Privacy policy

Privacy Policy

We respect your privacy. This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.wildandrust.co.uk (the “Site”).

Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.

We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, age and phone number. We refer to this information as “Order Information”.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

How do we use your personal information?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
- Communicate with you;
- Screen our orders for potential risk or fraud; and
- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

We use your data is collected and used as follows:

1. We collect personal data so that we can provide our customers with a great shopping experience, to verify your age and identity and to manage job applications. In most cases you choose to provide the personal data to us.
2. You provide personal data when you shop in store, fill in a form online at wildandrust.co.uk (such as the account registration, email newsletter and contact us forms), complete a form to become a loyalty scheme member, contact us (by email, phone, post, online live chat or social media) or apply for a job.
3. When you use our website or sign up for email newsletters some additional information may also be collected such as your browsing behaviour, purchase history, approximate location, device, operating system and IP address.
4. If you contact us - we will collect your name and contact details (usually email address and/or phone number) along with any other personal data that you provide. We will also collect details of your enquiry which may include details of your shopping history such as online order numbers or in store visit feedback, location and purchase details.
5. If you shop in store - if you pay by card, we will collect the payment card details (which we do not store). If you are a loyalty club member we will also collect details of your purchases.
6. If you shop online - we will collect your first and last name, contact details (email address, phone number, billing and delivery addresses), password, date of birth, order details, payment card information and whether you agree to receive email marketing from us.
7. We also collect data on your online browsing activity and location, type of device, operating system, manufacturer and settings.
8. Our website uses cookies and similar tracking technologies to remember you and enhance the shopping experience by automatically remembering your details. These are stored in small text files on your device. For more details please see our Cookies page.
9. If you become a Loyalty Club member - we will collect your name (including title, first name and last name), email address, password, date of birth, gender, postal address, phone number, local store and whether you agree to receive email marketing from us.
10. If you sign up to our newsletters - we will collect your first and last name, email address and your local store if you have one. We will also collect data on how you interact with our newsletter campaigns and the purchases you make.
11. If you use our social media pages - If you visit and use our social media pages including Facebook, Twitter, Instagram and YouTube you may have provided permission for us to access your personal data based on your user settings and their own privacy policies.
12. If you apply for a job - we will collect your full name and title, contact details (email address, phone number and postal address), date of birth, gender and nationality. We will also collect additional data needed to process your application such as qualifications, employment history, skills and experience.
13. If you start work at Wild & Rust we will also collect your bank details, tax information, National Insurance number and any legally required documents such as a work permit or copy of your passport or visa.
14. Special categories - We do not collect personal data relating to children and our website is intended for adults only. We never collect data in ‘special categories’ including details of race, health, political views, religious beliefs or sexual orientation.
15. Credit card details - We do not store credit card details nor do we share customer details with any third parties
16. If you decide that you are no longer interested in the information we provide in our email newsletters you can opt out at any time by clicking the unsubscribe link at the bottom of any email.
17. In addition to this you have a number of additional rights relating to your personal data:
1. You have the right to be informed - we have outlined the personal data that is being collected by us and how it is used in this Privacy Policy.
2. You have the right of access - please contact us to request a copy of the personal data we hold. Full details are provided below on how to contact us.
3. You have the right to rectification - if you believe your data is incomplete or inaccurate please contact us and we will update it.
4. You have the right to erasure - you may contact us and request that we erase all your personal data. If it is no longer needed for the purpose you originally provided it and it is lawful for us to do so we will erase it and provide you with confirmation.
5. You have the right to object or restrict processing – if you have any concerns please contact us and we will stop or restrict processing of your personal data if it is no longer necessary for the purpose originally provided.
6. You have the right to data portability – this allows you to request and then transfer personal data from one system to another in certain circumstances.
7. You have the right to complain – the Information Commissioner’s Office provides guidance on how to make a complaint if you have a concern about how we process your data.
18. If you would like to exercise any of your rights relating to personal data or have any questions, please contact us using the details provided in the next section. We may request proof of identity in order to be able to progress your request.
19. If you would like to contact us about your personal data or this policy you can email info@wildandrust.co.uk, call +44 (0) 7855 779630.
20. www.wildandrust.co.uk is a site operated by Wild & Rust Ltd. We are registered in England and Wales under company number 12530964 and have our office at Tay Court, Blounts Court Road, Sonning Common, Reading, United Kingdom, RG4 9RS
21. We use your personal data in the following ways:
1. To identify and manage our contact with you and keep a record of our relationship, including through our social media pages
2. To enable you to shop with us and provide you with products
3. To manage any accounts you have registered with us
4. To provide the shopping experience at our wildandrust.co.uk website
5. To verify your age and identity
6. To detect and prevent crime and fraud
7. To manage our loyalty scheme
8. To provide you with email newsletters with products, offers and news updates
9. To understand your needs and for research
10. To fulfil our legal obligations
11. To process job applications
22. How long do we keep personal data - We will not keep your personal data for longer than necessary for our purposes outlined above. We do not normally retain your personal data for more than six years unless we have a legal obligation to do so. You have the right to request we erase your personal data at any time.
23. Sharing data with our partners - We may share your personal data with carefully selected third party service providers (‘processors’) where it is necessary to facilitate the provision of our goods and services to you. This includes our warehouse, fulfilment, hosting, IT and online marketing service providers. We use industry-leading secure payment processing partners but do not store credit or debit card information. We may also securely share or obtain data with a reputable third party such as TransUnion to verify your identity and age. We use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
24. We will not pass on, sell or share your data with any other third parties unless we are under a legal obligation to do so.
25. International transfers - Sometimes we need to transfer your data outside of the UK and European Union where our third party partner is not located within the EU. Where this is the case, we ensure our partner has sufficient safeguards in place to protect your data and adopt standard data protection clauses in our contracts which have been approved by the European Commission.
26. We take the security of your personal data very seriously and have measures in place to keep it safe and secure. These include data encryption, cyber security measures, password protection and the use of secure servers.
1. Additionally, we utilise user permissions to restrict access to the minimum level of data required to fulfil our obligations. We do not collect, use or store data that is not required to provide our services. Paper documents such as registration forms are always retained in locked storage areas.
2. Wherever possible we use pseudonyms (such as using reference numbers to identify individuals and orders) and data anonymization (converting data into a format that does not uniquely identify individuals) to minimise access to your personal data.
3. We also regularly check the security arrangements of the approved third party partners that act on our behalf to ensure their provisions meet accepted standards. This is reflected in our contractual agreements and non-disclosure agreements.
4. Whilst transmitting data over the internet (including via email) is not totally secure we do make every effort to ensure the security of data you share us.
27. We collect and process your data on one of four legal bases.
28. Consent

