Privacy policy

Privacy Policy

This Privacy Policy describes how Prism Supply (operated by Victoria Jane Wilsdon, referred to as "we", "us", or "our") collects, uses, discloses, and protects your personal information when you visit or make a purchase from our store.

Because we process personal data belonging to individuals located in the United Kingdom, our processing activities comply with the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018, and applicable privacy principles.

1. Information We Collect

When you visit or interact with our store, we collect certain categories of personal information:

  • Order & Transaction Information: Includes your full name, billing address, shipping address, email address, phone number, and payment details (processed securely via Shopify Payments).

  • Device & Usage Data: Information automatically collected when you access our site, including your IP address, browser type, time zone, device identifiers, and how you interact with our website (e.g., pages viewed, products added to basket).

  • Customer Support Data: Any details or communication records you provide when contacting us for support or general inquiries.

2. Legal Bases for Processing (UK GDPR)

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

  • Performance of a Contract: Necessary to fulfill and deliver your orders, process payments, and provide customer support.

  • Legitimate Interests: Necessary to run, secure, and optimize our business, prevent fraud, and improve customer experience.

  • Legal Obligation: Necessary to comply with statutory accounting, tax, and legal requirements.

  • Consent: Required for optional activities, such as sending marketing communications or placing non-essential cookies on your device.

3. How We Use Your Information

We use your personal data to:

  • Fulfill and deliver orders to your address in the UK.

  • Process payments securely and handle cancellations, refunds, or customer support requests.

  • Screen orders for potential risk or fraud.

  • Improve, optimize, and secure our online store operations.

  • Send transactional updates (e.g., order confirmations, shipping updates).

  • Send promotional communications, where you have given explicit consent to receive them.

4. Sharing Your Personal Information

We do not sell, rent, or trade your personal data. We only share personal data with trusted third-party service providers necessary to operate our business:

  • Shopify: Our e-commerce platform host, which stores and processes store data on secure servers.

  • Shopify Payments: Processes payment credentials securely in compliance with PCI-DSS standards.

  • Delivery & Fulfillment Services: Shared with postal and courier services (e.g., Royal Mail, Australia Post, or regional UK couriers) strictly for order delivery.

  • Legal Compliance: When required by law, subpoena, court order, or governmental authorities.

5. International Data Transfers

As Prism Supply is based in Australia and utilizes global platforms like Shopify, your personal data is transferred across international borders outside the UK.

Where data is transferred outside the UK, we ensure appropriate legal safeguards are implemented (such as International Data Transfer Agreements (IDTAs), UK Addendum to EU Standard Contractual Clauses, or processing within countries recognised under UK adequacy decisions) to protect your privacy rights.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to ensure our website functions correctly, remember user preferences, analyze site performance, and assist with marketing efforts.

  • Essential Cookies: Necessary for core features such as shopping basket functionality, account login, and secure checkout.

  • Analytics & Performance Cookies: Help us understand site traffic and usage patterns to improve performance.

  • Marketing Cookies: Used to deliver relevant advertisements with your consent.

You can manage or disable non-essential cookies at any time through your browser settings or our cookie preference controls.

7. Your Statutory Rights (UK Residents)

Under the UK GDPR, as a resident of the United Kingdom, you have the following rights regarding your personal information:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete personal data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain conditions.

  • Right to Restrict Processing: Request restricted processing of your data in specific scenarios.

  • Right to Data Portability: Request transfer of your data to another service provider.

  • Right to Object: Object to data processing based on legitimate interests or direct marketing.

  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at prismsupply@outlook.com. You also have the right to lodge a complaint with the UK data protection supervisory authority: The Information Commissioner’s Office (ICO) at ico.org.uk.

8. Data Retention & Security

We maintain technical and organizational measures to protect your personal information against unauthorized access, loss, or alteration. We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, or reporting obligations.

9. Business & Contact Details

Store Name: Prism Supply

Data Controller / Legal Owner: Victoria Jane Wilsdon

Email: prismsupply@outlook.com

Telephone: +61 452 199 183

Physical Address: Rosepark Drive, Melonba, New South Wales, 2765, Australia

Compliance Review & Pending Information Needed

Before publishing this policy live on your Shopify store, please review and supply the following missing pieces of information:

  1. Cookie Consent Banner Verification:

    • Status: UK privacy law (PECR) requires active, opt-in consent before placing non-essential cookies.

    • Action Required: Ensure you have an active cookie consent banner app enabled on your Shopify store that allows UK visitors to accept or reject non-essential cookies.

  2. Marketing Opt-In Compliance:

    • Status: UK GDPR requires soft opt-in / explicit consent for commercial emails.

    • Action Required: Ensure your Shopify checkout has the pre-checked box for email marketing disabled so UK buyers explicitly check the box themselves to opt into promotional emails.