About Our Privacy Policy
At Starry Sky Poster, we take your privacy very seriously. We only process personal data that is necessary for the improvement of our services, and we handle the information we collect with the utmost care. We never sell or share your data with third parties for commercial purposes without your explicit consent.
This privacy policy applies to the use of the website and services provided by Starry Sky Poster. The effective date of this policy is 29/08/2019. Any new version of this policy will replace previous versions. This document explains what personal information we collect, how we use it, and under what circumstances we may share it with third parties. It also outlines how we store and protect your data, and what rights you have over the personal data you provide to us.
If you have any questions about this privacy policy, please contact our Data Protection Officer. You will find the contact details at the end of this document.
Data Processing Overview
Below is an overview of how we process your data, where we store it, which security measures are in place, and who has access to your data.
What Personal Data We Collect and Why
1. Webshop Software
WooCommerce
Our webshop is developed using WooCommerce, and it is hosted on our own server. We have implemented appropriate technical and organizational measures, such as SSL encryption and strong password policies, to prevent unauthorized access, data loss, or corruption. Regular backups are made to ensure data integrity.
2. Web Hosting
EPIA
We use the hosting services of Epia. Personal data is processed by Epia on our behalf but is not used for their own purposes. Metadata about the use of their services may be collected, but this does not include personal information.
3. Email and Mailing Lists
MailChimp
We use MailChimp for sending newsletters. Your data is processed in a secure environment and is never shared for third-party commercial purposes. You can opt-out of our newsletters by using the unsubscribe link included in each email.
Gmail
Our regular email traffic is handled by Gmail, which implements security measures to ensure the confidentiality and integrity of your data.
4. Payment Processors
Mollie
We use Mollie for processing payments. Mollie may process your payment information, such as your bank details. They are committed to keeping your data secure and do not retain your information longer than legally required.
5. Reviews
Trustpilot
We collect product reviews through Trustpilot. If you leave a review, Trustpilot may request your name, location, and email address, which are then shared with us. These details help us verify your order and publish your review.
6. Shipping and Logistics
PostNL
To deliver your orders, we share your name, address, and location with PostNL, which uses this information solely to carry out the delivery. Subcontractors may also receive your data for the same purpose.
Purpose of Data Processing
1. General Purpose
We only process personal data to provide our services. This includes fulfilling your orders and any related customer service activities. We do not use your data for marketing without your explicit consent.
2. Automatically Collected Data
Our website may automatically collect technical data, such as your IP address, browser type, and operating system, to improve user experience. This information is not linked to any personally identifiable information.
3. Legal Obligations
In some cases, we may be legally obligated to share your data for tax or criminal investigations. We will always ensure such sharing is in line with legal requirements.
Your Rights
1. Access, Rectification, and Erasure
You have the right to request access to, rectification of, or deletion of your personal data. If you wish to exercise any of these rights, please contact our Data Protection Officer. We will respond within 30 days of receiving your request.
2. Right to Restrict Processing
You may request that we restrict the processing of your personal data in certain situations, such as if the data is inaccurate or unlawfully processed.
3. Data Portability
You have the right to request the transfer of your personal data to another organization in a structured, commonly used, and machine-readable format.
4. Right to Object
You may object to the processing of your personal data at any time, including the use of your data for direct marketing.
Cookies
1. Google Analytics
Our website uses Google Analytics to analyze how visitors use the site. Google may collect data on your browsing behavior, which it may combine with other data sources for marketing purposes. You can opt out of Google Analytics by adjusting your cookie preferences. Learn more about how Google processes your data by visiting their Privacy & Terms page.
2. Third-Party Cookies
Some third-party services, such as social media plugins or embedded content, may place cookies on your device. You will be informed about these cookies and given the option to consent before they are placed.
Data Transfer Outside the EU
We may transfer your data outside the European Union if required by our service providers. In such cases, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission.
Changes to This Policy
We reserve the right to update this privacy policy at any time. The most recent version will always be available on our website. If significant changes are made that affect how we handle your personal data, we will notify you via email.
Contact Information
If you have any questions or wish to exercise your rights regarding your personal data, please contact our Data Protection Officer at:
Starry Sky Poster
info@starryskyposter.com
