This Privacy Policy describes how rollandtag (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal information when you visit or make a purchase from www.rollandtag.com (the “Site”).
This policy applies to individuals residing in Europe and the United Kingdom. We are committed to protecting your personal data in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (EU GDPR) and the UK General Data Protection Regulation (UK GDPR).
—
1. Data Controller
For the purposes of applicable data protection legislation, the data controller responsible for your personal information is:
Brand Name: rollandtag
Website: www.rollandtag.com
Contact Email: promo@rollandtag.com
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us using the email address provided above.
—
2. Information We Collect
We collect personal information that you provide directly to us when using our Site, placing an order, or communicating with us.
A. Personal Data Provided directly by You
Contact Information: Name, email address, mailing address, delivery address, and telephone number.
Order & Transaction Details: Items purchased, order history, billing address, and transaction records.
Communications: Information contained in any correspondence when you contact us for customer support.
B. Technical & Usage Data Collected Automatically
When you access and browse the Site, certain technical data is automatically recorded:
IP address, browser type and version, operating system, and time zone settings.
Information about your visit, including URL clickstreams, pages viewed, page response times, and download errors.
—
3. Legal Bases for Processing Personal Data
We process your personal data under the following legal grounds provided by the EU GDPR and UK GDPR:
Performance of a Contract: Processing is necessary to fulfill and manage your orders, process payments, deliver goods, and handle customer service enquiries.
Legal Obligation: Processing is necessary to comply with legal requirements, such as tax, accounting, and consumer protection laws.
Legitimate Interests: Processing is necessary for our legitimate operational interests, such as improving Site efficiency, monitoring network stability, and preventing fraudulent transactions, provided these interests do not override your fundamental privacy rights.
Consent: Where you have explicitly provided consent for specific activities (e.g., subscribing to direct email updates). You may withdraw your consent at any time.
—
4. Payment Processing
All payment transactions executed on the Site are processed securely through our third-party payment service provider, Stripe.
When you make a payment on our Site, your payment card details and transaction information are submitted directly to Stripe. We do not store, hold, or collect your complete credit or debit card number on our servers.
Stripe processes your payment data in compliance with strict international security standards, including the Payment Card Industry Data Security Standard (PCI-DSS). For further information regarding how Stripe handles personal data, please consult Stripe’s Privacy Policy at https://stripe.com/privacy.
—
5. Sharing and Disclosure of Personal Data
We do not sell, rent, or trade your personal data to third parties. We disclose personal information only to trusted third-party service providers who assist us in operating our business and servicing you, subject to strict contractual confidentiality and data protection obligations:
Payment Processor: Stripe, for secure transaction authorization and fraud prevention.
Logistics and Delivery Partners: Carrier and postal services required to transport and deliver your physical orders.
IT Infrastructure and Hosting Providers: Web hosting and technical service providers ensuring Site functionality.
Legal and Regulatory Authorities: Statutory bodies or law enforcement agencies where required by applicable law, court order, or governmental regulation.
—
6. International Data Transfers
When your personal data is transferred outside the European Economic Area (EEA) or the United Kingdom—such as to service infrastructure located in Canada or other third countries—we ensure that appropriate safeguards are implemented to guarantee a level of protection essentially equivalent to that within the EEA and UK.
These safeguards include relying on standard contractual clauses approved by the European Commission and the UK Information Commissioner’s Office, or transferring data to jurisdictions recognised as providing an adequate level of data protection by relevant regulatory authorities.
—
7. Retention of Personal Data
We retain your personal data only for as long as is strictly necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, tax, accounting, or reporting requirements.
Specific retention limits apply as follows:
Order and Transaction Records: Retained for up to 7 years following completion of the order to satisfy statutory tax, accounting, and corporate reporting obligations.
Customer Support Records: Retained for up to 2 years from the date of resolution to address any potential follow-up inquiries or contractual claims.
Account and Contact Data: Retained for the duration of your active interaction with us, or until you request its deletion where no legal retention mandate applies.
Technical Logs and Web Server Records: Retained for up to 12 months for security, diagnostic, and systems maintenance purposes.
Upon the expiry of the applicable retention period, your personal data will be securely deleted, anonymised, or destroyed in accordance with industry security standards.
—
8. Data Security
We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include standard encryption protocols (such as TLS/SSL) during data transmission and restricted access controls for data storage.
Please note that no method of transmission over the Internet or system of electronic storage can be rendered entirely immune from security risks. While we strive to maintain robust controls to protect your personal information, absolute security cannot be guaranteed.
—
9. Your Rights under European and UK Data Protection Laws
Subject to conditions specified under the EU GDPR and UK GDPR, you possess the following legal rights regarding your personal data:
Right of Access: You have the right to request a copy of the personal information we hold about you.
Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data.
Right to Erasure (“Right to be Forgotten”): You may request the deletion of your personal data where there is no legal requirement or compelling legitimate ground for us to continue processing it.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain statutory circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, or have it transmitted directly to another controller.
Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or direct marketing purposes.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please submit a written request to promo@rollandtag.com. We will evaluate and respond to your request within one calendar month, as required by law.
If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, or with the UK Information Commissioner’s Office (ICO).
—
10. Cookies and Tracking Technologies
Our Site uses cookies and similar tracking technologies to ensure essential functionality, analyze performance, and facilitate navigation.
You can control and manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may impact the operational functionality and user experience of the Site.
—
11. Third-Party Links
The Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party websites you visit.
—
12. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our operational practices, regulatory obligations, or statutory requirements. Any revisions will be posted directly on this page with an updated “Last Updated” date. Your continued use of the Site following the posting of amendments constitutes your acknowledgement of the updated terms.
—
13. Contact Us
For any questions, privacy requests, or further information regarding this Privacy Policy, please contact:
Email: promo@rollandtag.com
Website: www.rollandtag.com