Rumpuspuss Ltd understands that your privacy is important to you and that you care about how your information is used and shared online. We respect and value the privacy of everyone who visits our Website (www.rumpuspuss.co.uk) and will only collect and use information in ways that are useful to you and in a manner consistent with your rights and our obligations under the law.
Information About Us
Our Website, www.rumpuspuss.co.uk, is owned and operated by Rumpuspuss Ltd, a limited company registered in England and Wales under Company number 11438969, whose registered address is 36 Theresa Avenue, Bristol, BS7 9EP, United Kingdom.
What does this policy cover?
Personal Information we collect
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data.
- Information that you provide – You may give us information about you by filling out forms on the website or by corresponding with us by email, phone or otherwise. This includes information you provide when you register to use the website, place an order on our website, provide us with details required for a particular product, participate in discussion boards or other social media functions on our website, enter a competition, promotion or survey and when you report a problem with our website. The information you give us may include your name, billing address, delivery address, email address, phone number, age, date of birth, gender, photograph, username, password and other registration information, as well as the jigsaw recipient’s name, date of birth, age, gender and address. Each piece of information you give us may be used independently or in conjunction with other information you provide to us. Rumpuspuss does not target, as its paying customers, children under the age of sixteen. Although visitors of all ages may navigate through our websites, we do not knowingly collect or request personal information from those under the age of sixteen. If we discover, by any means, that a child under sixteen has been registered on our site, we will cancel that account and delete the personal information in it from our records.
- Information collected automatically – We automatically collect some information about you such as that collected by server logs or 3rd party website analytics services, and by using cookies or similar technologies when you visit our websites. We may collect information about the type of device you use and its operating system and version, your IP address, your general geographic location as indicated by your IP address, your browser type, the pages you view on our websites and how you interact with that content.
- Information collected via advertising –From time to time, we may place ads on third party sites (such as YouTube). When you view or otherwise interact with our ads, we and our partners may use various technologies (such as cookies) to collect and store information about you including cookie data & anonymised IDs for attribution & advertising purposes. We use these technologies to help us understand more about our customers and the effectiveness of our adverts.
- Information we receive from other sources – We may receive information about you from social media platforms when you interact with us on those platforms. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.
- Marketing and Communications Data – This includes your preferences in receiving marketing from us and your communication preferences.
- Financial Data – We do not collect your financial information. This is collected and stored by third party payment processors (Paypal and Stripe). Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, where you do not provide suitable delivery instructions to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
How we collect your personal information
We use different methods to collect data from and about you including through:
You may give us your Identity, Contact, Technical and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- apply for our products or services;
- create an account on our website;
- subscribe to our service or publications;
- request marketing to be sent to you;
- make a telephone call to us and leave a message or request a call back;
- enter a competition, promotion or survey;
- react to marketing posts on our social media forums (including but not limited to our Facebook, Instagram pages); or
- give us some feedback.
Automated technologies or interactions.
Third parties or publicly available sources.
We may receive personal data about you from various third parties as set out below:
Profile Data, Usage Data, Marketing and Communication Data, and Aggregated Data from the following parties:
- analytics providers such as Google based outside the EU;
- advertising networks;
- search information providers;
- third party providers of technical, payment and delivery services;
- from publicly available sources.
How we use your personal information
We process your personal information in order to provide you with the service you have requested from us and signed up for. This processing is necessary for the performance of our agreement with you and helps us provide you with the best possible experience of Rumpuspuss. We also use your data to develop aggregate analysis and business intelligence that enables us to operate, make informed decisions about, and report on the performance of our business. We have a legitimate interest in processing your data for these reasons and it is often necessary for the fulfillment of our contract with you.
