Document Date
24 August 2024
POWERFUL SIGNATURE ('We' and 'The Business') is subjected to the GDPR Governance applicable to businesses less then 250 staff and subjected to the UK Data Protection Act.
Additional information
Known as "various types of Data" or "various types of Data" as specified in the Privacy Policy of the service" with details not specifically mentioned in the main clause. The details in the main clause offered, as the Privacy Policy and Cooky Consent and a service managed by Iubenda (at https://www.iubenda.com), is accessible via the 'Privacy Policy' button on all pages of this website. Iubenda is third party where all click actions related to the GDPR and Cookie Consent are recorded.
EU zone
We do no longer sell to the EU, the Order and Delivery page showing the Postal Zone details shows the zones to which We are selling to.
Logs
Your IP address is logged when you access The Business web shop and is not used for anything else then the function of the website to be able to communicate or, where needed, to prevent fraudulent activities.
Emails
The Business does not share your email address with anyone else then the payment provider, you email address is solely used for the purpose to exchange communication with the shop. Your email is not used for any other purpose. Emails containing your personal details for an order, purchase or servicing, personal comments are kept to a maximum of 2 years which is the Makers Guarantee period. Other emails not essential for record keeping of a purchase will be deleted after 1 year.
Payment information
Your purchase details are solely used for the ordering and the delivery of goods, this is not shared with anyone then the payment transaction provider. Your delivery address is shared with the postal service and the product specification is shared with the postal service where applicable by the courier for the purpose of sending goods as required under the national and international laws.
Online purchases
The invoice process takes place via the payment providers offered where the transactions and your personal details are stored under their GDPR policies. Your buying and shipment details on this website are readable to you and The Business only. Purchase data, which are the detials you used to make a purchase, your email address, name, phone number , shipping/billing address is retained under the retention policy.
Your card details are not used when placing an order on The Business website. We use your email address, the shipping and billing address, for the ordering. You receive an invoice email from the payment provider chosen under the name of POWERFUL SIGNATURE - VANNIGTEVECHT. The final invoice payment is then managed between you and the payment providers who handle their own compliance and GDPR.
In person purchases
Your purchase needs to be recorded for legal and tax reasons. The cash payment will be recorded on The Business shop website either using a name, a telephone number or email address. Payments via Cards will be recorded on The Business shop website legal and tax reasons and as required by the Payment Provider which is governed by their GDPR rules. Purchase data, which can be a name, phone number or email address is retained under the retention policy.
You address and payment details
Amending your shipping and billing address is the customer responsibility. You can add, amend and delete the addresses you submitted on the website. The first address only appears after placing an order in your online PS account, an abandoned incomplete order may also lead to saving your shipping and billing address. In that case you can delete this via your account page or request this to be deleted.
Other data retained
Certificates of products are part of product guarantee and provenance, this contains on the website no personal data, it only contains information to confirm that the certificate is genuine. A Pen certificate which contains personal information will be destroyed after 5 years. Certificates using NFT do not contain personal information.
Retention Policy
The following policy is in place related to data retention and removal:
- An unused account created by the customer will be after 1 year anonymised. However, we have to keep the sales data related to the products which contains customer information.
- Customers initiating an online order and not completing this, will be cancelled after 30 days from initiating.
- Customers with an account can delete cancel the account at any time in the Customer Account menu "Edit".
- The account of Customers who placed an online order and registered on The Business website is retained as sales data.
- Customers who placed an order as Guest on The Business website have no account, only the purchase details are retained for tax purposes.
- Customers with blocked accounts will be contacted after 7 days, at the discretion of The Business, before the account will be removed.
- Fraudulent activities will be kept to protect the business for future checking processes or required to retain by law.
- An account cannot not be deleted if there is a legal enforcement placed on the account by the Government Authority, but will be deleted within 14 days when the data is no longer required to remain available.
External Providers
Google Analytics is not used on this website.
Do not track preferences
Do not track is a function that allows visitors to opt out from being tracked by websites for any purpose including the use of analytics services, advertising networks and social platforms. Do not track options are available in a number of browsers including:
Anonymous browsering visitors cannot be traced back to a person. Users who logged in are tracked only within the site for performance reasons and site use statistics. We do not use ID tracking, we do use DNS checking for email verifications.
If you have disabled all cookies from your browser, we will still collect some general data about your browsing (e.g. a record as a visitor to our website, the pages visited) but they will be less accurate.
Crawling
Crawling the Services is allowed if done in accordance with the provisions of our robots.txt file, but scraping the Services is prohibited. Violating this may lead to legal action and abusive crawling details are logged.
Complaint handling
Which kinds of personal data does the website process?
The Business processes the personal data submitted by website visitors to create the final email invoice which will be send from the payment provider system. You have to properly identify yourself when placing a complaint. This must include billing and shipping name(s), address(e)s, email, used on the website and where applicable the phone numbers details as well as the content of the allegations (insofar as the latter qualify as personal data).
Who may receive my personal data?
The case file containing your personal data is only accessible the shop owner who is also the website administrator.
What are my rights?
You are entitled to access the personal data we holds about you and to have them rectified where necessary. You a can access this in your personal account. In certain cases, you also have the right to have your data erased, or object, you can raise a request via the contact page. Please note payment processing goes via the payment providers, we only use registration details for the purpose of contact and deliveries. Contact details are used to create and invoice via payment providers as mentioned on the checkout.
To exercise any of these rights, please contact The Business using our prepared page when you are a register user. We will reply to confirm we have received this within 3 days and complete the process within three months. Please note that in some cases restrictions under Article 20 of the Regulation may apply.
How long do you keep my data?
The Business keepa log files - including your personal data such as name, address and contact details for up to 2 years for support related to the Makers Guarantee, or longer for legal purposes where needed bur will be removed within 14 days when no longer needed.
What happens if I request my data to be removed?
After deleting all your details, which is your name, address(es), email address(es), phone number(s), anything in the data which identifies you, it will no longer be possible for The Business to contact you. The only reference left is a case number as reference of the completion of a deletion request.
Who can I contact?
You can contact The Business via the website contact page.
Changes of this document
We reserve the right to update or revise this additional GDPR at any time without notice. Please check the GDPR periodically for changes. The revised content will be effective immediately as soon as they are posted on the WebSite.