Sock Drawer ltd Privacy Policy

At Sock Drawer ltd, we value your privacy and are committed to protecting your personal information. Our goal is to be transparent about how we collect, use, and safeguard your data in accordance with applicable laws and regulations. This Privacy Policy applies to our website https://pedalpulse.co.uk and any other sites or applications that we own and operate.

When we say "personal information," we mean any details that can be used to identify you. This includes your name, contact details, payment information, device details, and even how you interact with our website or services.

Sometimes, our websites or applications may include links to third-party sites or services. Keep in mind that those sites have their own privacy policies, which may be different from ours. If you click on an external link, we encourage you to review their privacy policy to understand how they handle your personal information. Our Privacy Policy only covers what happens on our sites and applications, so once you leave, their rules apply.

Information Collection

To provide you with better experiences, we may collect two types of information:

• Information Collected Automatically: Some data is gathered automatically when you use our website, applications, or services. This includes technical details from your device and browsing activity.
• Information You Provide: This includes any details or personal information you actively share with us, such as when you sign up for a service, participate in a promotion, or contact us.

Information We Collect Automatically

As you navigate through and interact with our websites, applications, or click on an email from us, we may use cookies, web beacons, and other automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Your device's IP address.
• Browser type and version.
• Pages you visit and how long you spend on them.
• The date and time of your visit.
• Any errors you encounter and related technical details.
• Identifying when you return to our website.
• Your preferences and settings.

We use this data to improve our services, troubleshoot issues, and deliver better, more personalized experiences to you. While this data isn't intended to personally identify you on its own, it may be possible to link it with other information to identify you.

The technologies we use for this automatic data collection may include:

• Cookies: Small files stored on your device that help us remember your preferences and enhance your experiences.
• Local Storage: Information saved on your device to remember your settings and preferences.
• Session Storage: Temporary information stored only during your current visit.
• Log Files: Records of website activity that may include your IP address, browser type, and pages visited.
• Web Beacons: Small electronic images that help us understand how you interact with our emails and website(s).
• Embedded Scripts: Code that collects information about how you interact with our website(s) or services.

For more information on how we use cookies, please refer to our Cookie Policy.

Device Data

When you use our website or services, we may also automatically collect certain additional details about the device you're using, including:

• Device Type
• Device Settings
• Operating System
• Geo Location
• Unique Device Identifiers

The information we collect depends on your device's settings and software permissions. If you'd like to learn more about what data is shared, we recommend checking the privacy settings of your device and apps.

Personal Information You Provide to Us

We may collect personal information that you voluntarily provide to us, such as when you create an account, subscribe to our newsletter, fill out a form, or contact our support team. This information may include:

• Name
• Email
• Phone or Mobile Number
• Date of Birth
• Home or Mailing Address
• Social Profiles
• Commercial Information (Purchase history, transaction records)

We only ask for the information necessary to provide our services, and we'll always let you know why we need it. Personal information that you provide may be associated with information that we collect automatically.

Sensitive Information

Some types of personal information are considered more sensitive and require extra protection. This includes details such as:

• Health Information

We take your privacy seriously and will only collect sensitive information if you give us explicit consent. If we do need this type of data, we'll let you know why and how it will be used. We only collect, use, or share sensitive information when legally required or permitted.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information, for the following purposes:

• Website Functionality & User Experiences
• Email & Contacting Users
• Record Keeping & Administration
• Compliance & Dispute Resolution
• Security & Fraud Prevention
• Order & Delivery Fulfillment
• Payment Processing
• Login & Account Management
• Analytics & Market Research
• Advertising & Marketing
• Competitions, Sweepstakes, or Giveaways
• Product Development
• Recruiting
• Other Purposes with Your Consent

Combining Information for a Better Experience

We may combine the personal information you provide with data we collect automatically or receive from trusted sources. For example, if you share your location with us, we might use this information alongside general data—such as local currency and language preferences—to personalize your experience and make our services more relevant to you.

Our Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason to do so. This means we only gather the data necessary to provide you with our services, improve our offerings, or meet legal and regulatory obligations. We never collect more information than we need for these purposes.

Data Storage and Security

Keeping Your Personal Information Secure

We take your privacy seriously and use industry-standard security measures to protect your personal information from loss, theft, unauthorized access, disclosure, copying, misuse, or modification.

While we do our best to keep your data secure, it's important to understand that no online system or method of data storage is completely foolproof. We cannot guarantee absolute security, but we continuously work to safeguard your information.

You also play a role in keeping your information secure. If you create a password for our services, make sure it's strong and keep it private. Additionally, be mindful of what personal details you choose to share publicly through our platform.

How Long We Keep Your Personal Information

We only keep your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy. In some cases, we may need to keep your information for longer periods of time, including for legal, accounting, or regulatory reasons, or for public interest, research, or statistical purposes. When this happens, we ensure that appropriate safeguards are in place.

