Privacy Policy

Last updated: [DATE]

1. Introduction

This Privacy Policy describes how JS ("we", "us", "our") collects, uses, and protects your personal data when you visit our website shoppingbynight.com ("the Site"). This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

2. Data Controller

For the purposes of the UK GDPR and DPA 2018, the data controller is JS, a natural person, registered at:
Rinconada Alcatraz 3, Rinconada San Miguel, 54725 Cuautitlan Izcalli, Mexico
Email: hello@shoppingbynight.com | Phone: +55 442 508 1513

3. Legal Basis for Processing

Under Article 6 of the UK GDPR, we process personal data only where we have a valid legal basis. The legal bases we rely on are:

• Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter, accepting non-essential cookies).
• Legitimate interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests (e.g., analytics to improve the Site), provided your interests and fundamental rights do not override those interests.

4. Personal Data We Collect

We collect and process the following categories of personal data:

• Identity and contact data: Email address (when subscribing to our newsletter).
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform (collected via cookies and similar technologies).
• Usage data: Information about how you use our website and services (collected via Google Analytics).
• Marketing and communications data: Your preferences in receiving marketing from us and your communication preferences.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

• To send you our newsletter and marketing communications (with your consent).
• To analyse Site traffic and usage patterns to improve our content and services (legitimate interest).
• To measure advertising effectiveness and deliver relevant advertisements (with your consent).
• To monitor and report on Site performance.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Site. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy.

7. Third-Party Processors

We use the following third-party processors, which may process personal data on our behalf:

• Google Analytics (Google LLC): For Site analytics. Google may process data in the USA under the EU-US Data Transfer mechanisms. More information: Google Privacy Policy.
• Facebook Pixel (Meta Platforms, Inc.): For advertising measurement. More information: Facebook Privacy Policy.

8. International Data Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with Chapter V of the UK GDPR, including reliance on adequacy decisions, Standard Contractual Clauses (SCCs), or other approved transfer mechanisms.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods:

• Newsletter subscriber data: until you unsubscribe.
• Analytics data: [26 months] (Google Analytics default retention).

10. Your Rights under UK GDPR

Under the UK GDPR and DPA 2018, you have the following rights in relation to your personal data:

• Right of access (Article 15): Request confirmation of whether we process your personal data and access to that data.
• Right to rectification (Article 16): Request correction of inaccurate or incomplete personal data.
• Right to erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to restriction (Article 18): Request restriction of processing in certain circumstances.
• Right to data portability (Article 20): Receive your personal data in a structured, commonly used format.
• Right to object (Article 21): Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time.
• Right to complain: Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact Us

For any questions, concerns, or to exercise your rights, please contact us:

• By email: hello@shoppingbynight.com
• By phone: +55 442 508 1513
• By mail: Rinconada Alcatraz 3, Rinconada San Miguel, 54725 Cuautitlan Izcalli, Mexico

If you are a UK resident and believe your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.