Privacy Policy

Your privacy is very important to us. Accordingly, we have developed this Privacy Policy in order for you to understand how we collect, use, communicate and disclose and make use of personal information. By accessing Whimlets` website (or any website owned by Whimlets), you agree to be bound by the Terms and Conditions of Use of this Privacy Policy. If you do not agree with any of these terms, please do not access or use any part of this website. The materials contained in this website are protected by applicable copyright and trademark laws.

1. What data we collect and why?

Device information

  • Examples of Personal Information collected: device and browser information (operating system information, mobile device identifier, mobile operating system, cookie information), IP address,  URL click stream (the chronological order of our internet sites you visited), viewed products, geographic location, time of visit, time zone, referring site, application, or service.
  • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
  • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels. 
  • Disclosure for a business purpose: shared with our processor Shopify. 

Order information

  • Examples of Personal Information collected: name, email address, phone number, shipping address, billing address, and details regarding the payment (credit card numbers).
  • Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
  • Source of collection: collected from you.
  • Disclosure for a business purpose: shared with our processor Shopify. 

Customer support information

  • Purpose of collection: to provide customer support.
  • Source of collection: collected from you.
  • Disclosure for a business purpose

2. How do we collect your data?

You directly provide Whimlets with most of the data we collect. We collect and process data when you:

  • Voluntarily extend the guarantee of the products or download the free eBook.
  • Voluntarily provide feedback on any of our emails.
  • Use or view our website via browser cookies.
  • Communicate with us through a social media channel and provide personal information.
  • Voluntarily contact us for customer support.

    3. How will we use your data?

    Whimlets collects your data so that we can:

    • Process your orders – regarding payment, fulfillment, and shipment
    • Contact you with special offers regarding new products or special offers we think you might like.
    • Inform you about the blog updates.

      4. Data storage

      Whimlets will keep your personal identification information for as long as is necessary for the purpose(s) for which we originally collected it, or for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

      5. Children`s online privacy protection

      Whimlets website is not intended for people under the age of 18. We do not knowingly collect personal information from children under 18. If you are the parent or legal guardian of a child under 18 who provided personal information to us, please contact us at contact@whimlets.com.

      6. Sharing Personal Information

      We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example, we use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

      We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful requests for information we receive, or to otherwise protect our rights.

      7. Using personal information

      We use your Personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

      Lawful basis

      Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

      • Your consent;
      • The performance of the contract between you and the Site;
      • Compliance with our legal obligations;
      • To protect your vital interests;
      • To perform a task carried out in the public interest;
      • For our legitimate interests, which do not override your fundamental rights and freedoms.

      Retention

      When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

      Automatic decision-making

      If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you. We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

      Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

      Services that include elements of automated decision-making include:

      • Temporary deny-list of IP addresses associated with repeated failed transactions. This deny-list persists for a small number of hours.
      • Temporary deny-list of credit cards associated with deny-listed IP addresses. This deny-list persists for a small number of days.

      8. What are your data protection rights?

      Whimlets would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

      • The right to access – You have the right to request Whimlets for copies of your personal data.
      • The right to rectification – You have the right to request that Whimlets corrects any information you believe is inaccurate. You also have the right to request Whimlets to complete the information you believe is incomplete.
      • The right to erasure – You have the right to request that Whimlets erases your personal data, under certain conditions.
      • The right to restrict processing – You have the right to request that Whimlets restricts the processing of your personal data, under certain conditions.
      • The right to object to processing – You have the right to object to Whimlets processing of your personal data, under certain conditions.
      • The right to data portability – You have the right to request that Whimlets transfers the data that we have collected to another organization, or directly to you, under certain conditions.

        If you would like to exercise any of these rights, please contact us at contact@whimlets.com. If you make a request, we have 30 days to respond to you.

        GDPR

        If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us here.

        Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper:

        https://help.shopify.com/en/manual/your-account/privacy/GDPR.

        CCPA

        If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

        If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address below.

        9. Cookies

        Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission. This site uses different types of cookies. Some cookies are placed by third-party services that appear on our pages. You can at any time change or withdraw your consent from the Cookie Declaration on our website. There are a number of different types of cookies, however, our website uses:

        Cookies Necessary for the Functioning of the Store

        Name

        Function

        _ab

        Used in connection with access to admin.

        _secure_session_id

        Used in connection with navigation through a storefront.

        cart

        Used in connection with shopping cart.

        cart_sig

        Used in connection with checkout.

        cart_ts

        Used in connection with checkout.

        checkout_token

        Used in connection with checkout.

        secret

        Used in connection with checkout.

        secure_customer_sig

        Used in connection with customer login.

        storefront_digest

        Used in connection with customer login.

        _shopify_u

        Used to facilitate updating customer account information.

         

        Reporting and Analytics

        Name

        Function

        _tracking_consent

        Tracking preferences.

        _landing_page

        Track landing pages

        _orig_referrer

        Track landing pages

        _s

        Shopify analytics.

        _shopify_fs

        Shopify analytics.

        _shopify_s

        Shopify analytics.

        _shopify_sa_p

        Shopify analytics relating to marketing & referrals.

        _shopify_sa_t

        Shopify analytics relating to marketing & referrals.

        _shopify_y

        Shopify analytics.

        _y

        Shopify analytics.

         

        How to manage cookies

        You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

        You can accept or reject some or all cookies (for example, blocking all third-party cookies) by adjusting your browser settings. If you do not know how to do this, the links below set out information about how to change your browser settings for some of the most commonly used web browsers:

        For further information, visit www.allaboutcookies.org.

        Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioral Advertising” section above.

        10. Behavioral Advertising

        As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. We may also share personal information with our service providers, including those who assist us with marketing, and with other trusted parties whom we believe offer products or services that may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

        You can opt-out of targeted advertising by using the links below:

        Additionally, you can opt-out of some of these services by visiting the Digital Advertising  Alliance’s opt-out portal at http://optout.aboutads.info/.

        11. Do Not Track

        Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

        12. Privacy policies of other websites

        The Whimlets website contains links to other websites (for example Amazons` websites). Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

        13. Changes to our privacy policy

        Whimlets keeps its privacy policy under regular review and places any updates on this web page. Please visit the website regularly and check our respective current privacy policy. We may update this privacy policy from time to time for other operational, legal, or regulatory reasons.

        14. How to contact us

        If you have any questions about Whimlets’ privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at contact@whimlets.com or by mail using the data below:

        WIZE HAWK SRL, str. Mogosoaia 3, J1, birou 20, 400652, Cluj-Napoca, Cluj, Romania, RO38437390.

        If you make a request, we have 30 days to respond to you.

        15. How to contact the appropriate authority

        Should you wish to report a complaint or if you feel that Whimlets has not addressed your concern in a satisfactory manner, you may contact The National Supervisory Authority For Personal Data Processing following the link:

        https://www.dataprotection.ro/index.jsp?page=contact&lang=en.

         

        Last updated February 19, 2021