SECURITY & PRIVACY NOTICE

Safety Online

It is safe to shop at the Fundwaste Shop with your credit or debit card. We have our own built in security and controls and those form our Shopping host, Shopify.com.

We promise to keep your name, address, credit card details and any other information you give us secure.

Our secure server encrypts your personal information, including credit or debit card number, name and address, before it is sent over the Internet.

Your card details are presented directly to the bank for clearance and are not stored.

When you click the ‘Check out’ button, you enter the secure section of the site. 

Checking broswer security

When you are in the checkout, you will see the URL begins with https and also see a locked padlock in the address bar of your Web browser, showing that you are in the secure area.

Once your order has been processed securely online, we do not keep any record of your credit card details.

Your card details are verified automatically online through the secure Shopify payment gateway.

We are happy to answer any questions you have about secure shopping with us. Click here to contact us.

Our Privacy Policy

The Fundwaste Privacy policy prioritises your needs and interests.

When we are looking after your data, our focus is on cybersecurity. We know how important your information is to you, and we promise to collect, process, store and share your data safely and securely.

We respect your privacy and security as much as you do. When you shop with us, we will only ask for personal information such as your name, email address, billing address, product selections, credit card or other payment information in order to send out your goods in a timely manner.

We may also collect information about where you are on the Internet (such as the website you came from, IP address, domain types eg .co.uk and .com), your browser type, the country where your internet service provider is located, the pages of our site that were viewed during your visit, and any search terms that you used.

We may also need to share your data with our trusted payment, fraud control and marketing partners. This will only ever be shared where necessary and always in a safe and secure way.

Once your order has been processed securely online, we do not keep any record of your credit card details.

Privacy and Personal data protection

In our everyday business operations we make use of a variety of data about visitors, including data about:

• Customers
• Users of our websites
• Subscribers to our newsletters
• Other stakeholders

In collecting and using this data, we are subject to a variety of new legislation controlling how such activities may be carried out and the safeguards that must be put in place to protect it.

The purpose of this policy is to set out the relevant legislation and to describe the steps we take to ensure that we comply with it.

This control applies to all systems, people and processes that constitute our information systems, including directors and employees who have access to our systems.

The following elements of the GDPR legislation are relevant to this Notice:

• Data Protection Impact Assessment Process
• Personal Data Mapping Procedure
• Legitimate Interest Assessment Procedure
• GDPR Roles and Responsibilities
• Records Retention and Protection Policy

To find out more about the details of how we protect, process, use and share your data, click to read the sections below:

Data Protection Regulation

The General Data Protection Regulation 2016 (GDPR) is one of the new pieces of legislation affecting the way that we carry out our information processing activities. Significant fines are applicable if a breach is deemed to have occurred under the GDPR, which is designed to protect the personal data of citizens of the European Union. It is our policy to ensure that our compliance with the GDPR and other relevant legislation is always clear and demonstrable.

The data subject – i.e. you - also has rights under the GDPR. These consist of:

1. Your right to be informed
2. Your right of access
3. Your right to rectification
4. Your right to erasure
5. Your right to restrict processing
6. Your right to data portability
7. Your right to object
8. Your rights in relation to automated decision making and profiling.

Each of these rights are supported by appropriate procedures within Fundwaste that allow the required action to be taken within the timescales stated in the GDPR.

These timescales are as follows:

Your request	Timescale to respond
The right to be informed	When data is collected (if supplied by you) or within one month (if not supplied by you)
The right of access	One month
The right to rectification	One month
The right to erasure	Without undue delay
The right to restrict processing	Without undue delay
The right to data portability	One month
The right to object	On receipt of objection
Rights in relation to automated decision making and profiling	Not specified

Lawfulness of Processing

There are six alternative ways in which the lawfulness of a specific case of processing of personal data may be established under the GDPR. It is our policy to identify the appropriate basis for processing and to document it, in accordance with the Regulation. Three of the six options that apply to us are described briefly as follows:

Consent

Unless it is necessary for a reason allowable in the GDPR, we will always obtain explicit consent from you to collect and process your data. Transparent information about our usage of your personal data will be provided to you at the time that consent is obtained and your rights about your data explained, such as the right to withdraw consent. This information will be provided in an accessible form, written in clear language and free of charge.

Performance of a Contract

Where the personal data collected and processed are required to fulfil a contract with you, explicit consent is not required. This will often be the case where the contract cannot be completed without the personal data in question e.g. we can't deliver to you without an address to deliver to.

Legitimate Interests

If the processing of specific personal data is in the legitimate interests of Fundwaste and is judged not to affect the rights and freedoms of the data subject in a significant way, then this may be defined as the lawful reason for the processing. The reasoning behind this view will be documented.

Sharing your Information

We do not, and will not, sell any of your personal data to any third party – including your name, address, email address or credit card information. We want to earn and maintain your trust, and we believe this is essential in order do that.

