Privacy Policy of Cog & Spool
Welcome to Cog & Spool. We are committed to protecting your privacy and handling your personal data in an open and transparent manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our site, interact with our services, or make purchases from us.
1. Who We Are
Cog & Spool is a toy store specializing in collectible clockwork toys, handmade mechanical figures, custom automaton commissions, vintage toy repair, and educational workshops on simple mechanics. Our registered address is: 74,76,78,80,82,84,86 Tower Mill Road, London, London, City of, SE15 6BZ, United Kingdom.
2. Information We Collect
We collect various types of information to provide and improve our services to you.
2.1 Information You Provide Directly to Us
- Personal Identifiers: When you make a purchase, register for an account, subscribe to our newsletter, or contact us, we may collect your name, email address, postal address, and telephone number. This information is necessary for order fulfillment, communication, and customer support.
- Payment Information: When you make a purchase, we collect payment details such as credit/debit card numbers or other payment account information. This data is processed securely by our third-party payment processors, and we do not store sensitive payment card details on our servers.
- Order and Service Details: Information related to your purchases of clockwork toys, handmade mechanical figures, custom automaton commissions, vintage toy repairs, and workshop bookings.
- Communications: Records of your correspondence with us, including emails, messages through our site, and any feedback you provide.
2.2 Information Collected Automatically
- Usage Data: We automatically collect information about your interaction with our site, such as pages visited, time spent on pages, links clicked, and search queries. This helps us understand how our site is used and identify areas for improvement.
- Technical Data: This includes your Internet Protocol (IP) address, browser type and version, operating system, device type, referral source, and geographic location. This data is used for security purposes, site optimization, and analytical insights.
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to track the activity on our site and hold certain information. Cookies are small data files stored on your device that help us improve your experience, remember your preferences, and analyze site traffic.
3. How We Use Your Information
We use the information we collect for various purposes, primarily to operate our business and provide you with the services you request.
- To Provide and Manage Our Services: This includes processing your orders, delivering products, carrying out vintage toy repairs, facilitating workshop bookings, and managing your account.
- To Improve Our Services: We analyze usage data and feedback to enhance our site's functionality, improve our product offerings (e.g., collectible clockwork toys, handmade mechanical figures), and develop new services.
- To Communicate with You: To respond to your inquiries, provide customer support, send transactional emails (e.g., order confirmations, shipping updates), and, with your consent, send marketing communications about new products, promotions, or workshops.
- For Security and Fraud Prevention: To protect our site, customers, and business from fraudulent activities and to ensure the security of our online platform.
- To Comply with Legal Obligations: To meet our legal and regulatory requirements, including tax and accounting obligations.
4. Legal Basis for Processing Personal Data (GDPR)
We process your personal data under the following legal bases:
- Performance of a Contract: When processing is necessary for the performance of a contract to which you are a party (e.g., fulfilling your order for a clockwork toy or a repair service).
- Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, and your interests and fundamental rights do not override those interests (e.g., improving our site, preventing fraud).
- Consent: When you have given your explicit consent for specific processing activities (e.g., subscribing to our marketing newsletter). You have the right to withdraw your consent at any time.
- Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject.
5. Sharing Your Information
We value your privacy and only share your personal data with third parties when necessary and under strict conditions.
- Service Providers: We work with trusted third-party service providers who assist us in operating our business. These include payment processors, shipping companies (for delivering your collectible toys), web hosting providers, and marketing service providers. These providers only have access to the personal information necessary to perform their functions and are obligated to maintain its confidentiality and security.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of the business assets.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. This typically means keeping your purchase history and account information for as long as you have an active account with us and for a reasonable period thereafter for analytical purposes and to comply with legal obligations (e.g., tax records).
7. Your Data Protection Rights (GDPR)
Under the GDPR, you have several rights regarding your personal data:
- The Right to Access: You have the right to request copies of your personal data.
- The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
- The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
To exercise any of these rights, please contact us using the details provided in Section 9. We will respond to your request within one month.
8. Security of Your Personal Data
We are committed to securing your personal data. We implement appropriate technical and organizational measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction. These measures include data encryption, secure servers, firewalls, and access controls. However, no method of transmission over the internet or method of electronic storage is 100% secure.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your data protection rights, please do not hesitate to contact us.
- Address: 74,76,78,80,82,84,86 Tower Mill Road, London, London, City of, SE15 6BZ, United Kingdom
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes.