1. Our role as a data controller
Sinful ApS ("Sinful", "we", "our", "us") is the data controller for the processing of the personal data we collect and process about you when you visit our website ("www.sinful.co.uk") and make a purchase, or are otherwise in contact with us.
Below you can find information about how we collect and handle your personal information, including the purposes of the processing, the security of the information you share with us, and the rights you have.
If you have any questions about our processing of personal data, or if you wish to exercise your rights, you can always contact us here, and we will answer you as soon as possible:
Sinful / Mcompany, Unit 1, Station Court, Station Lane, Hethersett NR9 3AY
VAT: UK 373 2745 85
Mail: service@sinful.co.uk
Phone: 0330 808 5261
2. Types of personal data we collect and for what purposes
We collect and process different types of personal data depending on the activity we perform. Below you can see what information we collect, for what purposes it is processed and with what legal basis in the General Data Protection Regulation (GDPR).
Information about your user behaviour on our site
- General personal data: IP address, cookie ID, pages visited, website interactions, network location, device
- Purpose: Improvement of the website, customization of content and marketing based on user interests and preferences
- Legal basis: Consent (Article 6(1)(a)) or our legitimate interest in being able to improve the user experience (Article 6(1)(f))
Sinful uses cookies in accordance with Sinful cookie policy when you visit sinful.co.uk. You can read our cookie policy under “change cookie consent” on our website.
Information collected in connection with purchases
- General personal data: Name, address, e-mail address, telephone number, delivery method, payment information, purchase history, IP address
- Purpose: To carry out sales, delivery of goods, handling billing and customer service, collecting and evaluating user reviews, payment and invoicing, and to prevent and prevent fraud
- Legal basis: Performance of a contract (Article 6(1)(b)) and/or our legitimate interest in being able to assess your shopping experience (Article 6(1)(f))
Information collected for newsletters and general marketing
- General personal data: Name, email address, demographic information, interests, purchase history (for targeted marketing)
- Purpose: To provide newsletters, marketing campaigns and offers based on your interests and preferences. In addition, we may send you push notifications when participating in live shopping. Based on your behavior on www.sinful.co.uk as well as information about you and your purchases, we may send you relevant and targeted product recommendations
- Legal basis: Consent (Article 6(1)(a)) and/or legitimate interest in placing similar products on the market (Article 6(1)(f))
Information collected for Customer Care
- General personal data: Name, email address, phone number, purchase history, description of your request
- Purpose: Handling customer inquiries, problem solving, support, and improving customer satisfaction
- Legal basis: Performance of contract (Article 6(1)(b)) and/or legitimate interest in being able to support incoming requests (Article 6(1)(f))
Information collected in contests or promotions
- General personal data: Name, email address, any additional information required by the competition or promotion
- Purpose: To administer competitions or promotions, contact with winners and deliver prizes
- Legal basis: Consent (Article 6(1)(a)) and performance of contract (Article 6(1)(b))
Information collected in cooperation agreements
- General personal data: Name, address, email address, phone number, social media profile information
- Purpose: Establishment and administration of cooperation agreements with private individuals for marketing purposes, including product reviews or sponsored posts
- Legal basis: Performance of contract (Article 6(1)(b))
Interaction on social media accounts
- General personal data: User's name, comments, shares, "likes" or other interactions on our social media accounts
- Purpose: To increase user engagement, answer questions or comments, market, run contests, or share information
- Legal basis: Legitimate interest in being able to interact with users (Article 6(1)(f))
Currently, we can be found on the following social media: Facebook, Instagram, TikTok, LinkedIn. These parties may also process your data for their own purposes. You can read more about their respective data policies by clicking on the links above.
Information obtained in connection with surveys
- General personal data: Name, email address, answers to questions
- Purpose: To collect feedback, market research or customer satisfaction analyses
- Legal basis: Consent (Article 6(1)(a) and Article 9(2)(a)) if the questionnaire contains sensitive information
3. Recipients of personal data
Sinful will, under certain circumstances, transfer and/or disclose your personal data to third parties if necessary to fulfill the purpose for which the personal data was collected. In the event that we allow others to process information about you on our behalf, we will enter into a written data processing agreement with the data processor. Some of the following recipients also works as independent data controllers. We transfer and disclose the information to, among others, the following categories of recipients:
- Shipping companies and logistics providers, with the purpose of fulfilling your delivery request
- External payment providers or providers of financing solutions, for the purpose of being able to complete your purchase (e.g. Altapay, ViaBill, Klarna)
- IT and system suppliers who handle the technical operation and support of our website and systems, send out marketing and support our customer service function
- External advisors, including auditors, lawyers or other advisors
- Business partners, including e.g. suppliers of goods and services
- Providers of review platforms and questionnaires, e.g. Trustpilot
- Public authorities, if required
In some cases, we disclose the personal data to a number of recipients outside the EU (third countries) if the recipients are located outside the EU. The transfer of personal data to our data processors (or joint controllers) in third countries is ensured through valid transfer guarantees using the EU Commission's Standard Contractual Clauses and any additional safeguards. Some data processors have obtained certification through the EU-U.S. Data Privacy Framework, which serves as the legal basis for the transfer of personal data from the EU to the United States.
We work with the following suppliers located in the United States for the stated purposes:
Twilio, Inc.
- Purpose: Sending order confirmation
- Information: Name, address, email, purchase history, order number
Klaviyo, Inc.
- Purpose: Sending newsletters
- Information: Name, email, demographic information, interests, purchase history (for targeted marketing)
Emailable, LLC
- Purpose: Cleanup and verify email lists
- Information: E-mail
Vimeo, Inc.
- Purpose: Product videos
- Information: IP address, browser, operating system, video navigation, time spent on the site
Google, LLC (if you consent to cookies)
- Purpose: Optimization, advertising and analysis
- Information: Cookie ID, session ID, order number, user agent, device information, product ID
Meta Inc. (if you consent to cookies)
- Purpose: Advertising, analysis and statistics
- Information: Actions taken on the site, browser ID, order value
Microsoft (if you consent to cookies)
- Purpose: Tracking, analysis of user behavior and targeted advertising
- Information: IP address, cookie ID, session ID, user agent, device information
