Privacy policy

 

This Privacy Policy explains how rstmen.shop collects, uses, stores, shares and protects personal information when you visit our website, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with our services.

For the purposes of applicable United Kingdom data protection law, rstmen.shop is responsible for deciding how and why your personal information is processed in connection with our online store.

1. Contact Details

If you have questions about this Privacy Policy, wish to exercise your data protection rights or want to make a privacy complaint, please contact us:

Company Name: rstmen.shop
Email: info@rstmen.shop
Telephone: +44 7655 459166
Address: 67 Mazurek Way, Swindon, United Kingdom

Please include sufficient information for us to identify you and understand your request. Do not send passwords, complete payment card numbers or other unnecessary sensitive information by email.

2. Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of personal information.

Identity Information

This may include:

• Your first and last name

• Account username or customer identification details

• Billing and delivery recipient names

• Details required to verify an order or prevent fraud

Contact Information

This may include:

• Email address

• Telephone number

• Billing address

• Delivery address

• Any alternative contact information you provide

Order and Transaction Information

This may include:

• Products purchased or viewed

• Order numbers

• Order values

• Discounts and promotional codes

• Delivery information

• Returns, refunds, exchanges and complaints

• Communications relating to your order

• Transaction dates and payment status

Payment Information

Payments may be processed through Shopify Payments or other authorised payment service providers.

We may receive limited payment-related information, such as:

• Payment method

• Payment status

• Card type

• Billing information

• Limited or masked card details

• Transaction reference numbers

We do not generally receive or store complete payment card numbers where payment information is processed directly by an authorised payment provider.

Account Information

If you create a customer account, we may collect:

• Login and account details

• Saved delivery addresses

• Order history

• Account preferences

• Wishlist or saved-product information, where available

Technical and Device Information

When you use our website, we or our service providers may automatically collect:

• Internet Protocol address

• Browser type and version

• Device type

• Operating system

• Language and time-zone settings

• Pages viewed

• Referring website

• Time spent on pages

• Click and navigation activity

• Cookie identifiers

• Approximate location derived from your IP address

• Website error and performance information

Communication Information

When you contact us, we may collect:

• The content of your message

• Customer service records

• Call or email details

• Photographs, videos or documents submitted in connection with an order

• Feedback, reviews and survey responses

Marketing Information

This may include:

• Your marketing preferences

• Whether you opened or interacted with an email

• Products or categories that may interest you

• Your response to promotions or advertisements

• Records of consent, withdrawal or unsubscribe requests

3. How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, subscribe to marketing or contact us

• Automatically through cookies, pixels, tags, server logs and similar technologies

• From payment processors and financial service providers

• From delivery, logistics and fulfilment providers

• From fraud prevention and identity verification providers

• From analytics and advertising partners

• From Shopify and applications connected to our Shopify store

• From publicly available sources where legally permitted

• From another person who places an order on your behalf or sends a product to you

If you provide personal information about another person, you should ensure that you are authorised to provide it and that the person understands how their information may be used.

4. How We Use Personal Information

We may use personal information for the following purposes.

Processing and Delivering Orders

We use personal information to:

• Confirm and process orders

• Take or verify payments

• Arrange shipping and delivery

• Provide order updates

• Process cancellations, returns and refunds

• Communicate about an order

• Provide receipts and transaction records

The lawful basis for this processing is generally that it is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Providing Customer Support

We use personal information to:

• Respond to enquiries

• Investigate delivery or product issues

• Handle complaints

• Verify customer identity

• Provide assistance with accounts, returns and refunds

This processing may be necessary to perform our contract with you, comply with legal obligations or pursue our legitimate interest in providing customer service.

Operating and Improving Our Website

We may use information to:

• Maintain website functionality

• Improve navigation and performance

• Identify technical problems

• Develop products and services

• Analyse customer behaviour in an aggregated or statistical form

• Personalise website content

• Maintain the security of our systems

We may rely on our legitimate interests, consent or another lawful basis, depending on the activity and technology involved.

Preventing Fraud and Protecting Security

We may process information to:

• Detect suspicious orders

• Prevent fraud, misuse and unauthorised transactions

• Protect customers and our business

• Enforce our terms and policies

• Maintain website and payment security

• Establish, exercise or defend legal claims

This processing may be based on our legitimate interests or legal obligations.

Complying With Legal Obligations

We may process and retain information where necessary to:

• Comply with tax, accounting and consumer protection requirements

• Respond to lawful requests from courts, regulators or public authorities

• Maintain appropriate business records

• Investigate legal or regulatory concerns

• Comply with data protection and electronic communications requirements

Sending Marketing Communications

Where permitted, we may use your contact information to send:

• Product updates

• Promotional offers

• Discount information

• Abandoned checkout reminders

• Store news

• Customer surveys

We will rely on consent where consent is legally required. In certain circumstances, we may contact existing customers about similar products where permitted by applicable electronic marketing rules.

