Last updated: August 7th, 2022
Defined terms
For the purpose of this Privacy Policy unless the context requires otherwise, the words with a capitalised initial letter have meanings defined as follows:
- Affiliate means a person or organization officially attached to a larger body;
- Account means a unique account created by You (a visitor or customer) to access the Services provided by the Company;
- Company (referred to as either “the Company”, “11. House”, “We”, “Us” or “Our” in this Privacy Policy) refers to 11. House Limited – a private company limited by shares registered in Scotland with the registration number SC731978 under the address: 64B/6 Restalrig Road South, Edinburgh, EH7 6LE;
- Country refers to the United Kingdom;
- Cookies are small text files that a stored on the visitor’s device used to access websites when data from these websites is loaded into a browser. They are used as “memos” to record technical details related to the website visit such as registration, login or details of the visitor’s browsing history;
- Data Controller, for the purpose of the General Data Protection Regulation (GDPR), refers to the Company as the legal person who determines the purposes and means of Personal Data processing alone or together with other legal entities;
- Device means any device that can access the Service such as a computer, a cellphone or a digital tablet;
- Personal Data means, for the purposes of GDPR, any information relating to You such as a name, address, an identification number, location data, and other factors related to the physical, mental, economic, cultural or social identity;
- Service refers to the scope of services provided by the Company over its Website;
- Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to provide, perform or improve the Service. For the purpose of GDPR, Service Providers are considered Date Processors;
- Usage Data refers to data either generated or collected automatically by the Service Provider during the usage of the Service;
- The United Kingdom means Great Britain and Northern Ireland;
- Website refers to the Company’s website accessible under https://11thhouse.co.uk;
- You means any natural or legal person accessing or using the Service.
Who we are
Among other activities, the Company is specialising in innovative jewellery designs, astrology and fractal prints and high-end accessories. For selling these products, the Company maintains the Website which is based on WooCommerce and WordPress services and a variety of plug-ins to allow for the functionality of the website, the integrated online shop and the online payments. The sales of physical items are limited to the United Kingdom, while digital downloads are sold worldwide.
This Privacy Policy describes how Your information related to the Service provided through the Website and its subsequent pages and plug-ins is collected and used.
What DATA DO WE COLLECT
Contact details
For the order fulfilment, We collect details about the selection of products in the Customer’s Order and personal contact information such as:
- first and last name
- email-address
- shipping address
- billing address
- payment details
Data for product personalisation
Some products on the Website require personalisation. For these products, we collect additional information such as:
- personalised text
- name to be included in the final product
- time and place of birth
Usage Data
Usage Data is collected automatically when the Service is used. It may include information such as:
- Device’s Internet Protocol address (IP address)
- Browser type
- Browser version
- Your Device’s operation system
- Pages of the Website that You visiting
- Time and date of Your visit
- Time spent on each of the pages
- Unique Device identifiers
- Other diagnostic data
Cookies and Other Tracking Technologies
We use Cookies and other technologies to enable the functioning of the Website, collect certain information and analyse Our Service.
You can change the settings in Your browser to refuse all Cookies or indicate when a Cookie is being sent. However, if do not accept any Cookies, Our Service may not work as intended or not work at all.
Cookies
There are different types of cookies. For example, they can be “persistent” or “session” cookies. Persistent cookies are kept on Your device after You leave our Service whereas session cookies are deleted as soon as you close the corresponding browser tab or the browser. “First-party cookies” are set by the visited website directly, whereas “third-party cookies” are set by external services such as analytics or advertising support. You can learn more about cookies here: Cookies: What Do They Do?
The WooCommerce plug-in Our Website is based on, uses cookies to a) help navigate the Website visitor along the pages; b) enable the shop function, and c) enable the admin functions.
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish a product review, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.
Further cookies currently in use are listed below.
Functionality & Essential Cookies
Store front end:
Cookie name
- woocommerce_cart_hash
- woocommerce_items_in_cart
- wp_woocommerce_session_
- woocommerce_recently_viewed
- store_notice[notice id]
Duration
- session
- session
- two days
- session
- session
Purpose
- Helps WooCommerce determine when cart contents change.