However, we do share your data with the following categories of companies as an essential part of being able to provide our services to you, as set out in this statement:

• Companies that do things to get your purchases to you, such as ecommerce providers like Shopify, payment service providers like Stripe & Amazon Pay, warehouses, order packers, and delivery companies
• Professional service providers, such as marketing agencies, advertising partners and website hosts, who help us run our business
• Credit reference agencies, law enforcement and fraud prevention agencies, so we can help tackle fraud
• Companies approved by you, such as social media sites (if you choose to link your accounts to us), or marketplaces where you can place a Fundwaste order

We may provide third parties with aggregated but anonymised information and analytics about our customers and, before we do so, we will make sure that it does not identify you.

Seeing adverts for the Fundwaste Shop online

We engage in online advertising, both to keep you aware of what we’re up to and to help you see and find our products.

Like many companies, we target Fundwaste banners and ads to you when you are on other websites and apps. We do this using a variety of digital marketing networks and ad exchanges, and we use a range of advertising technologies like web beacons, pixels, ad tags, cookies, and mobile identifiers, as well as specific services offered by some sites and social networks, such as Facebook’s Custom Audience service.

The banners and ads you see will be based on information we hold about you, or your previous use of Fundwaste (for example, your Fundwaste search history, and the content you read on Fundwaste) or on Fundwaste banners or ads you have previously clicked on.

Marketing messages

If you have said we can, we’ll send you marketing messages by email, to keep you aware of what we’re up to and to help you see and find our products.

How to stop marketing messages from Fundwaste

You can stop receiving marketing messages from us at any time. You can do this:

• By clicking "unsubscribe from this list" or "update subscription preferences" in the footer of any marketing email you receive from us
• By contacting our Support team at support@fundwaste.co.uk

Once you do this, we will update your profile to ensure that you don’t receive further marketing messages.

Please note that, as it might take a up to 3 working days for all our systems to be updated, so you might get messages from us while we process your request.

Stopping marketing messages will not stop service communications (such as order updates and product restock notifications) or where you have expressed interest in a specific activity at Fundwaste, such as the launch of new collections.

How to stop marketing messages from Marketplaces

Every Marketplace has a separate system to ours for recording marketing preferences. We are unable to amend your preferences or unsubscribe you from their messages.

If you decide you no longer want Marketplace marketing communications, you can opt out by visiting their site and updating your preferences there, or you can click on the ‘unsubscribe’ link in any email from that Marketplace.

Keeping your information

We’ll hold on to your information for as long as you have your account, or if it is needed to be able to provide the services to you, or (in the case of any contact you may have with our Customer Care team) for as long as is necessary to provide support-related reporting and trend analysis only.

If reasonably necessary or required to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may also keep hold of some of your information as required, even after you have closed your account, or it is no longer needed to provide the services to you.

Changes to how we protect your Privacy

We may change this page from time to time, to reflect how we are processing your data.

If we make significant changes, we will make that clear on the Fundwaste website, or by some other means of contact such as email, so that you are able to review the changes before you continue to use Fundwaste.

What about Cookies?

We use cookies when you visit our site. There are four main types of cookies – here’s how and why we use them.

1. Site functionality cookies – these cookies allow you to navigate the site and use our features, such as “Add to Bag” and “Save for Later”.
2. Site analytics cookies – these cookies allow us to measure and analyse how our customers use the site, to improve both its functionality and your shopping experience.
3. Customer preference cookies – when you are browsing or shopping in the Fundwaste Shop, these cookies will remember your preferences (like your language or location), so we can make your shopping experience as seamless as possible, and more personal to you.
4. Targeting or advertising cookies – these cookies are used to deliver ads relevant to you. They also limit the number of times that you see an ad and help us measure the effectiveness of our marketing campaigns.

By using our site, you agree to us placing these sorts of cookies on your device and accessing them when you visit the site in the future. If you want to delete any cookies that are already on your computer, the “help” section in your browser should provide instructions on how to locate the file or directory that stores cookies. Further information about cookies can be found here.

Please note that by deleting or disabling future cookies, your user experience may be affected, and you might not be able to take advantage of certain functions of our site, and the complete Fundwaste shopping user experience that we pride ourselves on providing our customers.

To contact us or register a complaint

How to contact us:

• By email: support@fundwaste.co.uk
• By phone: +44 (0)141 266 0340 (Monday-Friday 09:00-17:30 UK Time)

You can log a complaint concerning our compliance with the data protection principles with the Information Commissioner

Addressing Compliance

If you choose to receive e-mail marketing from Fundwaste, we can tell you about new collections and offers. Remember you are in control, and you can manage your preferences at any time.

If you would like to stop receiving marketing e-mails from us, you can unsubscribe or change your preference at any time by clicking "unsubscribe from this list" or "update subscription preferences" in the footer of any marketing email you receive from us, or by e-mailing us at support@fundwaste.co.uk with the header ‘Unsubscribe’

If you believe that any information we have about you is incorrect or incomplete, please e-mail us at support@fundwaste.co.uk. We will promptly correct any information found to be incorrect.

You have the right to access information held about you. Your right of access can be exercised in accordance with the Data Protection Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.

We may change this policy on occasion by updating this page. Please check this page from time to time to ensure that you are happy with any changes.

Our commitment to you: No personal data is ever sold to third parties.