This Policy describes the information we collect from you, how we use that information and our legal basis for doing so. It also covers whether and how that information may be shared and your rights and choices regarding the information you provide to us. This Privacy Policy applies to the information that we obtain through your use of the Crieff Cloverleaf website.
This Privacy Policy was last updated on 23 April 2023.
Who we are
Crieff Cloverleaf is a trading name of Sprocket & Spark Ltd, a company limited by guarantee and registered in Scotland, company number SC682421, registered address 272 Bath Street, Glasgow, G2 4JR. If you have any questions about this privacy policy, please contact us at [email protected]. We will never sell your personal data to anyone.
What We Collect and Receive
In order for us to provide you the best possible experience on our website, we need to collect and process certain information. Depending on your use of the website, that may include:
- Contact us via email — for example, when you ask for support, send us questions or comments, or report a problem, we will collect your name, email address, message, etc. We use this data solely in connection with answering the queries we receive.
- Usage data — when you visit our site, we will store: the website from which you visited us from, the parts of our site you visit, the date and duration of your visit, your anonymised IP address, information from the device (device type, operating system, screen resolution, language, country you are located in, and web browser type) you used during your visit, and more. We process this usage data on the same server that hosts our website, using Matomo Analytics for statistical purposes, to improve our site and to recognize and stop any misuse.
- Cookies — We use strictly necessary cookies to manage your interaction with our online shop and our payment provider. If you consent to them, we also use anonymised analytics tracking cookies that contain no personal information. You can view the cookies that may be set by this website in the table below.
Cookies which may be set when you interact with this website
Strictly necessary cookies
| Cookie | Type | Duration | Description |
|---|---|---|---|
| __cfduid | persistent | 30 days | Set by CloudFlare. Protects website against bots. |
| __stripe_mid | 1 year | This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any payment information on a server. | |
| __stripe_sid | 30 minutes | This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any payment information on a server. | |
| cli_user_preference | persistent | 1 year | Set by Cookie Consent plugin. Stores the user’s preferred button states in the Cookie Settings form. |
| cookielawinfo-checkbox-analytics | persistent | 1 year | Set by Cookie Consent plugin. Records the user consent for the cookies in the "Analytics" category. |
| cookielawinfo-checkbox-necessary | persistent | 1 year | Set by Cookie Consent plugin. Records the user consent for the cookies in the "Necessary" category. |
| CookieLawInfoConsent | persistent | 1 year | Set by Cookie Consent plugin. Records the default button state of the corresponding category and the status of CCPA. It works only in coordination with the primary cookie. |
| MATOMO_SESSID | session | session | Set by Matomo Analytics. Stored when Matomo opt-out feature is used, to prevent CSRF security issues. |
| store_notice[notice id] | session | session | Set by WooCommerce. Allows customers to dismiss the Store Notice. |
| viewed_cookie_policy | persistent | 1 year | Set by Cookie Consent plugin. Stores whether or not the user has consented to use cookies. It does not store any personal data. |
| wc_cart_created | session | session | Set by WooCommerce. Stores performed e-commerce actions on the website. |
| wfwaf_authcookie_[hash] | persistent | 1 day | Set by WordFence. Determines if a user is logged in. |
| woocommerce_cart_hash | persistent | 1 day | Set by WooCommerce. Stores items in shopping cart. |
| woocommerce_items_in_cart | session | session | Set by WooCommerce. Stores items in shopping cart. |
| wordpress_logged_in_[hash] | session | session | Set by WordPress. Stores account information for logged-in users. |
| wordpress_sec_[hash] | persistent | 14 days | Set by WordPress. Provides protection against hackers, stores account details. |
| wp_woocommerce_session_* | session | session | Set by WooCommerce. Stores performed e-commerce actions on the website. |
| wp-wpml_current_language | session | session | Set by WordPress Multi Lingual. Stores the current language/language settings. |
Analytics cookies (opt-in)
| Cookie | Type | Duration | Description |
|---|---|---|---|
| _pk_id.* | persistent | 1 year 27 days | Set by Matomo Analytics. Stores a unique user ID. |
| _pk_ses.* | session | 30 minutes | Set by Matomo Analytics. Stores a unique session ID for gathering information on how the users use the website. |
| mtm_cookie_consent | persistent | Indefinite | Set by Matomo Analytics. Stores the fact that consent for storing and using optional cookies was given by the user. |
Browsing the website
Our webserver log files, which may include your IP address, may be stored indefinitely on the webserver. After a maximum of two months the IP addresses in these files are irreversibly anonymised. The long-term website usage statistics produced by the hosting infrastructure may be stored indefinitely, but after a maximum of two months they are also irreversibly anonymised.