- Contains a unique code for each customer to help identify cart data in the database for each customer.
- Six single-use guest passes per year
- Powers the Recent Viewed Products widget.
- Allows customers to dismiss the Store Notice.
No personal information is stored within these cookies.
Store dashboard (/WP-ADMIN):
Cookie name
- woocommerce_snooze_suggestions__[suggestion]
- woocommerce_dismissed_sugestions__[context]
- tk_ai
Duration
- two days
- one month
- session
Purpose
- Allows dashboard users to dismiss Marketplace suggestions, if enabled.
- Count of suggestion dismissals, if enabled.
- Stores a randomly-generated anonymous ID. This is only used within the dashboard (/wp-admin) area and is used for usage tracking if enabled.
More info about WooCommerce cookies can be found here: https://woocommerce.com/document/woocommerce-cookies/
Cookies Policy Acceptance Cookies
- Type: Persistent Cookies
- Administered by: Us
- Purpose: To identify if users have accepted the use of cookies on the Website.
Other tracking technologies
Some plug-ins, emails and websites may also use tracking technologies such as “invisible pixel” or “web beacons” or tags. These are small transparent images that can help in collecting statistics about website visits. They may still work even if the customers disable cookies. Currently, the Website itself does not use such technology. However, some of the WooCommerce-compatible plug-ins may include them in the future. We will update this privacy policy as soon as we become aware of this.
How WE USE YOUR DATA
The Company may use Personal Data for the following purposes:
- To provide and monitor Our Service
- To create related products for personalised orders.
- To fulfil Your orders as to create, manufacture and deliver the items and services You have purchased through the Service as applicable
- To contact You during the fulfilment process. That may include contacts by Email, telephone calls, SMS or similar forms of modern communication.
- To provide you with news, updates, new releases, special offers, and other information about Our goods, services and events unless You have opted out of receiving such information.
- To manage Your Account including information You used for the registration as a user of the Service. Your Account so maintained can give You access to different functionalities of the Service if you are logged in as a registered user.
- To manage Your requests in case you contact Us regarding our products or services.
The Personal Data can also be shared with the following entities:
- With Service Providers such as WooCommerce and related plug-ins, for example, WooCommerce Payments, to maintain and monitor the use of service, conduct payments or contact you. The information is shared with WooCommerce plug-ins and its hosting website wordpress.com as it is necessary for both to ensure the proper functioning of the Website and the adjacent functions as well as to comply with the WordPress Terms of Services at https://wordpress.com/tos/. This part is related to as “essential” and cannot be opted out by the visitor, since otherwise, the Website would not be functioning. By continuing using the Website You agree to the usage of essential cookies and other similar technology.
- With Business partners, such as Print On Demand (POD) or delivery services, to offer You certain products and services but only to the extent required to perform these services. In these cases, we will ensure that the Privacy Policy of these companies complies with Our Privacy Policy.
- With governmental and legal institutions if the information is needed for compliance with laws, for example, a) to respond to governmental requests or legal claims; b) to prevent or investigate fraud and other illegal activities; c) to address security breaks, DOS attacks, and similar technical issues; d) protect the safety, property, and rights of the Website and its customers.
On the first visit to the Website, You are informed that the Website uses cookies and have the opportunity to agree, decline or customise Your choices. Upon affirmative consent, which You can revoke at any time, the information is used for legitimate interests such as to analyse the statistics of the pages visited to improve the Website’s services. These legitimate interests come into place only if they are not overridden by Your rights or interests.
COMMENTS
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. Visitor comments may be checked through an automated spam detection service.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
EMBEDDED CONTENT FROM OTHER WEBSITES
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Payment Processing
Currently, the Company utilises WooCommerce Payments plug-in functionality for payments. That includes that within Your Account you have the option to save Your payment data such as debit card details for future use.
In addition to the WooCommerce Payments plug-in, we may use further third-party services for payment processing whose use of Your Personal Data is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.
