Section 1 – What Do We Do With Your Information?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive how and when you access your account; information about the device and browser you use; and. your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
With your permission, we may send you emails about our store, new products and other updates.
Section 2 – Consent
How do you get my consent? When you provide us with personal information to complete a transaction, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent? If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at surf@saharablue.co.
Section 3 – Disclosure
We may disclose your personal information if we are required by law to do so or if you violate our Terms and Conditions.
In order for Sahara Blue to provide you with our Services, we work with third parties who perform services on our behalf and with whom we share personal data to support our Services (“Service Providers”).
In general, the Service Providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. Information you have provided to us during the use of our Services, including technical usage data, is shared for business purposes in our legitimate interests with third parties who provide hosting and server co-location services as well as data and cyber security services.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
Information you have provided to us during the use of our Services may be shared with third-party manufacturing services whom we engage to provide our Services to you. In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Your email address and other contact details you have provided to us and your messages to our customer service is shared for business purposes in our legitimate interests with communication, email distribution, and content delivery services as well as customer support system providers.
Information regarding your purchases and payments is shared with billing and payment processing services, fraud detection and prevention services, accounting and financial advisors, advisors, so that we can provide our Services to you.
Information regarding your use of our website and other information received from cookies and similar technology is shared with web analytics, session recording, and online marketing services.
If we provide marketing to you, information on your account, purchases and preferences can be shared with marketing services.
Insofar as reasonably necessary to defend our legal rights, we may share your personal data with our legal advisors and as otherwise required by law.
We will only share personal data to Service Providers that have undertaken to comply with obligations set out in applicable data protection laws.
We may share your personal data with our affiliates in our legitimate interests for business purposes.
In certain circumstances, we are required to share information with third parties to comply with legal requirements or requests, as well as to protect our, or a third party’s, lawful interests. We will also disclose your information to third parties in and outside your country only to the extent allowed by applicable law, including:
- to a prospective purchaser or purchaser that acquires all or substantially all of us or our business;
- to a third party in the event that we sell or buy any business or undergo a merger, in which case we may disclose your information to the prospective buyer of such business; and
- to a third party if we sell, buy, merge or partner with other companies or businesses, undergo a reorganisation, bankruptcy, or liquidation; or otherwise undertake a business transaction or sell some or all of our assets. In such transactions, your information may be among the transferred assets.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms and Conditions.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Section 4 – Retention Period
We may retain your personal data for as long as you have a Sahara Blue account or any of the abovementioned legal bases for personal data processing still exists. For example, if you unsubscribe from our marketing, newsletter, or blog emails, we will stop the processing of the personal data for such purposes. If you have used our Services without creating a Sahara Blue account, we will keep your personal data as long as necessary to comply with our legal obligation to retain information relating to provision of services, for example, for tax purposes.
After terminating your relationship with us by deleting your Sahara Blue account or otherwise ceasing to use our Services, we may continue to store copies of your personal data as necessary to comply with our legal obligations, to resolve disputes between you and us (or you and your customers), to prevent fraud and abuse, to enforce our agreements, and/or to protect our legitimate interests (to the extent that we are permitted by the applicable law to continue to store copies to protect our legitimate interests).
Section 5 – Data Subject’s Rights
If you are located in Switzerland, the European Economic Area or the United Kingdom, in accordance with applicable data protection law, you have certain rights with respect to your personal data. You have the right to request access to your personal data; in certain circumstances to correct, amend, delete, or restrict the use of your personal data by reaching us using the contact information provided below. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we are not required to process your data to meet a contractual or other legal requirement).
These rights may be limited, for example, if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to retain, are permitted by law to retain, or have compelling legitimate interests in retaining (to the extent that applicable law permits us to retain such information based on our legitimate interests).
Furthermore, if you believe that we have unlawfully processed your personal data, you have the right to submit a complaint to the contact information provided below, or to your respective data protection supervisory authority.
Section 6 – Information Security
We seek to use reasonable organizational, technical, and administrative measures to protect the confidentiality, integrity, and availability of personal data. We encourage you to take care of the personal data in your possession that you process online and set strong passwords for your Sahara Blue account, limit access to your computer and browser by signing out after you have finished your session, and avoid providing us with any sensitive information.
Section 7 – International Transfer Of Data
All the information you provide may be transferred or accessed by our Service Providers in the EU and United States and in other countries, such as Brazil Japan, Australia and other countries as required from time to time and our Service Providers (as described above) for the provision of our Services as described in this Privacy Policy. When we transfer your information globally, we take necessary measures to ensure appropriate protection of your information, including, as applicable, for the transfer of personal data to third countries (i.e., the standard contractual clauses) and any equivalent clauses as required.
Section 8 – Woo Commerce
Our store is hosted on Woo Commerce, Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Woo Commerce’s data storage, databases and the general Woo Commerce’s application. They store your data on a secure server behind a firewall.
Payment:
If you choose a direct payment gateway to complete your purchase your credit card information will be encrypted through the Payment Card Industry Data Security Standard (PCI-DSS) and 3D Secure Payment technology. Your purchase transaction data is used by the 3D Secure Payment technology only as long as is necessary to complete your purchase transaction. After the transaction is complete your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Woo Commerce’s Terms of Service or Privacy Statement.
Section 9 – Cookies
We may use cookies through the Website. You can select to opt out of them at your discretion.
Section 10 – Age Of Consent
No minor person under the age of 18 shall register as a user of, carry out any transaction on, or use in any way, the website.
Section 11 – Changes To This Privacy Policy
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy it will be updated here, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If our store is acquired or merged with another company, as per the above your information may be transferred to the new owners so that we may continue to sell products to you.
Questions And Contact Information
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at surf@saharablue.co.