Privacy policy
This Privacy Policy describes how gebandgreen.co.uk (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.
Contact
After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at hello@gebandgreen.co.uk or by mail using the details provided below:
Geb & Green, Orchard House, Bury Lane Farm, Melbourn, Royston SG8 6GT, United Kingdom
Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”.
Information that is collected automatically - As soon as you visit our website, we collect and store certain information automatically. This information includes Internet protocol addresses (IP), the type and version of browser you are using, your operating system and platform, including the uniform resource locator (URL, what sites or products you view, search terms, and how you interact with the Site. We store this data anonymously.
The purpose of the collection and retention of this data can be detailed below in the “Behavioural Advertising” section below.
Information that you provide us with - Personal data you share with us in the course of contacting us or submitting an order remain completely confidential. This includes, for example, your contact data, including your name and surname, address, e-mail address, telephone number as well as your payment information, including your bank details and credit card information, invoice address.
Order information that you provide to us may be shared with 3rd parties with business purposes in order to provide goods and services to fulfil our contact. This includes processing your payment through Google pay, Shop pay or PalPal, arranging shipping with Parcelforce and provide invoices, order confirmations, communicating with you, screening our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
Minors
We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address above to request deletion.
Sharing Personal Information
We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:
- We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
- We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
- We share your Personal Information with Parcelforce for the purpose of fulfilment and shipping. Their privacy policy can be found here: https://www.parcelforce.com/privacy.
Behavioural Advertising
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
- We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
- We use Shopify Audiences to help us show ads on other websites with our advertising partners to buyers who made purchases with other Shopify merchants and who may also be interested in what we have to offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.
- Relationships and communications - We may process contact data, account data, customer relationship data, transaction data and/or communication data for the purposes of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing) by email, SMS, post, fax and/or telephone, providing support services and complaint handling. The legal basis for this processing is our legitimate interests, namely communications with our website visitors, service users, individual customers and customer personnel, the maintenance of our relationships, enabling the use of our services, and the proper administration of our website, services and business.
- Personalisation - We may process account data and/or usage data for the purposes of personalising the content and advertisements that you see on our website and through our services to ensure that you only see material that is relevant to you. The legal basis for this processing is our legitimate interests, namely offering the best possible experience for our website visitors and service users.
- Marketing - We may process contact data, account data, customer relationship data and/or transaction data for the purposes of creating, targeting and sending direct marketing communications by email, SMS, post and/or fax and making contact by telephone for marketing-related purposes. The legal basis for this processing is our legitimate interests, namely promoting our business and communicating marketing messages and offers to our website visitors and service users.
- Research & analysis - We may process usage data and/or transaction data for the purposes of researching and analysing the use of our website and services, as well as researching and analysing other interactions with our business. The legal basis for this processing is our legitimate interests, namely monitoring, supporting, improving and securing our website, services and business generally.
- Record keeping - We may process your personal data for the purposes of creating and maintaining our databases, back-up copies of our databases and our business records generally. The legal basis for this processing is our legitimate interests, namely ensuring that we have access to all the information we need to properly and efficiently run our business in accordance with this policy.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by:
- FACEBOOK - https://www.facebook.com/settings/?tab=ads
- GOOGLE - https://www.google.com/settings/ads/anonymous
- INSTAGRAM - https://help.instagram.com/615366948510230
- SHOPIFY – You have the right to unsubscribe from any email communication you may receive from Geb & Green. Click the unsubscribe button found at the bottom of every email communication. Or email hello@gebandgreen.co.uk.
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/.
Using Personal Information
We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.
Lawful basis
Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:
- Your consent;
- The performance of the contract between you and the Site;
- Compliance with our legal obligations;
- To protect your vital interests;
- To perform a task carried out in the public interest;
- For our legitimate interests, which do not override your fundamental rights and freedoms.
Retention
When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.
Automatic decision-making
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.
We do engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.
Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making include:
- Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
- Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.
Your rights
GDPR
If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.
Right to object - If you do not wish to receive further advertisement from us, you can object to such use at any time, by clicking on the unsubscribe link included in each advertisement message. Alternatively, you can contact us requesting to be removed from our email list (for contact details see below).
You have the right to object to the use or processing of your data at any time. You have the right to revoke any consent you have previously granted us regarding the use of your personal data.
