PRIVACY POLICY – SHOP WEATHERWISE

This Privacy Policy describes how shopweatherwise.com (the “Site”, “we”, “us” or “our”) – operated by Interactive Weather Limited trading as Shop WeatherWise – collects, uses and shares your personal information when you visit or make a purchase on our Site.

PERSONAL INFORMATION WE COLLECT

Device Information

When you visit our Site, certain technical information about your device is collected automatically by our store platform (Big Cartel) and its infrastructure providers (including Cloudflare). This information can include:

• your web browser type and version
• IP address
• time zone
• basic device information
• information about cookies set on your device
• which pages you visit and for how long
• referring/exit pages and your approximate location (for example, country or region)

We refer to this automatically collected information as “Device Information”.

Device Information is collected using technologies such as:

• Cookies – small data files placed on your device, often including an anonymous unique identifier. For more information about cookies, and how to disable cookies, you can visit: http://www.allaboutcookies.org
• Log files – files that record actions occurring on the Site and can include your IP address, browser type, Internet service provider, referring/exit pages and date/time stamps.
• Web beacons, tags and pixels – electronic files used to record information about how you browse the Site.

Big Cartel and Cloudflare use these technologies (including tools such as Cloudflare Insights or similar analytics) to provide hosting, security, performance and aggregated usage information for the Site.

Order Information

When you make, or attempt to make, a purchase through the Site, we collect the information you provide so that we can process and fulfil your order. This can include:

• name
• email address
• shipping address
• billing address
• phone number
• order details (products ordered, amounts, currency and related information)

Payment details are handled by our payment processor, Stripe:

• We do not store your full credit/debit card number ourselves.
• Stripe processes your payment securely on our behalf.
• We receive limited payment information from Stripe (such as the last four digits of your card, card type and payment status) so that we can identify transactions and handle refunds, chargebacks, fraud checks or customer service.

We refer to this collectively as “Order Information”.

Contact Form Information

When you contact us using a contact form on the Site, we collect the information you submit, which may include:

• your name
• your email address
• the contents of your message and subject line (which may contain any personal information you choose to include)

The contact form is protected by Google reCAPTCHA to prevent spam and abuse. Google reCAPTCHA collects Device Information in accordance with Google’s own privacy policy and terms. You can learn more about how Google uses data here:
https://policies.google.com/privacy

We refer to information collected via the contact form as “Contact Information”.

Personal Information

In this Privacy Policy, “Personal Information” means any information about an identified or identifiable individual, and includes Device Information, Order Information and Contact Information as described above.

HOW WE USE YOUR PERSONAL INFORMATION

Order Information

We use Order Information primarily to:

• process and fulfil orders placed through the Site
• process your payment via Stripe
• arrange shipping and delivery
• provide you with invoices and/or order confirmations
• manage returns, exchanges, refunds and customer service

In addition, we use Order Information to:

• communicate with you about your order or related enquiries
• screen orders for potential risk or fraud
• comply with accounting, tax and legal obligations
• where in line with the preferences you have shared with us, send you information relating to our products or services (for example, service or transactional communications)

Contact Information

We use Contact Information to:

• respond to enquiries, support requests or other messages you send us
• maintain records of customer contact for internal purposes (for example, tracking recurring issues and improving our services)

Device Information

We use Device Information to:

• help detect and prevent fraud or abuse (for example, using IP address and usage patterns)
• protect the security and integrity of the Site
• understand how visitors use the Site (for example, which pages are most visited and from which regions)
• improve and optimise the Site’s performance, layout and content

Legal Bases (EU/UK)

Where data protection law in the UK or EU applies, we rely on the following legal bases for processing Personal Information:

• Performance of a contract – for example, to process and deliver your order.
• Legitimate interests – for example, to prevent fraud, secure the Site, answer your enquiries and improve our services, where these interests are not overridden by your rights.
• Legal obligation – for example, to maintain records for tax and accounting purposes.
• Consent – where we ask for and you provide consent for a specific purpose. You can withdraw your consent at any time.

SHARING YOUR PERSONAL INFORMATION

We share Personal Information with third parties where necessary to provide our services and fulfil our contracts with you, as well as to meet legal and operational requirements.

