Personalise Your Gifts

Privacy Policy

YOUR PRIVACY IS RESPECTED HERE

We aim to be transparent. We care so much about our business, and you are key to it. That is why we do not hide behind complex wording and fine print.

Read our Privacy Policy below to understand what we use your data for.

Who we are
Company Information
Company legal name
LocoSoco Limited
Company address
8 Madiera Avenue, Leigh-On-Sea, Essex, United Kingdom
Privacy queries email
privacy@locoso.co
Name of DPO
James Perry
United Kingdom Information (UK)
ICO Registration Number
00019275422
Information we collect about you
These are the categories of data we may process:
  • Contact Details: examples include name, email address, telephone number, address.
  • Financial Data: examples include billing address, credit card number, bank account details.
  • Household and Relationships: examples include emergency contact, marital status, next of kin.
  • Identifiers and Legal Documents: examples include passport, national insurance number, proof of residence, national identification number.
  • Activity and Behavioural: examples include friend list, interests, tagged media.
  • Personal Characteristics: examples include sex, nationality, gender, date of birth, cv information, academic qualifications.
  • Location Data: examples include gps location, tracking data.
  • Communications Data: examples include instant messaging data, social media posts, postal content.
  • Images and Recordings: examples include cctv footage, photos, videos.
  • Views and Opinions: examples include survey responses, testimonials, non-political, religious or philosophic opinions.
  • Work-related Data: examples include details of grievance, completed tasks, disciplinary proceedings.
  • Technical Identifiers: examples include ip address, mac address, username, passwords.
  • Criminal Records
  • Aggregated Data: examples include such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity.
    • For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature.
    However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

 

How your personal data is collected

We use different methods to collect data from and about you including through:

Direct interactions - you may give us information on your Contact Details, Identifiers, Financial Data... (all the categories that come through direct interactions) by filling in forms or by corresponding with us by post, phone, email, via our website or otherwise. This includes personal data you provide when you:

  • apply for our products or services;
  • create an account with us;
  • subscribe to publications;
  • request marketing to be sent to you; or
  • give us feedback or contact us.

Automated technologies or interactions. - As you interact with our website and services, we will automatically collect Technical, Profile and Usage Data about your equipment, browsing actions, and patterns.

Third parties or publicly available sources. - We might receive personal data about you from various third parties or publicly available sources like the ones set below.

  • Work-related data from services like AngelList or recruiting websites.
  • Identity and Contact Data from publicly available sources such as Crunchbase or other registries.

 

International Transfers

Some of our external third parties are based outside the UK and EEA so their processing of your personal data will involve a transfer of data outside the UK and EEA. Whenever we transfer your personal data out of the UK and EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • the country to which personal data is being transferred has been deemed to provide an adequate level of protection for personal data by the European Commission; or
  • we use specific contracts approved by the European Commission which give personal data the same protection it has in the UK and Europe.
Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Where you have chosen a password that enables you to access certain parts of our applications, you are responsible for keeping this password confidential. We ask you not to share the password with anyone.

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation with respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.