We use data held about you in the following ways:
|to allow us to provide you with our jigsaws and related services||Performance of a contract with you|
|to allow you to participate in interactive features of the Website when you choose to do so||Legitimate Interest (for you to interact with our website)|
|to conduct competitions and promotions||Performance of a contract with you to fulfill the promotion and run the competition/prize|
|to contact you about products and services you have requested||Performance of a contract with you to fulfill product/service|
|to notify you about changes to the Website and products and service we offer||Legitimate Interest (of ensuring customers are updated of any changes)|
|to ensure that content from the Website is presented in the most effective manner for you and for your computer||Legitimate interests (to study how customers use our products/services, to improve our offering to our customers, to develop them and grow our business)|
|to administer the Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes||Legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).|
|to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you||Legitimate interests (to study how customers use our products/ services, to develop them, to grow our business and to inform our marketing strategy)|
|use data analytics to improve our website, products/ services, marketing, customer relationships and experiences||Legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and inform our marketing strategy)|
|to allow us to remind you about our products or services on particular dates you have provided us with||Legitimate Interest (of fulfilling customer requests of being updated on products and services)|
|to allow us to provide you with other information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes||Legitimate Interest (of fulfilling customer requests of being updated on products and services)|
|to contact you by email and mobile communication (such as text (SMS) and “push” notification) and to contact you by post||Legitimate interests (to develop our products/services and grow our business, and to improve our offering to you) and Performance of a contract (ensuring product is delivered)|
Third party vendors
Rumpuspuss uses a variety of third-party vendors to carry out critical services like website hosting, online product purchases and shipping, credit card processing and email communications. We will only share your personal data when absolutely necessary. It is our legitimate interest to process your personal data for these purposes.
Marketing and opting
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
Where you have not previously bought from us but have registered your details with us (for example by entering a competition or signing up for a newsletter), we will only send you marketing communications if you opted into receiving marketing at the time and so given us your express consent.
You have the option to unsubscribe from our e-mails through a link at the bottom of every e-mail we send to you.
There are some emails that we will continue to send you: for example regarding meaningful changes to this policy, responding to routine customer care and transactional emails relating to your use of our service, including but not limited to welcome, forgotten password emails and payment failure emails.
Where we store your data
All data you provide to us is stored on our secure servers in the EU. Where necessary and for a purpose you have consented to, data may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.
We will only transfer your personal data to third parties in territories outside the EEA where such transfer is compliant with applicable laws and regulations. For your information, this includes circumstances where:
How long we keep your ata
Your data is kept only for the time necessary to provide the service or product you request, or to fulfil the purpose outlined in this policy.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. For example, details of your orders will be kept for as long as we need to retain that data to comply with our legal and regulatory requirements. This is generally 7 years unless the law prescribes a longer period.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
If you send us any information by email you should be aware that email is not secure and as such could be read in transit within systems outside of our control. If you send us information in this manner you do so at your own risk.
Your Legal Rights
We want you to be in control of how your personal information is used by us. You have the following rights over your personal information that we hold:
- you can ask us for a copy of the personal information we hold about you
- you can inform us of any changes to your personal information, or if you want us to correct any of the personal information we hold about you
- in some situations you can ask us to delete your personal information
- you can object to certain ways in which we are using your personal information and
- you can also request that we send your personal information to a third party of your choice
Where we are using your personal information on the basis of your consent, you are entitled to withdraw that consent at any time. Where we process your personal information based on legitimate interest or the public interest, you have the right to object at any time to that use of your personal information. If you are not satisfied with the way we have handled any enquiry relating to the way we process your personal information you have the right to complain to The Information Commissioner’s Office
You can exercise your rights at any time by contacting us at [email protected]
We use the following categories of cookies on our website:
- Strictly necessary cookies – these cookies are essential for you to browse our website and use its features and you cannot opt out of receiving them. You can block them using your browsers’ cookie settings (see below) but this may prevent you from being able to use our websites.
- Performance cookies – we use Google Analytics to help us understand things like how long a visitor stays on our website, what pages they find most useful, and how they arrived. You can find out more about Google Analytics from Google. We also test some new features on groups of users this way.
- Functionality cookies – these cookies allow our websites to remember choices you make while browsing. For example we may store you country choice so that we can automatically configure your experience to the correct territory and language.
- Targeting/advertising cookies – third party cookies are those placed by websites and/or parties other than Rumpuspuss but at our request. These largely help us provide more relevant advertising or to feed back anonymised data on signup conversions to our affiliate marketing partners. These cookies are subject to the respective privacy policies for these external services, for example, Facebook Data Use Policy.
You can opt out of specific types of cookies (apart from necessary cookies), or you can review your current settings for these cookies by using our Cookie Settings.
You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
Except for essential cookies, all cookies will expire after a maximum of twelve months.
Latest update: 30th June 2018