Lawful Basis for Processing Personal Data
For the purposes of The GDPR, Nature Provides Ltd are the Data Processor when selling on Shopify and processes all personal data lawfully, fairly and in a transparent manner. Under Article 6 of The GDPR, the lawful basis on which Nature Provides Ltd process personal data received from Shopify is that of “Contract” - whereby processing is necessary in order to fulfill buyer orders and enquiries. Nature Provides Ltd retain information provided by Shopify, such as transaction information for internal financial accounting purposes. It is a legal requirement to retain this information for a period of 7 years.
Data Nature Provides Ltd Receive: Personally Identifiable Information
Nature Provides Ltd receive personally identifiable information from Shopify only when it is voluntarily submitted by buyers when placing an on-line order. The data Nature Provides Ltd receive includes: name, billing address, delivery name, delivery address, e-mail address, telephone number, date of order, items ordered, value of items ordered, chosen method of delivery. Nature Provides Ltd do not sell or rent personally identifiable information to any third party for any purpose.
How Nature Provides Ltd use buyers’ personal information
Nature Provides Ltd may use any personal buyer information provided by Shopify to:
- Process and dispatch buyers’ order/s
- Carry out regulatory checks to meet our legal obligations
- Prevent and detect crime
- Develop and improve our products
- Undertake anonymised statistical analysis (Nature Provides Ltd won’t be able to identify individuals from this data)
Nature Provides Ltd treat all information Nature Provides Ltd hold about buyers as private and confidential. Nature Provides Ltd will not reveal any personal details or details concerning buyers’ orders to anyone not connected with us, unless:
- A buyer asks us to reveal the information, or Nature Provides Ltd have a buyer’s permission to do so
- Nature Provides Ltd are required or permitted to do so by law
- It is required by law enforcement, fraud prevention or credit reference agencies
Nature Provides Ltd may share buyer personal information with our suppliers, service providers and other contractors only to fulfil orders buyers place with us on Shopify.
Data Subject Access Requests
Under The GDPR buyers are entitled to obtain from us (the Data Processor for the purposes of The GDPR when selling on Shopify) a copy of the data held concerning them and to have any inaccuracies in the data rectified. Nature Provides Ltd are obliged to provide this data within 1 calendar month of the request and free of charge. However Nature Provides Ltd Nature Provides Ltd have the right to refuse or charge for requests that are manifestly unfounded or excessive and repetitive.