1. INTRODUCTION

1.1 Itemdrop Ltd is committed to protecting the privacy of users of our website.

1.2 In this policy, “we”, “us”, and “our” refer to Itemdrop Ltd. “You” and “your” refer to the user. For more details about us, see Section 13.

1.3 This policy applies where we act as a data controller with respect to your personal data; in other words, where we determine the purposes and means of processing that personal data.

1.4 We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website, we will ask you to consent to our use of cookies when you first visit our website.

1.5 Our website includes privacy controls that affect how we process your personal data.

You can manage your privacy preferences here: Personal Data Controls

2. CREDIT

2.1 This document was created using a template from SEQ Legal (https://seqlegal.com).

3. HOW WE USE YOUR PERSONAL DATA

3.1 This section outlines:

(a) the general categories of personal data that we may process
(b) the purposes for which we may process personal data
(c) the legal bases for processing.

3.2 Usage Data – We may collect data such as your IP address, location, browser type and version, operating system, referral source, visit duration, page views, and website navigation paths. This is used for analysing website and service usage. The legal basis is our legitimate interests in monitoring and improving our website and services.

3.3 Account Data – This includes your name, address, phone number, and email address. We use this for account management, service provision, and communication. The legal basis is our legitimate interest in properly managing our website and services, and for fulfilling a contract with you.

3.4 Publication Data – This includes your name if posted publicly via reviews. We process this for displaying reviews of our products. The legal basis is our legitimate interests in managing our website content.

3.5 Enquiry Data – We process this to respond to your queries and potentially market our products/services. The legal basis is consent.

3.6 Customer Relationship Data – Includes name, contact details, and communication content. Used for customer management, communications, and marketing. The legal basis is our legitimate interest in managing customer relationships.

3.7 Transaction Data – Includes your contact and transaction details. Used for order fulfilment and record-keeping. The legal basis is fulfilling a contract and our legitimate interests in service administration.

3.8 Notification Data – We use your email address to send newsletters or notifications if you’ve opted in. The legal basis is consent.

3.9 Correspondence Data – Includes any messages you send to us and associated metadata. Used for communication and record-keeping. The legal basis is our legitimate interest in managing communications.

3.10 Legal Claims – We may process your data for establishing or defending legal claims. The legal basis is our legitimate interest in protecting legal rights.

3.11 Compliance and Vital Interests – We may process your data to comply with legal obligations or protect vital interests.

3.12 Please do not supply us with personal data about others unless requested.

4. PROVIDING YOUR PERSONAL DATA TO OTHERS

4.1 We may share your data with our insurers or legal advisers for legal claims or professional advice.

4.2 Your account data is shared with delivery services (Royal Mail and APC) as required to fulfil deliveries.

4.3 We may share your name and address with suppliers for dropshipping purposes, if applicable.

4.4 Payment transactions are handled by Paypal and Dojo. We share transaction data as needed for processing payments, refunds, and resolving payment-related issues.

4.5 We do not share your enquiry data with third party suppliers of goods and services to enable them to contact you so that they can offer, market and sell to you relevant goods and/or services.

4.6 Notification data is shared with our email service provider, Brevo, for newsletter distribution.

Brevo Privacy Policy

4.7 In addition, we may share your data to comply with legal obligations or defend legal claims.

4.8 Our hosting provider is Hostinger, based in the UK.

Hostinger Privacy Policy

4.9 We use Cloudflare for website traffic analysis and protection against malicious activity. This may involve cookies or other technologies, used solely for performance and security purposes. The legal basis is our legitimate interest in maintaining a secure website.

Cloudflare Privacy Policy

5. INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA

5.1 We do not transfer your personal data outside the European Economic Area (EEA).

6. RETAINING AND DELETING PERSONAL DATA

6.1 This section outlines our retention policy to ensure legal compliance.

6.2 We only retain personal data as long as necessary for the purposes stated.

6.3 Retention periods:

Enquiry data: retained for at least 30 days, up to 365 days.

6.4 Where retention periods are not specified:

(a) Account and Publication data: retained while your account is active.
(b) Correspondence, Customer Relationship, and Transaction data: retained as long as necessary for contract fulfilment.
(c) Notification data: retained while you remain subscribed.

6.5 We may retain your data longer if legally required or necessary to protect vital interests.

7. AMENDMENTS

7.1 We may update this policy periodically. New versions will be posted on our website.

7.2 You should check this page occasionally for updates.

7.3 Significant changes will be communicated via email.

8. YOUR RIGHTS

8.1 This section summarises your rights under data protection law. For full details, consult the relevant legislation and official guidance.

8.2 You have the following rights:

(a) Right of access
(b) Right to rectification
(c) Right to erasure
(d) Right to restrict processing
(e) Right to object to processing
(f) Right to data portability
(g) Right to complain to a supervisory authority
(h) Right to withdraw consent.