We will only send you email newsletters if you have opted in to receiving them from us. You can withdraw consent at any time by clicking the unsubscribe link at the bottom of any email we send or emailing us directly at info@wildandrust.co.uk. We do not share newsletter subscriber data with anyone other organisations.

1. Contract

If you purchase from us we will process your personal data in order to meet our contractual obligations under the Sale of Goods Act 1979.

1. Legitimate interests

There are a number of situations where we have a legitimate interest in processing your data to conduct our business. These are often related to fulfilling our obligations to you and include the promotion, sale and supply of our goods and services (including targeted communication with loyalty scheme members), responding to your enquiries, understanding your needs, developing our products and managing in-store events that you have booked.

It also includes processing job applications, protecting the health and safety of individuals, complying with our legal obligations, managing claims and preventing crime.

1. Legal obligation

We have a legal and moral obligation to verify your age (using a passport or ID in store or your name, address and date of birth online) when purchasing CBD products.

Do not track

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

Your rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Minors

The Site is accessible to all but our CBD Category and products is not intended for purchase or use by individuals under the age of 18.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at info@wildandrust.co.uk or by mail using the details provided below:

Wild & Rust
Privacy Compliance Officer

Registered Business Address: Tay Court, Blounts Court Road, Sonning Common, Reading, United Kingdom, RG4 9RS