PRIVACY POLICY

Last updated 3 March 2020

Privacy

Beer and Croissants (“us”, “we”, or “our”) operates the Beer and Croissants website (the “Service”).

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Definitions

Service – Service is the website operated by Beer and Croissants and found at https://www.beerandcroissants.com

Personal Data or Personal Identifiable Data – the data about a living individual who can be identified from data in our possession or likely to be in our possession

Usage data – data collected automatically by the Service or from the Service (eg via Google Analytics information with regard to a user’s time and experience on the page of the Service)

Cookies – small pieces of data stored on your device

Data processing

Beer and Croissants understands that your privacy is important to you and that you care about how your information is used and shared online.

Our site only collects Personal Data and uses it in ways that are consistent with your rights and our obligations under the law. Data is processed:

• When you give specific and express consent for us to do so
• When necessary for the performance of a contract, where you are a party to that contract (for example, if you buy something we will need to collect payment and delivery information in order to deliver that product to you)
• When necessary for compliance with a legal obligation
• When necessary in order to protect the vital interest of the data subject (you) or of another natural person
• When necessary for the purposes of the legitimate interests pursued by us, except where such interest is overridden by your interest or fundamental rights and freedoms.

This Privacy Policy applies to our use of any and all Personal Data collected by us in accordance with your use of our site.

Please be sure to carefully read this Privacy Policy and ensure that you understand it.

YOU ARE CONSIDERED TO HAVE ACCEPTED OF OUR PRIVACY POLICY WHEN YOU FIRST USE OUR SITE. If you do not agree to and accept our privacy policy, then you must stop using our site.

By using our site you certify that you are an adult, at least 18 years of age.

Information collection, use, and sharing

We are the sole owners of the information collected on this website. We only have physical access to/collect Personal Data that you voluntarily give us via email, or using the online forms found on this website.  We also receive information from you if you directly contact us through this website https://www.beerandcroissants.com. We will never sell or rent this information to anyone.

We will use your information to respond to you, regarding the reason you contacted us in the first instance. We will not share your Personal Data with any third party unless it is expressly notified beforehand, giving you the option not to proceed with the provision of your data, or as necessary to fulfil your request or as we are required by law.

While using our Service, we may ask you to provide us with certain Personal Identifiable Data that can be used to contact or identify you. Personal Identifiable Data may include, but is not limited to:

• Email address
• First name and last name
• Cookies and Usage Data

Unless you ask us not to, we may contact you via email in the future to tell you about promotions, new products or services, new articles or changes to this Privacy Policy.

Usage Data

The following information may be collected as part of an automatic process by this website:

• Your IP address
• Your web browser type and version
• Your operating system
• A list of URLs relating to your activity on this site, which site you have been referred from what you do and where you go on this website and where you go to after leaving this website.
• It may also note the amount of time spent on the site and other useful but unidentifiable data usage

Anonymous Information Collected on this Website

We record anonymous data. Most of the information that we collect from this website is anonymous information, such as the pages you visit. Other anonymous data we may collect might include the name of your internet service provider, the website that you used to link to our site, other interests you have, basic demographic information, the websites that you visit from our site, and your IP address.

The data is used for statistical purposes only, but you, as the individual user, remain anonymous. We use this anonymous information to help improve the content of this site and to compile aggregated statistics about individuals using our site for internal market research purposes.

For additional detail on how we collect and use personally identifiable information, please see the table below.

Service/Tool/Method to collect data	Data Collected	How it’s Collected	Why it’s Collected	Legal Basis for collection
Mailchimp	First name, email address, IP address	Form submission	To deliver newsletters	Consent (Double opt-in)
Direct email	Name, email address	Direct email from a reader	To allow the data subject to contact our site with any questions, comments, or other information they would like to submit privately	Consent (Reader initiated email)
Comments	Name, email address, Ip address and browser user agent string	Form submission	We collect the data show in the comments form and also the visitor’s IP address and browser user agent string to help spam detection	Consent and security
Google Analytics	Posts and pages visited, name of your internet service provider, the website that you used to link to our site, other interests you have, basic demographic information, the websites that you visit from our site, and your IP address	Cookie	For statistical purposes to provide a better user experience	Consent & Necessity
Mediavine	Ad impressions, video-related events	Cookie	Various cookies are used for the following purposes: delivering targeted advertisements to specific visitors, storing user identifiers, and collecting anonymous ad platform stats	Consent
Paypal	Payment and delivery information	Form Submission	To deliver products and process payments	Necessary for the performance of a commercial contract
Request a Quote	Name, email address	Form submission	Requesting specific information	consent
Pinterest	Track the usage of services	Cookie	Helps prevent cross-site request forgery	necessary
Easy Digital Downloads	Name, email, payment delivery information	Form Submission	To deliver products and process payments	Necessary for performance of a commercial contract

Easy Digital Download Plugin

This is a third-party plugin used by this Service to provide downloadable documents for readers.  This is how Easy Digital Download Plugin uses Personal Data.  This is not data collected by this Service.