- Apple Store In-App Payments Their Privacy Policy can be viewed at https://www.apple.com/legal/privacy/en-ww/
- Google Play In-App Payments Their Privacy Policy can be viewed at https://www.google.com/policies/privacy/
- Stripe Their Privacy Policy can be viewed at https://stripe.com/us/privacy
- PayPal Their Privacy Policy can be viewed at https://www.paypal.com/webapps/mpp/ua/privacy-full
When You use Our Service to pay for a product and/or service via bank transfer, We may ask You to provide information to facilitate this transaction and to verify Your identity.
HOW LONG DO WE RETAIN YOUR DATA
The Company will retain Your Personal Data for as long as necessary for the purposes outlined in this Privacy Policy.
The period required to process your order includes the time required to comply with applicable laws and regulatory obligations connected to the order, resolve disputes, comply with our contracts, and enforce our agreements and policies.
In your account at the Website, the information related to your orders will be kept until you delete your account. This part of information storage is maintained by WooCommerce.If you subscribed to our newsletter, we will retain your email address for this purpose until you unsubscribe. If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
The Company will also retain Usage Data for internal analysis purposes or if We are legally obliged to retain this data.
Transfer and Storage of the Information outside the UK
For hosting its Website, the Company may use services and/or servers located outside the UK. As a result, your personal information, when stored on these servers will be transferred to a jurisdiction with a different data protection policies than the UK. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement.
Currently, our hosting provider is www.siteground.com for the UK region. Please consult their privacy policy here (https://www.siteground.co.uk/#) and T&C here (https://www.siteground.co.uk/terms.htm) for more details.
The Company will take steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of our data and other personal information.
Security of Your Data
Your privacy and security of Personal Data are important to Us. However, no current transmission technology or method of electronic storage is 100% secure. Although we will use all commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
GDPR Privacy
Legal Basis for Processing Personal Data under GDPR
We may process Personal Data under the following conditions:
- Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
- Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.
- Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
- Vital interests: Processing Personal Data is necessary to protect Your vital interests or of another natural person.
- Public interests: Processing Personal Data is related to a task that is carried out in the public interest or the exercise of official authority vested in the Company.
- Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.
In any case, the Company will help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Your Rights under the GDPR
You have the right under this Privacy Policy, and by law, if You are within the UK or EU, to:
- Access Personal Data the Company has on You and receive a copy of this information by contacting the Company using the contact details below.
- Change, restrict, delete. You can access, update or request deletion of Your Personal Data directly within Your Account settings section. If you are unable to perform these actions yourself, please contact the Company to assist You. Absent exceptional circumstances (like the obligation to store data for legal reasons) the Company will generally delete your personal information upon request.
- Request correction of the Personal Data that the Company holds about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.
- Object to processing of Your Personal Data. This right exists where the Company is relying on legitimate interest as the legal basis for the data processing. You can object to the processing of some of Your information based on this ground. In such cases, the Company will delete Your Personal Data unless it has compelling and legitimate grounds to continue using that information or if it is needed for legal reasons. You also have the right to object to where We are processing Your Personal Data for direct marketing purposes.
- Request the transfer of Your Personal Data. We will provide to You, or a third party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which You initially provided consent for the Company to use or where the Company used the information to perform a contract with You.
- Complain. If You wish to raise a concern about the Company’s use of Your Personal Data, you have the right to do so with your local data protection authority. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.
- Withdraw Your consent. You have the right to withdraw Your consent from using your Personal Data. If You withdraw Your consent, The Company may not be able to provide You with access to certain specific functionalities of the Service.
This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Changes to this Privacy Policy
We may update our Privacy Policy from time to time. We will update the “Last Updated” date at the top of this Privacy Policy and publish the new version on this page. Provided your consent, We will let You know via email or a prominent notice on Our Service before the change becomes effective.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact
If you have any questions about this Privacy Policy, You can contact the Company via email contact[at]11thhouse.co.uk or by visiting the following page on Our Website: https://11thhouse.co.uk/contact