Privacy policy

This Privacy Policy explains how cheerprom.shop collects, uses, stores, shares and otherwise processes personal information when individuals:

• Visit cheerprom.shop;
• Browse our products;
• Create or use customer features;
• Place an order;
• Make a payment;
• Contact customer support;
• Subscribe to marketing where available;
• Interact with our advertisements; or
• Otherwise communicate with us.

For purposes of personal information processed in connection with our retail activities, cheerprom.shop is responsible for determining relevant purposes and means of processing where it acts as a controller.

For privacy questions, requests or complaints, contact:

Email: info@cheerprom.shop

Individuals have a right to be informed about the collection and use of their personal information, including purposes, retention and recipients.

Personal Information We May Collect

Depending on how a customer interacts with us, we may collect categories of information including:

Contact Information

Such as:

• Name;
• Email address;
• Telephone number;
• Billing address; and
• Delivery address.

Order Information

Such as:

• Products purchased;
• Product variations;
• Order number;
• Purchase date;
• Order value;
• Delivery status;
• Return information; and
• Refund information.

Payment Information

Payments may be processed through Shopify or independent payment-service providers.

We may receive transaction-related information such as:

• Payment status;
• Payment method type;
• Transaction identifier; and
• Fraud-screening results.

Complete card information may be processed directly by payment providers rather than by cheerprom.shop.

Account Information

Where customer-account functionality is available, information may include:

• Account credentials;
• Account preferences;
• Saved information; and
• Order history.

Customer-Service Information

If a customer contacts us, we may process:

• Email correspondence;
• Customer-service requests;
• Complaints;
• Return requests;
• Supporting photographs;
• Order information; and
• Other information voluntarily supplied.

Device and Technical Information

When individuals use our website, technical information may be collected automatically, including:

• Internet Protocol address;
• Device type;
• Browser type;
• Operating system;
• Website interaction information;
• Referring pages;
• Pages viewed;
• Approximate location derived from network information; and
• Cookie or similar technology identifiers.

Sources of Personal Information

We may obtain personal information:

• Directly from customers;
• Automatically through use of the website;
• From Shopify;
• From payment processors;
• From fulfilment providers;
• From delivery carriers;
• From fraud-prevention providers;
• From analytics providers;
• From advertising and marketing providers where legally permitted; and
• From other service providers involved in operating the store.

How We Use Personal Information

We may process personal information to:

• Provide and operate our website;
• Process and fulfil orders;
• Process payments;
• Deliver products;
• Send transactional communications;
• Provide customer support;
• Manage cancellations, returns and refunds;
• Prevent and investigate fraud;
• Protect customers and our website;
• Maintain records;
• Analyse store performance;
• Improve products and services;
• Personalise appropriate website functionality;
• Conduct marketing where legally permitted;
• Comply with legal obligations;
• Establish, exercise or defend legal claims; and
• Enforce applicable contractual terms.

Lawful Bases for Processing

Where UK data-protection law applies, processing will be based on an appropriate lawful basis depending on the relevant activity.

These may include:

Contract

We may process information where necessary to enter into or perform a contract with a customer, including:

• Processing an order;
• Taking payment;
• Arranging delivery;
• Communicating about an order; and
• Processing a return.

Legal Obligation

We may process information where necessary to comply with a legal obligation, including appropriate financial, consumer-protection or regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by the individual's rights and freedoms.

Such interests may include:

• Protecting the website;
• Preventing fraud;
• Improving operations;
• Handling customer enquiries; and
• Establishing or defending legal claims.

Consent

Where consent is the appropriate lawful basis, individuals may withdraw that consent in accordance with applicable law.

UK GDPR privacy information must identify the relevant lawful basis used for processing.

Order Processing and Fulfilment

When a customer places an order, personal information may be shared with providers that help us:

• Process payment;
• Verify transactions;
• Prepare goods;
• Fulfil orders;
• Print delivery labels;
• Ship parcels;
• Provide tracking; and
• Resolve delivery problems.

Only information reasonably required for the relevant service should be disclosed.

Shopify

Our store may use Shopify technology to provide ecommerce infrastructure.

Information submitted through the store may therefore be processed using Shopify systems and associated service infrastructure.

Customers should also review applicable Shopify privacy information where relevant to understand Shopify's own processing activities.

