PepSmart respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how personal information may be collected, used, stored and protected when you visit our website, contact us, create an account or place an order.
By using the PepSmart website, you acknowledge the practices described in this Privacy Policy.
Information We Collect
We may collect personal information that you provide directly when using our website. This may include your name, email address, telephone number, billing and delivery information, account details, order information and any information you choose to provide when contacting us.
We may also automatically collect certain technical information when you visit our website, including your IP address, browser type, device information, pages visited, referring website and information about how you interact with our website.
We only collect information that is reasonably necessary for operating our website, processing orders, providing customer service and fulfilling our legal and commercial obligations.
How We Use Your Information
Personal information collected through the PepSmart website may be used to:
- Process and fulfil orders.
- Arrange payment and delivery.
- Manage customer accounts.
- Respond to questions and customer service enquiries.
- Provide information relating to orders and transactions.
- Maintain and improve our website and services.
- Detect and prevent fraudulent or unauthorised activity.
- Maintain appropriate business and transaction records.
- Comply with legal and regulatory requirements.
- Send marketing communications where we have an appropriate lawful basis to do so.
We will not use personal information for purposes that are incompatible with those for which it was originally collected unless permitted or required by law.
Lawful Basis for Processing
Under UK data protection legislation, we must have an appropriate lawful basis for processing personal information.
Depending on the circumstances, we may process personal information because it is necessary to fulfil a contract with you, because we have a legal obligation, because we have a legitimate business interest or because you have provided consent.
Where processing is based on consent, you may withdraw that consent at any time.
Orders and Payments
When you place an order, we collect the information necessary to process and fulfil the transaction. This can include contact information, billing details, delivery information and information relating to your purchase.
Payments may be processed by independent payment service providers. Payment information provided during checkout may therefore be collected and processed directly by the relevant payment provider in accordance with its own privacy and security practices.
PepSmart does not use payment information for purposes unrelated to processing transactions, preventing fraud or meeting applicable legal requirements.
Sharing Your Information
We do not sell your personal information.
We may share information with carefully selected third parties where this is necessary to operate our business and provide our services. These may include payment processors, delivery companies, website and hosting providers, IT service providers, professional advisers and other organisations involved in fulfilling an order or operating the PepSmart website.
Information may also be disclosed where required by law, regulation, court order or another valid legal process, or where disclosure is reasonably necessary to protect our rights, customers or business.
Third parties are only provided with information reasonably necessary for them to perform the relevant service.
Data Security
We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
While appropriate precautions are taken, no method of transmitting information over the internet or electronically storing information can be guaranteed to be completely secure.
Customers are responsible for keeping their account credentials confidential and should contact us if they believe their account or personal information may have been compromised.
How Long We Keep Your Information
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected.
Certain information may need to be retained for longer periods where required for accounting, taxation, fraud prevention, dispute resolution, regulatory compliance or other legal purposes.
When personal information is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.
Cookies and Similar Technologies
Our website may use cookies and similar technologies to enable essential website functionality, remember preferences, understand website usage and improve the customer experience.
Some cookies may be necessary for functions such as maintaining a shopping basket, remembering account sessions or completing the checkout process.
Other cookies, including analytics or marketing cookies, may require consent before they are placed on your device.
You can manage cookies through the options provided on our website and through your browser settings. Disabling certain cookies may affect how some parts of the website function.
Marketing Communications
Where permitted by law, we may use contact information to provide news, product information, updates or other marketing communications.
You can unsubscribe from electronic marketing communications at any time by using the unsubscribe option included within the communication or by contacting us.
Unsubscribing from marketing will not prevent us from sending essential communications relating to orders, accounts, transactions or customer service matters.
Your Data Protection Rights
Depending on the circumstances, UK data protection law provides individuals with a number of rights regarding their personal information.
These may include the right to:
- Request access to personal information held about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to certain types of processing.
- Request transfer of certain information in a portable format.
- Withdraw consent where processing relies upon consent.
- Raise a concern about how personal information is being handled.
Not every right applies in every situation, and some requests may be subject to legal exemptions.
Children’s Privacy
The PepSmart website and products are not directed towards children. We do not knowingly seek to collect personal information from children through our website.
If we become aware that personal information relating to a child has been collected inappropriately, reasonable steps will be taken to remove it.
Third-Party Websites
Our website may contain links to websites operated by third parties. PepSmart is not responsible for the privacy practices, security or content of independent third-party websites.
We recommend reviewing the privacy policy of any external website before providing personal information.
International Data Transfers
Some organisations that provide services to our business may process or store information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection legislation.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our website, services, business practices or applicable legal requirements.
The latest version published on the PepSmart website will apply. We recommend reviewing this page periodically to remain informed about how personal information is handled.
Contacting PepSmart About Your Privacy
If you have questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information has been handled, please contact PepSmart using the contact details provided on our website.
We may need to verify your identity before responding to certain data protection requests in order to protect personal information from unauthorised disclosure.
If you remain dissatisfied with how a data protection matter has been handled, you may also have the right to raise a complaint with the relevant UK data protection supervisory authority.