Last updated: Feb 17, 2021
For End Customers associated with our Merchants, we recommend direct communication with your Merchant for insights into how they utilize and share the personal information collected through our services.
- Information We Collect
- How We Use Information
- How We Share Information
- How Do We Respond to ‘Do Not Track’ Signals?
- Your Rights
- Legal Bases for Processing
- Retention and Withdrawal
- Data Transfer
- Children’s Privacy
- Change of Control
- Data Security
- Contact Us
Information We Collect
Information You or Your Merchant Gives Us: For our Merchants at SenderMix, we gather registration details, which encompass your name, email address, telephone number. Additionally, we collect billing information, including your address, along with the necessary information needed to facilitate the sale of goods.
When End Customers purchase a digital product from a Merchant, which is facilitated by SenderMix, we gather transaction-related details provided by us or received from the payment gateway. This information encompasses data such as names, email addresses, billing and shipping addresses.
Information We Collect From Third Parties. In the event that you utilize our Sites via third-party platforms (like Facebook or Google), or if you share content from our Sites on third-party social media platforms, specific information about you may be sent to us by the third-party service. This sharing of information is contingent on the policies and account settings of the third-party service you're using. The data we receive will be subject to the policies and settings established with that third-party service.
How We Use Information
The data recorded is used for the following purposes:
- to respond to your enquiry, ask a question, contact you about your request or other reasons related to offering and improving our services;
- provide checkout capabilities on our site;
- to enable us to communicate with you and sellers;
- send you our monthly newsletter if you have signed up;
- for buyers who buy something that is delivered by SenderMix we collect data so we can provide them with access to their purchase;
- to protect against, identify and help prevent fraud, unauthorized activity, claims and other liabilities; and
- to fulfil our legal and financial obligations.
How We Share Information
We collaborate with third-party vendors and hosting partners to facilitate the necessary infrastructure for running our service. In this process, we may share data with them as required to fulfill the services you've requested. Specifically, we engage with Cloudflare, Amazon Web Services, Rackspace, MailGun, Google Analytics, FreeAgent, HelpScout, Stripe, and MailChimp. Our agreements with these third-party vendors mandate that they only utilize personal data as necessary to execute services on our behalf and adhere to appropriate security measures as dictated by the law.
In certain instances, we might need to disclose your data in response to lawful requests from public authorities, including compliance with law enforcement requirements. We could also be obligated to reveal or share your personal information to meet legal obligations, enforce our terms and conditions, uphold agreements, safeguard our rights, property, or safety, or protect the rights, property, or safety of others. This may involve sharing information with other companies and organizations to combat fraud.
How Do We Respond to ‘Do Not Track’ Signals?
"Do Not Track" (DNT) is a privacy choice that users can configure in specific web browsers. DNT provides users with a means to communicate to websites and services their preference to not have certain information about their web browsing activities collected over time and across various websites or online services. At present, we do not acknowledge or act upon browser-triggered DNT signals. This is because the internet industry is in the process of defining the precise implications of DNT, what compliance with DNT entails, and an agreed-upon approach for addressing DNT requests.
A cookie is a text file that websites send to a visitor's computer in order to uniquely identify the visitor's browser or to store information or settings within the browser. Cookies may encompass your IP address, timestamps, and logins. The data collected from cookies is utilized by us to assess the effectiveness of our website, analyze trends, and administer our website. This assists us in determining factors like the most frequented sections of our website and potential challenges faced by visitors in accessing it.
We utilize cookies for various purposes, including authentication (to log you into your account), site functionality (such as the shopping cart, affiliate and referral schemes), site performance analysis (via Google Analytics), and advertising management (displaying SenderMix adverts across the internet). These cookies retain session information on the device you employ to access our website.
Your Privacy Rights
If you wish to stop receiving our newsletter, you can simply click on the "unsubscribe" link provided in our email communications or reach out to us using the contact details provided below.
Taking Action on Your Privacy Rights: While we've outlined specific privacy rights for certain jurisdictions below, we recognize that your jurisdiction might offer further rights. If you have any queries about exercising your data protection rights, please feel free to contact us directly. We'll carefully review your request in line with the relevant legal requirements.
EEA or UK Individuals’ Rights
If you are from the European Economic Area or United Kingdom, you have the right, under certain circumstances, to:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to the processing of your personal data for reasons relating to your particular situation.
- Request restriction of processing your personal data.
- Request to export the personal data that we process based on our contract with you or your consent and transfer it to another company (if technically feasible).
