Privacy policy
This Privacy Policy describes how Discovering offers collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.
Contact
After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at info@discoveringoffers.com.
Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.
We use our customers' personal information to process orders, contact them if there are problems with purchases, send updates about products and promotions, and personalize the shopping experience and improve our services.
Minors
The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address above to request deletion.
Sharing Personal Informat
We do not sell, rent or share our customers' personal information with third parties without prior consent, except when required by law or to protect the rights, property or safety of our company, customers or the public.
Behavioural Advertising
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
- We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
- We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).
Using Personal Information
We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.
Lawful basis
Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:
- Your consent;
- The performance of the contract between you and the Site;
- Compliance with our legal obligations;
- To protect your vital interests;
- To perform a task carried out in the public interest;
- For our legitimate interests, which do not override your fundamental rights and freedoms.
1. **Consent**: The data subject has given clear consent for the processing of their personal data for a specific purpose.
2. **Contract performance**: The processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract.
3. **Compliance with a legal obligation**: The processing is necessary for compliance with a legal obligation to which the data controller is subject.
4. **Vital interests**: The processing is necessary to protect the vital interests of the data subject or another natural person.
5. **Public task**: The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
6. **Legitimate interests**: The processing is necessary for the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
It is important for organizations to identify and document the legal basis that underpins the processing of personal data.
Retention
When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.
Automatic decision-making
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.
We [DO/DO NOT] engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.
Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Selling Personal Information
If you leave in United States of America our Site sells Personal Information, as defined by the California Consumer Privacy Act of 2018 (“CCPA”).
- categories of information sold;
- instructions on how to opt-out of sale;
- Whether your business sells information of minors (under 16) and whether you obtain affirmative authorization;
- If you provide a financial incentive to sell information, provide information about what that incentive is.]
Key Definitions:
1. **Personal Information**: Any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked to a particular consumer or household. This includes names, addresses, email addresses, social security numbers, browsing history, and more.
2 **Consumer**: A natural person who is a California resident (defined as being in California for other than a temporary or transitory purpose).
3. **Business** Any for-profit entity that collects consumers' personal information, does business in California, and meets one of the following thresholds:
- Has annual gross revenues exceeding $25 million.
- Buys, receives, sells, or shares the personal information of 50,000 or more consumers, households, or devices for commercial purposes.
- Derives 50% or more of its annual revenues from selling consumers' personal information.
4. **Sale of Personal Information**: Selling, renting, releasing, disclosing, disseminating, making available, transferring, or communicating a consumer's personal information to a third party for monetary or other valuable consideration.
Consumer Rights Under CCPA:
1. **Right to Know**: Consumers have the right to request a business disclose the categories and specific pieces of personal information it has collected about them, as well as the purposes for which it is used and shared.
2. **Right to Delete**: Consumers can request the deletion of their personal information held by a business, subject to certain exceptions.
3. **Right to Opt-Out**: Consumers have the right to direct a business to stop selling their personal information to third parties.
4. **Right to Non-Discrimination**: Consumers have the right not to be discriminated against for exercising their rights under the CCPA. This means businesses cannot deny services or charge different prices based on a consumer's exercise of their rights.
5. **Right to Access**: Consumers can access to the personal information that a business holds about them.
Compliance Requirements:
- Businesses must provide a clear and accessible privacy policy that informs consumers about their rights and the types of personal information.
- Businesses must respond to consumer requests within specific timeframes (generally within 45 days).
- Businesses must implement reasonable security measures to protect personal information.
The CCPA was designed to enhance privacy rights and consumer protection for residents of California and has significant implications for businesses operating in or serving California consumers.
Your rights
In Europe, the rights of consumers purchasing from online stores are widely protected by the EU Consumer Rights Directive and the General Data Protection Regulation (GDPR). Here are some of the key rights consumers have when shopping online:
1. **Right to Information**
Consumers have the right to receive clear and comprehensible information about the products or services, including:
- Description of the product or service.
- Price, including taxes and shipping fees.
- Information about the supplier.
