Privacy Policy

As a user of our website, this privacy policy provides you with all the necessary information on how, to what extent and for what purpose we or third-party providers collect data from you and use it.

We collect and use your data strictly in accordance with the provisions of the UK`s Data Protection Act 2018 and Regulation (EU) 2016/679 (General Data Protection Regulation). We feel particularly committed to the confidentiality of your personal data and therefore work strictly within the limits set by the legal requirements.

We collect personal data on a voluntary basis, where we are able to do so and also only share this data with third parties where you expressly consented to it. We ensure a high level of security for particularly confidential data, such as in payment transactions or with regard to your enquiries to us, by using SSL encryption.

However, we would like to take this opportunity to point out the general dangers of Internet use over which we have no control. Especially in e-mail traffic, your data is not secure without further precautions and may be collected by third parties under certain circumstances.

The contact details of the company:

We Are Hedgy Limited

Gloucestershire, United Kingdom

E-mail address: info@wearehedgy.co.uk

Collection of access data

The delivery and presentation of content via our website technically requires the collection of certain data. When you access our website, these so-called server log files are collected by us or the provider of the web space. These log files do not allow any conclusions to be drawn about you and your person.

The corresponding information consists of the name of the website, the file, the current date, the amount of data, the web browser and its version, the operating system used, the domain name of your internet provider, the referrer URL as the page from which you accessed our site, and the corresponding IP address.

We use this data for the presentation and delivery of our content as well as for statistical purposes. The information supports the provision and continuous improvement of our offer. We also reserve the right to check the above-mentioned data retrospectively should there be any suspicion of illegal use of our offer.

Third-party content and services

The offer on our website may also include content, services and benefits from other providers that complement our offer. Examples of such services are social media sharing buttons, the incorporation of a online check out system or third-party graphics. Calling up these third-party services regularly requires the transmission of your IP address. This makes it possible for these providers to perceive your user IP address and also to store it.

We make every effort to include only those third-party providers who use IP addresses solely for the purpose of delivering content. However, we have no influence on which third party provider stores the IP address. This storage may serve statistical purposes, for example. If we become aware of storage processes by third-party providers, we will immediately inform our users of this fact.

In this context, please also note the specific privacy policies of individual third-party providers and service providers whose services we use on our website. You will also find them in this privacy policy.

Personal data

In the context of data minimisation and data economy, we collect personal data only to the extent and for the duration necessary for the use of our website or as required by law. We take the protection of your personal data seriously and strictly adhere to the relevant legal regulations and this privacy policy when collecting and processing personal data. If the purpose of the data collection ceases to apply or the end of the legal storage period is reached, the collected data will be blocked or deleted.

As a rule, our website can be used without disclosing personal data. If we collect personal data - such as your name, address or e-mail address - this data collection is voluntary. This data will not be disclosed to third parties without your express consent.

Please note that data on the Internet is generally not always transmitted securely. Especially in e-mail traffic, the protection of data exchange cannot be guaranteed.

Online Shop

When you place an order in our online shop, we store the following information in order to fulfil the contract concluded between you and us or to carry out other pre-contractual measures.

When placing an order in the online shop, all data necessary for execution and processing are requested by means of mandatory fields: Your full name, your e-mail address, your address (billing address and, if applicable, different delivery address). Your data will only be used to process your order.

It is also possible for you to register for your purchase at Hedgy. For this purpose, you can choose a password together with your e-mail address, both of which will enable you to log in more easily without having to enter your data again when you make a purchase at a later date. Hedgy stores the data you enter to set up a customer account through which your orders are recorded, executed, and processed. Hedgy will hold your data for further orders as long as you maintain your registration. You have the right to access, correct or delete your registration data at any time.

Contact Forms

If you contact Hedgy via a contact form on the We Are Hedgy website, the data you provide will be stored so that your message can be forwarded to the correct contact person. Your data provided via a contact form will not be used for any other purposes, in particular not for advertising.

What are the relevant legal bases for processing your data?

The following informs you about the legal basis of us processing your data and unless the legal basis is not specifically mentioned, the following applies:

Consent – This is where we have asked you to provide explicit permission to process your data for a particular purpose.

Contract – This is where we process your information to fulfil a contractual arrangement, we have made with you.

Answering your business enquiries – This is where we process your information to reply to your messages, e-mails, posts, calls, etc.

Legitimate Interests - This is where we rely on our interests as a reason for processing, generally this is to provide you with the best products and service in the most secure and appropriate way. Of course, before relying on any of those legitimate interests we balance them against your interests and make sure they are compelling enough and will not cause any unwarranted harm.

