Privacy policy
Introduction
So, you’ve found your way to our privacy policy. Nice work. Granted it’s not the most riveting of topics but it is important. If you want to find out how we process your data and how you can exercise your rights then read on. Likewise if you want to download this and keep it stashed away for a rainy day then you can.
We want you to know that Sheep Inc. takes your privacy very seriously. Whether you’re just here for a casual browse or you’re buying your tenth jumper we are committed to protecting your personal data.
- Important information and who we are
This privacy policy should give you an indication of how we collect and process your personal data through your use of this website, including any data you may provide through this website when you sign up to our mailing list or purchase one of our jumpers. This policy also informs you about how we collect and process your personal data through our new “Connected Dot” functionalities like the "Time Capsule".
Sorry kids but our sweaters are too cool for school. Therefore we want to make it clear that our website is not intended for children and we do not knowingly collect data relating to children.
Sheep Included Limited (that’s us!) is the controller and responsible for your personal data. You will see us referred to as various things in this policy e.g. "Sheep", "we", "us" or "our".
If you have any questions about this privacy policy or our privacy practices, please contact us in the following ways:
Full name of legal entity: Sheep Included Ltd.
Email address: legal@sheepinc.com
If you’re unhappy about anything to do with this policy or your data, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we’d love it if you could give us a heads up before you approach the ICO. We’ll do all we can to help set things right.
Data protection is a hot topic so we keep this policy under regular review. The version you’re currently reading was last updated on 1st October 2019. Want to see what it used to say? Drop us an email and we can send you any of the historic versions.
It is important that the personal data we hold about you is accurate and current. So, if you don’t mind, can you please let us know if your personal data changes during our relationship with you?
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We don’t control these third-party websites and so aren’t responsible for their privacy statements (sorry!). Therefore, if you do leave us for someone else ☹, we encourage you to read their privacy policy.
- The data we collect about you
You’ll hear the words ‘personal data’ or ‘personal information’ thrown around a bit in this policy so it makes sense that you understand what we mean. Essentially, we’re talking about any information regarding an individual from which that person can be identified. This doesn’t include data where the identity of a person has been removed.
We may collect, use, store and transfer different kinds of personal data about you. We have separated this out into the categories below:
- Identity Data includes first name, last name, username or similar identifier and title.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Financial Data includes payment card details.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
- Our "Time Capsule" feature within the “Connected Dot” will also collect information like the date of garment wears, optional user-uploaded images, optional location data, optional user-added notes. Data collected through the "Time Capsule" is accessible only to logged-in users and is not shared with other users or third parties. All data collection and processing activities through the "Time Capsule" comply with applicable data protection laws, including GDPR. Your consent will be sought for the collection of additional data through the "Time Capsule." You have control over your data and can delete or manage it as you wish.
We also collect, use and share ‘Aggregated Data’ which doesn’t fit neatly into the categories above. Aggregated Data might be derived from your personal data but is not considered personal data by the bigwigs of the data protection world. That’s because this data will not directly or indirectly reveal your identity. You’ll be like the 007 of the internet. To give you an example of how this works: we may aggregate your Usage Data to calculate the percentage of our lovely visitors accessing a specific feature on the website or to work out which corner of the globe you’re checking in from.
Never fear. If we do combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we assure you that we’ll treat it as personal data.
We do not collect any Special categories of Personal Data about you. ‘Special’ categories of personal data include details of your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data. We don’t care who or what you believe in. So long as you love sheep, have a taste for beautifully made clothing and want to personally save the world, come on in. Oh and we also don’t collect any information about criminal convictions and offences. Phew!
Your consent will be sought for the collection of additional data through the "Time Capsule." You have control over your data and can delete or manage it as you wish.
Sometimes we might need to collect personal data by law, or under the terms of a contract we have with you. If you fail to provide that data when we ask you, we may not be able to perform the contract we have or are trying to enter into with you. That would be rubbish for both of us and might mean we can’t send you your sweater. We’ll always let you know if we don’t have enough data or we are having to cancel the contract but it still won’t stop us feeling sad.
