Privacy Policy

Commerce 360 respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Commerce 360 collects, uses, stores and protects personal information when you visit commerce360.uk, contact us, make an enquiry or work with us.

1. Who we are

Commerce 360 is an independent ecommerce, merchandising and omnichannel consultancy.

For the purposes of UK data protection law, Commerce 360 is the data controller for the personal information described in this Privacy Policy.

If you have any questions about this policy or how your personal information is handled, contact:

Email: hello@commerce360.uk
Website: commerce360.uk

2. Information we may collect

The personal information we collect depends on how you interact with Commerce 360.

Information you provide directly

When you contact us, complete a website form or discuss a potential engagement, we may collect information such as:

• Your name
• Business email address
• Telephone number
• Company or organisation
• Job title
• Information contained within your enquiry
• Information about your business requirements or commercial challenges
• Correspondence between you and Commerce 360
• Any other information you choose to provide

Please do not provide sensitive personal information through the website enquiry form unless it is genuinely necessary.

Information collected automatically

When you use the Commerce 360 website, certain technical information may be collected automatically, depending on the website technologies and cookie preferences in use.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Approximate geographic region
• Pages visited
• Time spent on pages
• Referring website
• Website interactions
• Date and time of visits

Where non-essential cookies or similar technologies require consent, they will only be used in accordance with your cookie preferences.

Further information is available in our Cookie Policy.

3. How we use your information

Commerce 360 may use personal information to:

Respond to enquiries

To respond when you contact us, request information or discuss a potential project.

Provide consultancy services

To manage and deliver agreed consultancy, advisory or commercial services.

Prepare proposals

To understand your business requirements and prepare potential scopes of work, proposals or recommendations.

Manage client relationships

To communicate with clients, suppliers, partners and professional contacts.

Operate the website

To maintain, secure, troubleshoot and improve the performance of commerce360.uk.

Understand website usage

Where appropriate and subject to cookie requirements, we may use analytics information to understand how visitors use the website and improve its content and usability.

Maintain business records

To maintain appropriate financial, contractual, operational and administrative records.

Protect Commerce 360

To detect or prevent fraud, misuse, security incidents or other unlawful activity.

Meet legal obligations

Where we are required to retain or disclose information to comply with applicable law, regulation, taxation, accounting requirements or legal proceedings.

Business-to-business communications

Where permitted by law, Commerce 360 may contact relevant business contacts about services, insights or matters we reasonably believe may be relevant to their professional role.

You can ask us to stop marketing communications at any time.

4. Our lawful bases for using personal information

Under UK data protection law, Commerce 360 must have a lawful basis for using personal information.

Depending on the circumstances, we may rely on the following bases.

Contract

We may process information where it is necessary to:

• Take steps at your request before entering into a contract
• Provide agreed consultancy services
• Manage an existing client engagement
• Fulfil contractual obligations

Legitimate interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

These interests may include:

• Responding to business enquiries
• Developing client relationships
• Managing prospective client relationships
• Improving our services
• Maintaining website security
• Understanding the effectiveness of our website
• Managing normal business-to-business communications
• Protecting the legitimate commercial interests of Commerce 360

Where Commerce 360 relies on legitimate interests, we consider the purpose of the processing, whether the use of the information is necessary and the potential impact on the individual concerned.

Consent

Where required, we may rely on your consent, particularly for certain:

• Cookies
• Analytics technologies
• Electronic marketing activities

Where processing is based on consent, you can withdraw your consent at any time.

Legal obligation

We may process information where necessary to comply with legal, regulatory, accounting or taxation requirements.

5. Website enquiry forms

When you submit an enquiry through commerce360.uk, the information you provide is used to:

• Receive and review your enquiry
• Respond to you
• Understand your business requirement
• Determine whether Commerce 360 may be able to assist
• Maintain an appropriate record of the conversation

Submitting an enquiry does not automatically subscribe you to marketing communications.

Website forms may use technical anti-spam measures designed to identify automated or fraudulent submissions.

6. Email communications

If you contact Commerce 360 by email, we may retain your message, contact information and subsequent correspondence.

Email communications may be processed using third-party email, hosting and infrastructure providers acting on behalf of Commerce 360.

We take reasonable steps to use reputable service providers and appropriate security measures.

Please remember that no method of transmitting information over the internet is completely secure.

7. Marketing communications

Commerce 360 does not intend to send indiscriminate mass marketing communications.

We may occasionally communicate with clients, former clients, prospective clients or relevant professional contacts where:

• You have asked to hear from us;
• The communication relates to an existing relationship; or
• There is another lawful basis permitting the communication.

You can ask Commerce 360 to stop sending marketing communications at any time by:

• Using an unsubscribe mechanism where provided; or
• Emailing hello@commerce360.uk

Your right to object to direct marketing will be respected.

