1.Introduction

At Covet-Me (“Covet-Me” or “we” or “our” or “us”), we respect the privacy rights of our online visitors and recognise the importance of protecting the information we collect about you. Our Privacy Policy is designed to help you understand how we collect, hold, use and disclose personally identifiable information about you. This Policy (together with our website Terms & Conditions, and any other documents referred to in it) sets out the basis on which we, Covet-Me, with a registered address of 39 Dovedale Circle, Ilkeston, England, DE7 8SE, company number 13279035 and email support@covet-me.com will process any personal data we collect from you, or which you provide to us, in the course of using our covet-me.com

For the purpose of the Data Protection Act 2018 (“DPA’18”) we are the data controller. Please remember that this Privacy Policy does not apply to the practices of companies that we don’t own or control or to people that we don’t employ or manage. We encourage you to read the privacy statements of each and every website that collects personally identifiable information about you. The privacy information in this Privacy Policy applies solely to our website and the information that is collected about you as a user of this Site..

2.Your Information

When you use our site, there are a number of ways in which you provide information and other data to us. By using the site, you consent to us processing and collecting this data, on the terms and for the reasons which are explained below.
The personal data of users is processed under the General Data Protection Regulation (“GDPR”) and DPA’18 on the lawful basis of contract. .
The provision of personal data is necessary to facilitate the provision of the service.

3.Information we may collect about you

a) Your full name, address, email address, telephone number, or other information you provide when signing up for an account on this Site or using our contact form.
b) Your payment information, which may include your account number, sort code, CVC number, expiry date or any other payment information.
c) Photographs and videos you upload via a content creator account.
d) Your photo identification.
e) Your Internet Service Provider (“ISP”).
f) Any referring or exit pages taking you to or from our site.
g) Your login information.
h) Your web browser type and version.
i) Your time zone and location.
j) Date/time stamp.
k) Click stream data.
l) Any browser plug-ins and version used on your browser.
m) Your operating system.
n) Information we collect when you interact with our content on the Site or on third-party sites or platforms, such as social networking sites. This may include information such as “Likes”, profile information gathered from social networking sites or interacted with our content.
o) To enhance your user experience or help improve and measure the Site’s effectiveness, Toro Active may embed code from third party sites. Examples of such parties may include Facebook, Twitter, Google, and others. These third parties may collect information about including IP addresses through cookies in ways Toro Active does not control.

4.How we use your information

a) In order to provide any services requested by you as a user of this Site.
b) In order to allow content creators to display their content on this Site.
c) In order to allow users of this Site to view the content the content creators have uploaded and in turn paid for.
d) Ensure that content from our Site is presented in the most optimised and effective manner for you and for your computer.
e) To diagnose or fix technology problems.
f) To control unauthorised use or abuse of the Site and our products and services, or otherwise detect, investigate or prevent activities that may violate our policies or be illegal.
g) Carry out our obligations arising from any interaction entered into between you and us.
h) Allow you to participate in interactive features of our service, when you choose to do so.
i) Notify you about changes to our service.
j) To deliver support and respond to your enquires.
k) Administer our Site including data analysis, testing, traffic monitoring, research, statistical and survey purposes.
l) Covet-Me, may provide general statistical information to third parties but such information will not allow anyone to be personally identified.
m) Send you our newsletters from time to time.
Provide you with information, products or services that you request form us or that we feel may interest you, where you have consented to be contacted for such purposes. If you do not wish to be contacted for marketing purposes please tick any relevant box on which you submit your data or unsubscribe from any marking communication using the unsubscribe function in the footer of the email. You can also contact us directly by emailing support@covet-me.com. Please note that if you click on, or follow, any links from our site to external websites, our privacy policy will no longer apply. Please check the privacy policies of any such external site before submitting any personal data, as we cannot accept any responsibility or liability in relation to them.

