Security & Privacy

We are committed to safeguarding the privacy of our website visitors; this policy sets out how we will treat your personal information.

(1) What information do we collect?

We may collect, store and use the following kinds of information:

(a) anonymous information about your computer, your visits to and use of this website including browser type and version, operating system, referral source, length of visit and page views

(b) information relating to any transactions carried out between you and us on or in relation to this website, including; items purchased, email address, telephine number, shipping and billing address

(2) The personal data we collect will be used for the following purposes

(a) contacting you regarding an order you have placed with us e.g. order and despatch confirmations by e-mail

(b) creation of shipping labels for posting of orders

(d) creation of cookies (see below)

(3) Cookies

What is a Cookie?

Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device. You can find more information about cookies at: allaboutcookies.org and youronlinechoices.eu for a video about cookies visit google.co.uk/goodtoknow/data-on-the-web/cookies

Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improve the user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests.

The cookies used on this website have been categorised based on the categories found in the ICC UK Cookie guide. A list of all the cookies used on this website by category is set out below.

Strictly necessary cookies - These cookies enable services you have specifically asked for.
These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies services you have asked for, like shopping baskets or e-billing, cannot be provided.
Performance cookies - These cookies collect anonymous information on the pages visited.
These cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.
Functionality cookies - These cookies remember choices you make to improve your experience.
These cookies allow the website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. For instance, a website may be able to provide you with local weather reports or traffic news by storing in a cookie the region in which you are currently located. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.
Remarketing cookies or advertising cookies - These cookies collect information about your browsing habits in order to make advertising relevant to you and your interests.
These cookies are used to deliver adverts more relevant to you and your interests, and are displayed on Google and its third partires. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.

Should you require further information, there are several useful sources, the details of which we have provided below:

How to opt out of Google's coiokies: http://bit.ly/1GHIIwu
A video explaing how cookies are used: google.co.uk/goodtoknow/data-on-the-web/cookie
More detailed information on cookies: allaboutcookies.org
A guide to behavioural advertising and online privacy: youronlinechoices.eu
Information on the ICC (UK) UK cookie guide: international-chamber.co.uk/our-expertise/digitaleconomy

Strictly necessary cookies

Cookie Name: PHPSESSID Duration: Session Provider: LiquidShop Category: 1,2,3

Purpose: This is an overall PHP session cookie that is used to preserve user data throughout their browsing 'session', used to link a user to things such as the contents of their shopping basket
What information it holds: Unique identifier that references server-side data related to the browsing session of the user
User Benefits: Allows for persistence of user data throughout browsing session. This enables the management of elements such as the contents of a shopping basket and whether a user is logged in or not

Performance cookies

Cookie Name: PHPSESSID Duration: Session Provider: LiquidShop Category: 1,2,3

Purpose: This is an overall PHP session cookie that is used to preserve user data throughout their browsing 'session', used to link a user to things such as the contents of their shopping basket
What information it holds: Unique identifier that references server-side data related to the browsing session of the user
User Benefits: Allows for persistence of user data throughout browsing session. This enables the management of elements such as the contents of a shopping basket and whether a user is logged in or not

Cookie Name: _utma Duration: Undefined Provider: Google Category: 2

Purpose: This cookie is typically written to the browser upon the first visit to your site from that web browser. If the cookie has been deleted by the browser operator, and the browser subsequently visits your site, a new __utma cookie is written with a different unique ID. This cookie is used to determine unique visitors to your site and it is updated with each page view. Additionally, this cookie is provided with a unique ID that Google
Analytics uses to ensure both the validity and accessibility of the cookie as an extra security measure.
What information it holds: Unique id identifying site and a number of timestamps related to current and previous visits to the site
User Benefits: No benefit to user but required by and set by Google Analytics

Cookie Name: _utmb Duration: 30 Minutes Provider: Google Category: 2

Purpose: This cookie is used to establish and continue a user session with your site. When a user views a page on your site, the Google Analytics code attempts to update this cookie. If it does not find the cookie, a new one is written and a new session is established. Each time a user visits a different page on your site, this cookie is updated to expire in 30 minutes, thus continuing a single session for as long as user activity continues within 30-minute intervals. This cookie expires when a user pauses on a page on your site for longer than 30 minutes.
What information it holds: Data used to identify the site being viewed and the number of pageviews
User Benefits: No benefit to user but required by and set by Google Analytics