You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting info@rstmen.shop.

Withdrawing consent will not affect processing carried out before consent was withdrawn.

5. Lawful Bases for Processing

Depending on the circumstances, we may rely on one or more of the following lawful bases:

Contract

Processing is necessary to fulfil an order, provide requested services or take steps before entering into a contract.

Legal Obligation

Processing is necessary to comply with a legal or regulatory obligation.

Legitimate Interests

Processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• Operating and improving our business

• Providing customer support

• Preventing fraud

• Protecting website security

• Understanding website performance

• Managing legal claims

• Maintaining appropriate business records

Consent

We may rely on consent for certain marketing activities, advertising technologies, analytics technologies or other processing where consent is required.

You may withdraw consent at any time.

Vital Interests

In exceptional circumstances, we may process information where necessary to protect someone’s life or physical safety.

6. Shopify

Our online store is hosted using Shopify’s ecommerce platform.

Shopify may process personal information in order to provide hosting, checkout, payment, security, analytics, fraud prevention and other ecommerce services. Shopify may also use cookies and similar technologies as described in its own privacy documentation.

Information processed through Shopify may be handled by Shopify entities, affiliated companies and authorised service providers located in different countries.

Your use of our store may therefore involve processing by both rstmen.shop and Shopify in accordance with our respective responsibilities and privacy notices.

7. Sharing Personal Information

We do not sell personal information in the ordinary meaning of exchanging customer information directly for money.

We may disclose personal information to the following categories of recipients where necessary:

Shopify and Ecommerce Providers

We may share information with Shopify and applications or integrations used to operate our store.

Payment Providers

Payment information may be processed by banks, card networks, digital wallet providers, payment processors and fraud prevention providers.

Delivery and Fulfilment Providers

We may share names, addresses, telephone numbers, email addresses and order information with:

• Warehouses

• Fulfilment centres

• Couriers

• Postal providers

• Customs agents

• Delivery tracking providers

Technology Providers

We may use providers offering:

• Website hosting

• Cloud storage

• Email services

• Customer support systems

• Cybersecurity

• Database management

• Website performance tools

• Account authentication

Analytics and Advertising Providers

Subject to your preferences and applicable consent requirements, we may share or make information available to analytics, social media and advertising providers to:

• Measure website activity

• Understand campaign performance

• Display relevant advertisements

• Create advertising audiences

• Limit repeated advertisements

Professional Advisers

Information may be disclosed to accountants, auditors, insurers, legal advisers and other professional consultants where reasonably necessary.

Government and Regulatory Authorities

We may disclose information where required by law, court order, regulatory request or other legally valid process.

Business Transfers

If all or part of our business is sold, transferred, reorganised or merged, personal information may be disclosed to relevant purchasers, advisers or successor organisations, subject to appropriate confidentiality and data protection safeguards.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies, including pixels, tags, scripts and local storage.

These technologies may be used to:

• Keep the website and checkout functioning

• Remember items in your shopping basket

• Maintain security

• Remember preferences

• Measure traffic and performance

• Understand how visitors use the website

• Personalise content

• Measure advertising effectiveness

• Support targeted advertising where permitted

Essential Cookies

Essential cookies are required for core functions such as checkout, shopping basket operation, security and account access. These cookies may be used without consent where legally permitted because they are necessary to provide a service you requested.

Functional Cookies

Functional cookies remember choices and provide enhanced website features.

Analytics Cookies

Analytics cookies help us understand website traffic, visitor interaction and website performance.

Advertising Cookies

Advertising cookies and similar technologies may be used to measure campaigns, understand interests and display more relevant advertising.

Where consent is required, non-essential cookies will not be activated until you make a choice through our cookie banner or privacy controls.

You can manage available cookie preferences through the website’s cookie banner. You may also change browser settings to reject or delete cookies, although some website functions may not work correctly as a result.

9. Direct Marketing

We may send electronic marketing only where we have an appropriate lawful basis and where the communication is permitted under applicable electronic communications rules.

Every marketing email should provide a clear method of unsubscribing.

You may also opt out by contacting:

info@rstmen.shop

After you unsubscribe, we may retain limited information on a suppression list to ensure that we respect your request and do not send further marketing to the relevant address.

Service-related messages, including order confirmations, delivery updates, security notices and policy notifications, are not marketing communications and may still be sent where necessary.

10. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate transfer mechanism or safeguard is used where required.

Depending on the destination and circumstances, this may include:

• A UK adequacy regulation

• The United Kingdom International Data Transfer Agreement

• The UK Addendum to approved contractual clauses

• Contractual, organisational and technical safeguards

• Another transfer mechanism permitted under applicable UK data protection law

You may contact us for further information about the safeguards relevant to your personal information.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to satisfy legal, accounting, tax, fraud prevention and reporting requirements.

