Privacy Policy | Just Geek

Foreword

Just Geek is committed to protecting your privacy. This Privacy Policy, together with our Terms and Conditions, explains what personal information we collect, along with how and why it will be used. Just Geek is committed to complying with GDPR and the Data Protection Act and as such, we will continually update this policy to reject any changes made.

About Just Geek

Just Geek is an e-commerce store specialising in the sale of gaming, TV and movie merchandise. We have two offices located in the UK and those addresses are as follows: Distributing Warehouse: Just Geek, Yellow Bulldog Ltd, Unit A, Viking Industrial Estate, Rolling Mill Road, Jarrow, Tyne and Wear, NE32 3DP

Head Office: Just Geek, Attimore Barn, Ridgeway, Welwyn Garden City, Herts, AL7 2AD.

The company is registered in England under company number 08509606.

All general enquiries can be made at help@justgeek.com, in writing to the Head Office address above.

All data protection queries can be made to Deborah Challis, Data Protection Officer at deborah.challis@yellowbulldog.co.uk, in writing to the Head Office address above

Who do we collect information from?

We collect and process information from individuals, including:

Those who make a purchase
Those who enter their details into our purchase form (even if the purchase fails)
Those who sign up to our newsletter
Those who create an account
Those who enter details in any of our forms
Leave a review about us or our products

If you have consented to our use of cookies, we will also collect information about you when you browse our website. Please view our Cookie Policy for more information.

Our Legal basis for processing

In order to operate our business, we need to collect personal information. We will only collect the information that is needed for a specific purpose and have an identified legal basis for doing so. The detail on this is as follows:

Contract:

When you make a purchase from our website, we collect and store your personal information in order to provide you with that service.

When you pay for an item, we collect your card details in order to process that transaction.

Failure to provide certain information may prevent us from fulfilling any contractual obligations to you. For example, without your address we cannot deliver your goods.

Consent:

When you sign up for our newsletter, you opt-in to receiving communications from us. We will collect and store your personal data to contact you about items we think may be of interest to you.

If you provide your personal details to us in other ways, for example, take part in a competition, provide feedback or show a strong interest in purchasing a product, then we may use your personal details to contact you about it and similar products, provide a personalised service, and/or provide information we think may be of interest you, under the lawful basis of Legitimate Interest.

We obtain your consent for this processing using a Soft Opt-in. You may opt out of these emails at the point of entering your details for a purchase or at the point we contact you by unsubscribing.

Where we use consent as the legal basis for processing your data, you have the right to withdraw your consent at any time, for any reason.

Legal obligation:

If you make any data subject requests under the DPA or GDPR, we will collect your personal data in order to comply with the law.

How long do we keep your information?

Your information is only kept for as long as you are a Just Geek customer and for as long as we are legally required to keep it thereafter.

Any data classified as financial that we are required to keep will be retained according to UK HMRC rules, currently six years plus the current year.

You can request that you no longer wish to be a Just Geek customer and have all of your details removed at any point, however please note that some data we are legally required to keep hold of for a specific time period. Once this time has passed, your data will be securely disposed of.

If you would like your data to be erased at any time, please contact Deborah Challis, Data Protection Officer at the following details:

deborah.challis@yellowbulldog.co.uk

Attimore Barn, Ridgeway, Welwyn Garden City, Herts, AL7 2AD

Sharing your information:

We will never sell any of your personal data to any third party. However, we do share your data with the following types of third parties as an essential part of providing services to you:

Companies that work with us to process and deliver your purchases, such as payment service providers and delivery companies
Service providers such as website hosts and marketing partners
Credit reference agencies, law enforcement and fraud prevention agencies in case we need to tackle any legal matters

We also share your data with the following companies, however these are only required depending on your choices in order to fulfil the services you have asked for:

Marketplace sellers where you place an order
Other payment providers when you choose to use them

We may also provide companies with anonymised information and analytics however we always ensure this information cannot identify you.

Any information shared to these third parties is done securely with safeguards in place to protect your data.

Protection of your data

Only authorised Just Geek staff are able to access personal information. Just Geek has appropriate security measures in place to prevent personal information from being accidentally lost or used in an unauthorised way.

Just Geek reserves the right to transfer your information to countries outside the European Economic Area (EEA). If there is a requirement for us to do so, this transfer will be protected in the same way that it would be in the UK or EU. The countries outside of the EEA that your data is passed to and why is as follows:

Boston, USA (Klaviyo). Klaviyo is our Email Service Provider (ESP) and we would be unable to provide you with any updates on your order or any marketing messages without sharing your data to them.
Canada (Shopify). Our website is run through Shopify and we would be unable to process your transactions without sharing your data to them.

Both of these companies meet the GDPR conditions, relying on the European Commission’s Standard Contractual Clauses which enables the lawful transfer of personal data from the EU to both the US and Canada.