2. **Right of Cancellation (Right of Withdrawal)**
Consumers have the right to cancel a purchase within 14 days from the receipt of the product, without needing to justify their decision. The seller must refund the consumer within 14 days after receiving the cancellation notification.
3. **Right to Conformity**
The products purchased must conform to the contract. If a product is defective or does not match the description, the consumer has the right to repair, replacement, or refund.
4. **Right to Data Protection**
Under the GDPR, consumers have rights related to the processing of their personal data, including:
- The right to access their data.
- The right to rectify inaccurate data.
- The right to erase personal data under certain conditions.
5. **Right to Non-Discrimination**
Consumers should not be treated differently based on nationality or place of residence, meaning they cannot be charged different prices for those reasons.
6. **Right to Secure Payment Methods**
Consumers have the right to use secure payment methods and to have their financial information protected.
7. **Rights Related to Advertising and Marketing**
Consumers must be informed about how their information will be used for marketing and have the right to opt out of marketing communications.
8. **Right to Consumer Support**
Consumers should have access to adequate support to resolve issues and inquiries related to the product or service purchased.
These rights are designed to protect consumers and ensure that their online purchases are safe and transparent. It is essential for online stores to be aware of these obligations and to respect consumers' rights.
GDPR
If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above.Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
CCPA
If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above.
If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address above.
Cookies
A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.We use the following cookies to optimize your experience on our Site and to provide our services.
[Be sure to check this list against Shopify’s current list of cookies on the merchant storefront: https://www.shopify.com/legal/cookies ]
Cookies Necessary for the Functioning of the Store
Name Function Duration
_ab Used in connection with access to admin. 2y
_secure_session_id Used in connection with navigation through a storefront. 24h
_shopify_country Used in connection with checkout. session
_shopify_m Used for managing customer privacy settings. 1y
_shopify_tm Used for managing customer privacy settings. 30min
_shopify_tw Used for managing customer privacy settings. 2w
_storefront_u Used to facilitate updating customer account information. 1min
_tracking_consent Tracking preferences. 1y
c Used in connection with checkout. 1y
cart Used in connection with shopping cart. 2w
cart_currency Used in connection with shopping cart. 2w
cart_sig Used in connection with checkout. 2w
cart_ts Used in connection with checkout. 2w
cart_ver Used in connection with shopping cart. 2w
checkout Used in connection with checkout. 4w
checkout_token Used in connection with checkout. 1y
dynamic_checkout_shown_on_cart Used in connection with checkout. 30min
hide_shopify_pay_for_checkout Used in connection with checkout. session
keep_alive Used in connection with buyer localization. 2w
master_device_id Used in connection with merchant login. 2y
previous_step Used in connection with checkout. 1y
remember_me Used in connection with checkout. 1y
secure_customer_sig Used in connection with customer login. 20y
shopify_pay Used in connection with checkout. 1y
shopify_pay_redirect Used in connection with checkout. 30 minutes, 3w or 1y depending on value
storefront_digest Used in connection with customer login. 2y
tracked_start_checkout Used in connection with checkout. 1y
checkout_one_experiment Used in connection with checkout. session
Reporting and Analytics
Name Function Duration
_landing_page Track landing pages. 2w
_orig_referrer Track landing pages. 2w
_s Shopify analytics. 30min
_shopify_d Shopify analytics. session
_shopify_s Shopify analytics. 30min
_shopify_sa_p Shopify analytics relating to marketing & referrals. 30min
_shopify_sa_t Shopify analytics relating to marketing & referrals. 30min
_shopify_y Shopify analytics. 1y
_y Shopify analytics. 1y
_shopify_evids Shopify analytics. session
_shopify_ga Shopify and Google Analytics. session
[INSERT OTHER COOKIES OR TRACKING TECHNOLOGIES THAT YOU USE]
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
Do Not Track
Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.Changes
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.
Complaints
As noted above, if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: [Add contact information or website for the data protection authority in your jurisdiction. For example: https://ico.org.uk/make-a-complaint/]
Last updated: September/2024