Last Updated: 4/11/20
We understand that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits this website, www.worthygal.com (our “Site”) and have took steps to protect the data we collect from you, as described in sections 5 and 6 below. Any personal data we do collect will only be used as permitted by law.
Our Site is owned and operated by Worthy Gal Ltd, a company registered in England and Wales under company number 11765745 and whose registered address is 20-22 Wenlock Road, London, England, N1 7GU.
What this Policy covers
What is personal data?
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as “any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier”.
Personal data is, therefore, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data and other online identifiers.
Under the GDPR, you have the following rights, which we will always work to uphold:
- The right to access the personal data we hold about you;
- The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete;
- The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data we have;
- The right to restrict (i.e. prevent) the processing of your personal data;
- The right to object to us using your personal data for a particular purpose or purposes;
- The right to data portability; and
- Rights relating to automated decision-making and profiling
You can obtain further information about your rights from the Information Commissioner’s Office or your local Citizens Advice Bureau.
If you have any cause for complaint about our use of your personal data, you may lodge a complaint with the Information Commissioner’s Office.
The personal data we collect and how we use it
Subject to the following, for selling digital products, Worthy Gal can obtain your name, email address, contact number, billing address, payment details, IP address to meet legal obligations and for customer service purposes. Upon consent, we will keep you in touch with all the latest events and allowing you to get the most out of our products and services that we offer.
Data collected upon purchasing a digital product via Stripe payment gateway or Paypal;
a) At checkout, we will collect your name, email address, username, and password. This information is used to set up your account for our site. If you are redirected to an offsite payment gateway to complete your payment, we may store this information in a temporary session variable to setup your account when you return to our site.
b) At checkout, we may also collect your billing address and phone number. This information is used to confirm your credit card. The billing address and phone number are saved by our site to prepopulate the checkout form for future purchases and so we can get in touch with you if needed to discuss your order.
c) At checkout, we may also collect your credit card number, expiration date, and security code. This information is passed to our payment gateway to process your purchase.
For users that register on our website (if any), we may also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username themselves and will need to request the change via the site administrator of the site). Website administrators can also see and edit that information.
You will also have the ability to view and download previous orders in your account area of www.worthygal.com
When submitting a general enquiry via our site, we will collect your name, email and contact number to enable us to respond to your enquiry.
If you send us an email, we may collect your name, your email address and any other information you choose to give us.
How long we retain your data
We will keep your data to allow you to have access to previous orders/downloads and send marketing emails from time to time. This will be kept up to a maximum of 5 years, unless you re-consent.
All emails containing your personal data will be deleted no later than 5 years after the subject matter of your email has been resolved.
You may withdraw your consent to us using your personal data at any time, and to request that we delete it.
If we do collect any personal data, it will be processed and stored securely and for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with our obligations and safeguard your rights under both the GDPR and CCPA at all times.
How and where we store your personal data
In majority of cases, we will store your personal data within the European Economic Area (the “EEA”). And in this case, your data will be stored on UK located shared servers. The EEA consists of all EU member states plus Norway, Iceland and Liechtenstein. This means your personal data will be fully protected under the GDPR or to equivalent standards by law. The only time your data will be stored outside of the EEA, is when we store basic data with https://home.kartra.com/. A tool that we use for marketing purposes only.
Personal data security is essential to us and to protect personal data we take appropriate organisational, technical and security measures.
Sharing your personal data
We share your basic data with activecampaign.com and home.kartra.com for marketing purposes, payment information with Stripe.com and paypal.com, tracking data with Google.com and Facebook.com. In some circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order or the instructions of any government authority.
How you can access your personal data
If you want to know what personal data we have about you, you can ask us for a copy of it (where any such personal data is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to the email or postal addresses shown in section 10. We do not normally charge for a subject access request. However, if your request is “manifestly unfounded or excessive” (for example, if you make repetitive requests or a large amount of data in one request) we may charge a fee to cover our administrative costs in responding.
We will normally respond to your subject access request within one month of receiving it. However, in some cases (for example, if your request is more complex) we may require more time up to a maximum of three months from the date we receive your request.
Worthy Gal does not knowingly collect or solicit personal information from children under the age of 13 and the Service and its content are not directed at children under the age of 13. In the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.
If you believe that we might have any information from or about a child under 13, please contact us at firstname.lastname@example.org
California users’ Privacy Rights
Californian users of worthygal.com have additional rights afforded to them under the California Consumer Privacy Act (CCPA).
Categories of personal information collected by Worthy Gal
For more details about the personal information Worthy Gal has collected and how we use it please, see section 5. How long we store your data, see section 6. How and where we store your data see section 7. Who we share it with, please see section 8.
Worthy Gal does not “sell” (as defined in the CCPA) the personal information of Worthy Gal customers.
Making a request in relation to your personal information
The CCPA gives California consumers various rights with respect to the personal information we collect, including the right to (subject to certain limitations):
- Request to access the personal information Worthy Gal has about you; and
- Request that Worthy Gal delete all of your personal information.
California users may make a request by contacting us at email@example.com and we will authenticate your request using the email address associated with your Worthy Gal account and if necessary, proof of residency.
How to contact us
To contact us about anything to do with your personal data and data protection under GDPR, including to make a subject access request, please email to the following address:
We may change this Privacy Notice from time to time (for example, if the law changes or if we change our business in a way that affects personal data protection).