Just Geek has procedures in place to deal with any suspected data security breaches. You will be notified of any suspected security breach where we are legally required to.

Your rights

You have rights relating to how we process your personal information. These are as follows:

Right to Rectification (accuracy of information):

We have an obligation to ensure the information we hold about you is accurate. If you believe the data we hold is not accurate, contact us and we will correct it for you.

Subject Access Request (seeing your information):

You have a right to know what personal information we hold about you (or any child under 13 that you have parental responsibility for).

Right to Erasure (removing your information):

Under some circumstances, you have a right to have your personal data erased. You may request this by contacting us.

Right to Restrict Processing (stop using your information):

If you would like us to stop using your data but do not wish for us to delete it, you can request that we restrict the way in which your data is used.

Right to Object (object to your data being used):

You can stop your data being used for marketing purposes, statistical purses, our legitimate interests or any task that is not essential, at any time. According to the GDPR, all Right to Object requests should be considered whilst balancing your rights with our legitimate interests.

Right to Data Portability (transfer your data):

In some cases, you can ask us to transfer your data to another business.

Automated Decision Making:

Automated Decision Making is a decision that has been made automatically without any manual work. Just Geek uses Automated Decision Making in regard to customer status. You have a right to have any decisions made automatically reviewed by a real person.

These are Active, High Risk and Loyal and are made by our ESP, Klaviyo based on your last purchase with us and the frequency of these purchases. The only impact this may have on you is the type of communications you then receive from us.

If you would like to exercise any of these rights, please contact us. We will typically respond to you within one calendar month, unless the request is difficult or time consuming. Under these circumstances, we will notify you of the delay and regardless will respond within 90 days of your original request. Our contact are at the end of this policy.

Security

Just Geek is Level 1 PCI DSS compliant, meaning any payment transactions made are protected. The transmission of non-sensitive details (such as your email address) made via the internet is not guaranteed 100% secure, except where you see the green padlock in the address bar. Although we will do our best to protect your personal data, we cannot guarantee the security of any data transmitted to our site (unless you see the aforementioned padlock icon). Once we receive your information, we implement appropriate and proportionate technical and organisational security measures to protect your data. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential.

Which information do we collect and process about you?

Contact with Just Geek	Personal Information we may collect and process
Visiting our website	We'll collect your IP address, cookie ID and browsing data. We collect this to enable us to see that you've been on our site and where you have been on our site (we won't know it's you by name). This allows us to make your browsing more personalised, and improve our website, products, services and marketing. The information is collected on our behalf by the following companies: - Google Analytics - Shopify - Klaviyo - HotJar These companies cannot use data for any reason other than the above and they cannot transfer your data anywhere else. Along select people will have access to this.
Sign up to our newsletter	If you sign up for our newsletter on our homepage, we'll collect the email address that you sign up with along with any other details you choose to provide, i.e. name, interests, etc. We collect this data to send you news and updates that you have you have consented and requested to receive. The information is collected on our behalf by the following companies: - Shopify - Klaviyo These companies cannot use data for any reason other than the above and they cannot transfer your data anywhere else. Along select people will have access to this.
Registering an account with us	If you create an account, we'll collect your first name, last name, email address and password. We collect this data to ensure that your account is secure, so that the account belongs to only you, and so that we can keep in touch with you via email if we have your consent to do so. By creating an account, you become a member of our loyalty program, and we use your personal data to contact you about the program itself. If you become a customer, we will also collect your purchase history, browsing data, etc. This helps us tailor any services you have consented to receiving to your specific interests. The information is collected on our behalf by the following companies: - Shopify - Klaviyo - LoyaltyLion These companies cannot use data for any reason other than the above and they cannot transfer your data anywhere else. Along select people will have access to this.
Purchasing a product	We'll collect your name, email address, delivery address, billing address, payment details (redacted apart from for payment processor), and details of your purchase. If you choose to receive text updates about your order, we will also collect your mobile number. If you log into or create an account, we also request a password which is processed securely. We collect this data to take payment for the items purchased, give any refunds necessary, keep record of any financial interactions with you as legally required, verify your payment method and ship the items to your chosen address. If you have consented, we also use your details to email you marketing updates. We will also send you any account and service updates that you are required to know, such as updates to our Terms and Conditions, order updates, etc. - Shopify - Klaviyo - Your chosen payment processor - LoyaltyLion (if you have an account) - Reviews.io (to contact you about reviewing your purchase) These companies cannot use data for any reason other than the above and they cannot transfer your data anywhere else. Along select people will have access to this.

Cookies

For detailed information on the cookies on our website, please view our Cookie Policy.

Contact Details

If you have any questions, concerns or complaints, or if you would like more information about anything mentioned here, please contact our Data Protection Officer:

Deborah Challis