Privacy Policy

Name of Cookie

• _session_id Unique token, sessional, allows Shopify to store information about your session (referrer, landing page, etc.)
• _shopify_visit No data held, persistent for 30 minutes from the last visit, used by our website provider’s internal stats tracker to record the number of visits
• _shopify_uniq No data held, expires midnight (relative to the visitor) of the next day, counts the number of visits to a store by a single customer
• cart Unique token, persistent for 2 weeks, stores information about the contents of your cart
• _secure_session_id Unique token, sessional
• storefront_digest Unique token, indefinite if the shop has a password, this is used to determine if the current visitor has access

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

This includes Google Analytics cookies. For a full list of cookies used by Google Analytics visit: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

Uses made of this information

We use information held about you in the following ways:

Information you give to us

We will use this information:

• To populate your user profile;
• To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
• To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
• To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you and/or to provide you with our electronic newsletter. If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please tick the relevant box situated on the form on which we collect your data (the order form or registration form);
• To notify you about changes to our service;
• To ensure that content from our site is presented in the most effective manner for you and for your computer.
• To share and display your reviews across our website, on social media, and any other relevant communication tool. 

Information we collect about you

We will use this information:

• To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• To improve our site to ensure that content is presented in the most effective manner for you and for your computer;
• To allow you to participate in interactive features of our service, when you choose to do so;
• As part of our efforts to keep our site safe and secure;
• To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
• To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.

Information we receive from other sources

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

Disclosure of your information

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may share your information with selected third parties including:

• Business partners, suppliers and sub contractors for the performance of any contract we enter into with them or you
• Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others
• Analytics and search engine providers that assist us in the improvement and optimisation of our site
• Website application providers

We may disclose your personal information to third parties:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets
• If Satipharm or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions or to protect the rights, property, or safety of Satipharm, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Our site is hosted on Shopify Inc (“Shopify”). Some information you provide to us is stored through Shopify’s data storage, databases and the Shopify application, on secure servers. Shopify’s Terms of Service and Privacy Statement can be found at https://www.shopify.com/legal. We also use various other technologies to store information when you visit our site.

Any payment transactions will be encrypted using secure socket layer technology (SSL) and stored with an AES-128 encryption, through the Payment Card Industry Data Security Standard (PCI-DSS). 

Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Your rights

We are committed to respecting your privacy and rights and will seek your express permission before using your personal data for marketing purposes. You have the right not to opt in to the collection of your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by choosing not to check certain boxes on the forms we use to collect your data. If you opt-in, you have the freedom to opt out at any point in the future. You can tell us to stop sending you such messages by following the opt-out instructions sent with these communications. You can also exercise the right at any time by contacting us via email or at 2 Grand Canal Square, Dublin 2, Ireland D02 A342.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

As a website user, the GDPR grants you certain rights when processing your personal data.

Right of access (Art. 15 GDPR):
You have the right to obtain confirmation at to whether or not personal data concerning you is being processed, and, where that is the case access to the personal data and the information specified in Art. 15 GDPR.

Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.

You also have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer necessary for the intended purpose.

Right to restriction of processing (Art. 18 GDPR):
If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

Right to data portability (Art. 20 GDPR):
In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party

Right to object (Art. 21 GDPR):
If the data is processed pursuant to Art. 6 para. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.

Right to lodge a complaint with a supervisory authority:
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Access to information

The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. 

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Privacy Compliance Officer at 2 Grand Canal Square, Dublin 2, Ireland D02 A342 or via email.