Legal Obligation – This is where we have a statutory or other legal obligation to process the information, such as for the investigation of crime.

Vital interests – This is where we process your information for communications about security, privacy, and performance improvements of our services. Or for establishing, exercising, or defending our legal rights.

When do we disclose your Personal Data?

We may share your information with organisations that help us provide the services described in this policy and who may process such data on our behalf and in accordance with this policy, to support our online offer and our services. If you wish to learn more about how the relevant provider process your personal data, please follow the link embedded in the above-mentioned provider’s name.

Typically, and unless otherwise stated in this policy, data may be shared on the basis of our contractual and pre-contractual obligations. Equally, if you have consented to it, or where there we have a legal obligation to do so or on the basis of our legitimate interests (e.g. when using agents, hosting providers, tax, business and legal advisors, customer care, accounting, billing and forwarding services that allow us to perform our contractual obligations, administrative tasks and duties efficiently and effectively).If we commission third parties to process data on the basis of a so-called "processing agreement".

In relation to meta data obtained about you, we may share a cookie identifier and IP data with analytic service providers to assist us in the improvement and optimisation of our website.

We may also disclose information in other circumstances such as when you agree to it or if the law, a Court order, a legal obligation, or regulatory authority ask us to. If the purpose is the prevention of fraud or crime or if it is necessary to protect and defend our right, property or personal safety of our staff, the website, and its users.

Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, the data processed by us will be deleted or restricted in their processing. If the data is not deleted because they are required for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

Information, deletion, blocking

You can obtain information free of charge at any time about the personal data we have stored about you and about the origin, recipient and purpose of data collection and data processing. You also have the right to demand the correction, blocking or deletion of your data. Exempt from this is data that is kept due to legal regulations or is required for proper business processing. To ensure that a data block can be implemented at any time, data is kept in a blocking file for control purposes. If data is not covered by a legal archiving obligation, we will delete your data at your request. If the archiving obligation applies, we will block your data. For all questions and concerns regarding the correction, blocking or deletion of personal data, please contact our data protection officer using the contact details in this privacy policy or at the address given in the imprint.

Hosting and Content Delivery Networks (CDN)

This website is hosted by an external service provider (GoDaddy and Shopify). The personal data collected on this website is stored on GoDaddy and Shopify's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated via a website.

GoDaddy and Shopify is used for the purpose of fulfilling the contract with our potential and existing visitors and users and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider.

GoDaddy and Shopify will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

Online Payment, Secure data transmission and Credit card information

The transmission of your personal information during an order transaction is encrypted using industry standard Secure Socket Layer ("SSL") technology, (SSL encryption version 3). Any credit card information you provide will not be stored by us but will be encrypted and collected directly from our payment service provider Shopify via hypertext transfer protocol secure ("https").

We may share information with Shopify, and you may need to provide credit or debit card information directly to the provider in order to process payment details and authorise payment following a secure link. The information which you supply to in such cases is not within our control and is subject to Shopify’s own Privacy Notice and Terms and Conditions.

Online presences in social media

We maintain online presences in Facebook and Instagram on the basis of our legitimate interests within the meaning of Article 6 lit. f) GDPR and in order to communicate with customers, interested parties and users who are active there. Unless otherwise stated in this policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.

Social Media Functions and Widgets

Within our online offer, functions and widgets of Facebook and Instagram are integrated. When you click on or use any of those functions and widgets, your browser establishes a direct connection to Facebook and Instagram. The function or widget then transmits log data to Facebook and Instagram. This log data may contain your IP address, the address of the visited websites, type and settings of the browser, date and time of the request, your usage of Facebook and Instagram, as well as cookies. Those may also include the display of our post, the link to our profile, the possibility to interact with the posts and functions, as well as to measure users reach (so-called conversion measurement).

Data Subject Rights

You have a number of ‘Data Subject Rights’ below is some information on what they are and how you can exercise them. There is more information on each right on the Information Commissioners (ICO) website and you can simply follow the links provided to learn more.

Where the processing of your personal information is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us.

The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.

We encourage you to get in touch if you have any concerns with how we collect or use your personal information. You do however also have the right to lodge a complaint directly with the ICO, their contact details can be found on their website.

Please direct all requests for information, requests for information or objections to data processing to us.

Changes

This policy and our commitment to protecting the privacy of your personal data can result in changes to this policy. Please regularly review this policy to keep up to date with any changes.

Queries and Complaints

Any comments or queries on this policy should be directed to us. If you believe that we have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify us.