Here at Store Twenty One we want to reassure you that we are committed to respecting your privacy. Like all retailers we do collect some information about you when you shop with us, but as a valued customer we want to be clear about how and why we do this and what happens to the information.
The following policy relates to Store Twenty One and its respective website www.storetwentyone.co.uk, which is owned and operated by Grabal Alok (UK) LTD. We are registered with the UK ICO as a data controller under the Data Protection Act (registration number Z9501787). Our registered office is at Tureck House, Drayton Road, Shirley, Solihull, B90 4NG.
We may occasionally need to amend this policy from time to time, so you may like to check this page periodically to ensure you are up to date.
Information we may collect about you
The information we collect about you is used for fulfilling orders, processing payments, customising your website experience and communicating with you about products, services and other news from Store Twenty One that we feel may be of interest to you. Whilst we will always contact you about important matters relating to your order or account, we will not send you any marketing information if you have asked us not to (you can opt-out within My Account).
We collect the following personal details about you:
Mobile Contact number (in case we need to talk to you about your order or account – or update you on your loyalty points)
Limited credit card details (see the Security section below and information on Tokenisation)
We also collect optional demographics such as your age range, and size - but only with your explicit consent (e.g. when supplied as part of a product review, competition, sign up for a newsletter). We may also ask you for your age to verify your eligibility to enter. Please note you do not have to supply any of this information in order to shop with us.
From time to time we may supplement the personal information collected from you with information from publicly available sources, such as information to validate your address. This helps us maintain the accuracy of your personal information; it helps us improve our service, website and makes your experience tailored to you.
We may also collect additional information during your visit,
Details about your computer (e.g. your IP address, browser and screen size)
Navigation and browsing activity (e.g. how often you access our website, which products you view, items in your bag, the point you left our website, the time you spent looking at our site)
Information from cookies or tracking beacons (e.g. to help us understand how you came to visit our site and whether you made a purchase)
We use this information to help us understand the Website activity and to monitor and improve the Website. For more information about ways you can opt-out of some of these processes, please see our cookie section.
So what do we use your information for?
From time to time we may conduct promotions, competitions and sweepstakes. If you choose to participate, we may ask you to provide your name, address, phone number, date of birth, gender, email address and other information, including shopping preferences. We will only use this information for the purpose of conducting our promotions, to send you our newsletter, or to keep you informed of our new products and services.
Terms and conditions for specific promotions or competitions may be posted on the website, provided in our Stores or in the promotional materials themselves. It is your responsibility to ensure that you are familiar with any applicable terms and conditions prior to participating in such activities.
Out of courtesy when we collect information from you we will give you the option to opt out of receiving marketing information from us. When you provide us with information you will also have the opportunity to subscribe to receive various forms of marketing from us, such as e-mails and newsletters, or information from affiliated partners we work with. The information we collect helps us to personally target our marketing in a way we feel would be of specific interest to you. We may, from time to time, send with your ordered products, inserts advertising the goods or services of unrelated third party companies. However, please be rest assured that we do not pass on your personal data to these third party companies.
You can opt-out of receiving promotional or marketing information at any time by emailing us at firstname.lastname@example.org quoting your full name, address and postcode.
In order to protect children we ask that if you are under 16 years of age, you may browse the website, however, please do not provide your personal information to us. For example, you cannot register or make a purchase. Our website is not designed for minors and we do not knowingly collect personal information from any person under 16 years of age. All of our promotions are tailored to a minimum age of 16.
Your rights to access your personal information
Most of the personal information we hold about you is visible within the My Account section of our website where you are able to make changes at any time. If there is any information that you are unable to change, or you wish to know more about the data that we hold about you, you can contact us at email@example.com and discuss this with us.
We monitor customer traffic on an aggregate basis using cookies and code, which is embedded in the site. This provides statistical information about visits to pages on the site, the duration of individual page view, paths taken by visitors through the site, data on visitors screen settings and other general information. Store Twenty One uses this information to help improve the site and services to its users.
We also use Google Analytics features based on Display Advertising, including Google Analytics Demographics and Interest Reporting. This provides us with anonymous aggregated data that we use to shape our services around our users' interests. Google provides an Ads Settings feature to allow you to opt out of this and a browser add-on to allow you to opt out of all Google Analytics data collection.
Please don't worry about sending your credit or debit card details via our website. All transactions are totally secure because all the details that you send to us are encrypted and sent across a secure connection. The secure pages include the My Account pages, all the check-out pages and the final confirmation page.
The encryption technique we use is standard for e-commerce, therefore any information you send us cannot be read by anyone other than the Grabal Alok UK Ltd team.
Depending on which browser you are using, you may see different security features such as a padlock symbol or the address bar turning green. However, regardless of whether you're using Internet Explorer, Firefox or any other browser; you can be confident that our site is safe and secure.
To meet essential operational needs whilst fulfilling your order (such as payment processing, fraud detention, data validation)
To monitor performance and security
To conduct research and analysis
To facilitate delivery of a prize should you enter a competition (but only with your explicit consent)
Where necessary to comply with regulations or law enforcement, or to protect our property and other rights.
We may disclose your personal information:
To any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985.
To protect our customers and www.storetwentyone.co.uk from fraud and theft, we may pass on personal information that we obtain from making identity checks, together with account information to organisation’s including law enforcement agencies, involved in fraud prevention and detection and credit risk reduction; one of the purposes for which we may disclose your address and postcode details is to check against the IMRG Security Alert or any other Fraud Prevention Scheme.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation.
Unless required to do so by law, we will not otherwise share, sell or distribute any of the personal information you provide to us without your consent.
We follow strict security procedures in the storage and disclosure of personal information to prevent unauthorised access or unlawful processing of your personal information. We keep your information confidential and store it on a secure server which is password protected and hidden behind a firewall. We use secure socket layer software (SSL) to encrypt all of your personal information including your credit card number and your name and address. This technology prevents you from inadvertently revealing personal information using an insecure connection.
All payment information is handled using encrypted AES technology and is PCI compliant. No credit or debit card details are stored once your order has been processed. This is why you can save your delivery address but need to enter your card details for every transaction. Unless you have opted to save your card details (see tokenization below).
We recommend that you always close down your internet browser when you have finished shopping online especially if you use a shared PC. This will delete temporary cookies from any sites that you may have visited. We have appropriate security measures in place in our physical facilities to protect against the loss, misuse or alteration of information that we have collected from you via our site.
Credit card processing
We use a process known as "tokenisation" when we take payments. In short, this means that the credit card details you enter are securely transmitted straight to our payment provider and we never see or store them in full. Instead, we receive a "token" consisting of your card number with half the digits randomised, along with less critical data such as the card type and expiry date. We are then able to use this token to charge and refund your card via our payment processor, whilst still being able to show you meaningful information to identify which card you used.
This means that in the unfortunate event of our systems being breached, not only would the attacker fail to retrieve any meaningful credit card data, all tokens would be immediately revoked and become unusable, meaning your card cannot be misused.
Write to us at: Store Twenty One, Alok House, Drayton Road, Shirley, Solihull, West Midlands, United Kingdom, B90 4NG.
Please bear with us and allow at least five working days for your correspondence to get to us, be processed, for communications to cease and for your details to be removed from our mailing lists.
You are entitled to access information we hold about you. Your right of access can be exercised by writing to us in accordance with the Data protection Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.
Store Twenty One Team.