Introduction
This Privacy Policy describes how and when we collect, use, and share information when you purchase an item from us, contact us, or otherwise use our services through popupframes.com or its related sites and services.
This Privacy Policy does not apply to the practices of third parties that we do not own or control, including Royal Mail or any third party services you access via our site.
How we use your information
To fulfil your order, you must provide us with certain information (which you authorise to provide to us), such as your name, email address, postal address, payment information, and the details of the product that you’re ordering. You may also choose to provide us with additional personal information if you contact us directly.
Why we need your information and how we use it
We rely on a number of legal bases to collect, use, and share your information, including:
— as needed to provide our services, such as when we use your information to fulfil your order, to settle disputes, or to provide customer support;
— when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for our mailing list;
— if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
— as necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving our services. We use your information to provide the services you requested and in our legitimate interest to improve our services; and 2) Compliance, we use your information as necessary to comply with our obligations under our Terms of Service.
— automated technologies or interactions. As you interact with our website, newsletters, or emails we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies.
— third parties or publicly available sources. We collect technical information about your journey through our site with Google Analytics and Dealfront, this includes; pages viewed, visitor source and time spent on the site (all IP anonymised). We use this data to improve your site experience.
Cookies used and associated details:
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. The table below explains the cookies we use and why.
__cfduid
This cookie is used by Cloudflare to identify visitors and protect against fraud.
Expires: 365 days
_ga
This cookie is used by Google Analytics to track website traffic.
Expires: 2 years
_gid
This cookie is also used by Google Analytics to track website traffic.
Expires: 24 hours
_gat_gtag_UA_XXXXXXXXX
This cookie is used by Google Analytics to track website traffic.
Expires: 1 minute
_gat_UA_XXXXXXXXX
This cookie is also used by Google Analytics to track website traffic.
Expires: 1 minute
_gcl_au
Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.
Expires: 3 months
store
This cookie is used by Shopify to store information about your shopping cart.
Expires: 1 day
cart
This cookie is also used by Shopify to store information about your shopping cart.
Expires: 1 day
secure_session_id
This cookie is used by Shopify to keep track of your shopping session.
Expires: 1 hour
_y and _s
This cookie is associated with Shopify's analytics suite.
Expires: session
_pay_session
This cookie is used by Shopify to enable secure checkout and payment function on the website.
Expires: session
_tracking_consent
This cookie is used by Shopify to store a user's preferences if a merchant has set up privacy rules in the visitor's region.
Expires: 1 year
_lfa
This cookie is set by the provider Leadfeeder (Dealfront), an analytics suite.
Expires: 1 year
_test_cookie
doubleclick.net sets this cookie to determine if the user's browser supports cookies.
Expires: 15 minutes
Information sharing and disclosing
Information about our customers is important to our business. We share your personal information for very limited reasons and in limited circumstances, as follows:
— service providers — we engage certain trusted third parties to perform functions and provide services to our shop, such as delivery companies, Paypal, Bing, Shopify, Google. We will share necessary information with these third parties, but only to the extent required to perform these services.
— compliance with law — we may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce our agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others.
Data retention
We retain your personal information only for as long as necessary to provide you with our services and as described in our Privacy Policy. However, we may also be required to retain this information to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. We generally keep your data for six years.
Marketing to you
Whether you have ordered from us or not but have registered to become an email subscriber, we will only send you marketing communications if you opted into receiving marketing at the time and so given us your express consent.
You have the option to unsubscribe from our emails through a link at the bottom of each email we send to you. If you personally want to update the details that you have registered with us, you can also do this via the same links.
We may send you marketing messages by text message through an automatic telephone dialling system. Consent is not a condition to purchase. You can opt to STOP to cancel, HELP for help. Message and data rates apply.
Google Analytics
We have Google Web Analytics (GA4) and Google signals activated on our website.
— web analytics is the collection, gathering, and analysis of data about the behaviour of visitors to websites. A web analysis service collects data about the website from which a person has come, which sub-pages were visited, or how often and for what duration a sub-page was viewed. We use web analytics for the optimisation of our website and understanding visitor behaviour patterns.
— we have activated Google signals in Google Analytics. Through this, any existing Google Analytics functions (advertising reports, remarketing, cross-device reports and reports on interests and demographic characteristics) are updated, to result in the summary and anonymisation of your data, should you have permitted personalised ads in your Google Account.
The special aspect of this is that it involves cross-device tracking. That means your data can be analysed across multiple devices. Through the activation of Google signals, data is collected and linked to the Google account. For example, it enables Google to recognise when you look at a product on a smartphone and later buy the product on a laptop. Due to activating Google signals, we can start cross-device remarketing campaigns, which would otherwise not be possible to this extent. Remarketing means, that we can show you our products and services across other websites as well.
By default, this data expires after 14 months. Please consider, that this data is only collected if you have agreed to personalised advertisement in your Google Account. The retained information is always exclusively summarised and anonymous data, and never any data on individual persons. You can manage or delete this data in your Google Account.
Further reading: Google Analytics' currently available opt-outs for the web.
Your rights
If you reside in certain territories, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. We describe these rights below:
— Access — you may have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information below.
— Change, restrict, delete — you may also have rights to change, restrict our use of, or delete your personal information. Apart from exceptional circumstances (like where we are required to store data for legal reasons) we will generally delete your personal information upon request.
— Object — you can object to (i) our processing of some of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent to receive them. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
— Complain — if you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority — in the UK, it is the ICO.
Who we are and how you can contact us
We are Differentiate Design Limited, T/A Pop-up Frames, registered office: Differentiate Design Limited, 2 Bleeding Heart Yard, London EC1N 8SJ. Registered in England and Wales 04872450. You can contact us about issues relating to personal data, including the contents of this notice, by writing to us:
Data Protection Officer, Differentiate Design Limited, 2 Bleeding Heart Yard, London EC1N 8SJ.