International Data Transfers

The information we collect is stored and/or processed in United Kingdom, United States, Switzerland or where we or our partners, our affiliates, or our service providers operate. As a result, your personal information may be transferred to, stored, and/or processed in a country other than your own, including countries that may not have laws providing specific protection for personal data or that have different legal rules on data protection.

By providing us with your personal information, you agree to this transfer, storing, or processing. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

When we do transfer your information internationally, we will take appropriate measures to protect your privacy and ensure that your information is handled securely as outlined in this Privacy Policy. These measures may include using data transfer agreements, standard contractual clauses, binding corporate rules, or other approved mechanisms.

Disclosure of Your Information

We may share your information with the following parties when necessary:

• Companies within our corporate group, including parent companies, subsidiaries, or affiliates.
• Trusted third-party service providers who help us operate our business, such as IT services, data storage, web hosting, email service providers, ad networks, analytics providers, error loggers, debt collection agencies, technical support, marketing partners, professional advisors, and payment processors.
• Our employees, contractors, and related entities who need access to perform their work.
• Business partners, agents, and affiliates who help us deliver services or collaborate on projects.
• Sponsors or organizers of promotions, sweepstakes, or competitions that we run.
• Credit reporting agencies, courts, and regulatory authorities, if required, such as when payments are overdue for services provided.
• Legal and regulatory authorities, including law enforcement, courts, or government agencies, when required by law or for legal proceedings.
• Third-party providers who assist with delivering products, services, or marketing communications.
• Data processing and collection partners that help us analyze and improve our services.
• A potential buyer or successor in the event of a business sale, merger, or transfer of assets.
• Other third parties with your consent or as directed by you.

We only share your information when necessary and always in accordance with privacy laws. Aggregated or anonymized data that does not personally identify you or any individual may be shared with third parties for analysis, marketing, or other business purposes.

European & UK Data Privacy Rights

We comply with the EU General Data Protection Regulation (GDPR) and the UK GDPR along with the Data Protection Act 2018, ensuring that your personal information is processed lawfully, fairly, and transparently.

Data Controller/Data Processor

Under certain data protection laws, organizations that handle personal data can fall into two categories:

• Data Controllers: Entities that determine the purposes and means of processing personal data.
• Data Processors: Entities that process personal data on behalf of a Data Controller.

We, Sock Drawer ltd, act as a Data Controller when handling your personal data for our own business purposes. In some cases, we may also act as a Data Processor when handling personal data on behalf of another entity.

Lawful Bases

We only process your personal data when we have a lawful basis to do so. Our lawful bases include:

• Consent: Processing based on your explicit consent for specific purposes such as marketing communications or optional features.
• Performance of a Contract: Processing necessary to fulfill our contractual obligations to you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these interests are balanced against your rights and freedoms.
• Legal Obligations: Processing necessary to comply with legal or regulatory requirements.

Data Subject Rights

As a resident of the EEA, UK, or Switzerland, you typically have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data.
• Right to Be Informed: Receive information about how your data is collected, processed, shared, and stored.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data under certain circumstances.
• Right to Restrict Processing: Limit how we use your data in certain situations.
• Right to Data Portability: Receive your data in a structured, commonly used format in certain cases.
• Right to Object: Object to processing based on legitimate interests, direct marketing, or public interest.
• Rights Related to Automated Decision-Making: Request human intervention for significant automated decisions.

How to Exercise Your Rights

To exercise any of these rights, please contact us by email or phone using the details provided below or by accessing our privacy tools that may be available to you.

We may need to verify your identity before processing your request and will respond to your request within one month, but may extend this period for complex requests. If we need more time, we will notify you and explain the reason for the extension.

Complaints

If you are not satisfied with our response or if you believe that we've mishandled your personal data, please contact us with additional details. You also have the right to lodge a complaint with a data protection authority:

• UK residents can contact the Information Commissioner's Office (ICO): https://ico.org.uk
• EEA residents can contact their national Data Protection Authority (DPA)

International Transfers of Personal Data

We operate globally, which means your personal information may be transferred to and processed in countries outside the European Economic Area (EEA) and the United Kingdom (UK). Some of these countries may have different data protection laws than those in your home country.

Whenever we transfer your personal information internationally, we ensure appropriate safeguards are in place, such as:

• Adequacy Decisions/Regulations: Transfers to countries that have been deemed to provide an adequate level of data protection.
• Standard Contractual Clauses (SCCs): Legally approved data protection clauses.
• Binding Corporate Rules (BCRs): For intra-company transfers.
• Other Legal Safeguards: Including explicit consent or contractual necessity.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, industry standards, or legal requirements. Any updates will be posted here at the same link where you are currently viewing this policy.

If any changes significantly affect how we use your personal information, we will notify you and, if required by law, seek your consent or provide you with the option to opt in or out of the updated practices.

We encourage you to review this policy periodically to stay informed about how we protect your privacy.

Where Can You Obtain Further Information?

If you have questions or concerns about our Privacy Policy or our data practices, you can reach out to our Privacy Officer at:

Sock Drawer ltd
Privacy Officer
Email: info@pedalpulse.co.uk