Service Providers

We may use third parties providing:

• Ecommerce hosting;
• Payment processing;
• Fraud detection;
• Order management;
• Fulfilment;
• Warehousing;
• Delivery;
• Customer communications;
• Website analytics;
• Advertising;
• Security;
• IT support; and
• Professional services.

Such providers may process personal information where reasonably necessary to perform services for us or where otherwise permitted by law.

Cookies and Similar Technologies

Our website may use cookies and similar storage or access technologies.

These technologies may support:

• Shopping-cart functionality;
• Checkout;
• Security;
• Customer authentication;
• Store preferences;
• Analytics;
• Performance measurement; and
• Advertising where permitted.

Under the UK's PECR framework, consent requirements apply to storage and access technologies, subject to applicable statutory exceptions; online-advertising technologies continue to require consent.

Where legally required, non-essential technologies will not be used until the appropriate consent has been obtained.

Users should be provided with mechanisms to manage applicable preferences.

Marketing Communications

Where permitted by law, we may send information concerning:

• Products;
• Promotions;
• Offers;
• Store updates; and
• Other marketing communications.

Recipients may unsubscribe through an available unsubscribe mechanism or by contacting:

info@cheerprom.shop

PECR imposes specific rules on electronic marketing, and consent may be required depending on the circumstances.

Security

We take reasonable technical and organisational measures designed to protect personal information against risks including:

• Unauthorised access;
• Unauthorised disclosure;
• Accidental loss;
• Destruction;
• Misuse; and
• Alteration.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should take appropriate steps to protect their own account credentials and devices.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for appropriate legal, accounting, tax, fraud-prevention, dispute-resolution and record-keeping requirements.

Retention periods may vary according to:

• The category of information;
• The nature of the transaction;
• Applicable legal obligations;
• Whether a dispute exists;
• Security requirements; and
• Business record-keeping needs.

When information is no longer reasonably required, it may be deleted, anonymised or otherwise handled in accordance with applicable law.

International Data Transfers

Our ecommerce, payment, technology, fulfilment or other service providers may operate internationally.

Where personal information subject to UK data-protection law is transferred outside the United Kingdom in a manner constituting a restricted transfer, appropriate legal mechanisms will be used where required.

These may include:

• UK adequacy regulations;
• Appropriate safeguards;
• Applicable contractual transfer mechanisms; or
• A permitted statutory exception.

ICO guidance provides that restricted international transfers must be covered by adequacy regulations, appropriate safeguards or an applicable exception.

Individual Data-Protection Rights

Depending on the circumstances and applicable law, individuals may have rights including:

• The right to be informed;
• The right of access;
• The right to rectification;
• The right to erasure in applicable circumstances;
• The right to restriction;
• The right to data portability in applicable circumstances;
• The right to object to certain processing;
• Rights relating to certain automated decision-making; and
• The right to withdraw consent where processing is based on consent.

These rights are subject to legal conditions and exemptions.

The ICO confirms, for example, that the right of access allows individuals to obtain confirmation and a copy of their personal information, while the right to erasure applies in specified circumstances and is not absolute.

Exercising Your Rights

Privacy and data-protection requests may be submitted to:

info@cheerprom.shop

To protect personal information, we may request information reasonably necessary to verify identity before responding to certain requests.

We will handle valid requests within applicable statutory timeframes.

Data-Protection Complaints

Individuals who believe their personal information has been handled improperly may submit a data-protection complaint to:

info@cheerprom.shop

We will provide a reasonable process for receiving and investigating such complaints.

Under the current UK data-protection complaints requirements, organisations must provide a way to make a complaint, acknowledge receipt within 30 days, take appropriate steps to respond without undue delay, keep the complainant informed and communicate the outcome.

Individuals also retain the right to complain to the Information Commissioner's Office where applicable.

Children's Privacy

Our store is intended for individuals capable of making lawful purchases.

We do not knowingly seek to collect personal information from children where doing so would be inappropriate or unlawful.

If information has been provided by a child in circumstances requiring parental or guardian involvement, contact info@cheerprom.shop so the matter can be reviewed.

Third-Party Links

Our website may contain links to websites or services operated independently by third parties.

We are not responsible for the privacy practices of independent websites merely because our website links to them.

Customers should review the applicable privacy information of those third parties.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our services;
• Changes in technology;
• Changes to service providers;
• Changes in legal requirements; or
• Changes in our processing activities.

The current version will be published on cheerprom.shop together with its updated date.

Contact

For privacy questions, requests or complaints:

cheerprom.shop
Email: info@cheerprom.shop