Xandra Jane ("We") are committed to safeguarding and respecting the privacy of our website visitors.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
The term "Personal Data" refers to personally identifiable information about you, including but not limited to your name, job description, phone contact, birthday, e-mail address or mailing address. The following is a broad description of the way Xandra Jane processes personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received, check any privacy notices we have provided or contact us to ask about your personal circumstances.
What information is collected
We process information enabling Xandra Jane to sell our goods and services to our customers; to promote and advertise our goods and services; maintain our own accounts and records and to support and manage our employees and interns. This information may include:
1. Information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type, referral source, length of visit and number of page views);
2. Information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our goods or services;
3. Information that you provide to us for the purpose of registering with us;
4. Information that you provide to us for the purpose of subscribing to our website services, email notifications and/or newsletters;
5. Any other information that you choose to send to us.
We process personal information about our customers, suppliers, professional advisers and consultants, enquirers, employees and interns.
In addition to the information we collect as described above, we use technology to collect anonymous information about the use of our website. For example, our web server automatically logs which pages of our website our visitors view, their IP addresses and which web browsers our visitors use. This technology does not identify you personally, it simply enables us to compile statistics about our visitors and their use of our website.
Our website contains Hyperlinks to other pages on our website, especially within our blog. We may use technology to track how often these links are used and which pages on our website our visitors choose to view. This technology does not identify you personally - it simply enables us to compile statistics about the use of these Hyperlinks.
In order to collect the anonymous data described in the preceding paragraph, we may use temporary "cookies" that remain in the cookies file of your browser until the browser is closed. Cookies by themselves cannot be used to discover the identity of the user. A cookie is a small piece of information which is sent to your browser and stored on your computer's hard drive. Cookies do not damage your computer. You can set your browser to notify you when you receive a cookie.
We use ''session'' cookies on the website. We will use the session cookies to: keep track of you whilst you navigate the website. We will use the persistent cookies to: enable our website to recognise you when you visit. Session cookies will be deleted from your computer when you close your browser.
Most browsers allow you to refuse to accept cookies. (For example, in Internet Explorer you can refuse all cookies by clicking ''Tools", ''Internet Options", ''Privacy", and selecting ''Block all cookies" using the sliding selector.) This will, however, have a negative impact upon the usability of many websites, including this one.
We also use your IP address to help diagnose problems with our server and to administer our website. An IP address is a numeric code that identifies your computer on a network, or in this case, the Internet. Your IP address is also used to gather broad demographic information. We may also perform IP lookups to determine which domain you are coming from (i.e.: aol.com, yourcompany.com) to more accurately gauge our users' demographics.
Why we collect your Personal Data
1. Administer the website;
2. Improve your browsing experience by personalising the website;
3. Send your goods purchased via the website;
4. Send statements and invoices to you, and collect payments from you;
5. Send you general (non-marketing) commercial communications;
6. Send you email notifications which you have specifically requested;
7. Send to you our newsletter and other marketing communications relating to our business which we think may be of interest to you by post or, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications);
8. Provide third parties with statistical information about our users - but this information will not be used to identify any individual user;
9. Deal with enquiries and complaints made by or about you relating to the website.
Where you submit personal information for publication on our website, we will publish and otherwise use that information in accordance with the license you grant to us. We will use your Personal Data to fulfil your requests and we will ask only for data that is adequate, relevant and not excessive for those purposes.
Who we share your Personal Data with
Disclosure of your personal data is strictly shared between relevant third parties and is kept for no longer than necessary as outlined below.
Our website host is Squarespace
When you place an order with us through our website we will submit your mailing data to our chosen couriers enabling us to send you your purchased goods. This information is stored on a secure account held with these third parties and shall be deleted after twelve months of dormant activity to coincide with our bi-annual collections. Should you want this information destroyed sooner, please e-mail us and we will do so within 30days of your request.
We sometimes need to share the personal information we process with the individual themselves and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA) What follows is a description of the types of organisations we may need to share some of the personal information we process with for one of more reasons. Where necessary or required we share information with:
Current, past or prospective employers.
Educators and examining bodies.
Family, associates and representatives of the person whose personal data we are processing
Employment and recruitment agencies
Consultants and professional advisers
Credit reference agencies
Debt collection agencies
Updates to your Personal Data
Upon receipt of your written request and enough information to permit us to identify your Personal Data, we will disclose to you the Personal Data we hold about you within one month and free of charge. We will also correct, amend or delete any Personal Data that is inaccurate and notify any third party recipients of the necessary changes. You may update any information you have given to us by contacting us at the addresses given below.
Security measures in relation to your Personal Data
In line with our bi-annual collections we destroy or remove your Personal Data 12 months from your last transaction. You are within your right to request this to be done sooner and we will comply within one month of your demand. All external files containing Personal Data in relation to our financial accounts are encrypted, in the unlikely event of a breach we have procedures in place to destroy these from remote access. No more data than necessary is kept within our records.
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
We will store all the personal information you provide on our secure (password and firewall protected) servers. All electronic transactions you make to or receive from us will be encrypted using SSL technology. Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
You are responsible for keeping your password and user details confidential. We will not ask you for your password.
Transfer of data abroad
If you are visiting this website from a country other than the country in which our servers are located (currently Squarespace servers based in the United States of America), the various communications will necessarily result in the transfer of information across international boundaries.
We may also transfer your Personal Data between our offices and third party processors which may be located worldwide. Where your Personal Data is transferred to a country outside the European Economic Area, we will ensure that recipients of your Personal Data agree to keep your Personal Data confidential and hold it securely in accordance with applicable data protection laws.
Studio 20, Inkspot Venue
The Old Church
Newport Rd, Cardiff