Privacy Policy

GTFO Web Shop

Privacy Policy

Last Updated: 22 November 2021

10 Chambers AB (“we”, “us”, “our”) has developed this web shop for GTFO (“Website”). We consider privacy to be fundamental to our relationship with our users.

This Privacy Policy explains how your personal information is processed in connection with the Website, and sets out your choices and rights in relation to that information. Please read this so that you can understand how your personal information is used and how you can exercise your rights.

If you do not agree to the processing of your personal information as set out in this Privacy Policy, please do not provide your information and do not use the Website. By using the Website, you are acknowledging that your personal information will be processed as described in this Privacy Policy.

Contact us

For the purpose of data protection laws, the data controller of your personal information in relation to the Website is 10 Chambers AB. The registered address of 10 Chambers AB is Drottninggatan 95 A, 113 60 Stockholm, Sweden.

Please reach out to us if you have any questions or concerns regarding the processing of your personal information. You can contact us anytime at privacy@10chambers.com.

Our data protection officer can be contacted at DPO@19chambers.com.

How We Use & Retain Personal Information

This section describes the personal information we collect from you, why, and for how long it is retained. For users who live in jurisdictions which require a legal basis for processing personal information, it also identifies the legal basis under which we process your data.

Please note that if you make transactions on the Website, your card information (name, credit card number, expiry date and billing address) will be processed by Shopify, our third party payment processor, not us. If you have any questions relating to your payment information please reach out to Shopify directly.

For details on how long we keep your data, please refer to the time periods set out below. Please note that in some cases (e.g., in the event of system troubleshooting to solve your query, a dispute, or where we are legally required or requested to do so) we may retain information for longer than the prescribed period set out below. If we are required to retain your information beyond the retention periods set out below, for example to comply with applicable laws, we will store it separately from other types of personal information.

Personal Information	Use	Legal Basis (only relevant if you are located in a Relevant Jurisdiction)	Retention Period
Information you provide to us (either directly or through a third party)
Login	We use this information to fulfil orders and register your account.	Necessary to perform our contract with you to provide the Website.	Stored for the lifetime of your use of the website (i.e. until deletion in accordance with your request) and then deleted within 30 days. We may store personal data for a longer period of time if this is necessary in order to comply with legal requirements.
Customer ID	We use this information to fulfil orders, register your account and arrange for shipping.	Necessary to perform our contract with you to provide the Website.	Stored for the lifetime of your use of the website (i.e. until deletion in accordance with your request) and then deleted within 30 days. We may store personal data for a longer period of time if this is necessary in order to comply with legal requirements.
Email	We use this information to fulfil orders and register your account.	Necessary to perform our contract with you to provide the Website and contact you in relation to the same.	Stored for the lifetime of your use of the website (i.e. until deletion in accordance with your request) and then deleted within 30 days. We may store personal data for a longer period of time if this is necessary in order to comply with legal requirements.
Billing address and shipping address	We use this information to fulfil orders and arrange for shipping.	Necessary to perform our contract with you to facilitate payment and delivery.	Stored for the lifetime of your use of the website (i.e. until deletion in accordance with your request) and then deleted within 30 days. We may store personal data for a longer period of time if this is necessary in order to comply with legal requirements.
Phone number (optional)	We use this information to facilitate shipping.	We use this information to contact you, with your consent.	Stored for the lifetime of your use of the website (i.e. until deletion in accordance with your request) and then deleted within 30 days. We may store personal data for a longer period of time if this is necessary in order to comply with legal requirements.
Region Location	We use this information to conduct general analytics to provide and improve the Website.	Necessary to perform our contract with you to provide the Website in your relevant region.	Stored for the lifetime of your use of the website (i.e. until deletion in accordance with your request) and then deleted within 30 days. We may store personal data for a longer period of time if this is necessary in order to comply with legal requirements.
Email (for newsletter) (optional)	We use this information to provide you with our newsletter.	We use this information to contact you, with your consent.	We retain this for so long as you retain an account on the Website or until you withdraw your consent (whichever is sooner).
Information generated as part of the Website
Device information: application and device information.	We use this information to ensure the Website functions as required.	Necessary to perform our contract with you to provide the Website.	We retain this for so long as you retain an account on the Website or until you withdraw your consent (whichever is sooner).
Device information (Facebook Pixels, Google Analytics, Google Tag Manager, Hotjar): advertising identifier (IDFA, GAID)	We use this information to check the effectiveness of our advertising campaigns.	It is in our legitimate interest to process advertising identifiers.	Stored for the lifetime of your use of the website (i.e. until deletion in accordance with your request) and then deleted within 30 days. We may store personal data for a longer period of time if this is necessary in order to comply with legal requirements.
IP address	We use this information to ensure the integrity, security and effective operation of our Website.	It is in our legitimate interest to protect the Website.	180 days, after which it is automatically erased.
Network type, network round trip time and network bytes received/sent	We use this information to ensure the integrity, security and effective operation of our Website.	Necessary to perform our contract with you to provide the Website.	Stored for the lifetime of your use of the website (i.e. until deletion in accordance with your request) and then deleted within 30 days. We may store personal data for a longer period of time if this is necessary in order to comply with legal requirements.
Transaction Records: payments on Shopify Open ID, cost, product purchased, IP address, device details, email address (if web-based transaction)	We use this information to maintain a record of your transaction history and facilitate fulfilment of purchases.	Necessary to perform our contract with you to facilitate transactions on the Website.	For the duration for which you hold an account on the Website, and thereafter in accordance with our legal obligations.
Customer Support Ticket ID & User Communications with Support: Name, Customer ID, Device Information, App Information email address (if you choose to disclose your email), photo (if you choose to upload one to illustrate the error), and details of ticket and error.	We use this information to: improve our services; and provide troubleshooting, such as addressing and remediating technical issues and bugs.	Necessary to perform our contract with you to provide and support the Website.	For the duration for which the support issue remains, and thereafter as necessary to ensure such issue does not re-occur.

