Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data:
Information you give us – You may give us information about you by filling out forms on the Website or by corresponding with us by email, phone or otherwise. This includes information you provide when you register to use the Website, place an order on our Website, provide us with details required for a particular product, participate in discussion boards or other social media functions on our Website, enter a competition, promotion or survey and when you report a problem with our Website. The information you give us may include your name, billing address, delivery address, email address, phone number, age, date of birth, gender, photograph, username, password, and other registration information, as well as the book recipient’s name, gender, and address. Each piece of information you give us may be used independently or in conjunction with other information you provide to us.
Information we collect about you and your device – Each time you visit the Website we may automatically collect the following information:
a. technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type, and version, time zone setting, browser plug-in types and versions, operating system and platform;
b. information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed, purchased or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
Information we collect about you via advertising – From time to time, we may place ads on third party sites. When you view or otherwise interact with our ads, we and our partners may use various technologies (such as cookies) to collect and store information about you including cookie data & anonymized IDs for attribution & advertising purposes. We use these technologies to help us understand more about our customers and the effectiveness of our adverts.
Information we receive from other sources - We may receive information about you if you use any of the other websites we operate or the other services we provide. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers) and may receive information about you from them.
Location Information - We may also collect information about your location, such as the IP Address of the device you access our Website from. This site or product includes IP2Location LITE data available from https://lite.ip2location.com
Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
We do not collect your financial information! This is collected and stored by third-party payment processors.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, where you do not provide suitable delivery instructions to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
We collect, use, disclose, retain and dispose of your personal data in a proper manner, for authorized purposes and take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction. The data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted via the internet. Any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorized access. Within CUKIBO, we restrict access to your personal data to those of our employees or collaborators who have a business reason for knowing such data. We also maintain physical, electronic and procedural safeguards that comply with the relevant laws and regulations to protect your personal data from any unauthorized access. Where we have given you (or where you have chosen) a password that enables you to access certain parts of the Website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
We use data held about you in the following ways:
to allow us to provide you with our books and related services, within a Legal Basis - Performance of a contract with you
to allow you to participate in interactive features of the Website when you choose to do so, within a Legal Basis - Legitimate Interest for you to interact with our website
to conduct competitions and promotions, within a Legal Basis - Performance of a contract with you to fulfill the promotion and run the competition/prize
to contact you about products and services you have requested, within a Legal Basis - Performance of a contract with you to fulfill product/service
to notify you about changes to the Website and products and services we offer, within a Legal Basis - Legitimate Interest of ensuring customers are updated of any changes
to ensure that content from the Website is presented in the most effective manner for you and for your computer, within a Legal Basis - Legitimate interests (to study how customers use our products/services, to improve our offering to our customers, to develop them and grow our business)
to administer the Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes, within a Legal Basis - Legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).
to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you, within a Legal Basis - Legitimate interests (to study how customers use our products/ services, to develop them, to grow our business and to inform our marketing strategy)
Use data analytics to improve our website, products/ services, marketing, customer relationships, and experiences, within a Legal Basis - Legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and inform our marketing strategy)
to allow us to remind you about our products or services on particular dates you have provided us with, within a Legal Basis - Legitimate Interest (of fulfilling customer requests of being updated on products and services)
to allow us to provide you with other information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes, within a Legal Basis - Legitimate Interest (of fulfilling customer requests of being updated on products and services)
to contact you by email and mobile communication (such as text (SMS) and "push" notification) and to contact you by post, within the scope of legitimate interests (to develop our products/services and grow our business, and to improve our offering to you) and Performance of a contract (ensuring product is delivered)
The emails we send to you fall into two categories:
“Marketing Messages” - Emails which provide you with information about offers, new products, and other items that we think may interest you or CUKIBO customers generally. You will only receive these emails if you actively sign up to our newsletter and then confirm that subscription via an opt-in confirmation.
"Service Messages" - Emails that we may send concerning activity on your CUKIBO account, specifically:
To remind you of unordered items in your online basket
To remind you of product creations that you have abandoned
Surveys to capture your feedback on orders you have placed with CUKIBO
Surveys to capture your feedback on contact with our customer service team
While we do our best to act on your preferences as soon as we reasonably can, please be aware that it may take up to 14 days for changes to your preferences concerning Service Messages to take effect.
We may also use data held about you for another purpose, but only where such purpose is communicated to you at the point of data collection.
Your data is kept only for the time necessary to provide the service or product you request, or to fulfill the purposes outlined in this policy.
Under certain circumstances, you have rights under GDPR in relation to your personal data.
You have the right to:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to the processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which overrides your rights and freedoms.
Request restriction of the processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
You can also exercise your rights at any time by contacting us at firstname.lastname@example.org.