeted ads from certain advertisers and ad networks by clicking here (or if you are located in the European Union click here (provided by YourChoicesOnline.eu). Please note this does not opt you out of receiving all advertising and that your opt-out will only be in relation to the specific advertising. You will continue to receive advertising for which you have not opted out.
User Data Supplementation: We may receive information about you from other sources, including publicly available databases or third parties from whom we have purchased data, and combine this data with information we already have about you. This helps us to update, expand and analyse our records, identify new customers, and provide products and Services that may be of interest to you. Where we obtain your Personal Information from these third parties, we ensure that such parties are contractually committed to inform you that your Personal Information will be disclosed to us and we take steps to ensure the accuracy of your Personal Information before using it. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us.
“Do Not Track” Signals: Please note that we do not change our practices in response to a “Do Not Track” signal in the HTTP header from a browser or mobile application.
8 Communications from Craft Brews
8.1 Promotional Messages:
We may use your Personal Information to send you promotional content and messages by e-mail, text messages, direct text messages and similar forms of communication from Craft Brews or our partners (acting on Craft Brews behalf) through such means.
If you do not wish to receive such promotional messages or calls, you may notify Craft Brews at any time or follow the “unsubscribe” or STOP instructions contained in the promotional communications you receive.
We take steps to limit the promotional content we send you to a reasonable and proportionate level, and to send you information which we believe may be of interest or relevance to you.
8.2 Service and Billing Messages:
Craft Brews may also contact you with important information regarding our Website, or your use thereof.
For example, we may send you a notice (through any of the means available to us) if a certain Website is temporarily suspended for maintenance; send you reminders or warnings regarding upcoming or late payments for your current or upcoming subscriptions; forward abuse complaints regarding your User Website; or notify you of material changes in our Website.
It is important that you are always able to receive such messages. For this reason, you are not be able to opt-out of receiving such Service and Billing Messages unless you are no longer a Craft Brew Visitor or User (which can be done by deactivating your account).
9 Your rights in relation to your personal information
It is imperative that you have control over your Personal Information. That’s why Craft Brews is taking steps to enable you to receive a copy of, update, amend, delete, or limit the use of your Personal Information.
Before disclosing the requested Personal Information, we may ask you for additional information in order to confirm your identity and for security purposes. We reserve the right to charge a fee where permitted by law (e.g., if your request is unfounded or excessive).
You have the right to file a complaint with your local supervisory authority for data protection (but we still recommend that you contact us first).
If you are a Craft Brew Visitor or User, and you wish to receive a copy and/or request us to make corrections to the Personal Information that you have stored with us, or wish to request a list of what Personal Information (if any) pertaining to you we disclosed to third parties for direct marketing purposes, please follow email us at firstname.lastname@example.org or write to us with your request to Craft Brews Ltd, 1 Park Road, Hampton Wick, Kingston Upon Thames, Surrey, KT1 4AS.
We will make all reasonable efforts to honour your request promptly (unless we require further information from you in order to fulfill your request), subject to legal and other permissible considerations.
Please note that permanently deleting your Craft Brews account erases all of your information from Craft Brews databases. After completing this process, you can no longer use any of your Craft Brews services, your account and all its data will be removed permanently, and Craft Brews will not be able to restore your account or retrieve your data in the future.
10 Data Retention
We may continue to retain such Personal Information even after you deactivate your User Account and/or cease to use any particular Websites, as reasonably necessary to comply with our legal obligations, to resolve disputes regarding our Users, prevent fraud and abuse, enforce our agreements and/or protect our legitimate interests.
We maintain a data retention policy which we apply to information in our care. Where your Personal Information is no longer required we will ensure it is securely deleted.
Craft Brews website is hosted on Wix.com. Wix.com have implemented security measures designed to protect the Personal Information you share with us, including physical, electronic and procedural measures. Among other things, we offer HTTPS secure access to most areas on our Website; the transmission of sensitive payment information (such as a credit card number) through our designated purchase forms is protected by an industry standard SSL/TLS encrypted connection; and we regularly maintain a PCI DSS (Payment Card Industry Data Security Standards) certification. We also regularly monitor our systems for possible vulnerabilities and attacks, and regularly seek new ways and Third Party Services for further enhancing the security of our Services and protection of our Visitors’ and Users’ privacy.
Regardless of the measures and efforts taken by Wix.com, we cannot and do not guarantee the absolute protection and security of your Personal Information, your Information or any other User Content you upload, publish or otherwise share with Craft Brews or anyone else.
We therefore encourage you to set strong passwords for your User Account and User Website, and avoid providing us or anyone with any sensitive information of which you believe its disclosure could cause you substantial or irreparable harm. Furthermore, because certain areas on our Website are less secure than others and since e-mail and instant messaging are not recognised as secure forms of communications, we request and encourage you not to share any Personal Information on any of these areas or via any of these methods.
If you have any questions regarding the security of our Services, you are welcome to contact us at email@example.com.
12 User content
Our Website may offer publicly accessible blogs / communities. Please be aware that any information you provide in any such areas may be read, collected, and used by others who access them. To request removal of your Personal Information from our blogs / communities, feel free to contact us at: firstname.lastname@example.org. In some cases, we may not be able to remove your Personal Information from such areas. For example, if you use a third party application to post a comment (e.g., the Facebook social plugin application) while logged in to your related profile with such third party, you must login into such application or contact its provider if you want to remove the Personal Information you posted on that platform.
In any event, we advise against posting any information (or use any posting means to post information) you don’t wish to publicise on these platforms.
If you upload any User Content to the Website and provide it in any other way as part of the use of any Service, you do so at your own risk.
We have put adequate security measures in place to protect your Personal Information. However, we cannot control the actions of other Users or members of the public who may access your User Content, and are not responsible for the circumvention of any privacy settings or security measures you or we may have placed on our Website (including, for instance, password-protected areas on our Website). You understand and acknowledge that, even after its removal by you or us, copies of User Content may remain view-able in cached and archived pages or if any third parties (including any of your Users-of-Users) have copied or stored such User Content. To clarify, we advise against uploading or posting any information you do not wish to be public.
13 Updates and interpretation
14 Contacting us
You may also contact us by post at: Craft Brews Ltd, 1 Park Road, Hampton Wick, Kingston Upon Thames, Surrey, KT1 4AS.