- How is your personal data collected?
We use different methods to collect data from and about you including through:
- Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- order our products;
- create an account on our website;
- register your sweater;
- subscribe to our email list;
- request marketing to be sent to you;
- enter a competition, promotion or survey; or
- give us feedback or contact us.
- Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.
- Third parties or publicly available sources. We will receive personal data about you from various third parties as set out below:
- Technical Data from the following parties:
- analytics providers such as Google or Facebook based outside the EU;
- advertising networks such as Google or Facebook based outside the EU; and
- search information providers such as Google based outside the EU.
- Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as Stripe based outside the EU.
- How we use your personal data
As good honest citizens of the world, we will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
-
Where we need to perform the contract we are about to enter into or have entered into with you.
-
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. If you want more details of what this means, see the Glossary section below.
-
Where we need to comply with a legal obligation.
Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email. If you do consent, don’t worry, you’re not stuck with us forever. You have the right to withdraw consent to marketing at any time by contacting us. If you do, we will wave you off into the sunset with a tear in our eye but wishing you the best.
So you want to know how we use your data? Well that’s convenient because we’ve created a beautiful little table below which does just that. It will give you a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Sometimes we process your personal data for more than one lawful ground but that depends on the specific purpose for which we are using your data. If you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below, contact us and we’ll be happy to fill you in.
We want you to know that you’re unique. Therefore we may use your Identity, Contact, Technical, Usage and Profile Data to get an idea of what we think may be of interest to you.
If you have requested information from us or purchased one of our delightful items and have not opted out of marketing then we might send you some bits and pieces about what we’re up to as a company.
Should you decide to sign up to receive SMS notification, we collect your mobile phone number. Your information will be used solely for delivering relevant updates and notifications via SMS.
We hate goodbyes but nothing lasts forever (well, apart from our sweaters). If you want us or third parties to stop sending you marketing messages at any time then just follow the opt-out links on any marketing message sent to you. Alternatively, if you don’t like the number or content of messages you’re receiving drop our lovely team an email at any time of the day or night and we’ll endeavour to get back to you with a solution ASAP.
Just as an FYI. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of you purchasing one of our products.
Sadly we’re not talking about the crumbly and delicious kind. If you want to understand what cookies we use, we have a whole policy on it. You can read it on the legal section of our website.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you want an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us and we’ll get our top data protection bods on the case.
In the unlikely event we need to use your personal data for an unrelated purpose, we promise we’ll notify you and explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
- Disclosures of your personal data
We may share your personal data with the parties set out below for the purposes set out in the table [Purposes for which we will use your personal data] above.
-
External Third Parties as set out in the [Glossary].
-
Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
We’re a nice bunch but you’re our priority. Therefore, when we share your data with a third party we will make sure they respect the security of it and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
- International transfers
A few of our external third parties who we use to help us carry out the purposes referred to above or to comply with a legal duty are based outside the EEA so their processing of your personal data will involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
-
We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
-
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.
- Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US. For further details, see European Commission: EU-US Privacy Shield.
-
Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
-
Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
-
Functionality cookies. These are used to recognise you when you return to our website. This enables us to improve your experience and personalise our content for you by remembering your user name and your preferences (for example, your region).
-
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and any advertising displayed more aligned with your interests. Having these cookies does not increase the number of adverts you will be shown, but simply makes the adverts you see more relevant. We may also share this information with third parties for this purpose.
Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
We think cookies make your visit to our site more quick and easy. However, if you disagree, that’s fine. You can block cookies by activating the setting on your browser that allows you to refuse the setting of some or all cookies. However, just so you’re aware, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our epic site.
Except for essential cookies, all cookies will expire after the browsing session.
While we’ve got you interested in the legal stuff, you might also want to read our Terms & Conditions and Privacy Policy.
Version 1.0.1
01.2024