Privacy Policy

This Privacy Policy describes how Sikoja ("we," "us," or "our") collects, uses, and protects the personal information of our users ("you," "your") when you visit, use our services, or make a purchase from www.sikoja.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services") or any other related digital platforms. For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. This policy is drafted in compliance with the UK General Data Protection Regulation (UK GDPR) and other applicable UK data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

  1. Information We Collect

The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We collect the following types of personal information:

  • Personal Information Provided by You: When you create an account, subscribe to our newsletter, make a purchase, or contact us directly, we may collect your name, phone number, email address, billing/ shipping address, and any other information you voluntarily provide.
  • Account information including your username, password, security questions and other information used for account security purposes.
  • Automatically Collected Information: Through our use of Google Analytics, Meta Pixel, and other tracking technologies, we collect information such as your IP address, browser type, referring/exit pages, device identifiers, and other details about your interactions with our website.

Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

  • Companies who support our Site and Services, such as Shopify.
  • Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested, in order to perform our contract with you.
  • When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. Also see the section below, Third Party Websites and Links. 

  1. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide Our Services: This includes processing your orders, managing your account, and providing customer support.
  • Marketing and Communications: With your consent, we may send you promotional materials, newsletters, or special offers through Klaviyo and similar marketing platforms.
  • Advertising: We use Meta Pixel to deliver targeted advertising on social media platforms like Facebook and Instagram based on your interactions with our website.
  • Analytics: We use Google Analytics to monitor and analyse web traffic, helping us to understand user behaviour and improve our services.
  • Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity.
  1. How We Share Your Information

We may share your information in the following ways:

  • With Service Providers: We share information with third-party vendors, such as Klaviyo, Google, and Meta (Facebook), to assist with marketing, advertising, management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping and analytics.
  • For Legal Purposes: If required by law or in response to legal proceedings, we may disclose your information to comply with applicable laws and regulations.
  1. Use of Google Analytics

We use Google Analytics to track and report website traffic. Google Analytics collects data such as your IP address, location, and behaviour on our site. Google Analytics may set cookies on your browser to facilitate this data collection. For more details on how Google handles your data, please refer to Google’s Privacy Policy.

If you wish to opt-out of Google Analytics tracking, you can use the Google Analytics Opt-Out Browser Add-On.

  1. Use of Meta Pixel

We use the Meta Pixel (formerly known as the Facebook Pixel) to understand your interactions on our website and to show relevant advertisements on Meta platforms, including Facebook and Instagram. This helps us deliver tailored advertisements based on your interactions with our site. For more information on how Meta processes your information, please see Meta's Data Policy.

To adjust your privacy settings for Meta ads, visit your Facebook Ad Settings.

  1. Email Marketing

We use Klaviyo to manage our email marketing campaigns and send you promotional offers. Klaviyo stores data such as your name, email address, and purchase history. For more details on Klaviyo’s data processing practices, see Klaviyo's Privacy Policy.

  1. Cookies and Similar Technologies

We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners. Our website uses cookies and similar tracking technologies to enhance your user experience. Cookies are small data files stored on your device to help us remember your preferences and understand how you interact with our website. You may choose to block cookies in your browser settings, though doing so may limit the functionality of certain features.

  1. Your Rights Under the UK GDPR

Under the UK GDPR, you have the right to:

  • Access: Request access to your personal data that we hold.
  • Rectification: Request correction of any inaccuracies in your personal data.
  • Erasure: Request deletion of your personal data in certain circumstances.
  • Restriction: Restrict our processing of your personal data in certain circumstances.
  • Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Object to Processing: Object to certain processing activities, such as direct marketing.

To exercise any of these rights, please contact us at info@sikoja.com

  1. Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

  1. Security and Retention of Your Information

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, use, or disclosure. However, no internet-based service can be completely secure, and we cannot guarantee absolute security. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

  1. Your Rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

  • Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
  • Right to Delete: You may have a right to request that we delete personal information we maintain about you.
  • Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.
  • Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
  • Right to Opt out of Sale or Sharing or Targeted Advertising: You may have a right to direct us not to "sell" or "share" your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. Please note that if you visit our Site with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out of the "sale" or "sharing" of information for the device and browser that you use to visit the Site.
  • Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.
  • Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.
  • Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
  • Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

  1. Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

  • Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
  • Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
  • Your right to erasure - You have the right to ask us to delete your personal information. You can read more about this right here.
  • Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
  • Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here.
  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
  • Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

  1. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any sites you visit. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

  1. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any significant changes through our website or by email where appropriate.

  1. Complaints

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice. If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

  1. Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us or email us at info@sikoja.com.

Last updated: 25.10.2024