8.3 You may request access to your personal data, including details of how we process it. Requests are free of charge, limited to 3 per day.

Access your data here: Access Your Personal Data

8.4 You have the right to have any inaccurate personal data rectified and, considering the purposes of processing, to have any incomplete data completed.

8.5 In certain circumstances, you have the right to request the erasure of your personal data without undue delay. This includes situations where:

The data is no longer necessary for the purposes for which it was collected.
You withdraw consent (if consent was the legal basis for processing).
You object to processing under applicable data protection laws
Your data is being processed for direct marketing.
Your data has been unlawfully processed.

However, this right does not apply where processing is necessary:

For freedom of expression and information
To comply with a legal obligation
For the establishment, exercise, or defence of legal claims.

You can request your right to be forgotten by visiting: The Right to be Forgotten

8.6 You may have the right to restrict processing of your data if:

You contest its accuracy.
Processing is unlawful but you oppose erasure.
We no longer require the data, but you need it for legal claims.
You've objected to processing, and verification is pending.

In such cases, we may store the data but only process it:

With your consent.
For legal claims.
To protect others’ rights.
For reasons of public interest.

8.7 You may object to our processing of your data on grounds relating to your situation if the legal basis is:

A public task, or
Legitimate interests (ours or a third party).

We will stop processing unless we demonstrate compelling legitimate grounds overriding your rights, or if processing is needed for legal claims.

8.8 You have the right to object to processing for direct marketing, including profiling. If you object, we will stop processing your data for that purpose.

8.9 You may object to processing for scientific, historical, or statistical purposes, unless it is required for a task in the public interest.

8.10 Where our legal basis is:

Your consent; or
A contract (including steps taken at your request to enter a contract),

and processing is automated, you have the right to receive your data in a structured, commonly used, machine-readable format. This does not apply where it would adversely affect others' rights.

8.11 If you believe our processing of your data breaches data protection law, you have the right to lodge a complaint with a supervisory authority in the UK or your EU member state.

8.12 If our processing is based on consent, you can withdraw that consent at any time. This does not affect the legality of prior processing.

8.13 You may exercise any of your rights by contacting us in writing or by using the contact methods specified in section 13.

9. ABOUT COOKIES

9.1 A cookie is a small file sent by a web server to your browser, stored and sent back each time you visit.

9.2 Cookies may be:

Persistent: Stored until a set expiry date or manually deleted.
Session: Expire when your browser closes.

9.3 Cookies do not usually contain personal data but may be linked to personal data we store about you.

10. COOKIES THAT WE USE

We use the following cookie types:

(a) Necessary – Enable essential functions like navigation and security. The site cannot function properly without these.
(b) Preference – Remember settings like language or location.
(c) Statistic – Help us understand site usage through anonymous data.
(d) Marketing – Not used directly by us but may be used by third-party providers (see section 11).

11. COOKIES USED BY OUR SERVICE PROVIDERS

11.1 Our service providers may store cookies on your device.

11.2 Google Analytics
Used for analysing site usage via cookies.
Google Privacy Policy

11.3 FraudLabs
Cookies used for fraud prevention only.
FraudLabs Privacy Policy

11.4 Trustpilot
Cookies allow Trustpilot to invite and verify customer reviews.
Trustpilot Privacy Policy

11.5 Brevo
Used for managing email newsletter subscriptions.
Brevo Privacy Policy

11.6 Hostinger
Our hosting provider may use cookies for operational purposes.
Hostinger Privacy Policy

12. MANAGING COOKIES

12.1 Most browsers let you block or delete cookies. Instructions for managing cookies are available at:

(a) Google Chrome

(b) Mozilla Firefox

(d) Microsoft Internet Explorer

(e) Apple Safari

(f) Microsoft Edge

12.2 Blocking cookies may affect site usability.

12.3 Disabling cookies may prevent certain functions, including making purchases.

13. OUR DETAILS

13.1 This website is operated by Itemdrop Ltd.

13.2 Registered in England and Wales (Company No. 9609845).

Registered Office: 8–10 Queen Street, Seaton, Devon, EX12 2NY
Principal Place of Business: 11 Marine Place, Seaton, Devon, EX12 2QJ

13.3 You can contact us:

(a) by post, to the postal address of the principal place of business given above;
(b) using our website contact form;
(c) by telephone, on the contact number published on our website;
(d) by email, using the email address published on our website

-----

Update: June 2025 (Improved readability and clarity throughout the policy)

Update: June 2024 (Inclusion of Newsletter Provider Brevo and their Privacy Policy link)

Update: May 2024 (Change of Website Hosting Provider to Hostinger and their Privacy Policy link)

Update: June 2022 (Inclusion of Payment Provider Dojo and their Privacy Policy link)

Update: November 2021 (Inclusion of Review Site Trustpilot and their Privacy Policy link)

Update: April 2021 (Change of principal place of business)