8. Cookies and analytics

Commerce360.uk may use cookies and similar technologies.

Cookies can be used for purposes including:

• Website functionality
• Security
• Remembering preferences
• Measuring website usage
• Understanding visitor behaviour
• Improving website performance

Some cookies are necessary for the website to function and do not normally require consent.

Where consent is legally required for analytics, advertising or other non-essential technologies, these technologies should not be activated until the appropriate consent has been obtained.

Please see our Cookie Policy for further information.

9. Who we may share information with

Commerce 360 does not sell personal information.

We may share limited personal information with trusted organisations where necessary to operate the business or provide our services.

These may include:

• Website hosting and technology providers
• Email and communications providers
• Domain and infrastructure providers
• Website form and email-delivery providers
• Cloud storage providers
• Analytics providers
• Accountants and financial advisers
• Legal and professional advisers
• IT and cybersecurity providers
• Contractors or specialist consultants working on an authorised Commerce 360 engagement

These organisations should only receive the information reasonably necessary for their role.

Where a third-party provider processes information on our behalf, appropriate contractual and organisational safeguards should be used.

We may also disclose information where required by law, a regulator, court order or other lawful authority.

10. International data transfers

Some technology providers used by Commerce 360 may process or store information outside the United Kingdom.

Where personal information is transferred internationally, Commerce 360 will take reasonable steps to ensure that appropriate safeguards required by applicable UK data protection law are in place.

Depending on the destination and circumstances, these may include:

• UK adequacy regulations
• Approved contractual safeguards
• The UK International Data Transfer Agreement
• The UK Addendum to approved contractual clauses
• Other legally recognised transfer mechanisms

11. How long we keep information

Commerce 360 does not keep personal information indefinitely.

Information is retained only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and contractual requirements.

Typical retention considerations include:

General enquiries

Enquiry and prospective client correspondence may normally be retained for up to 24 months where there is a reasonable possibility of a future business relationship.

Client information

Information connected with a client engagement may be retained for the duration of the engagement and afterwards where required for legal, contractual, tax, accounting or legitimate business purposes.

Certain business and financial records may need to be retained for approximately six years.

Marketing information

Marketing contact information may be retained until you unsubscribe, object or the information is no longer reasonably required.

Website analytics

Analytics retention periods depend on the analytics technologies being used and the configuration of those services.

Information may be deleted earlier where there is no longer a legitimate reason to retain it.

12. How we protect information

Commerce 360 takes reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access
• Accidental loss
• Misuse
• Alteration
• Disclosure
• Destruction

Measures may include:

• Password-protected systems
• Access controls
• Multi-factor authentication where available
• Secure cloud services
• Software updates
• Appropriate account permissions
• Secure communications and storage practices

However, no internet or electronic storage system can be guaranteed to be completely secure.

13. Your data protection rights

Depending on the circumstances, UK data protection law may give you rights including:

Right of access

You may ask for confirmation of whether Commerce 360 holds personal information about you and request a copy.

Right to rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you may ask us to delete personal information.

Right to restriction

In certain circumstances, you may ask us to restrict how information is used.

Right to object

You may object to certain types of processing, including processing based on legitimate interests.

You have an absolute right to object to the use of your personal information for direct marketing.

Right to data portability

In certain circumstances, you may be entitled to receive information you provided in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing undertaken before consent was withdrawn.

Not every right applies in every situation.

To exercise a right or ask a question about your personal information, email:

hello@commerce360.uk

We may need to confirm your identity before responding to a request.

14. Automated decision-making

Commerce 360 does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.

If this changes materially, this Privacy Policy will be updated.

15. Links to other websites

Commerce360.uk may contain links to third-party websites or services.

Commerce 360 is not responsible for the privacy practices, security or content of those third-party websites.

You should review the privacy policies of external websites before providing them with personal information.

16. Children's privacy

Commerce 360 provides business consultancy services and the website is not intended for children.

We do not knowingly seek to collect personal information from children through commerce360.uk.

17. Changes to this Privacy Policy

Commerce 360 may update this Privacy Policy periodically to reflect:

• Changes to the website
• Changes to our services
• New technology
• Changes to the way information is processed
• Changes in legal or regulatory requirements

The latest version will always be published on commerce360.uk.

Where a change materially affects how personal information is used, we will take reasonable steps to bring the change to the attention of affected individuals where required.

18. Contact Commerce 360

If you have questions about this Privacy Policy, how Commerce 360 uses your personal information or wish to exercise a data protection right, please contact:

Commerce 360

Email: hello@commerce360.uk
Website: commerce360.uk

19. Complaints

If you have concerns about how Commerce 360 has handled your personal information, please contact us first so that we have an opportunity to address the issue.

You also have the right to raise a concern with the UK's data protection regulator:

Information Commissioner's Office (ICO)

Further information is available at ico.org.uk.