Last updated: May 24, 2018
You are free to choose whether to provide us with the types of personal information requested, but we may not be able to serve you as effectively or offer you all of our Services when you do choose not to share certain information with us.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
1. Individual Rights
EEA Residents have the following rights, which can be exercised by going to your iSmokeKing Account or contacting us at firstname.lastname@example.org so that we may consider your request under applicable law.
As available and except as limited under applicable law, the rights afforded to individuals are:
Right of Access - the right to be informed of and request access to the personal data we process about you;
Right to Rectification - the right to request that we amend or update your personal data where it is inaccurate or incomplete;
Right to Erasure - the right to request that we delete your personal data, please email us to email@example.com to have your data erased;
Right to Restrict - the right to request that we temporarily or permanently stop processing all or some of your personal data;
Right to Object -
the right, at any time, to object to us processing your personal data on grounds relating to your particular situation;
the right to object to your personal data being processed for direct marketing purposes;
Right to Data Portability - the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party’s service; and
Right not to be subject to Automated Decision-making - the right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.
2. What personal data is collected?
We collect personal information to provide you with our Services. When we require certain personal information from users it is because we are required by law to collect this information or it is relevant for specified purposes.
Personal data collected when you sign up for the iSmokeKing Service
This is the personal data that is provided by you or collected by us to enable you to sign up for and use the iSmokeKing Service. This includes your full name, email address, birth date, postal code, and country.
- Identity Data includes Full name, username, email address, address and date of birth.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes IP address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.
- Profile Data includes your username and password, purchases or orders made by you.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
3. How personal information is used?
We will only use your personal data when the law allows us to and is described on our website. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
|Activity||Type of Data||Legal basis|
|Registration||Identity, Contract||Performance of a contract with you|
|To enforce our terms in our user agreement and other agreements and To provide iSmokeKing Service||Identity, Contract||Performance of a contract with you|
|Process and deliver order (manage payments, fees and charges,) to ensure delivery (delivery information)||Identity, Contract, Financial, Transaction||Performance of a contract with you|
|To provide customer service and To ensure quality control||Identity, Contract, Profile||Performance of a contract with you, Necessary to comply with a legal obligation|
|To ensure network and information security||Identity, Contract, Technical||Necessary to comply with a legal obligation|
|For research and development purposes and To enhance your website experience||Technical, Usage||Necessary to comply with a legal obligation|
|To engage in marketing activities||Marketing||Necessary to satisfy on your consent|
We receive and store certain types of information automatically, such as whenever you interact with the Sites or use the Services. This information does not necessarily reveal your identity directly but may include information about the specific device you are using, such as the hardware model, device ID, operating system version, web-browser software and your IP address/MAC address/device identifier.
4. How personal information is protected?
We never sell, rent or exchange mailing lists. We only hold personal data for as long as necessary. Once data is no longer needed it is deleted from our files.
We understand how important your privacy is, which is why iSmokeKing maintains (and requires its service providers to maintain) appropriate physical, technical and administrative safeguards to protect the security and confidentiality of the personal information you entrust to us.
For example, we use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorise access to personal information only for those employees who require it to fulfill their job responsibilities.
Full credit card data is securely transferred and hosted off-site by a payment vendors in compliance with Payment Card Industry Data Security Standards (PCI DSS). This information is not accessible to iSmokeKing staff.
We cannot guarantee that loss, misuse, unauthorised acquisition, or alteration of your data will not occur. Please protect your own personal information. When registering with our Services, it is important to choose a password of sufficient length and complexity, to not reveal this password to any third-parties, and to immediately notify us if you become aware of any unauthorised access to or use of your account.
We cannot ensure or warrant the security or confidentiality of information you transmit to us or receive from us by Internet or wireless connection, including email, phone, or SMS, since we have no way of protecting that information once it leaves and until it reaches us. If you have reason to believe that your data is no longer secure, please contact us at the email firstname.lastname@example.org.
5. Share of Personal Data to Third parties
We take care to allow your personal data to be accessed only by those who really need to in order to perform their tasks and duties, and to share with third parties who have a legitimate purpose for accessing it. iSmokeKing will never sell or rent your personal information. We will only share your information in the following circumstances:
We share your information with third party identity verification services in order to prevent fraud. These service providers may create derivative data based on your personal information that can be used solely in connection with provision of identity verification and fraud prevention services.
We share personal data with our Third parties for professional services such as banking, legal, insurance and accounting services based in the EU who provide consultancy, We also share data to HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom who require reporting of processing activities in certain circumstances.
We share your data exclusively for the purpose of processing your orders and/or giving you access to the infrastructure (e.g. servers, IT services, web hosting) of service providers commissioned by us. These service providers will process your data strictly in compliance with our instructions and will be supervised by us. Such service providers are strictly prohibited from using the data collected and processed through the iSmokeKing website for their own purposes.
We may share your information with service providers under contract who help with parts of our business operations such as technology services (including email gateway and website chat gateway provider) and marketing services. Our contracts require these service providers to only use your information in connection with the services they perform for us, and prohibit them from selling your information to anyone else.
We share your information with financial institutions with which we partner to process payments you have authorised. We share your personal data with Royal Mail or other delivery company in order to deliver goods you have ordered on our Website.
We may share your information with law enforcement, officials, or other third parties when we are compelled to do so by a subpoena, court order, or similar legal procedure, or when we believe in good faith that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity or to investigate violations of our Privacy and Procedures or any other applicable policies.
7. Children policy
We never collect or maintain information at our website from those we actually know are under 18, and no part of our website is structured to attract anyone under 18.
We will not use your personal information for purposes other than those purposes we have disclosed to you, without your permission. You may opt out of having your personal information shared with third parties, or allowing us to use your personal information for any purpose that is incompatible with the purposes for which we originally collected it or subsequently obtained your authorisation. If you choose to so limit the use of your personal information, certain features or iSmokeKing Services may not be available to you.
9. Contact Us
If you believe that we have infringed your rights, we encourage you to contact us first at email@example.com so that we can try to resolve the issue or dispute informally. You can also complain about our processing of your personal information to the relevant data protection authority. You can complain in the EU member state where you live or work, or in the place where the alleged breach of data protection law has taken place.
Storage of your personal information. iSmokeKing will try to limit the storage of your personal information to the extent that storage is necessary to serve the purpose(s) for which the personal information was processed, to resolve disputes, enforce our agreements, and as required or permitted by law.