This Privacy Policy (“Policy”) outlines the manner in which Sarmatia Antiques (hereinafter referred to as “we,” “our,” “us”) collects, processes, stores, and protects your personal data when you visit our website www.sarmatia-antiques.com and www.sarmatia-antiques.co.uk (hereinafter collectively referred to as “the Website”). By using the Website, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data in accordance with the terms set out herein. This Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Data Protection Act 2018 (UK).
1. Collection of Personal Data
1.1 Types of Data We Collect
We collect various types of personal data, which may include the following:
- Personal Identification Information: such as your full name, email address, postal address, phone number, and billing information (if applicable).
- Transaction Data: information concerning your purchases or transactions with us, including your payment details and delivery address.
- Technical Data: details about your visit to our Website, such as IP address, browser type, operating system, device information, and the pages you visited on the Website.
- Communication Data: any information you provide to us when you contact us through email, phone, or any other communication medium.
1.2 Purpose of Collecting Personal Data
We collect and process personal data for the following purposes:
- Order Fulfillment: to process and manage any purchases made on the Website, including payment processing, order delivery, and handling returns or exchanges.
- Customer Support: to respond to any inquiries, complaints, or other communications related to customer service or support.
- Marketing and Promotional Purposes: where you have provided explicit consent, we may send you promotional communications, newsletters, and offers that are tailored to your preferences and interests.
- Website Optimization and User Experience: to analyze and improve the functionality of the Website, monitor usage patterns, and optimize your browsing experience.
- Legal and Regulatory Compliance: to fulfill our obligations under applicable laws, such as accounting, tax, and other legal requirements.
1.3 Basis for Processing Personal Data
The lawful basis for processing personal data is:
- Consent: where you have given us your explicit consent to process your data for specific purposes, such as subscribing to our newsletter or receiving marketing materials.
- Contractual Necessity: for processing personal data necessary for the performance of a contract to which you are a party (e.g., processing and delivering your order).
- Legal Obligation: to comply with our legal obligations under applicable law.
- Legitimate Interests: for our legitimate interests, such as improving our services, marketing activities, and ensuring the security and integrity of the Website, provided that your rights and freedoms are not overridden.
2. Retention and Storage of Personal Data
2.1 Data Retention Period
We will retain your personal data only for as long as is necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. For example, we may retain your data to comply with tax, accounting, or other legal obligations.
2.2 Security of Data
We take appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes the use of encryption, secure servers, and other security measures to safeguard your data. However, please note that no data transmission over the internet is 100% secure, and we cannot guarantee the absolute security of your personal data during transmission.
3. Disclosure of Personal Data
3.1 Sharing with Third Parties
We may share your personal data with third parties in the following circumstances:
- Service Providers: We may share your personal data with third-party service providers, such as payment processors, delivery companies, and hosting providers, in order to fulfill our contractual obligations with you.
- Legal Compliance: We may disclose your personal data to comply with legal obligations or to protect our rights, property, or the safety of our customers, employees, or others. This may include responding to a legal request from a governmental authority or law enforcement agency.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred as part of that transaction, and you will be notified accordingly.
3.2 International Data Transfers
As part of our business operations, your personal data may be transferred to and stored in countries outside the European Economic Area (EEA) or the United Kingdom. In such cases, we ensure that adequate safeguards are in place, such as the use of standard contractual clauses, to ensure that your personal data is adequately protected in accordance with applicable data protection laws.
4. User Rights Regarding Personal Data
Under the GDPR, you have certain rights regarding your personal data, which include the following:
4.1 Right to Access
You have the right to request confirmation as to whether we are processing your personal data and, if so, to request a copy of the personal data we hold about you.
4.2 Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete the information.
4.3 Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
4.4 Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data if you contest its accuracy, if the processing is unlawful, or if we no longer need the data, but you require it for legal purposes.
4.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit this data to another controller, where technically feasible.
4.6 Right to Object
You have the right to object to the processing of your personal data on grounds relating to your particular situation, including objecting to the processing of your data for direct marketing purposes.
4.7 Right to Withdraw Consent
Where we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw that consent at any time by contacting us using the details provided below.
4.8 Right to Lodge a Complaint
If you believe that we have not processed your personal data in accordance with this Policy or applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO).
5. Cookies and Tracking Technologies
5.1 Cookies
Our Website uses cookies and similar tracking technologies to enhance your experience and ensure the proper functioning of the site. Cookies are small text files that are stored on your device when you visit the Website. These cookies allow us to recognize your browser and collect information about how you interact with the Website.
5.2 Types of Cookies Used
We use the following categories of cookies:
- Strictly Necessary Cookies: These cookies are essential for the functioning of the Website and cannot be disabled in our systems. They are typically set in response to actions you take, such as setting your privacy preferences or filling out forms.
- Performance Cookies: These cookies collect anonymous data on how visitors use the Website, such as which pages are visited most often. We use this data to improve the Website’s performance.
- Functional Cookies: These cookies allow the Website to remember your preferences, such as language or region, and provide enhanced features.
- Targeting/Advertising Cookies: These cookies are used to track your browsing habits and deliver targeted advertising that is relevant to your interests.
5.3 Managing Cookies
You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect your ability to use certain features of the Website.
6. Changes to This Privacy Policy
6.1 Updates to the Privacy Policy
We may update this Privacy Policy from time to time in order to reflect changes to our practices, services, or applicable laws. Any updates will be posted on this page, and the date of the most recent revision will be indicated at the top of the Policy. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data.
7. Contact Us
If you have any questions or concerns regarding this Privacy Policy or our data protection practices, please contact us using the details below:
Sarmatia Antiques
Email: sarmatia.antiques@gmail.com
Phone: +44 7513280408
By using the Website, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described above