“We collect information about you during the checkout process on our store. This information may include but is not limited to, your name, billing address, shipping address, email address, phone number, credit card/payment details and any other details that might be requested from you for the purpose of processing your orders.

Handling this data also allows us to:

– Send you important account/order/service information.

– Respond to your queries, refund requests, or complaints.

– Process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests.

– Set up and administer your account, provide technical and/or customer support, and to verify your identity.

Additionally, we may also collect the following information:

– Location and traffic data (including IP address and browser type) if you place an order, or if we need to estimate taxes and shipping costs based on your location.

– Product pages visited and content viewed while your session is active.

– Your comments and product reviews if you choose to leave them on our website.

– Account email/password to allow you to access your account if you have one.

– If you choose to create an account with us, your name, address, and email address, which will be used to populate the checkout for future orders.”

Akismet Spam Plugin

This is a third-party plugin used by this Service to reduce and monitor spam comments.  This is how Akismet Spam Plugin uses Personal Data.  This is not data collected by this Service.

“We collect information about visitors who comment on Sites that use our Akismet anti-spam service. The information we collect depends on how the User sets up Akismet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).”

Cookies

We use “cookies” on this site. A cookie is a piece of data stored on a site visitor’s hard drive to help us improve your access to our site and identify repeat visitors to our site.  Cookies can also enable us to track and target the interests of our users to enhance the experience on our site.

This could include only showing you a popup once in your visit.

Usage of a cookie is in no way linked to any personally identifiable information on our site.

Some of our partners and suppliers may use cookies on our site (for example, Google Analytics, social media sharing, Mediavine). However, we have no access to or control over these cookies.

If you are located in the EU, from 25 May 2018, before the website places cookies on your computer, you will be given a message requesting your consent to set those cookies (excluding strictly necessary cookies). You may, if you wish, deny consent to the placing of cookies, but certain features of the website may not function fully or as intended.

This website may place the following cookies:

• Necessary cookies: These cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
• Statistical and analytical cookies: They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.  They report information anonymously.
• Marketing cookies: Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.
• Targeting cookies: These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.

Most browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies.

If you choose to decline cookies, please note that some of the features and services of our website may not function properly.  We also use cookies for purposes such as maintaining continuity during an online session; gathering data about the use of our site; and anti-fraud and information security purposes.

This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. Cookies are small text files that can be used by websites to make a user’s experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

We may allow third-parties, advertising companies and ad networks (“Advertisers”) to display advertisements on our website. Advertisers may use tracking technologies, such as cookies, to collect information about users who view or interact with their advertisements.

Our website does not provide any personally identifiable information to these Advertisers, but they may collect information about where you, or others who are using your computer, saw and/or clicked on the advertisements they delivered, and possibly associate this information with your subsequent visits to the advertised websites. They also may combine this information with personal information they collect directly from you. The collection and use of that personal information are subject to the particular Advertiser’s privacy policy.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Third-party advertising

We also use third party advertisements to support our site. Some of these advertisers may use technology such as cookies when they advertise on our site, which will also send these advertisers information including your IP address, your ISP, the browser you used to visit our site, and in some cases, whether you have Flash installed. This is generally used for geotargeting purposes (showing London travel ads to someone who has just bought airline tickets to London for example) or showing certain ads based on specific sites visited (such as showing sports ads to someone who frequents sports sites).

We also use Mediavine for placement of advertisements on our site.   You can view their privacy policy here.

You can choose to disable or selectively turn off our cookies or third-party cookies in your browser settings, or by managing preferences in firewall or virus software programs. However, this can affect how you are able to interact with our site as well as other websites. This could include the inability to login to services or programs, such as logging into forums or accounts.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.).

Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Links to Other Sites

Our website does contain links to affiliate and other websites. Our site does not claim nor accept responsibility for any privacy policies, practices and/or procedures of other such websites. Therefore, we encourage all users and visitors to be aware when they leave our website and to read the privacy statements of each and every website that collects personally identifiable information. The aforementioned Privacy Policy agreement applies only and solely to the information collected by the Beer and Croissants website.

