GDPR Policy

1. Introduction

CaseMonkey.co.uk is committed to protecting the privacy and personal data of our customers and website visitors. This document outlines our approach to General Data Protection Regulation (GDPR) compliance and how we handle personal data.

2. Data Controller

The data controller for personal data collected through this website is:

Company Name:

Phone Case Limited

Registered Address:

Unit 22, Soho Mills Ind Est, Wooburn Green, High Wycombe, HP10 0PF

Email:

customerservice@casemonkey.co.uk

3. Purpose of Data Processing

We collect and process personal data for the following purposes:

To fulfill orders and provide products and services.
To communicate with customers regarding their orders and inquiries.
To send promotional offers, newsletters, and marketing materials (with consent).
To analyse and improve our website and user experience.
To comply with legal obligations.

4. Legal Basis for Data Processing

We process personal data based on the following legal bases:

Contractual necessity (fulfilling orders and providing services).
Consent (for marketing communications).
Legitimate interests (improving our services and website).

5. Types of Data Collected

We may collect the following types of personal data:

Name
Email address
Phone number
Billing and shipping addresses
Payment information (handled securely by our payment processors)
IP address and device information
Usage and interaction data on our website

6. Data Retention

We will retain personal data only for as long as necessary to fulfill the purposes outlined in this document or as required by applicable laws and regulations.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, and destruction.

8. Data Subject Rights

Under the GDPR, data subjects have the following rights:

Right to access personal data.
Right to rectify inaccurate data.
Right to erasure (right to be forgotten).
Right to restrict processing.
Right to data portability.
Right to object to processing.
Right not to be subject to automated decision-making.

9. Marketing Communications

We will only send marketing communications to individuals who have given their explicit consent. You can opt-out at any time by following the unsubscribe link in our emails.

10. Third-Party Data Processors

We may share personal data with third-party processors, such as payment processors and shipping providers, to fulfill orders and provide services. These processors are GDPR-compliant.

11. Data Breach Notification

In the event of a data breach that may result in a risk to the rights and freedoms of individuals, we will notify the relevant authorities and affected individuals as required by law.

12. Updates to this Document

We may update this GDPR compliance document to reflect changes in our data processing activities or legal requirements. Please check this document periodically for updates.