We are committed to protect your privacy and we will not collect any personal information unless provided by you. Any personal information you communicate to us is kept by Ellie & Carl (E&C) itself in accordance with the General Data Protection Regulation (GDPR). GDPR regulation claims are to be sent to the regional jurisdiction of the Office of Information and Data Protection, Malta.
By entering information on the website www.elliecarl.com you are consenting to E&C to use your personal data through the portal or by other available channels, the data that is collected is processed as follows.
Collecting and processing personal data
E&C collects personal data provided by you when contacting E&C by email, phone or when you use the www.elliecarl.com website to place an order, subscribe to the newsletter and in connection with other activities, services, features or resources we make available on our website.
The collected data are information such as your name, contact information including email address, phone number, delivery and billing address, purchase payment status, shopping cart and historic purchase information.
E&C process personal data on local servers with restricted access for selected employees.
How the data is used
The collected data is used to operate the web shop and provide services such as to initiate a payment request related to a purchase or to inform you about the status of your order and other communications related to the products, orders or enquiries.
The collected data may also be used for newsletter if requested by the user.
Legal basis for data collection and retention
E&C retain personal data to fulfil the legal and regulatory obligations of the business.
E&C may also store data to be able to provide product support and service to potential customers and for traceability of delivered products to existing customers.
E&C may retain personal data related for longer periods if it is in our legitimate business interests and not prohibited by law.
Your rights as a Customer
As a user of Ellie&Carl.com you have to right to opt out of any data collection. This may inhibit the use of certain features of the site.
You may also request at any time that your data is updated if incorrect, deleted if no longer relevant or to have your account deleted completely.
E&C do not communicate, sell or trade your personal data to third parties outside Ellie & Carl.
The Payment Card Industry Data Security Standard (PCI DSS) is a security standard aimed to safeguard that all companies that accepts, processes, stores or transmits credit card information, upholds a secure environment.
Secure Sockets Layer (SSL) is a standard security technology used by www.elliecarl.com for establishing an encrypted link between a web server and the client’s browser. This link ensures that all data passed between the www.elliecarl.com and the client’s browser is transmitted securely via encryption.
It is also a validation that the website operators are a legitimate and legally accountable organization.