- Withdraw any consent you have previously provided to us.
Taking Action on Your Rights: If you intend to exercise any of the rights mentioned above, kindly reach out to us using the contact information provided in the 'Contact Us' section.
If you're unsatisfied with our response, you have the option to contact the ICO in the UK or your country's respective data protection authority. Please note: If you're an End Customer who received a product through SenderMix, your data rights are to be addressed by the Merchant. As a data processor, SenderMix's role is to facilitate these requests, but the Merchant is responsible for fulfilling them as your purchase agreement is with them, not with us.
California Privacy Rights
If you are a California consumer, you have the following rights under the California Consumer Privacy Act of 2018 (CCPA):
- The right to know what personal information is being collected about you.
- The right to know whether your personal information is sold or disclosed and to whom.
- The right to say no to the sale of personal information.
- The right to access your personal information.
- The right, in certain circumstances, to delete the information you have provided to us.
- The right to equal service and price, even if you exercise your privacy rights.
Information and Deletion Requests (CCPA): Under the California Consumer Privacy Act (CCPA), residents of California have the right to make information and deletion requests from businesses collecting their personal information. You can make such requests up to twice within a 12-month period. Please note that we may require identity verification for all information requests.
- The right to know what personal information is being collected about you.
- (1) The categories of personal information it has collected about that consumer.
- (2) The categories of sources from which the personal information is collected.
- (3) The business or commercial purpose for collecting or selling personal information.
- (4) The categories of third parties with whom the business shares personal information.
- (5) The categories of personal information that the business sold about the consumer and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each third party to whom the personal information was sold.
- (6) The categories of personal information that the business disclosed about the consumer for a business purpose.
- (7) The specific pieces of personal information it has collected about that consumer.
To make such a request, please contact us using the contact details listed in the “Contact Us” section below.
Do Not Sell My Personal Information (CCPA). California consumers have the right to opt out of the sale of the consumer’s personal information.
Third Party Marketing. California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information to third parties for the third parties’ direct marketing purposes. We do not disclose your personal information to third parties for the third parties’ direct marketing purposes.
Legal Bases for Processing
Billing information is collected to fulfill our contractual obligations in providing services to Merchants and their End Customers.
We process visitor information to enhance our website's functionality and improve the user experience, aligning with our legitimate business interests. Registration details are collected for the purpose of business administration, in line with legitimate interests. Our data processing endeavors to ensure a harmonious balance between our interests and your rights and freedoms.
Subject to your consent, we may use your personal data for marketing communications, except where prohibited by law. Consent can also be provided when alternative legal grounds are not applicable. You have the right to withdraw consent at any time.
We may process data to meet legal requirements that are mandatory. For instance, adhering to accounting and tax obligations entails specific retention periods. Additionally, personal data may be gathered to address requests for exercising your rights and confirming your identity for such actions.
In certain cases, there might be a legal obligation for us to collect personal information, especially when responding to authorized requests by public authorities, including law enforcement agencies, as outlined in the "How We Share Information" section.
Retention and Withdrawal
We retain your personal data as long as needed for the purposes for which we collected it, plus a reasonable period to take into account the applicable statute of limitation period or to comply with legal requirements.
We may transfer your personal data to recipients in countries other than the country in which the personal data was originally collected. These countries may not offer the same level of protection to your personal data. When we transfer your personal data to recipients outside of the European Economic Area ("EEA"), we will comply with applicable legal requirements by providing adequate protection for the transfer of personal data. This may include steps such as (i) entering into the European Commission's EU Standard Contractual Clauses with the data recipients, (ii) verifying that the recipient has implemented Binding Corporate Rules, or (iii) implementing any other appropriate safeguards as required by applicable law for the international transfer of personal information. If you wish to obtain a copy of our Data Protection Addendum with Standard Contractual Clauses incorporated, please contact us at [email protected].
The SenderMix Sites are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under the age of 16. If you become aware that a child has provided us with personal information, please get in touch with us using the contact details provided in the "Contact Information" section below. If we become aware that a child under 16 has shared personal information with us, we will take appropriate steps to delete such information.
Change of Control
Personal information might be transferred to a third party due to a sale, acquisition, merger, reorganization, or other change in control. In the event of a sale, merger, or transfer of any part of the business, your personal information could be included as part of the transaction.
We safeguard the personal data we collect and store through the implementation of administrative, technical, and physical security measures. These measures are designed to ensure a suitable level of security and confidentiality for your personal data.