PRIVACY POLICY

At Treat Trunk, we know that our customers take privacy and security seriously, and so do we. We have set out below the procedures we use for safeguarding your personal data. Please read this Privacy Policy carefully and check it occasionally as it could change from time to time. This privacy policy adheres to the guidance set out by The EU General Data Protection Regulation (GDPR).

The bulk of the content here relates to orders placed through our website. For corporate orders placed manually, please see the section ‘Corporate Orders’.

TREAT TRUNK’S PRIVACY PROMISE

Treat Trunk is dedicated to safeguarding your privacy online. We will only collect, store and use your personal information for specific purposes as outlined below in accordance with GDPR. We use your personal data to support and develop our connection with you and to deliver our products and services to you.  We do use 3rd party services, however all 3rd party providers we use are also GDPR compliant, will never sell your data and will protect it at all times. The majority of 3rd party services we use will have minimal access to data, if any at all. You may contact Treat Trunk at any time with any privacy queries or concerns and to see the personal data you have given us and request modification.

Personal data means any information relating to an identified or identifiable natural person. This can include name, email address, address, IP address and much more.

WHO WE ARE

TREAT TRUNK LTD is an active Private Limited, registered at Companies House under the number 15624707. Our website address is: https://treattrunk.co.uk.

WHAT PERSONAL DATA WE COLLECT AND WHY WE COLLECT IT

COMMENTS

When visitors leave comments on the website, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

MEDIA

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

CONTACT FORMS

COOKIES

If you leave a comment on our website you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this website, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

By visiting this website with your browser settings adjusted to allow cookies, you are consenting to Treat Trunk using cookies for the purposes described below to provide you with a fully efficient shopping experience.

OUR COOKIE POLICY:

Please note: to make full use of the Treat Trunk website and to benefit from a selection of personalised features, your computer, tablet or mobile phone will need to be set up to accept cookies.

What is a cookie?

A cookie is a small text file which is downloaded and stored on your computer or mobile device by websites that you visit.

Your browser accesses the cookie file only when you visit the website that produced it. This helps to ease your navigation by automatically logging you in and remembering things like your preferences and what’s in your shopping basket.

The information stored within any given cookie can only be accessed by the website that created it and cookies are limited to communicating only the information that you have disclosed to the site.

Types of cookie:

Session (or Transient) Cookies

Session cookies are stored in your computer’s memory for the length of your browsing session. They become inaccessible after the session has been inactive for a time and are automatically deleted from your computer when the browser is closed. They allow you to move from page to page without having to log-in repeatedly. Persistent (or Permanent) Cookies

Persistent Cookies

Persistent cookies are stored in your computer memory and are not deleted when the browser is closed. They are used to keep your preferences for the website, so they will be remembered for next time you visit the website. They are also used to collect information about the numbers of visitors, the average time spent on a particular page and analyse shopping behaviour on the website. This information is used to find out how well the website works and where it can be improved.

Flash Cookies (or Locally Shared Objects)

You probably have Adobe Flash installed on your computer. Websites that contain Flash can also store small files on your computer that are used in the same way as cookies.

Flash cookies can also back up the data that is stored in other cookies. When you delete cookies, your Flash cookies are not affected. So a website may still recognise you if it backed up the deleted cookie information on a Flash cookie.

EMBEDDED CONTENT FROM OTHER WEBSITES

Articles on this website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

THESE WEBSITES MAY COLLECT DATA ABOUT YOU, USE COOKIES, EMBED ADDITIONAL THIRD-PARTY TRACKING, AND MONITOR YOUR INTERACTION WITH THAT EMBEDDED CONTENT, INCLUDING TRACKING YOUR INTERACTION WITH THE EMBEDDED CONTENT IF YOU HAVE AN ACCOUNT AND ARE LOGGED IN TO THAT WEBSITE.

