隱私政策

This Privacy Policy describes how longdan.co.uk (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Summary

We, Longdan Ltd., respect the confidentiality of your personal information and will make reasonable security arrangements to ensure that all personal information in our possession or control is kept in a safe and secure manner, and to prevent unauthorized access and use of your personal information.
This Privacy Policy explains how we use, disclose, and protect the personal information we collect. By providing us with your personal data, you consent to our collection, use, disclosure (including transfer) and processing of your personal data in accordance with this Privacy Policy.
We've set out all the details below.
Please take the time to read and understand this policy.

About Us

We are Longdan Ltd.
We are the 'data controller' of the information you provide us with, which means we control the way information is used and processed.

Collecting Personal Information

INFORMATION WE COLLECT FROM YOU
Some information you give us directly, such as when you open an online account with us,
when you apply for a Longdan Plus Card and when you pay for goods and services in-store or online. You may also give us your personal information when you contact customer services, engage with our social media channels, enter competitions, respond to surveys or provide feedback or product reviews on our website. This will include your name, usernames or similar identifier, date of birth, contact details (billing address, delivery address, email address and telephone numbers) and your marketing preferences.

INFORMATION WE COLLECT WHEN YOU SHOP WITH US
When you shop with us, we will collect your financial and transaction details. If you have a Longdan Plus Card, we will collect your Longdan Plus card number in order to update your account, and we will keep a record of what you buy from us to allow us to provide you with relevant offers in the future.
If you visit a store, your image may be captured on our CCTV cameras within store.

INFORMATION WE COLLECT FROM YOUR DEVICE
As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We also track how often you visit and use our websites and mobile apps. We collect this personal data by using cookies, server logs and other similar technologies. We may receive technical data about you if you visit other websites employing our cookies.
You can set your browser to refuse all or some browser cookies, or to alert you when website set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

INFORMATION WE COLLECT FROM THIRD PARTIES
We may receive personal data about you from third parties, such as:
• Technical Data from the following parties:
• Analytics providers such as Google;
• Advertising networks; and
• Search information providers.
• Information from providers of technical, payment and delivery services such as Mastercard, Barclaycard, American Express.
We use data from third parties to assist in our data accuracy.

Sharing Personal Information

WITHIN LONGDAN LTD.
We share information from our online business with longdan.co.uk & theplantbasestore.com and there are similar arrangements between our other online and store-based businesses. This is because we hope to have a relationship with you across all our different brands and businesses, and we want to be able to provide you with the same value-for-money, high quality experience whenever and however you shop with us. It’s also the only way we can provide you with the full benefits of our Longdan Plus Card.

WITH EXTERNAL THIRD PARTIES
On occasion we will share your personal data with organisations who work with us, to support the activities listed above. We make sure that these companies enter into contracts which require them to protect your privacy and respect data protection laws. We do not allow third parties to use your personal information for their own purposes. These organisations include:
• IT and system administration service providers.
• Professional advisers (including legal, audit, compliance and insurance)
• Web hosting, online content services and data storage
• Market research and collecting or analysing customer feedback
• Payment Service Providers
• Other people who help us provide our websites, mobile apps, in-store WIFI networks, stores, Longdan Plus Card and related services to you
• Credit reference agencies for fraud prevention
• Social media companies such as Facebook and Twitter as advertisers

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

LAWFUL BASIS
Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

Your consent;
The performance of the contract between you and the Site;
Compliance with our legal obligations;
To protect your vital interests;
To perform a task carried out in the public interest;
For our legitimate interests, which do not override your fundamental rights and freedoms.

HOW WE WILL USE INFORMATION ABOUT YOU

We have set out below, in a table format, a description of all the ways we may use your personal data, and which of the lawful bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Purpose/Activity	Lawful basis for processing including basis of legitimate interest
To register you as a new customer	- Your consent
Video and photographs for marketing and promotional purposes	- Legitimate Purpose for marketing and promotional purposes
To process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us	- Necessary for our legitimate interests (to fulfil your order or recover debts due to us)
To manage our relationship with you which may include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or provide feedback (c) Responding to your queries and comments, social media posts and questions (d) Marketing.	- Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) - Your consent (for electronic marketing)
To enable you to partake in a prize draw, competition or complete a survey	- Your consent
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	- Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you	- Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics gathered from our website, mobile apps and in-store WIFI networks to improve our website, products/services, marketing, customer relationships and experiences	- Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
Looking at your previous purchases to make suggestions and recommendations to you about goods or services that may be of interest to you	- Necessary for our legitimate interests (to develop our products/services and grow our business)
To power our security measures and services in order to protect you and our business	- Necessary for our legitimate interests so you can safely access our website.
CCTV for Security and public safety	- Necessary for our legitimate interests for crime prevention and public safety, and in accordance with specific privacy notices displayed in store.

RETENTION
To make sure we meet our data protection and privacy obligations, we only hold on to your information for as long as we actually need it for the purposes we acquired it for in the first place which includes providing you with the services you have requested, meeting our legal and regulatory obligations, resolving disputes and enforcing our agreements.
In most cases, this means we will keep your information for as long as you continue to shop with us or use our services, and for a period of time afterwards for tax purposes and just in case you begin shopping with us again
After that we will either delete it or anonymise it so that it cannot be linked back to you. For more information on your right of erasure, please see the ‘Your rights’ section below.

AUTOMATIC DECISION-MAKING
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.
We DO engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.
Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making include:

Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

Your Rights

Under certain circumstances, you have the right to:
• Request access to your personal information
This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data.
• Request correction of the personal information that we hold about you
This enables you to have any incomplete or inaccurate information we hold about you corrected. We may need to verify the accuracy of any new data you provide to us.
• Request erasure of your personal information
This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. We may not always be able to comply with your erasure request for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to processing of your personal information
You also have the right to object where we are processing your personal information for direct marketing purposes and if your personal information is automatically processed or profiled. You can ask us to stop sending you marketing messages at any time by contacting us directly.
• Request the restriction of processing of your personal information
This enables you to ask us to suspend the processing of your personal data.
• Request the transfer of your personal information to another party
We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Right to withdraw consent at any time
Where we are relying on consent to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below

Registered Office: 4 Estate Way, Leyton, London E10 7JN
Registered in England and Wales, company registration number 05748278
VAT number 911 613 262
Please Contact us online, via the phone on 020 8556 8828 or email at longdan@longdan.co.uk

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [email address] or by mail using the details provided below:

Last updated: 04th June 2021

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: https://ico.org.uk/make-a-complaint