Privacy Policy
At Yellow Sub Liverpool (“we”, “us”, or “our”), accessible at yellowsubliverpool.com, we are deeply committed to upholding your privacy and protecting your personal data. This Privacy Policy outlines how we collect, use, store, and safeguard information obtained through your interaction with our website and services. We respect your right to privacy and strive to ensure transparency in all data-related practices in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Scope of This Privacy Policy and Data Controller Role
This Privacy Policy applies to all personal data processed through our website, yellowsubliverpool.com, as well as related communications, transactions, and services we provide. For the purposes of the GDPR, Yellow Sub Liverpool is the data controller responsible for processing your personal data.
If you have any questions about how we process your data or wish to exercise your rights, you can contact us at [email protected].
2. Categories of Personal Data We Collect
Depending on your interactions with our website, we may collect and process the following categories of personal data:
a. Usage Data: Includes information collected automatically through your use of our website, such as your browser type, IP address, pages visited, session duration, timestamp of visits, referral URLs, and other diagnostic data.
b. Account Data: If you create an account or make a purchase, we collect identifiers such as your full name, billing and shipping address, email address, and telephone number.
c. Profile Data: Includes your purchase history, interests, preferences, feedback, and behavioral patterns on our website.
d. Communication Data: Includes the contents of your interactions with our team such as support queries, correspondence, reviews, and requests made via contact forms or email.
e. Technical Data: Includes details about the device(s) you use to access our services, such as operating system, device type, browser settings and plug-ins, screen resolution, and system configuration.
f. Transaction Data: Includes payment and purchase details such as items ordered, shipping details, and payment confirmations. Please note, we do not store card information directly — payments are processed through secure third-party processors.
g. Preference Data: Includes your consent for marketing communications, product or content preferences, and subscription settings.
3. Legal Bases for Processing Personal Data
Our lawful basis for collecting and processing your personal data depends on the nature of your interaction with our services:
– Consent: When you have provided your clear, informed permission for us to process your personal data for a specific purpose (e.g., receiving marketing emails).
– Performance of a Contract: Where processing is necessary for the performance of a contract with you, such as completing a purchase and delivering goods.
– Legal Obligation: Where processing is required for compliance with a legal obligation, such as tax or accounting requirements.
– Legitimate Interest: Where processing is necessary for our legitimate interests, such as improving our service, detecting fraud, or developing new features, provided that such interests do not override your fundamental rights and freedoms.
4. Your Privacy Rights
Under applicable data protection laws, you may have the following rights regarding your personal data:
– Right of Access: Obtain confirmation of whether your personal data is being processed and receive a copy of your data.
– Right to Rectification: Request correction of inaccurate or incomplete personal data.
– Right to Erasure: Request permanent deletion of your personal data, where legally applicable (also known as the “right to be forgotten”).
– Right to Restriction: Request limitation on the processing of your personal data under certain circumstances.
– Right to Data Portability: Receive your personal data in a structured, machine-readable format and transmit it to another controller.
– Right to Object: Object to the processing of your data when done under a legitimate interest or for direct marketing.
To exercise any of these rights, please contact us at [email protected]. We will respond in accordance with applicable law.
5. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure. These measures include, but are not limited to:
– Data encryption in transit and at rest.
– Multi-level access controls, authorization principles, and user authentication.
– Regular data backups and disaster recovery protocols.
– Employee confidentiality agreements and privacy-focused training initiatives.
6. International Data Transfers
When personal data is transferred outside the European Economic Area (EEA) or other regions with comprehensive data protection laws, we ensure appropriate safeguards are in place. This includes the use of Standard Contractual Clauses approved by the European Commission, or other legally valid transfer mechanisms, to ensure your data receives an adequate level of protection.
7. Data Retention
Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including:
– Account Data and Communication Data: Retained for as long as your account is active and for up to 7 years for legal and administrative purposes.
– Transaction Data: Retained for up to 7 years to comply with tax and accounting obligations.
– Usage, Profile, and Technical Data: Retained for up to 2 years for analytic and service improvement purposes.
– Marketing and Preference Data: Retained until you withdraw consent or opt out from receiving communications.
We also consider legal requirements, accounting obligations, and legitimate interests when determining appropriate retention periods.
8. Cookie Policy
This website uses cookies and similar technologies to recognize repeat visitors, enhance user experience, track usage patterns, and deliver tailored content.
We use the following types of cookies:
– Essential Cookies: Required for the core functionality of the site (e.g., shopping carts, secure login).
– Functional Cookies: Enable website personalization based on your interaction (e.g., language settings).
– Performance & Analytics Cookies: Help us understand how visitors engage with the website (e.g., Google Analytics).
– Marketing Cookies: Used to track visitors across websites and deliver targeted advertising based on user behavior.
9. Cookie Management and Compliance
Upon first use of the site, you will be presented with a cookie banner allowing you to accept or reject non-essential cookies. Your cookie preferences may be updated at any time through our Cookie Settings interface.
Under GDPR and CCPA, you have the right to:
– Opt out of unnecessary data collection through cookies.
– Request access to information collected via cookies and similar tools.
– Withdraw previously given consent at any time.
You may also adjust your browser settings to block, restrict, or delete cookies. Note that doing so may impact your experience on yellowsubliverpool.com and reduce the functionality of some features.
10. Children’s Privacy
We do not knowingly collect or solicit personal data from individuals under the age of 13. If you are a parent or guardian and believe your child has provided personal information, please contact us immediately at [email protected] so we can take appropriate steps to remove such data.
11. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to remain compliant with changes in law, technology, or our services. Any material changes will be communicated through our website or by direct notification, where appropriate. We encourage you to review this document periodically to stay informed.
12. Contact Us
Should you have any questions regarding this Privacy Policy, your personal data, or your rights under applicable law, you may contact our support team via email at:
—
We are committed to processing your data in compliance with the GDPR, CCPA, and other applicable laws. Thank you for trusting Yellow Sub Liverpool and visiting yellowsubliverpool.com. Please reach out to our team with any privacy-related questions or concerns.