PIXELS

Facebook Pixel
This Cookie is placed by Facebook. It enables Treat Trunk to measure, optimize and build audiences for advertising campaigns served on Facebook. In particular it enables Treat Trunk to see how our users move between devices when accessing the Treat Trunk web site and Facebook, to ensure that Treat Trunk’s Facebook advertising is seen by our users most likely to be interested in such advertising by analysing which content a user has viewed and interacted with on the Treat Trunk web site. For further information about the Facebook Pixel please see:
https://en-gb.facebook.com/business/help/651294705016616

Google Analytics
This Cookie is placed by Google. It enables Treat Trunk to learn information about our users use of the Treat Trunk web site such as the time of visit, the pages viewed, whether the user has visited before and the web site visited prior to visiting the Treat Trunk web site.
For further information about Google Analytics please see:
https://www.google.com/policies/technologies/types/

Most of our cookies expire within 30 days, although our analytics cookies may persist for 1 year.

ADVERTISING

We currently use tracking code from Google and Facebook for advertising and may add other platforms if opportunities to share our product with a wider audience becomes available.

TRACKING CODE

We sometimes use tracking code like Hotjar to monitor website performance and user experience in order to improve the quality of experience our customers receive. If you send us your email via the ‘how was your experience’ window, we will not add you to our newsletter unless you ask us to or agree to it during a follow up conversation.

YOUR INFORMATION

When you register on our website, or contact us via phone or email, to purchase services, we ask for data such as your name, e-mail address, billing address, and contact details. Treat Trunk keeps a record of this information for tax purposes and for ensuring we fulfil our contract with you.

The only personal information we hold is what customers provide to us when they place an order on our website or via email, sign up for the newsletter, or sign a contract.

We share your data with a small number of GDPR compliant companies like our email marketing provider, Couriers (to pass addresses to), and accounting systems which are GDPR compliant and for which we have data processing agreements in place. We may store your data on relevant systems such as cloud systems. If we are required by law to share any information, we will check with each party concerned to ensure they are happy for that to happen. An example of this would be if HMRC requested an audit.

We store sensitive data for as long as projects are in progress and customers remain active clients. Email addresses provided via Active Campaign are stored until consent is withdrawn or after 2 years if not further contact is made. We re-request consent to store this personal data every 2 years. Information required for tax and legal requirements are held for 7 years as a requirement by law.

We keep a record of any orders you make from us, so we can help to deal with any enquiries or problems you may have in the future, and so we can ensure that any information that we send to you is appropriate. Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

We keep a record of any e-mail communication you send us, so we can track any problems or concerns you’ve had.

We’ll also ask you questions at registration, and from time to time by email (if we have your consent to contact you by email), this will give us data that can be used to improve your experience of shopping with Treat Trunk. You’re under no obligation at all to answer these questions, they’re all optional, but they will help us communicate more effectively with you.

We may process information you submit to us when you contact us for the purposes of ensuring we answer your query effectively.

HOW LONG WE RETAIN YOUR DATA

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

CORPORATE ORDERS

For orders received outside of our website we request addresses to be sent via password protected Excel file. The password can be sent via Whats App for extra security since Whats App is End to End Encrypted. The addresses will be kept for 30 days to allow us to track undelivered items and after this time the file will be deleted permanently. If you wish to have the addresses deleted sooner than 30 days, please let us know and we will do so.

We share your data with a small number of GDPR compliant companies such as couriers (to pass addresses to), and accounting systems which are GDPR compliant.

WHAT RIGHTS YOU HAVE OVER YOUR DATA

If you have an account on this site, or have left comments, you can request:

  1. to receive an exported file of the personal data we hold about you, including any data you have provided to us;
  2. that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes;
  3. that we rectify any personal data we hold for you;
  4. that we restrict the ways we process your personal data;
  5. that you withdraw your consent to us processing your data;
  6. portability of your personal data to another entity;
  7. the right to object to any personal data we have on you;
  8. the right to avoid automated decision making.