The appropriate retention period depends on factors including:

• The type and sensitivity of the information

• The reason it was collected

• Whether it is required to fulfil a contract

• Applicable legal obligations

• Potential disputes or legal claims

• Fraud and security risks

• Whether you have requested deletion

Order and transaction records may be retained for the period required by applicable accounting, tax and legal obligations.

Customer service records may be retained for as long as necessary to resolve the enquiry, document the outcome and manage potential disputes.

Marketing information may be retained until you unsubscribe or withdraw consent, after which limited suppression information may be retained to honour your request.

When information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal information from:

• Unauthorised access

• Accidental loss

• Misuse

• Disclosure

• Alteration

• Destruction

These measures may include access controls, secure hosting, encrypted connections, account authentication, monitoring and restrictions on access to personal information.

However, no website, payment system, internet transmission or electronic storage method can be guaranteed to be completely secure.

You are responsible for keeping account passwords confidential and for informing us promptly if you believe your account or personal information has been compromised.

13. Your Data Protection Rights

Subject to applicable law and any relevant exemptions, you may have the following rights:

Right to Be Informed

You have the right to receive clear information about how your personal information is used.

Right of Access

You may request confirmation that we process your personal information and ask for a copy of that information.

Right to Rectification

You may ask us to correct personal information that is inaccurate or complete information that is incomplete.

Right to Erasure

You may ask us to delete personal information in certain circumstances.

This right is not absolute. We may retain information where processing remains necessary for legal obligations, legal claims, fraud prevention or other permitted reasons.

Right to Restrict Processing

You may ask us to restrict the use of your personal information in certain circumstances.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have the right to object at any time to the use of your personal information for direct marketing.

Rights Relating to Automated Decisions

You may have rights concerning decisions made solely through automated processing where those decisions produce legal or similarly significant effects.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Complain

You may raise a complaint directly with us or complain to the United Kingdom Information Commissioner’s Office.

14. Exercising Your Rights

To exercise a data protection right, contact:

Email: info@rstmen.shop

Address: 67 Mazurek Way, Swindon, United Kingdom

Please describe the right you wish to exercise and provide information that reasonably enables us to identify the relevant records.

We may request additional information to verify your identity. This is intended to prevent personal information from being disclosed to an unauthorised person.

We will respond within the period required by applicable data protection law. In some circumstances, the response period may be extended where a request is complex or multiple requests have been submitted. We will inform you where an extension lawfully applies.

You will not normally be charged for exercising your rights. However, a reasonable fee may be charged or a request may be refused where permitted by law, including where a request is manifestly unfounded or excessive.

15. Privacy Complaints

If you believe that we have handled your personal information incorrectly, please contact us first so that we have an opportunity to investigate and resolve the issue.

Privacy complaints may be sent to:

Email: info@rstmen.shop
Telephone: +44 7655 459166
Address: 67 Mazurek Way, Swindon, United Kingdom

Please provide:

• Your name and contact details

• A description of your concern

• Relevant order or account information

• The outcome you are requesting

• Copies of relevant communications or evidence

We will provide a clear method for submitting a privacy complaint, acknowledge a data protection complaint within 30 days, investigate it appropriately and communicate the outcome in accordance with applicable requirements.

You also have the right to complain to the United Kingdom supervisory authority:

Information Commissioner’s Office

You may contact the ICO through its official website or telephone helpline. We encourage you to contact us first, but you are not prevented from contacting the ICO.

16. Children’s Privacy

Our online store is not specifically directed at children.

We do not knowingly collect personal information from children who are not legally able to use our services or enter into a purchase without appropriate permission.

If you believe that a child has provided personal information without appropriate authorisation, please contact info@rstmen.shop. We will review the matter and take appropriate action where required.

17. Third-Party Websites

Our website may contain links to websites, applications or services operated by third parties.

We are not responsible for the privacy practices, security or content of independent third-party services. You should review the privacy notice of any external website before providing personal information.

18. Social Media

If you interact with us through a social media platform, that platform may collect and process information according to its own privacy policy.

Information you post publicly may be visible to other users. Please avoid posting order numbers, addresses, payment information or other sensitive personal information in public comments.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our services

• Changes to Shopify or connected applications

• New legal or regulatory requirements

• Changes to the way we process personal information

• Security or operational developments

The updated policy will be published on this page and the “Last Updated” date will be revised.

Where a change materially affects how personal information is used, we may provide an additional notice where appropriate.

20. Contact Us

For questions, rights requests or privacy complaints, contact:

rstmen.shop
Email: info@rstmen.shop

Address: 67 Mazurek Way, Swindon, United Kingdom