Through affiliate links, identifying information may be carried over to an outside site to show that you visited that site from our site to ensure proper commissions are issued.

Beerandcroissants.com is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com.  You can view their privacy policy here.

General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Beer and Croissants take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

If you wish to be informed about what personal data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

• The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your personal data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
• The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
• The right to object. You have the right to object to our processing of your personal data.
• The right of restriction. You have the right to request that we restrict the processing of your personal information.
• The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured and commonly used format.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where Beer and Croissants relied on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

California Consumer Privacy Act (CCPA)

If you reside in California, California Law (CCPA) gives you the right to ask if we sell or disclose your Personal Data to third parties. For the purposes of this service, the following categories of the CCPA are relevant.

Right to notice – Under the CCPA, businesses must inform consumers at or before the point of collection what categories of Personal Data will be collected and the purposes for which these categories will be used.

Right to access – Consumers have the right to request that a business disclose the categories of Personal Data collected; the categories of sources from which Personal Data is collected; the business or commercial purpose; the categories of third parties with which the business shares Personal Data; and the specific pieces of Personal Data the business holds about a consumer.

Right to Request Deletion – Consumers also have the right to request the deletion of Personal Data, but only where that information was collected from the consumer, except in instances such as detecting security incidents, exercising free speech, protecting or defending against legal claims, or for internal uses reasonably aligned with the consumer’s expectations.

This Service does not sell your Personal Data to third parties for others’ direct marketing. We have never sold Personal Data.  

You can contact us at kerri[at]beerandcroissants.com or on this page  https://www.beerandcroissants.com/contact-us/

Payments

We may provide paid products and/or services within the Service. In that case, we use third-party services for payment processing (e.g. payment processors).

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are: PayPal 

Children’s Privacy

Our Service does not address anyone under the age of 18 (Children).

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Security

We take precautions to protect your information. 

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

When you submit sensitive information via the website, your information is protected both online and offline.  We use a reputable host to store our information who in turn use a secure environment managed by WPX. You can review their policy here if you wish.

Beer and Croissants website is https, with an SSL security certificate.  You can also confirm this from the lock you will see at the top of your browser, alongside our web address.

Access to the back end of this website is password protected.

In order to issue subscribers a newsletter, certain information like name and email address is required.  This information is stored securely on the servers of our newsletter provider Mailchimp. You can read their privacy policy here.

Your access to and control over  your information

You may opt-out of any future contact from us at any time, without question.   You can do the following at any time by contacting us via the email address at kerri[at]beerandcroissants.com

• See what data we have about you if any.
• Change/correct any data we have about you.
• Have us delete any data we have about you.
• Express any concern you have about our use of your data.

Beer and Croissants engages in an email newsletter program.  The emails requested to sign up for the newsletter are purely for communicating with you.  We engage in a double opt-in process at the beginning, ensuring you are fully in control of this sign-up process and no-one else can sign you up.  

There is also a captcha process, ensuring we are checking for legitimate email addresses and minimising spam.  Subscriptions via our newsletter service may also be opted out of at any time. Each email contains an unsubscribe option that immediately removes you from the database.  It is easy to find and easy to use and your right to unsubscribe is immediate.

Retention of Data

Beer and Croissants will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Beer and Croissants will also retain usage data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our service, or we are legally obligated to retain this data for longer time periods.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the Personal Data they provide in their user profile. All users can see, edit, or delete their Personal Data at any time (except they cannot change their username). Website administrators can also see and edit that information.

Information collected using Google Analytics is retained for 26 months.

Information submitted through forms, such as email forms are retained until such a time as the data subject chooses to unsubscribe or invokes their right under GDPR or CCPA to be forgotten. 

Data Rights

If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Similarly, if you have subscribed to our email list you can unsubscribe at any time and make a request to the site administrator to have all personal data obtained via our email marketing service erased.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

We use WPX Web Hosting who treat privacy matters in accordance with all global requirements including GDPR and CCPA.  You can review their privacy policy here.

Changes to our Privacy Policy

We may change this privacy policy as we deem necessary from time to time or as required by law. Any changes will be posted on our site and you will have been deemed to have accepted them on your first use of our site following alterations. You should check this page regularly to ensure you are keeping up to date.

How to contact us

Should you have any questions on the Privacy Policy, you may contact us at kerri[at]beerandcroissants.com or on this page https://www.beerandcroissants.com/contact-us/