1. Introduction

World Star Register (“we,” “us,” or “our”) is committed to protecting and respecting the privacy of our customers, employees, and business partners. This Data Protection Policy outlines our commitment to safeguarding personal data in compliance with the General Data Protection Regulation (GDPR), Data Protection Act 2018, and other applicable UK data protection laws.

2. Scope

This policy applies to:
• All employees, contractors, and partners of World Star Register.
• All personal data processed by World Star Register in the context of our ecommerce activities.
• Any third parties engaged by World Star Register who have access to personal data.

3. Data We Collect

We may collect the following categories of personal data from our customers, website visitors, and employees:
• Personal Identification Information: Name, email address, postal address, phone number, and payment details.
• Transaction Information: Purchase history, delivery preferences, and communication records.
• Technical Information: IP addresses, browser type, operating system, and user interaction data (cookies).

4. Legal Basis for Processing

We only collect and process personal data when we have a legal basis to do so. The legal grounds include:
• Consent: When you have given clear consent for us to process your personal data for a specific purpose.
• Contractual Obligations: When processing is necessary for the performance of a contract.
• Legal Obligations: When processing is necessary for compliance with legal requirements.
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided they do not override your rights.

5. Purposes of Data Processing

We use personal data for the following purposes:
1. Order Fulfilment: To process and deliver your orders.
2. Customer Service: To respond to your inquiries and provide support.
3. Marketing Communications: To send promotional offers and updates, where consent is provided.
4. Website Analytics: To monitor and improve the user experience on our website.
5. Compliance: To comply with legal and regulatory requirements.

6. Data Sharing and Disclosure

We do not share personal data with third parties unless one of the following conditions applies:
• With Your Consent: Where you have explicitly given us permission.
• Service Providers: We may share data with trusted third-party service providers who perform functions on our behalf, such as payment processors, delivery companies, and IT support.
• Legal Requirements: When disclosure is necessary to comply with legal obligations or protect our rights.
All third parties who process personal data on our behalf must adhere to appropriate data protection measures and comply with our data protection standards.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure. These include:
• Encryption of sensitive data.
• Regular security assessments.
• Access controls and staff training.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Our retention periods are as follows:
• Customer Data: Retained for the duration of the relationship and for a period of up to 3 thereafter.
• Financial Data: Retained for a period of 3 to comply with tax and accounting obligations.
• Marketing Data: Retained until you withdraw your consent or opt-out.
After these periods, data is securely deleted.

9. Your Data Protection Rights

Under data protection law, you have rights including:
• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request the limitation of processing your data.
• Right to Data Portability: Request transfer of your data to another service provider.
• Right to Object: Object to processing of your data based on legitimate interests or direct marketing.
To exercise these rights, please contact our Data Protection Officer (DPO) at support@world-star-register.co.uk

10. International Transfers

We may transfer personal data outside of the UK to trusted third parties for processing. In such cases, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms, are in place to protect the data.

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyse site usage.

12. Changes to This Policy

We may update this Data Protection Policy from time to time. Any changes will be posted on our website with an updated effective date. We encourage you to review this policy regularly.

This policy is intended to reflect our commitment to privacy and data security and ensures that we remain compliant with UK data protection laws.