Cookie Name: _utmc Duration: Undefined Provider: Google Category: 2

Purpose: This cookie is no longer used by the ga.js tracking code to determine session status.Historically, this cookie operated in conjunction with the __utmb cookie to determine whether or not to establish a new session for the user. For backwards compatibility purposes with sites still using the urchin.js tracking code, this cookie will continue to be written and will expire when the user exits the browser. However, if you are debugging your
site tracking and you use the ga.js tracking code, you should not interpret the existence of this cookie in relation to a new or expired session.
What information it holds: Data used to identify the site being viewed and the number of pageviews
User Benefits: No benefit to user but required by and set by Google Analytics

Cookie Name: _utmz Duration: 6 Months Provider: Google Category: 2

Purpose: This cookie stores the type of referral used by the visitor to reach your site, whether via a direct method, a referring link, a website search, or a campaign such as an ad or an email link. It is used to calculate search engine traffic, ad campaigns and page navigation within your own site. The cookie is updated with each page view to your site.
What information it holds: variety of data used to identify traffic source and how you entered the site. Could include things like keywords from google or PPC campaign information
User Benefits: No benefit to user but required by and set by Google Analytics

Functionality cookies

Cookie Name: PHPSESSID Duration: Session Provider: LiquidShop Category: 1,2,3

Cookie Name: affiliate Duration: 30 Days Provider: LiquidShop Category: 3

Purpose: Used to hide phone number on site when requested by 3rd party affiliates. Idea is that it prevents 'leakage' where an affiliate click leads to a phone conversion rather than a website conversion
What information it holds: Boolean value (true/false)
User Benefits: No benefit to user, benefit to affiliates only

Cookie Name: showmobile Duration: 1 Year Provider: LiquidShop Category: 3

Purpose: Used to determine whether the mobile friendly version of LiquidShop should be shown
What information it holds: Boolean value (true/false)
User Benefits: Users on predetermined mobile devices are shown a specific mobile version of the site. This cookie allows them to override this setting where they desire to see the desktop version of their site

Cookie Name: returnProducts Duration: 30 Days Provider: LiquidShop Category: 3

Purpose: Used to show a returning visitor the products they looked at last time they were on the site
What information it holds: JSON encoded values including product identifiers and session identification string
User Benefits: Shopping experience enhancement by reminding a user about products they viewed last time they were on the site

Cookie Name: returnCustomer Duration: 30 Days Provider: LiquidShop Category: 3

Purpose: Used to link a returning customer to their previous purchasing history to prompt for reviews and show products related to what they purchased
What information it holds: Encrypted string identifying user
User Benefits: Shopping experience enhancement by reminding a user about products related to products they have previously purchased and prompting for reviews about previous purchases although this benefits

Targeting cookies or advertising cookies

The LiquidShop system by default does not use targeted advertising cookies.

(4) Using your personal information

Personal information submitted to us via this website will be used for the purposes specified in this privacy policy or in relevant parts of the website.

We may use your personal information to:

[(a) administer the website;

[(b) send to you goods purchased via the website, and supply to you services purchased via the website;

[(c) send statements and invoices to you, and collect payments from you;

[(d) send you general (non-marketing) commercial communications;

[(e) send you email notifications which you have specifically requested;

All our website financial transactions are handled through our payment services provider, PayPal and SagePay. You can review the PayPal privacy policy at paypal.com and SagePay’s at http://sagepay.com/privacy_policy. We will share information with PayPal and SagePay only to the extent necessary for the purposes of processing payments you make via our website and dealing with queries relating to such payments.

(5) Security of your personal information

We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

We will store all the personal information you provide on our secure servers. We do not store any of your payment details on our servers. All electronic transactions you make to or receive from us will be encrypted using SSL technology.

You are responsible for keeping your password and user details confidential. We will not ask you for your password (except when you log in to the website).

We include your telephone number on the front of your parcel. This is to assist the Royal Mail if addresses are incomplete or hard to find, and is a requirement for international deliveries.

(6) Third party websites

Our website may contain links to other websites. We are not responsible for the privacy policies or practices of third party websites.

(7) Contact

If you have any questions about this privacy policy or our treatment of your personal information, please write to us by email to support@penheaven.co.uk

(8) Data controller

The data controller responsible in respect of the information collected on this website is the Managing Director.