This is GothCardz website privacy policy. Please read it through carefully. It tells you how we handle the personal information that we collect through this website. Please only submit information to us through our website if you agree we may use it in accordance with this policy.

This website is provided by GothCardz (referred to as "we", "us" or "our" in this privacy policy).

We collect certain basic information about you when you order products from our website. We recognise the importance of both keeping your information secure and of letting you know what we intend to do with it. We may amend our policy to reflect changes to our business, website, data protection law or other relevant legislation. We therefore ask you to revisit this page on a regular basis to ensure you are familiar with its terms. The policy sets out (1) who we are, and describes (2) the information we collect, (3) what we do with it and (4), how you can find out more.

• when you complete an on-line form or order
• when you give us additional details about yourself
• by means of 'cookies' when you use our website
• in the form of 'traffic data'
• Online forms - In general, we will collect the information we need to provide you with the service to which the form relates. For example, if you place an order, we will collect your name and address, your telephone number, and your email address, and any other information which is required to process the product or service you are purchasing. Please note that we do not collect any special categories of personal data about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. Where we ask for more information to help us improve our services, over and above the basic information required, your response is voluntary and you are free to not provide us with more information if you would prefer not to do so

We use your information to provide you with the products and services that you request from us, and, if you have opted-in to receive emails from us with promotional offers or information, to offer you products and services that we consider appropriate for you in the future.

We will only use your personal data for the purposes for which we originally collected it. If we need to use your personal data for a different purpose, we will contact you and set out the legal basis upon which we process your personal data.

Usually, we will process your personal data in the following circumstances:

• to fulfil our contractual obligations to you (such as processing your order);
• where you have provided your consent; or
• by means of 'cookies' when you use our website
• where it is in our (or a third party's) legitimate interests, e.g. where we have business or commercial reasons to use your personal data, unless such interests are overridden by your interests or fundamental rights or freedoms

We do not sell, trade or rent your information to third parties. If you opt-in and choose to receive emails from us which relate to marketing information or promotional offers. Information on our marketing database is available only to our marketing and administrative staff but may not be accessed by anyone else. If you do not opt-in to receive marketing information or promotional offers when you place your order, we will use the information you have given us to process your order efficiently, but we will not contact you regarding any other matter which does not directly relate to the processing and fulfilment of your order (although we will keep very limited information about you to ensure that we do not send you any marketing emails).

We will keep you on our mailing list until you ask us not to contact you further. See 'finding out more' below for details of how to opt-out of mailings from us.

We may disclose your information to third parties in the following circumstances:

• Independent suppliers, who may handle your information as our client in the course of processing one of our orders, and are required to respect and preserve the confidentiality of personal information
• We may disclose your information to law enforcement or regulatory bodies if required to do so by them and to our auditors
• We may also disclose your information to a third party in the context of actual or threatened legal proceedings or if otherwise required to do so by law, including to prevent fraud or to protect our rights, property, or safety of our customers, suppliers or employees
• In the event that we sell our business or assets, in which case we may disclose your personal data to the prospective buyer of such business or assets, or if we or substantially all of our assets are acquired by a third party, in which case personal data held by us will be one of the transferred assets

If your personal data is provided to any third parties, you are entitled to request details of the recipients of your personal data or the categories of recipients of your personal data.

We will keep your information secure by taking appropriate technical and organisational measures against its unauthorised or unlawful processing and against its accidental loss, destruction or damage. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website, any transmission is at your own risk. Once we have received your information, we use strict procedures and security features to try to prevent unauthorised access.

In certain circumstances, you have the following legal rights in relation to your personal data:

• To request access to your personal data that we hold (please see further below);
• To request correction of the personal data we hold about you if it is incorrect, out of date or incomplete

Please inform us about changes to your details so that we can keep our records accurate and up to date;

• To request erasure of your personal data;
• To object to processing of your personal data (please see further below);
• To request the processing of your personal data be restricted;
• To request the transfer of your personal data so that it can be transferred to you or a third party that you have chosen; and
• To request we discontinue any consent-based processing of your personal data after you withdraw that consent. This will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain things to you (such as details about new offers or products) and/or your online Account may not work as effectively

You have the right to object, at any time, to the processing of your personal data which is necessary for the purposes of the legitimate interests pursued by us or a third party, including where we undertake any form of automated processing of your personal data, consisting of the use of personal data to evaluate certain personal aspects relating to you, such as analysing or predicting your personal preferences (this is sometimes referred to as 'profiling'). If you object to the processing, we must no longer process that personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or that the processing is required for the establishment, exercise or defence of legal claims.

You also have the right, at any time, to object to the processing of your personal data for direct marketing purposes.

If you wish to exercise any of the above rights, please contact us. Please note that we may not be required to comply with your request. If this is the case, we will notify you.

You will not have to pay a fee to access your personal data. However, we may charge a reasonable fee if your request is clearly unfounded or excessive (particularly where requests are repetitive). Alternatively, we may refuse to comply with your request in such circumstances.

We may need to request specific information from you in order to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request.

We will respond to any legitimate requests within the time limits set out in the GDPR. This is generally within one calendar month of receipt but occasionally, it may take us longer than a month if your request is particularly complex or if you have made a number of requests. In this case, we will notify you and keep you updated.