Cookies

We use cookies and other similar technologies (e.g. web beacons, log files, scripts and eTags) (“Cookies”) to enhance your experience using the Website. Cookies are small files which, when placed on your device, enable us to provide certain features and functionalities.

For more information about our Cookies policy, click here.

Children

Children must not use the Website for any purpose, except where their parent or guardian has provided consent (to the extent this option is available in your jurisdiction).

By children, we mean users under the age of 18 years old; or in the case of a region where the minimum age for processing personal information differs, such different age.

We do not knowingly collect personal information from children under these ages for any purpose. If you believe that we have personal information of a child under these ages without parental/guardian consent, or if you are the parent or guardian of the user and wish to withdraw consent, please contact us at privacy@10chambers.com and we will delete such information.

How We Store and Share Your Personal Information

Our servers are located in the European Union. We rely on the European Commission's model contracts for the transfer of personal data to third countries.

Only where necessary will we share your personal information with third parties. Situations where this occur are:

Third party	Use
Third parties that provide services in support of the Website: For example, providers of services that provide marketing and advertisements and monitor the success of our marketing and advertising programs.	All companies providing services for us are prohibited from retaining, using, or disclosing your personal information for any purpose other than providing us with their services.
Companies within our corporate group who process your personal information in order to operate the Website.	All related group companies may only use your personal information in accordance with this Privacy Policy.
Regulators, judicial authorities and law enforcement agencies, and other third parties for safety, security, or compliance with the law.	We may be legally required to disclose information about you to authorities, such as to comply with a legal obligation or processes, enforce our terms, address issues relating to security or fraud, or protect our users. These disclosures may be made with or without your consent, and with or without notice, in compliance with the terms of valid legal process such as a subpoena, court order, or search warrant. We are usually prohibited from notifying you of any such disclosures by the terms of the legal process. We may seek your consent to disclose information in response to a governmental entity’s request when that governmental entity has not provided the required subpoena, court order, or search warrant. We may also disclose your information to: enforce our terms and conditions and other agreements, including investigation of any potential violation thereof; detect, prevent or otherwise address security, fraud or technical issues; or protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).
A third party that acquires all or substantially all of us or our business.	We may also disclose your information to third parties if we either: (a) sell, transfer, merge, consolidate or re-organise any part(s) of our business, or merge with, acquire or form a joint venture with, any other business, in which case we may disclose your data to any prospective buyer, new owner, or other third party involved in such change to our business; or (b) sell or transfer any of our assets, in which case the information we hold about you may be sold as part of those assets and may be transferred to any prospective buyer, new owner, or other third party involved in such sale or transfer.

The Security of Your Personal Information

We have information security and access policies that limit access to our systems and technology, and we protect data through the use of technological protection measures such as encryption.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will implement and maintain reasonable measures to protect your personal information, we cannot guarantee the security of the information transmitted through the Website or otherwise via the Internet; any transmission is at your own risk.

Your Rights

Some jurisdictions’ laws grant specific rights to users of the Website, which are set out in this section. Please refer to the applicable laws in your jurisdiction for the specific rights that apply to you, as not all rights are available everywhere, and you may have different rights depending upon when you are located.

Some of the rights you may have only apply in certain circumstances (as set out in more detail below).

In many cases you can access, correct and delete personal information right from your account. If you believe we hold any other personal information about you and would like to exercise your rights, please contact us at privacy@10chambers.com.

Access: You may have the right to access personal information we hold about you, how we use it, and who we share it with.

Portability

You may have the right to receive a copy of certain personal information we process about you. This may include personal information we process on the basis of your consent or pursuant to our contract with you, as described above in the section “How We Store and Share Your Personal Information”.

Correction

You may have the right to correct any of your personal information we hold that is inaccurate. You can access the personal information we hold about you by logging into your Website account.

Erasure

You can delete your account, or remove certain personal information, by logging into your Website account.

We may need to retain personal information if there are valid grounds under data protection laws for us to do so.

Restriction of Processing to Storage Only

You may have a right to require us to stop processing the personal information we hold about you other than for storage purposes in certain circumstances. Where we agree to stop processing the personal information, we will try to tell any third party to whom we have disclosed the relevant personal information so that they can stop processing it too.

Objection

You may have the right to object to our processing of your personal information.

Withdrawal of Consent

To the extent provided by applicable laws and regulations, you may be able to withdraw consent you previously provided to us for certain processing activities. Where consent is required to process your personal information, if you do not consent to the processing or if you withdraw your consent we may not be able to deliver the expected service.

Announcements

We may from time to time send you announcements when we consider it necessary to do so (for example, when we temporarily suspend access to the Website for maintenance, or security, privacy or administrative-related communications). You may not opt-out of these service-related announcements as they are essential to service delivery.

Contact Us

Please feel free to reach out to us at any time at privacy@10chambers.com.

In the event that you wish to make a complaint about how we process your personal information, please get in touch with us as described above and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection authority in the region in which you live or work where you think we have infringed data protection laws.

Changes

If we make any changes to this Privacy Policy we will post the updated Privacy Policy here. Please check this page frequently to see if there are any updates or changes to this Privacy Policy.

Language

Except as otherwise prescribed by law, in the event of any discrepancy or inconsistency between the English version and local language version of this privacy policy, the English version shall prevail.