If you would like to exercise any of the above rights, you can do so by contacting us using the contact details below.

WHERE WE SEND YOUR DATA

Visitor comments may be checked through an automated spam detection service.

How we use your personal data

All the data we gather via our website or through communication with you is used to operate and expand the service we offer you and to personalise our service. How we use your personal data is dependent on the legal basis for processing your data. We are dedicated to using your personal data only for:

  1. Processing your orders correctly.
  2. Development and expansion of the business, including examination of customers’ shopping behaviours, measurement of advertisements and product style preferences of our customers.
  3. Technical management of our website.
  4. Reviewing our systems
  5. Providing you with information about the services we offer.
  6. Letting you know about offers and news.
  7. Customised advertising on other GDPR compliant platforms like Facebook if you consent.

 

Legal Basis for Processing Data

Treat Trunk’s lawful basis for processing data are:
Consent – customers that consent to signing up for our newsletter, or order goods and services via Treat Trunk.

Legal Obligation – for legal and tax purposes.

Legitimate interest – for any individuals or corporations we believe may be interested in our products and who we selectively market our products to.

How we protect data

You recognise that the Internet is not a 100% secure platform for communication and, accordingly, we cannot guarantee the security of any data you send to us (or we send to you) via the Internet. We are not responsible for any damages which you, or others, may suffer as a result of the loss of confidentiality of such information.

We take every precaution to safeguard your information. All personal data stored by us is kept on a server in a secure environment. The computer on which work is conducted on is password protected, data held in the cloud is password protected and held on encrypted systems and third-party software have their own security systems.

The risks of a breach are minimal due to the precautions mentioned above being taken, and close monitoring is undertaken to ensure security systems are always up to date. Breaches will be identified, reported, managed, and resolved according to the ICO guidelines.

All Treat Trunk data is held for only as long as necessary. We store sensitive data for as long as projects are in progress. Email addresses provided via Active Campaign are stored until consent is withdrawn, reconsent is requested every 2 years. Information required for tax and legal requirements are held for 7 years as a requirement by law.

We do not store or process your card details ourselves, they are processed by PayPal or Stripe. Please see PayPal or Stripe’s privacy policy for their information on this matter.

How you can help us protect your data

Please bear in mind that whenever you willingly divulge personal data online in non- protected situations – for example on message forums, through email, or in chat spaces – that data can be collected and used by others. In short, if you post personal data online that is accessible to the public, you may receive unsolicited communications from other parties in return. Also remember to close your browser window when you have finished using the computer. This is to ensure that others cannot access your personal data and communications. If you share a computer with someone else or are using a computer in a public place like a library or Internet café. We cannot confirm or warrant the security of any data you communicate to us, and you do so at your own risk. Once we receive your communication, we make our best effort to ensure its security on our systems.

Further information

If you have questions about your personal data or our privacy policy, please contact us. To exercise any of your rights with respect to personal data, please write to us at: hello@treattrunk.co.uk.

Changes to privacy policy

We reserve the right to amend our privacy policy, whilst keeping it within all appropriate legislation and guidelines. We will do all we can to ensure that these pages show the most up to date information always and may notify you of such changes by uploading the revised privacy policy on the Treat Trunk website.

Sharing with social networks

If you use the badges that allow you to share products and content with your friends via social networks like Twitter and Facebook, these companies may set a cookie on your computer memory. Find out more about these here:

https://www.facebook.com/about/privacy/ http://twitter.com/privacy http://www.google.com/intl/en-GB/policies/privacy/

Marketing Material

If you’re happy to receive marketing communications by email, you may sign up for our newsletter. This means you will receive regular marketing updates including freebies, special offers, industry news, and tips and advice.

You may unsubscribe and have the right to be forgotten at any time. We will never spam you or sell your email address to 3rd parties.

Contact Information

Treat Trunk Ltd – Trading as Treat Trunk

hello@treattrunk.co.uk

Last Updated: Apr 2024