We are committed to safeguarding and protecting the rights and privacy of individuals, customers and others in accordance with The Data Protection Act 1998; this policy sets out how we will treat your personal information.
What Information Do We Collect?
Xupes may collect, store and processes the following kinds of Personal Data:
a. information about your computer and about your visits to and use of this website (including your IP address, geographical location, connection data, browser type and version, operating system, referral source, length of visit, page views, and navigation data
b. information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our goods or services (including history of orders, transactions, claims, incidents, information relating to delivery, correspondence on our Site).
c. information that you provide to us for the purpose of registering with us (including email, title, first name, last name, country, password, addresses, telephone number(s), date of birth, preferences). Upon collection, you are informed by a star whether the data to be provided is compulsory or optional.
d. information that you provide to us for the purpose of subscribing to our website services, email notifications and/or newsletters
e. any other information that you choose to send to us
f. Bank details; Your bank details may be kept in a secured way in order for you to not have to retype them the next time you order. If you do not wish for your bank details to be kept, you can delete them after each order in the "my account" section. If you do not delete your bank details, they will be kept in "my account" until the credit card expiry date. We may also keep your bank details on file if you have previously sold an item, or consigned an item to us. The purpose of said automatic data processing is to improve your experience with us, to identify the persons carrying out a payment and to fight against credit card fraud. You are entitled, at any time, to a right of access, modification and objection by writing a letter to us at Xupes Ltd, The Wheat Barn, Wickham Hall, Hadham Road, Bishop’s Stortford, Hertfordshire, CM23 1JG.
Some of the data is collected automatically depending on your actions on the website (see paragraph relating to cookies). We collect the information that you provide us with in particular when: - you create your Profile Form; - you purchase or sell a product on the Site; - you browse the Site and consult products; - you take part in a competition; and - you contact our customer service.
Using Your Personal Information
The data that is collected on the Site is intended for Xupes. Xupes neither sells nor shares your personal data to third parties for marketing purposes. However, we may share non-personally identifiable information, such as aggregated user statistics, with third parties without your consent. The data may be transferred to sub-contracting companies with whom Xupes can work within the framework of the performance of its services.
The ways in which we use your personal information may include:
a. to administer the website
b. to improve your browsing experience by personalising the website
c. to enable your use of the services available on the website
d. to send to you goods purchased via the website, and supply to you services purchased via the website
e. to send statements and invoices to you, and collect payments from you
f. to send you general (non-marketing) commercial communications
g. to send you email notifications which you have specifically requested
h. to send to you our newsletter and other marketing communications relating to our business which we think may be of interest to you by post or, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications)
i. to provide third parties with statistical information about our users. This information will not be used to identify any individual user
j. to send Trustpilot emails to review us
All our website financial transactions are handled through our payment services provider, Sage Pay. We will share information with Sage Pay only to the extent necessary for the purposes of processing payments you make via our website and dealing with complaints and queries relating to such payments. Trustpilot act as a data processor to assist with collecting feedback from people who have had a buying or service experience with us.
In addition, we may disclose your personal information:
a. to the extent that we are required to do so by law
b. in connection with any legal proceedings or prospective legal proceedings
c. in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)
International Data Transfers
Information which you provide may be transferred to countries which do not have data protection laws equivalent to those in force in the European Economic Area. You expressly agree to such transfers of personal information.
Security Of Your Personal Information
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. All electronic transactions you make to or receive from us will be encrypted using SSL technology. Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
You may instruct us to provide you with any personal information we hold about you. Provision of such information will be subject to:
a. the payment of a fee (currently fixed at £10.00); and b. the supply of appropriate evidence of your identity for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address.
We may withhold such personal information to the extent permitted by law.
You may instruct us not to process your personal information for marketing purposes by email at any time. In practice, you will usually either expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt-out of the use of your personal information for marketing purposes.
Third Party Websites
The website contains links to other websites. We are not responsible for the privacy policies or practices of third party websites.
INFORMATION YOU PROVIDE ABOUT A THIRD PARTY
If you send someone else a communication from the Site, such as sending an invitation to a friend, the information you provide (names, email addresses, etc.) is used to facilitate the communication and is not used by us for any other marketing purpose unless we obtain consent from that person or we explicitly say otherwise. Please be aware that when you use any send-to-a-friend functionality on our Site, your e-mail address and/or name may be included in the communication sent to your addressee(s).
Please let us know if the personal information which we hold about you needs to be corrected or updated.
The data controller responsible in respect of the information collected on this website is Xupes Ltd.
Cookies and other Tracking Technologies In addition to any personal information or other information that you choose to submit to us, we may use a variety of technologies that automatically (or passively) collect certain information whenever you visit or interact with the Site ("Usage Information"), which technologies may be downloaded to your Device (defined below) and may set or modify settings on your Device. This Usage Information may include the browser that you are using, the URL that referred you to our Site, the areas within our Site that you visit and your activities there, your Device location, your Device characteristics and certain Device data, and the time of day, among other information. We may use Usage Information for a variety of purposes, including to assess, enhance or otherwise improve the Site or our activities in connection with them. In addition, we may collect your IP address or other unique identifier ("Device Identifier") for your computer or other device used to access the Site (any, a "Device"). A Device Identifier is a number that is automatically assigned to your Device used to access the Site, and our computers identify your Device by its Device Identifier. We may access and use Device Identifiers that have already been associated with your device, may modify such identifiers to create a new identifier or associate a wholly new identifier with you or your device. Usage Information may be non-identifying or may be associated with you. Whenever we associate Usage Information or a Device Identifier with your personal information, we will treat it as Personal Information. We may use various new and hereafter developed technologies to collect Device Identifiers and Usage Information about you ("Tracking Technologies"). A few of the methods that may be used to collect Usage Information include, without limitation, the following (and subsequent technology and methods hereafter developed).
A cookie consists of information sent by a web server to a web browser, and stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.
We may use both "session" cookies and "persistent" cookies on the website. We will use the session cookies to: keep track of you whilst you navigate the website. We will use the persistent cookies to: enable our website to recognise you when you visit. Session cookies will be deleted from your computer when you close your browser. Persistent cookies will remain stored on your computer until deleted, or until they reach a specified expiry date. By default, cookies are not automatically installed except for cookies that are necessary for the functioning of the Xupes website and services. Pursuant to applicable regulations, Xupes will need your authorization before installing any other type of cookies. In order to avoid any disruption due to these systematic authorization requests, and to benefit from uninterrupted browsing, we can memorize your refusal or authorization relating to certain cookies. It should be noted that without certain cookies, Xupes cannot guarantee certain orders.
An embedded script is programming code that is designed to collect information about your interactions with the Site, such as the links you click on. The code is temporarily downloaded onto your Device from our web server or a third party service provider, is active only while you are connected to the Site, and is deactivated or deleted thereafter.
Etags Or Entirety Tags
A feature of the cache in browsers. It is an opaque identifier assigned by a web server to a specific version of a resource found at a URL. If the resource content at that URL ever changes, a new and different ETag is assigned. Used in this manner ETags are a form of Device Identifier. ETag tracking may generate unique tracking values even where the consumer blocks HTTP, Flash, and HTML5 cookies.