Privacy Policy Notice

Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases.

• We are exempt from registration in the ICO Data Protection Register because we are only processing personal data for the core business purposes.
• Lawful basis: Contract
  The reason we use this basis: To fulfil our contractual obligations to you to complete the purchase of products and services from Pengraff UK via our website or through direct sales.
  
  We process your information in the following ways: Upon placing an order through our website or directly, we will gain personal data relating to your data, namely – name, address, telephone number, email address, (in the event of website sales – IP address). We will use this for the sole purpose of fulfilling any contract for products or services purchased from us. We shall use this information to ship products and may contact you regarding your order.
  
  If you have subscribed to our newsletter / email updates, this information will also be used for this purpose by Pengraff UK.
  
  Data retention period: We shall continue to process your information until the contract between us ends or is terminated under any contract terms. If you have consented to be added to our mailing list, data will be retained indefinitely until such time as you choose to ‘opt out’ of this service.
  
  Sharing your information: We do not share your information with third parties for marketing purposes; We use PayPal to process payments from our customers and as such, you should refer to their privacy policy for separate terms: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
  
  Special offers and updates: Our customers and users will occasionally receive newsletters or e-mails with information on products, services, or special offers. Out of respect for the privacy of our users, Pengraff UK gives them the opportunity to opt-out from receiving these types of communications.
  
  Maintenance of information: While Pengraff UK uses industry-standard measures to protect your information, it should be noted that no security measures are foolproof, and it is impossible to guarantee complete security of data sent or maintained via the internet.
  
  Your responsibilities: Should you choose to create a customer account with Pengraff UK through our website, you are responsible to ensure the security of your Customer ID and password. You should always ensure these are kept safe and are not shared with anyone. Always log out after your website session ends, and ensure these precautions are taken when using both your personal computer and public computers such as in libraries or internet cafes. Pengraff UK accepts no liability for lost ID or Passwords or the resulting misuse of such credentials via our website.
  
  Third Party websites: From time to time, our website may contain links to other sites. Please be aware that Pengraff UK is not responsible for the privacy practices of such other sites or of its customers. We encourage you to read the Privacy Statements of every website that collects personal data. The Pengraff UK Privacy Policy as described herein only applies to information collected by Pengraff UK.
  
  Statistical data: Pengraff UK may disclose aggregate, anonymous data based on information collected from users to investors or potential partners, or for social media advertising (i.e. “Over 10,00 products in customers’ homes & businesses”). In such cases, only statistical information will be disclosed, and personally identifiable data will be kept strictly confidential. In case Pengraff UK is sold, the information collected from users may be transferred to the new owners. 
  
  We may from time to time engage third parties, including affiliated companies, to preserve, analyse or otherwise store or manipulate data received by Pengraff UK from its customers. In all cases, third party service providers will be required to treat all data with the same level of care as Pengraff UK, and they will be prohibited from disclosing your data to any other person or party, except as otherwise provided for in this Privacy Policy.

If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.