Service Providers

Examples include:

• Big Cartel, LLC – hosts our online store and processes Device and order-related information so the Site and e-commerce functionality can operate.
• Stripe – processes payments securely on our behalf and stores limited Personal Information necessary to process payments, manage disputes and prevent fraud. Privacy details: https://stripe.com/privacy
• Cloudflare – provides security, performance and analytics services (including tools such as Cloudflare Insights), and processes Device Information such as IP address and browser details.
• Google reCAPTCHA – protects our contact form from spam and automated abuse by processing Device Information in accordance with Google’s privacy policy: https://policies.google.com/privacy

Tax and Compliance Tools

Order information – in particular location-related information such as country, region, state/province or postal code – is shared with third-party tools used by, or on behalf of, Interactive Weather Limited to calculate, charge and report taxes and similar obligations.

We configure these tools so that they receive no more Personal Information than is reasonably necessary for tax and compliance purposes, and we avoid sending names, contact details or full addresses where this is not required.

Legal and Regulatory Requirements

We may also share Personal Information:

• to comply with applicable laws and regulations
• to respond to a subpoena, court order, search warrant or other lawful request for information
• to establish, exercise or defend legal claims
• to investigate or prevent fraud, security incidents or other unlawful activity

We do not sell Personal Information to third parties.

DATA RETENTION

We retain Personal Information only for as long as is reasonably necessary for the purposes described in this Privacy Policy, including:

• fulfilling orders and providing services
• maintaining business and financial records
• complying with legal, tax and regulatory obligations
• handling disputes, complaints and enforcing our agreements

In practice, this often means that Order Information is kept for a period consistent with statutory record-keeping requirements in the UK (and, where relevant, other applicable jurisdictions).

Contact form messages and related Contact Information are kept for a reasonable period to manage support, follow up on any issues and improve our service, unless you request deletion and we are not legally required to retain them.

If you are resident in the UK/EU or California, you may have rights to request deletion or restriction of certain data, as set out below.

YOUR RIGHTS – EU/UK (GDPR / UK GDPR)

If you are resident in the United Kingdom or the European Economic Area (EEA), you have certain rights regarding your Personal Information, subject to conditions and exemptions in the law. These include:

• Right of access – to request a copy of the Personal Information we hold about you.
• Right to rectification – to ask us to correct inaccurate or incomplete Personal Information.
• Right to erasure – to request deletion of your Personal Information where there is no legitimate reason for us to keep it.
• Right to restriction – to ask us to restrict processing in certain circumstances (for example, while a complaint is investigated).
• Right to data portability – to receive certain Personal Information in a structured, commonly used and machine-readable format and to transmit that data to another controller, where technically feasible.
• Right to object – to object to processing that is based on our legitimate interests (or those of a third party), including profiling based on those interests.

To exercise any of these rights, please contact us using the details in the “Contact us” section below. We may need to verify your identity before responding.

International Transfers

Big Cartel, Stripe, Cloudflare, Google (reCAPTCHA) and some other providers process Personal Information in countries outside the UK/EEA, including the United States.

Where Personal Information is transferred outside the UK/EEA, we take steps to ensure an appropriate level of protection, for example by relying on standard contractual clauses or other mechanisms permitted by data protection law.

CCPA – CALIFORNIA RESIDENTS

If you are a California resident, you may have the following rights under the California Consumer Privacy Act (“CCPA”), as amended:

• Right to know – to request details about the categories and specific pieces of Personal Information we have collected about you, the sources of that information, the business or commercial purposes for collection, and the categories of third parties with whom the information is shared.
• Right to access and portability – to receive a copy of your Personal Information in a reasonably portable format.
• Right to deletion – to request that we delete your Personal Information, subject to certain exceptions (for example, where we need it to complete a transaction you requested or to comply with legal obligations).
• Right to correction – to request that we correct inaccurate Personal Information we hold about you.
• Right to non-discrimination – we will not discriminate against you for exercising your CCPA rights.

We do not “sell” Personal Information as that term is defined under the CCPA.

If you wish to exercise your rights, or to appoint an authorised agent to act on your behalf, please contact us using the details in the “Contact us” section below. We may need to verify your identity and, where applicable, your agent’s authority.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes to our practices
• changes to our services or the Site
• legal, regulatory or operational developments

When we update the Privacy Policy, we will post the new version on this page and adjust any “last updated” date shown. In some cases, we may also notify you by email or through the Site. Your continued use of the Site after any update will signify your acknowledgement of the revised Privacy Policy.

CONTACT US

If you have any questions about this Privacy Policy, our handling of Personal Information, or if you would like to exercise any of your rights, you can contact us at:

Email
[email protected]

Post
Interactive Weather Limited
41 Clarence Road
Chesterfield
Derbyshire
England
S40 1LH

If you are in the UK or EU and are not satisfied with our response, you also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).