The purpose of this privacy policy aims to give you information on how PuffBlow collects, processes, and stores your data. Whether it be collected automatically or through data you supply when making or attempting to make a purchase.

Controller PuffBlow is the controller and is responsible for your personal data. We have a lead data protection officer who can be contacted via our contact us page on our website if you have any queries regarding this privacy policy. You may also write or phone using the details provided in the contact us section of our website.

The personal data we collect about you and how it’s collected. We collect data from you automatically when you visit our site. This includes information about your browser & IP address. We use Google Analytics to monitor trends and identify your patterns of usage.

We collect personal identifiable data directly from you when you attempt to place or place an order.

• Your Name

• Address

• Phone Number

• Email

We also collect data from you when you sign up for our newsletter for marketing purposes.

When you attempt to make a payment, all financial details are processed via PayPal or WorldPay. We never have access to your financial details, and they are never stored on our site.

How do we use your data? We only use the information collected from our site for legitimate business purposes.

• We use the information automatically collected from our site to identify trends so that we can aim to improve your future shopping experience.

• We use your personal information to fulfill your orders, arrange shipping, and communicate with you regarding any queries with your order.

Cookies Cookies are short pieces of data that are sent to your computer when you visit a website. On later visits, this data is then returned to that website. Cookies allow us to recognize you automatically whenever you visit our site so that we can personalize your experience and provide you with better service. We also use cookies (and similar browser data, such as Flash cookies) for fraud prevention and other purposes.

If your web browser is set to refuse cookies from our website, you will not be able to complete a purchase or take advantage of certain features of our website, such as storing items in your Shopping Cart or receiving personalized recommendations. As a result, we strongly encourage you to configure your web browser to accept cookies from our website.

Storing & Protecting your data. The information collected on our website is stored on a secure third-party server in the UK. We have taken appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized manner. We limit access to your data to a need-to-know basis only.

You acknowledge that the internet is not a completely secure medium for communication, and we cannot guarantee the security of any information sent to us or that we send to you via the internet. We are therefore not responsible for any damages you or others may suffer as a result of the loss of confidentiality of such information. Any paper records of your orders are stored in a secure office environment.

Data Retention We will retain any electronic information on our website until you ask us to delete it. Paper records of orders will be kept for a minimum of 7 years for accounting purposes. After this time, they will be destroyed.

Sharing your data (Third Parties). We will only share your data where it is necessary to perform legitimate business functions. We will never sell information to a third party. We will share your data with essential service providers such as our web hosts, payment gateway providers, couriers, email marketing providers, accountants, lawyers, insurers, and law enforcement if necessary. Each of these third parties will have their own privacy policies.

Log Data Like many site operators, we collect information that your browser sends whenever you visit our Site (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

In addition, we may use third-party services such as Google Analytics that collect, monitor, and analyze the use of our Service.

For Login Security For security, we use Google’s reCAPTCHA service, which is subject to the Google Privacy Policy and Terms of Use.

Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Firebase Firebase is an analytics service provided by Google Inc. You may opt out of certain Firebase features through your mobile device settings, such as your device advertising settings, or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy?hl=en

Behavioural Remarketing PuffBlow uses remarketing services to advertise on third-party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimize, and serve ads based on your past visits to our Service.

How to opt-out and withdraw consent You may opt out of receiving marketing materials from us at any time by using the unsubscribe button on the bottom of emails or you can contact us.

Your Legal Rights Under certain circumstances, you have rights under UK data protection laws in relation to your personal data. You have the right to:

• Request access to your personal data (“data subject access request”).

• Request correction of the personal data that we hold about you.

• Request erasure of your personal data.

• Object to the processing of your personal data.

• Request restriction of processing of your personal data.

• Request the transfer of your personal data to you or a third party.

• Withdraw consent at any time where we rely on consent to process your personal data.

If you wish to exercise any of these rights, please contact us, marking your query for the attention of the DPL.

No Fee Required You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Time Limit to Respond We try to respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.