Studioxchange Limited T/A SX Pro (“SX Pro”) recognises that the European Economic Area (the “EEA”) has established strict protections regarding the handling of EEA personally identifiable information, in particular the EU General Data Protection Regulation (“GDPR”). In recognition of the importance of GDPR, SX Pro has adopted the following GDPR Data Processing Policy (the “Policy”).
This Policy is intended to ensure that you understand the following: (a) the entity that is collecting your personal data; (b) the purposes for which your personal data is collected; (c) how and why your personal data will be used; (d) the period during which your data will be retained; and (e) how you can contact SX Pro regarding your data.
1. Categories of Data Subjects and Data Collected
SX Pro only collects data from users who either join, or engage with, the SX Pro Website. SX Pro is committed to only collecting data that is necessary for SX Pro to provide the content and services on the SX Pro Website.
You may also provide information to SX Pro such as the following: (a) information that you provide by filling in forms; (b) information provided at the time of registering to use SX Pro Website; (c) information when you report a problem with the SX Pro Website; (d) records and copies of your correspondence (including email addresses), if you contact SX Pro; (e) details of transactions you carry out through the SX Pro Website and of the fulfilment of your orders; (f) financial information before placing an order through the SX Pro Website; and (g) your search queries on the SX Pro Website.
We may receive data from third-party organisations if they have received your consent for your information to be shared with third-parties for marketing or other purposes.
2. Basis for Processing
SX Pro processes data based on (a) consent of the user; and (b) the necessity of the data for providing the services that users are contracting for when they become members of the SX Pro Website. IF YOU DO NOT CONSENT TO THE PROCESSING OF YOUR DATA IN ORDER TO ACCESS AND USE THE SX PRO WEBSITE, PLEASE DO NOT USE, OR ENGAGE WITH, THE SX PRO WEBSITE.
3. Cross-Border Transfer
Data centres hosting SX Pro’s data, including user data, are located within the United States. Accordingly, as an EU citizen, in order to access the services and content provided by SX Pro, your data may be transferred outside of the EU. By using the SX Pro Website, you consent to the cross-border transfer of your data in order to receive access to the SX Pro Website.
4. Potential Recipients
SX Pro does not provide your data to third party recipients who are not necessary to the services and content provided on the SX Pro Website without your permission. Third parties who may receive your data so that SX Pro can provide the services and content on the SX Pro Website include SX Pro’s eCommerce provider and SX Pro’s third-party email marketing provider.
5. Data Retention Period
SX Pro will retain your information for as long as your account is active or as needed to provide you services. If you no longer want SX Pro to use your information to provide you services, you may follow the “Withdrawal of Consent/Erasure” provision below. After closing your account, SX Pro will solely use your information as necessary to comply with any applicable legal obligations.
6. Security Policies for Data
SX Pro has implemented measures designed to secure your personal information from accidental loss and from unauthorised access, use, alteration, and disclosure. All information you provide to SX Pro is stored on secure servers behind firewalls. Any payment transactions and other sensitive information will be encrypted using secure socket layer (SSL) technology. SX Pro follows generally accepted industry standards to protect the personal information submitted, both during transmission and once SX Pro receives it.
The safety and security of your information also depends on you. Where SX Pro has given you (or where you have chosen) a password for access to certain parts of the SX Pro Website, you are responsible for keeping this password confidential. SX Pro asks you not to share your password with anyone.
7. Withdrawal of Consent/Erasure
If, at any point, you no longer wish to have your personal data processed by SX Pro, wish to be forgotten, or wish to have your data erased, simply send an email to email@example.com with the phrase “consent withdrawn” or “erase” in the subject line. Your request should include your name, shop name, email address and physical address. SX Pro will move expeditiously to stop the processing of your personal data and to remove your personal data from its systems. Please understand that, without access to your personal data, SX Pro may not be able to provide certain services. For example, SX Pro will not be able to send you communications, sales, offers, newsletters. Additionally, it may be impossible for SX Pro to fulfil purchases or sales without access to personal information.
8. Right to Correct, Access or Portability of Data and Associated Procedure
You have the right to have any inaccurate data corrected by a data controller. You also have the right to request access to your data or request that SX Pro make your data portable to another data controller. In order to effect any such request, you should send the request to firstname.lastname@example.org. Your request should include your name, shop name, email address and physical address. SX Pro will endeavour to correct the data or to provide you your data in a simplistic and easily readable format as quickly as possible, but in no more than thirty (30) days.
Third Party Services that may process your personal data
Olark Live Chat
The Olark Widget is a service for interacting with the Olark live chat platform provided by Habla, Inc.
Personal Data collected: Cookies and Usage Data.
Facebook Like button and social widgets
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc.
Personal Data collected: Cookies and Usage Data.
PayPal (PayPal Inc.)