Privacy policy
All sales on www.f1monza.com are currently processed by our online store provider, Shopify.com. Our privacy policy sets out what personal buyer information we receive from shopify.com, how we use it, and under what circumstances, if any, we will share it with other parties. We respect and comply with the Data Protection Act 1998 (hereinafter referred to as "The DPA") and the General Data Protection Regulation (hereinafter "GDPR") which will come into effect on May 25, 2018. We are committed to maintaining the personal information of safe and confidential buyers.
Legal basis for processing personal data
For the purposes of the GDPR, we are data controllers when selling on shopify.com and treat all personal data lawfully, fairly and transparently. Pursuant to Article 6 of the GDPR, the legal basis on which we process personal data received from shopify.com is that of the "Agreement" - for which processing is necessary in order to fulfill the orders and requests of the buyer. We retain information provided by shopify.com, such as transaction information for internal financial accounting purposes. It is a legal obligation to keep this information for a period of 7 years, after which the complete order information will be completely deleted. This will affect all orders regardless of the location of the buyer or recipient.
Data we receive: personally identifiable information
We only receive personally identifiable information from shopify.com when it is voluntarily submitted by shoppers when placing an order online. The data we receive includes: name, billing address, delivery name, delivery address, email address (in encrypted format), telephone number, order date, items ordered, value of items ordered, delivery method chosen. We do not sell or rent personally identifiable information to third parties for any purpose. Starting 18 months after the order creation date, the following types of personal data will be removed from all orders:
- Name of the buyer and recipient
- Physical address
- Telephone number and
- Email address
How We Use Buyers' Personal Information
We may use any buyer's personal information provided by shopify.com to:
- process and ship buyers' orders
- perform regulatory checks to meet our legal obligations
- prevent and detect crime
- develop and improve our products
- perform anonymous statistical analysis (we will not be able to identify people from this data)
We treat all information in our possession relating to buyers as private and confidential. We will not disclose any personal details or buyer order details to anyone who is not connected to us, unless:
- a buyer asks us to disclose the information or we have a buyer's permission to do so
- required by law or authorized to do so
- it is required by law enforcement, fraud prevention or credit reference agencies
Access requests by the interested party
Under the GDPR, buyers have the right to obtain from us (the Data Controller for the purposes of the GDPR when selling onshopify.com) a copy of the data held concerning them and to correct any inaccuracies in the data. We are required to provide this data within 1 calendar month of the request and free of charge. However, we have the right to refuse or charge manifestly unfounded or excessive and repetitive requests.