Who are we?
How do we collect your information?
When you place an order online or by phone
We will gather all the information we need to process your order. (For example: name, email, postal address, billing address, card number or other payment method details, contact phone number. We also capture your IP address for fraud check purposes only). When you first place an order online you will also be given the option to opt in for email marketing. As of 25th May 2018, in accordance with GDPR legislation, we will not send you email marketing unless you tick the box to ask us to, or unless you have asked us to previously. You can opt out of email marketing at any time by clicking the unsubscribe link at the bottom of any email, or by contacting us.
As with all sensitive data we keep your information securely. What on Earth Books does not keep your payment information. Payment details are sent to and managed securely by our payment provider, PayPal and Stripe.
For marketing purposes we are only interested in your email address. We only send emails (never brochures or phone calls).
We send emails (approx. once a month) to the following customers:
- Those who have signed up to receive our emails at an event.
- If you have entered a competition and asked us to send you emails.
- Customers who have purchased regularly with us online.
What do we do with your data?
When you place an order online or by phone – fulfilling your order
Primarily we use the data you provide to us to fulfil our contract with you: we use your delivery address to know where to send your order; we use your email address and mobile phone number to update you about your order status.
When you place an order online or by phone, or make a transaction at an event – further marketing
The legal basis we use for processing data for marketing purposes is called ‘legitimate interest’.
You can opt out at anytime by unsubscribing from our emails.
When you opt in to receive marketing from us at an event
We use the email address that you supply to us to send you the most relevant marketing. For example free shipping offers, pre-launch information on new books, or information about future events we are attending, free tickets to talks by Christopher Lloyd and seasonal sales.
If you have not made a transaction with us, but you have opted in to receive marketing by email the legal basis for processing is called ‘consent’.
We will keep email data unless you tell us you no longer wish to receive marketing from us, in which case we will remove you from our list.
The only data we pass to third parties is in order for them to fulfil services for us, but they can only use this data to fulfil those services for us and cannot pass it on. The companies we use are:
- Royal Mail – requires your address in order to deliver or your order
- Couriers – other courier companies also require your details and sometimes a delivery phone number and email (we use couriers such as UPS and Hermes on big orders)
- Email marketing – this is handled by our in house team and we never share your details with an agency. All email marketing is sent through the industry standard provider MailChimp
Your rights relating to your personal data
You have the right to access your personal data (to ask us what information we hold about you).
You have the right to ask for your data to be deleted or corrected.
You have the right to ask us to stop processing your data.
You have the right to stop receiving marketing from us.
For all of the above, please do contact us. Where we are obliged to comply with your request, we will do so as quickly as possible.
If you have a complaint about the way we use your data please contact us (firstname.lastname@example.org). If we cannot resolve the problem for you, you can also contact the Information Commissioner’s Office (ICO): www.ico.org.uk