Cart
No products in the cart.
1. Introduction and Data Controller
This Privacy Policy explains how Cartomy, operating from 80 St Andrews Rd, Glasgow, G41 1PF, UK, collects, uses, and protects your personal data when you use our website, cartomy.com.
Data Controller: Cartomy is the Data Controller responsible for your personal data.
Contact: For any privacy-related queries, please contact us at info@cartomy.com.
2. Data We Collect and Purpose (Why We Collect It)
We collect personal data to process your orders, provide customer support, and improve our services.
| Category of Data | Examples of Data Collected | Legal Basis & Purpose |
| Identity/Contact | Name, billing/shipping address, email address, phone number. | Contractual Obligation: To process and ship your order, and for communication regarding your purchase. |
| Financial/Transaction | Details about payments made, last four digits of the card (for reference), order history. | Contractual Obligation & Legal Obligation: To complete the transaction, issue refunds, and for tax/accounting purposes. |
| Technical/Usage | IP address, browser type, operating system, pages viewed, time spent on site. | Legitimate Interest: To improve website functionality, performance, and security. |
| Marketing | Preferences for receiving marketing, interaction with newsletters. | Consent: To send promotional material, which you can withdraw at any time. |
3. How We Collect Your Data
We collect data through the following methods:
Direct Interactions: When you create an account, place an order, sign up for a newsletter, or contact customer support.
Automated Technologies (Analytics/Cookies): When you browse our site, we collect technical data via cookies, server logs, and analytics providers (e.g., Google Analytics, Meta Pixel).
4. Data Storage and Security
Location: We store data on secure servers, located primarily within the European Economic Area (EEA) where possible.
Security: We implement appropriate technical and organizational measures (e.g., SSL encryption, restricted access) to prevent unauthorized access, loss, or disclosure of your personal data.
5. Sharing Your Personal Data
We only share your data with trusted third parties necessary for running our business:
Payment Processors: To securely process your payments (e.g., Visa, Mastercard, PayPal).
Shipping Carriers: To deliver your order (e.g., Royal Mail, DHL, etc.).
IT & Analytics Providers: For website hosting and understanding user behaviour (e.g., Google Analytics).
We require all third parties to respect the security of your personal data and treat it in accordance with the law.
6. Your Legal Rights (GDPR Rights)
Under GDPR, you have the following rights concerning your personal data:
Right of Access: To request copies of your personal data.
Right to Rectification: To request correction of inaccurate or incomplete data.
Right to Erasure (‘Right to be Forgotten’): To request deletion of your personal data (subject to legal retention periods).
Right to Restrict Processing: To request us to limit how we use your data.
Right to Data Portability: To request transfer of your data to another service.
Right to Object: To object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: To withdraw consent where processing is based on consent.
To exercise any of these rights, please contact us at info@cartomy.com.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements (e.g., transactional data must be retained for UK tax purposes for several years).
8. Changes to This Policy
We may update this Privacy Policy from time to time. The revised version will be effective as soon as it is posted on our website.