Please send us an e-mail at: hello@gebandgreen.co.uk or contact us by post:
Geb & Green, Orchard House, Bury Lane Farm, Melbourn, Royston SG8 6DF
Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
Cookies
A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.
We use the following cookies to optimize your experience on our Site and to provide our services.
Shopify’s current list of cookies can be found here: https://www.shopify.com/legal/cookies
Cookies Necessary for the Functioning of the Store
|
Name |
Function |
Duration |
|
_ab |
Used in connection with access to admin. |
2y |
|
_secure_session_id |
Used in connection with navigation through a storefront. |
24h |
|
_shopify_country |
Used in connection with checkout. |
session |
|
_shopify_m |
Used for managing customer privacy settings. |
1y |
|
_shopify_tm |
Used for managing customer privacy settings. |
30min |
|
_shopify_tw |
Used for managing customer privacy settings. |
2w |
|
_storefront_u |
Used to facilitate updating customer account information. |
1min |
|
_tracking_consent |
Tracking preferences. |
1y |
|
c |
Used in connection with checkout. |
1y |
|
cart |
Used in connection with shopping cart. |
2w |
|
cart_currency |
Used in connection with shopping cart. |
2w |
|
cart_sig |
Used in connection with checkout. |
2w |
|
cart_ts |
Used in connection with checkout. |
2w |
|
cart_ver |
Used in connection with shopping cart. |
2w |
|
checkout |
Used in connection with checkout. |
4w |
|
checkout_token |
Used in connection with checkout. |
1y |
|
dynamic_checkout_shown_on_cart |
Used in connection with checkout. |
30min |
|
hide_shopify_pay_for_checkout |
Used in connection with checkout. |
session |
|
keep_alive |
Used in connection with buyer localization. |
2w |
|
master_device_id |
Used in connection with merchant login. |
2y |
|
previous_step |
Used in connection with checkout. |
1y |
|
remember_me |
Used in connection with checkout. |
1y |
|
secure_customer_sig |
Used in connection with customer login. |
20y |
|
shopify_pay |
Used in connection with checkout. |
1y |
|
shopify_pay_redirect |
Used in connection with checkout. |
30 minutes, 3w or 1y depending on value |
|
storefront_digest |
Used in connection with customer login. |
2y |
|
tracked_start_checkout |
Used in connection with checkout. |
1y |
|
checkout_one_experiment |
Used in connection with checkout. |
session |
|
checkout_session_lookup |
Used in connection with checkout. |
3w |
|
checkout_session_token_<<token>> |
Used in connection with checkout. |
3w |
|
identity-state |
Used in connection with customer authentication. |
24h |
|
identity-state-<<token>> |
Used in connection with customer authentication. |
24h |
|
identity_customer_account_number |
Used in connection with customer authentication. |
12w |
Reporting and Analytics
|
Name |
Function |
Duration |
|
_landing_page |
Track landing pages. |
2w |
|
_orig_referrer |
Track landing pages. |
2w |
|
_s |
Shopify analytics. |
30min |
|
_shopify_d |
Shopify analytics. |
session |
|
_shopify_s |
Shopify analytics. |
30min |
|
_shopify_sa_p |
Shopify analytics relating to marketing & referrals. |
30min |
|
_shopify_sa_t |
Shopify analytics relating to marketing & referrals. |
30min |
|
_shopify_y |
Shopify analytics. |
1y |
|
_y |
Shopify analytics. |
1y |
|
_shopify_evids |
Shopify analytics. |
session |
|
_shopify_ga |
Shopify and Google Analytics. |
session |
|
customer_auth_provider |
Shopify analytics. |
session |
|
customer_auth_session_created_at |
Shopify analytics. |
session |
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org. Furthermore, you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpag... information concerning data privacy can be found at https://policies.google.com/?h...
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
Do Not Track
Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
Changes
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.
Complaints
As noted above, if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.
If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here:
You can complain to the ICO if you are unhappy with how we have used your data. The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk
How to contact us
If you wish to avail yourself of your right to information and/or the right to object to the use of your personal data, or any other questions about privacy, please send us an e-mail at: hello@gebandgreen.co.uk or contact us by post:
Geb & Green, Orchard House, Bury Lane Farm, Melbourn, Royston SG8 6DF
Company number - 14193088
Last updated: 27.07.23