Contacting us
When you contact us using our contact form, we will store information including your name, email address, and enquiry content. We will retain this information for as long as required to respond to and resolve your enquiry, and for up to one month afterwards. The information may be retained in our automated backup snapshots for a further two months after it is deleted from our live systems.
Purchases
When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes such as to:
- Send you information about your account and order
- Respond to your requests, including refunds and complaints
- Process payments and prevent fraud
- Set up your (optional) account for our store
- Comply with any legal obligations we have, such as calculating taxes
- Improve our store offerings
If you create an account, we will store your name, address(es), email and phone number, which will be used to populate the checkout for future orders. We will not store any credit card details.
We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and/or for as long as we are legally required to continue to keep it. For example, we will store order information for up to seven years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.
We may share parts of this information with our payment processor (Stripe) and our garment printing and shipping agency (Inkthreadable) as described below, purely to take your payment and to produce and deliver the products you have ordered.
RoomLink Accommodation Enquiry Service
When you use our RoomLink Accommodation Enquiry Service, we’ll ask you for contact information including your name, email address and phone number. We’ll use this information to contact you about your enquiry. If your enquiry results in an accommodation booking, we may also use this information to contact you to invite feedback after your stay.
We will retain this contact information for up to one month after the end of the calendar year in which your enquiry is made. The information may be retained in our automated backup snapshots for a further two months after it is deleted from our live systems.
We may share your contact information with one or more of our professional partner accommodation providers in or near Crieff, so that they can contact you if they have accommodation meeting your requirements. Our partner accommodation providers may vary, and are subject to change without notice. If you wish to know our current list of partners before placing your enquiry, please contact [email protected].
Your Rights
You have the right to be informed of Personal Data processed by Crieff Cloverleaf, a right to rectification/correction, erasure and restriction of processing. You also have the right to ask from us a structured, common and machine-readable format of Personal Data you provided to us. We can only identify you via your email address and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly and/or you using our site and/or service. We cannot provide, rectify or delete any data that we store on behalf of our users or customers. To exercise any of the rights mentioned in this Privacy Policy and/or in the event of questions or comments relating to the use of Personal Data you may contact us at [email protected]. In addition, you have the right to lodge a complaint with the data protection authority in your jurisdiction.
Subprocessors
We use a select number of trusted external service providers for certain technical data processing and/or service offerings. These service providers are carefully selected and meet high data protection and security standards. We only share information with them that is required for the services offered and we contractually bind them to keep any information we share with them as confidential and to process Personal Data only according to our instructions. Crieff Cloverleaf uses the following subprocessors to process the data collected by our website:
| Subprocessor | Data location | Service |
| Krystal Hosting Limited | United Kingdom, England | Secure infrastructure for servers and databases and logs hosted in the United Kingdom. |
| Fidgety Lizard Limited | United Kingdom, Scotland | Website analytics, management and maintenance, email mailbox provision and data backup services. |
| Cloudflare Ltd | Global | Content delivery network (CDN) to cache static content from our website and serve it efficiently to visitors. |
Third party services we may use
When you visit our website, or purchase products or services, we may use the following third party services which may collect personal data:
| Recipient | Purpose of processing | Lawful basis | Data location and security | Personal data collected by the third party | Privacy policy |
| Youtube | To play videos | Legitimate interest | USA | IP address | link |
| Vimeo | To play videos | Legitimate interest | USA | IP address | link |
| MailChimp | To send you our newsletter emails after you sign up | Explicit consent | USA | link | |
| Stripe | To receive payments | Legitimate interest | USA |
| link |
| Inkthreadable | To produce and dispatch the product you have ordered | Legitimate interest | UK |
| link |
Retention of data
We will retain your information as long as your account is active, as necessary to provide you with the services or as otherwise set forth in this Policy. We will also retain and use this information as necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements and protect Sprocket & Spark Ltd’s legal rights. We also collect and maintain aggregated, anonymized or pseudonymized information which we may retain indefinitely to protect the safety and security of our Site, improve our Services or comply with legal obligations.
Privacy Policy Changes
We may update this Policy from time to time. If we do, we’ll let you know about any material changes, either by notifying you on the website or by sending you an email.
Opt-out of all anonymised website tracking
You can completely opt out of being tracked by our Matomo Analytics instance below:
Contact Us
E-Mail: [email protected].
Post: Sprocket & Spark Ltd, Unit 55633, PO Box 26965, Glasgow, G1 9BW.
If you have any questions or concerns regarding your information, please contact [email protected]. If you wish to communicate directly with us (because you have a particularly sensitive matter for example), please contact us by post, as communication by e-mail could always have security gaps. Please state in your request that your concern relates to the Crieff Cloverleaf website.
