Thank you for visiting www.dinosaursdoingstuff.com. We are committed to respecting your right to privacy and will protect it when you visit this website.

This Privacy Policy explains online information practices only, including how and when personal information is collected, how it is used, why it may have to be disclosed (eg. for tax or legal purposes) and how it is kept safe .

It covers information collected on this website only. It does not apply to other sites you reach via this site. We encourage you to read the Privacy Policies of those other parties to learn how they collect and use information about you.

In short:

  • We’ll never sell or abuse your personal data.
  • We do use cookies and analytics tracking to help run the business and provide website functionality.
  • You have a right to be deleted if you choose.

Why I need your information and how I use it

I rely on a number of legal bases to collect, use, and share your information, including:

  • To fulfil your order and to provide customer support;
  • For my mailing list
  • For legal reasons and for tax
  • For the purpose of legitimate interests (providing and improving my services)

When you order

To fulfil your order, you must provide me with information including:

  • Name
  • Email address
  • Postal address
  • Payment information
  • Products details from your order
  • If you make a custom order you may also choose to provide me with additional personal information

When you place an order, I receive an automated email detailing your order, once I dispatch your order you will receive an automated email detailing your order and tracking information if relevant. I will not contact you for any reason other than to discuss your order. 

Payment

I use PayPal to process all payments via my website as I believe PayPal offers the best security for you. Your information is shared with PayPal for the sole purpose of processing your payment as per their Privacy Policy.

You can view PayPal’s Privacy Policy here: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full 

Postage

I use Royal Mail as a mail carrier, they partner with local mail carriers to deliver parcels internationally. For orders to be delivered, I need to share your name and address with them. I will not share any other information with them other than to ensure orders are delivered safely.
You can view Royal Mail’s Privacy Policy here:
https://www.royalmail.com/privacy-notice 

Information sharing and disclosure

Information about my customers is important to my business. I share your personal information for very limited reasons and in limited circumstances, as follows:

Service providers

I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies. I will share your personal information with these third parties, but only to the extent necessary to perform these services.

Business transfers

If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.

Compliance with laws

I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

Data Retention

I retain your personal information for as long as necessary to provide you with my services and as described in my Privacy Policy. I may also be required to retain your information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 5 years.

Transfers of Personal Information Outside the EU

Whilst this website is hosted in the UK, I may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I am deemed to transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer..

Website Functionality

Contact form

When you use my contact form you will be asked for your name, e-mail address, subject and message, you can also upload an attachment. This information is sent to me via email for the purpose of responding. I will only ever contact you to answer any questions or queries you may have. Your information is not used for any purpose other than answering you enquiry. I will never contact you or save these details for anything else. I use Gmail to send and receive emails as I believe it has the best privacy settings. 

You can view Gmail’s privacy policy here:

https://policies.google.com/privacy?hl=en

Cookies

A "cookie" is a small text file that is stored on your computer and makes it easy for you to move around a website without having to continually re-enter your name, password, preferences, and so on.

We use a session cookie on this site, which does not contain any information about you or your computer. The cookie expires when you close your browser.

If you create an account and use the your orders section of the website, this will also create a session cookie. 

Google Analytics Cookies

Google Analytics, a web analytics service provided by Google Inc., uses Cookies to gather information about how visitors use our Site. Google Analytics uses its own Cookies, to analyse the use of our Site on our behalf. The information generated by the Cookies about your use of our Site is transmitted to Google. This information is then used for the purpose of compiling statistical reports to enable us to measure and analyse the number of visits to our Site and its pages, the average time spent on our Site and the pages viewed.

Google Analytics stores your data for 26 months.

For further information about Google Analytics please visit www.google.com/analytics

You can view Google Analytics’ Privacy Policy here:

http://www.google.com/intl/en/privacypolicy.html 

Newsletter

I use Mailchimp to send email newsletters. In order to do this I need to collect personal information from you including your name and email address. This information is gathered by Mailchimp via the pop-up on my website or via the subscription form. The information is collected so I can send you the email newsletter that you subscribed to, to keep a record of how and when you subscribed and ensure you wish to remain on my mailing list.

Mailchimp collects statistical data regarding the use of my newsletters to help me improve the content.

I will never use your information for any reason other than its intended purpose, sign you up to my newsletter without your explicit permission, trade, sell, share or rent your details with any other business for them to contact you.

You can unsubscribe at any time by clicking the unsubscribe link at the bottom of every newsletter or by contacting me, Charlotte Najdecki, at charlotte@dinosaursdoingstuff.com or by contacting me via the contact form.

You can view Mailchimp’s Privacy Policy here: 

https://mailchimp.com/legal/privacy/ 

Your Rights (Under GDPR)

Dinosaurs Doing Stuff would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  • The right to access – You have the right to request copies of your personal data.
  • The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request we complete the information you believe is incomplete.
  • The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing – You have the right to object to us processing your personal data, under certain conditions.
  • The right to data portability – You have the right to request that we transfer the data that we have collected to another organization (where this transfer uses standardised methods), or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us via the methods below

How to Contact Me

For purposes of EU data protection law, I, Charlotte Najdecki, am the data controller of your personal information. 

If you would like to view, amend or delete any or you personal information, or if you have any questions or concerns, you may contact me via the following methods:

Email: charlotte@dinosaursdoingstuff.com

Contact form

By post: Charlotte Najdecki, 2 Twine Terrace, E3 4QB, London, UK.

You can also log in to your account to update your information.


This policy will be reviewed every 12 months. It was last updated on July 29, 2020