Privacy notice

Privacy Policy

We are committed to protect your privacy and we will not collect any personal information unless provided by you. Any personal information you communicate to us is kept by Ellie & Carl (E&C) itself in accordance with the General Data Protection Regulation (GDPR). GDPR regulation claims are to be sent to the regional jurisdiction of the Office of Information and Data Protection, Malta.

By entering information on the website www.elliecarl.com you are consenting to E&C to use your personal data through the portal or by other available channels, the data that is collected is processed as follows.

Collecting and processing personal data

E&C collects personal data provided by you when contacting E&C by email, phone or when you use the www.elliecarl.com website to place an order, subscribe to the newsletter and in connection with other activities, services, features or resources we make available on our website.

The collected data are information such as your name, contact information including email address, phone number, delivery and billing address, purchase payment status, shopping cart and historic purchase information.

E&C process personal data on local servers with restricted access for selected employees.

How the data is used

The collected data is used to operate the web shop and provide services such as to initiate a payment request related to a purchase or to inform you about the status of your order and other communications related to the products, orders or enquiries.

The collected data may also be used for newsletter if requested by the user.

Legal basis for data collection and retention

E&C retain personal data to fulfil the legal and regulatory obligations of the business.

E&C may also store data to be able to provide product support and service to potential customers and for traceability of delivered products to existing customers.

E&C may retain personal data related for longer periods if it is in our legitimate business interests and not prohibited by law.

Your rights as a Customer

As a user of Ellie&Carl.com you have to right to opt out of any data collection. This may inhibit the use of certain features of the site.

You may also request at any time that your data is updated if incorrect, deleted if no longer relevant or to have your account deleted completely.

Contact details 

If you have any questions about this Privacy Policy, other questions regarding protection of your personal data or to delete your user account please contactinfo@elliecarl.com

Third parties

E&C do not communicate, sell or trade your personal data to third parties outside Ellie & Carl.

Card information

The Payment Card Industry Data Security Standard (PCI DSS) is a security standard aimed to safeguard that all companies that accepts, processes, stores or transmits credit card information, upholds a secure environment.

Card information for purchases made on elliecarl.com are securely processed by Braintree Payment Solutions, a PayPal service, which follows the PCI DSS standard for storing card information and the General Data Protection Regulation (GDPR) as in their Privacy Policy linked here: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

Cookies

This site uses cookies, which are stored by your browser on your computer. Cookies are used in the order process to save information about your shopping cart and orders. Also, to make your next visit to our website easier, information such as the preferences indicated by you.

You can opt out of accepting cookies but please be aware that restricting the use of cookies may impact the functionality of our website and you may be unable to access certain parts of our website, such as the shopping cart.

SSL

Secure Sockets Layer (SSL) is a standard security technology used by www.elliecarl.com for establishing an encrypted link between a web server and the client’s browser. This link ensures that all data passed between the www.elliecarl.com and the client’s browser is transmitted securely via encryption.

It is also a validation that the website operators are a legitimate and legally accountable organization.