Privacy Policy

1.0 Our principles regarding user privacy and data protection

Only necessary data should be collected and processed
We do not spam and will never sell, rent or otherwise distribute or make public your personal information

2.0 Relevant legislation

This website aims to comply with the following UK legislation:

3.0 Personal information that this website collects and why we collect it

How this website collects and uses personal information:

3.1 Site visitation tracking

Like most websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website. Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. We utilise Google's 'Anonymise' function so that you cannot be identified by your IP address. We consider Google to be a third party data processor (see below). We consider Google to be a third party data processor (see below).

3.2 Collecting information

We request information from you when you place an order or register an interest in a project. To make a purchase, you must provide contact information such as your name, email, billing and delivery address. If we have trouble processing an order, we will use this information to contact you.

If you are purchasing personalised goods through your school/organisation, you will also need to provide your child's name and the name of the school that is running the project. We store these details in order to be able to provide the service you request from us, but we will not disclose this information unnecessarily. Once the project has ended, your account and order details are deleted from our database, and details of your order are only stored internally to comply with tax/accounting regulations.

Your payment is processed by one of our third-party payment providers (Stripe or PayPal), and the information you supply to them is used to make the transaction. We never have access to your financial information (such as credit card details).

3.3 Contact forms and email links

Should you choose to contact us using an email link, none of the data that you supply will be stored by this website or passed to / be processed by any of the third party data processors mentioned. Instead the data will be collated into an email and sent to us.

3.4 Cookies

This website uses a number of cookies, some of which are essential for the site to work and for us to provide a service to you. These are cookies set by the server (PHPSESSID) and the account (FCHuser) and checkout processes(FCHorder). If you choose to make a payment, both Paypal and Stripe will need to set cookies associated with the payment process. These will be attached to their domains (paypal.com or stripe.com). Details of the cookies they set and how they store any information you provide can be found in their Privacy Policies linked below.

This website also uses Google Analytics and details of the cookies set can found on Google’s developer guides. These are not enabled unless you accept them via the Cookie Control settings. Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website, but may mean that other areas of the website have reduced functionality. The cookies that GA sets may include _ga, _gid, _gat, __utma, __utmb, __utmc and __utmz.

Should you wish to restrict or block cookies which are set by our website you can do this through your browser settings. More information on cookies, including how to block them on a wide variety of browsers can be found at All About Cookies. Please be aware that restricting cookies may impact on the functionality of this website.

3.5 Server logs

As with most other web servers, when you access these web pages certain information may automatically be recorded. This could include your IP address, browser type, and information relating to the page you last visited. This information may be used in the event of a breach of security to aid detection.

4.0 How we store your personal information

If you place an order on this website some personal information will be stored within this website’s database to enable us to fulfil your order (see section 3.2). Your data will be removed from our website database in January and destroyed (this is conducted on an annual basis). If you wish your data to be removed at any other time (or if you would like a copy of the information we hold), please email Fat Chilli giving your name, address and the email you used to complete your order.

Any information provided to us by a school or nursery to enable us to produce your personalised product will be used for the purpose of producing the product only and then the source information will either be returned to the school/nursery if this is possible; or destroyed in January on an annual basis. We destroy any data records on an annual basis and do not keep data longer than needed once an order has been supplied and produced.

5.0 About this website’s server

All traffic (transferral of files) between this website and your browser is encrypted and delivered over HTTPS.

6.0 Our third party data processors

We use a number of third parties to process personal data on our behalf.

Google (Privacy policy)
Paypal (Privacy policy)
Stripe (Privacy policy)

7.0 Data Breaches

We will report any unlawful data breach of this website’s database or the database(s) of any of our third party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.

8.0 Changes to our privacy policy

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes. Specific policy changes and updates will be mentioned below.

9.0 Our contact details

We welcome your feedback, comments and any questions you may have regarding this privacy policy.
We are operate from a Mill Studio in Elland, West Yorkshire, but if you wish to contact us please write or email us at:

Data Controller
Fat-Chilli Cards & Gifts
3 Beech Gardens
Willowfield
Halifax
HX2 7AD
Email: info@fat-chilli.com

Reviewed and updated: November 2021