5.How your data may be disclosed

In order to provide our services, we may transfer your personally identifiable information to third parties, parents, affiliate, subsidiaries and service providers, some of which may process and/or store your personally identifiable information outside of the European Economic Area (“EEA”). However, in such instance we will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy. Any data transfers that take place outside of the EEA are covered by appropriate safeguards, e.g. Standard Contractual Clauses (“SCC’s”).
Third parties in which your personally identifiable information may be disclosed to include, but are not limited to :
• Stripe: https://stripe.com/gb/privacy

6.Data Storage

All information you provide to use will be stored on our UK based secure servers encrypted using SSL encryption using the TLS security protocol.
We take your privacy seriously, and will take all reasonable steps to protect your personal data, but please be aware that any data which you send to our Site is sent at your own risk.
The data that will collect from you may be transferred to, processed and/or stored at a destination outside of the European Economic Area (“EEA”). By submitting your personal data, you agree to this. We will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.
We hold personally identifiable information in a combination of hard copy and electronic files for the period necessary to support the Site, comply with our legal obligations, resolve disputes, or otherwise fulfil the purposes outline in this Privacy Policy. We use third party information system providers who may store or have access to your personal information. We may also retain backup information on our servers for some time to comply with applicable law or our internal security policies. We do not always remove or delete all of your information for a number of reasons including due to technical and systems constraints, contractual or legal requirements.
We operate a data retention period of 6 years from the date of our last interaction with a user. 6 years after the date of our last interaction with a user all of the data provided by the user during all of their interactions with us will be reviewed and securely deleted/destroyed.
We ask you not to send us, and you not to disclose, any sensitive personally identifiable information (such as information related to racial or ethnic origin, religion or other beliefs, health, criminal background or trade union membership) on or through our Site or otherwise. If, contrary to this request, you do provide any sensitive information, in doing so you consent to us collecting and handling that information in accordance with this Privacy Policy.
No method of transmission over the internet, method of electronic storage or other security methods are one hundred percent secure. Therefore, while we strive to use commercially acceptable means such as firewalls, password protected databases with limited physical and electronic access, and encryption to protect your personally identifiable information against unauthorised use, disclosure or modification, we cannot guarantee its absolute security.
By using our Site or otherwise providing personally identifiable information to us, you and consenting to have your personally identifiable information transferred to and processed in the United Kington or any other country in which the data controller and its parents, subsidiaries, affiliates and service providers main facilities.
The basis upon which we process personal data, is of legitimate business interest, in order to provide products and services to our customers.
The Site may also contain links to other third-party websites including social media networks. This Privacy Policy applies solely to information collected by Covet-Me. Even if the third party is affiliated with us through a business partnership or otherwise, we are not responsible for the privacy practices of other websites. We encourage you to familiarise yourself with the privacy policies of such websites to determine how they handle any information they separately collect from you. Please be aware that we do not warn you when you have chosen to click through to another website or property when using the Site.

7.Children under the age of 13

This site is not intended for the use by anyone under the age of 13. Covet-Me does not knowingly collect or solicit personally identifiable information from anyone under the age of 13. If you are under the age of 13, you may not attempt to send any information about yourself to us, including your name, address, telephone number, or email address.
In the event that we confirm that we have collected personally identifiable information from someone under the age of 13 without verification of parental consent, we will delete/destroy that information promptly. If you are a parent or legal guardian of a child under the age of 13 and believe that we might have any information from or about such child, please contact us at the email or mailing address provided at the end of this Privacy Policy.

8.Access to information

Subject access request You have the right under the Data Protection Act 2018 to access the information we hold about you. If you wish to exercise this right, please send your request support@covet-me.com.
Right to be forgotten You have the right under the Data Protection Act 2018 to have all of the information that we hold about you deleted in line with our statutory and legal responsibilities. If you wish to exercise this right, please send your request to support@covet-me.com.
Right to data portability You have the right under the Data Protection Act 2018 to request copy of all of the information we hold about you. If you wish to exercise this right, please send your request to support@covet-me.com.
Right to data rectification You have the right under the Data Protection Act 2018 to request the amendment or updating of all of the information that we hold about you. If you wish to exercise this right, please send your request to support@covet-me.com.