Privacy Policy

1. Who We Are

 

Operator: Sonak Media Ltd Trading as PoshPinnacle
Registered Address: Sonak Media Ltd, C/O Your E-commerce Accountant, The Keep Creech Castle, Taunton, TA1 2DX, United Kingdom
Email: info@sonakmedia.com or support@poshpinnacle.com
Phone: +44 7457408836

About Us: PoshPinnacle is an e-commerce platform hosted on Shopify, which provides the technology to sell our products securely.

 

 

2. Our Warehouse Locations

 

To ensure fast delivery, we use a global warehouse network. Your order is automatically routed to the nearest location:

 

(a) Australia: Sydney

(b) Germany: Salzburg

(c) Italy: Beati, Como, Florence, Genova, Giuseppe, Milan, Milano, Piacenza, Rome, Modena

(d) Sweden: Jönköping (Bankeryd), Jönköping, Stockholm

(e) Spain: Alicante

(f) USA: Florida, Minnesota

 

 

3. Data We Collect

 

We collect the following information to process orders and improve your experience:

a. Identifiers

  • Name, email, phone number, shipping/billing address – Required for order fulfilment.

b. Payment Information

Credit/debit card details – Processed securely via Shopify Payments and PayPal (we never store raw card data).

- PCI-DSS Explained: The Payment Card Industry Data Security Standard ensures your payment data is encrypted and handled securely.

c. Device and Behavioral Data

(a) IP address, browser type, time zone – Collected via cookies and analytics tools (e.g., Google Analytics).

(b) Browsing history – Helps personalise product recommendations.

d. Account Information

Username, password, preferences – Stored for registered users.

e. Customer Support Records

Emails, chat logs, and phone calls – Used to resolve issues and improve service.

Legal Basis: We process data to fulfil orders (contractual necessity), improve our services (legitimate interest), or with your consent (e.g., marketing emails).

 

 

4. How We Use Your Data

 

Your information is used to:

(a) Process orders (payment, shipping, returns).

(b) Prevent fraud (e.g., screening high-risk transactions).

(c) Improve our website (via analytics on user behavior).

(d) Send marketing emails (only with your consent).

 

 

5. Third-Party Sharing

 

We share data only with trusted partners:

Category

Partners

Purpose

Data Shared

Payment Processors

Shopify Payments, PayPal

Secure payment processing

Card details (encrypted)

Shipping Carriers

FedEx, UPS, DHL

Deliver orders and provide tracking

Name, address, phone number

Analytics

Google Analytics

Improve website performance

Anonymised browsing data

Customer Support

Tidio

Respond to enquiries

Order details, contact info

 

Note: Third-party providers (e.g., PayPal) operate under their own privacy policies. For example, US-based companies may comply with laws like the Patriot Act.

 

 

6. Data Security

 

We protect your data through:

(a) SSL/TLS Encryption: Secures data transmitted between your browser and our server.

(b) PCI-DSS Compliance: Ensures payment data is processed securely.

(c) Access Controls: Only authorised staff can view personal data.

 

 

7. Retention Periods

 

(a) Orders: 7 years (for tax/legal compliance).

(b) Accounts: Deleted after 2 years of inactivity.

(c) Marketing Data: Removed upon opt-out or after 2 years.

 

 

8. Your Rights (GDPR Compliance)

 

Under the General Data Protection Regulation (GDPR), you can:

(a) Access your data.

(b) Correct inaccuracies.

(c) Delete your data (unless legally required to retain).

(d) Withdraw consent (e.g., unsubscribe from emails).

 

Request Method: Email support@poshpinnacle.com with "Data Request" in the subject line.

 

 

9. Cookies and Tracking

 

We use:

(a) Essential Cookies: Required for checkout (e.g., cart functionality).

(b) Analytics Cookies: Track site usage (opt-out via Google's tool).

(c) Advertising Cookies: For personalised ads (enabled only with consent).

 

Do Not Track (DNT): We do not respond to DNT browser signals.

 

 

10. International Data Transfers

 

Data may be transferred to:

(a) Shopify Payments (US): Certified under the EU-US Data Privacy Framework.

(b) DHL (Germany): Complies with GDPR.

 

Safeguards (e.g., Standard Contractual Clauses) protect cross-border transfers.

 

 

11. Children's Privacy

 

Our services are not for users under 18. We delete any accidentally collected minor data upon request.

 

 

12. Automated Decisions

 

We do not use fully automated systems (e.g., AI profiling) for order approvals.

 

 

13. Third-Party Links

 

Links to external sites (e.g., partner brands) are not governed by this policy.

 

 

14. Data Breach Response

 

If a breach occurs, we will:

1. Notify affected users within 72 hours.

2. Report to the UK Information Commissioner's Office (ICO).

 

 

15. Updates & Contact

 

Policy Changes: Posted on our website; major updates emailed.

Questions? Email support@poshpinnacle.com