This Policy applies as between you, the User of this Website and Innovation 1st, the owner and provider of this Website. This Policy applies to our use of any and all data collected by us in relation to your use of the Website and any Services or Systems therein.

This privacy policy covers our use of your personal information which is collected through or in connection with this web application. For the purposes of this policy, "this application" means the Extreme E Store web application. By submitting your personal data to us, you will be treated as having given your permission for disclosures referred to in this policy.

Innovation 1st, a limited company registered in England and Wales with registered number 06903748, VAT registration number GB 978301692 and registered office at Westminster House, First Floor, Kew Road, Richmond, TW9 2ND England, controls the personal data collected through or in connection with our online store. Innovation 1^st uses Shopify to process online store payments.

Where a Data Subject is located in the European Economic Area, that Data Subject’s Personal Data will be processed by Shopify’s Irish affiliate, Shopify International Ltd. As part of providing the Services, this Personal Data may be transferred to other regions, including to Canada and the United States. Such transfers will be completed in compliance with relevant Data Protection Legislation.

When Shopify Processes Personal Data in the course of providing the Services, Shopify will:

- Process the Personal Data as a Data Processor, only for the purpose of providing the Services in accordance with documented instructions from you (provided that such instructions are commensurate with the functionalities of the Services), and as may subsequently be agreed to by you. If Shopify is required by law to Process the Personal Data for any other purpose, Shopify will provide you with prior notice of this requirement, unless Shopify is prohibited by law from providing such notice;

- Notify you if, in Shopify’s opinion, your instruction for the processing of Personal Data infringes applicable Data Protection Legislation

- Notify you promptly, to the extent permitted by law, upon receiving an inquiry or complaint from a Data Subject or Supervisory Authority relating to Shopify’s Processing of the Personal Data;

- Implement and maintain appropriate technical and organizational measures to protect the Personal Data against unauthorized or unlawful processing and against accidental loss, destruction, damage, theft, alteration or disclosure. These measures shall be appropriate to the harm which might result from any unauthorized or unlawful processing, accidental loss, destruction, damage or theft of Personal Data and appropriate to the nature of the Personal Data which is to be protected;

- Provide you, upon request, with up-to-date attestations, reports or extracts thereof where available from a source charged with auditing Shopify’s data protection practices (e.g. external auditors, internal audit, data protection auditors), or suitable certifications, to enable you to assess compliance with the terms of this Addendum;

- Notify you promptly upon becoming aware of and confirming any accidental, unauthorized, or unlawful processing of, disclosure of, or access to the Personal Data;

- Ensure that its personnel who access the Personal Data are subject to confidentiality obligations that restrict their ability to disclose the Customer Personal Data; and

- Upon termination of the Agreement, Shopify will promptly initiate its purge process to delete or anonymize the Personal Data. If you request a copy of such Personal Data within 60 days of termination, Shopify will provide you with a copy of such Personal Data.

 

We will obtain your consent to collect, use or disclose personal information. Consent can be provided electronically or it can be implied where the purpose for collecting using or disclosing your personal information would be considered obvious and you voluntarily provide personal information for that purpose. We will give you notice and reasonable opportunity to opt-in to having your personal information used.

The only entry of personal (outside of that for a purchase) is the submission of your email address  via e-newsletter sign up field at the bottom of the page (optional). This email address information is stored in Mailchimp and no information is stored on the web server.

When making a purchase via the online store, your payment and delivery information will be collected or stored by Innovation 1^st and Shopify and will not be used or stored by Extreme E directly.

We may disclose information about you to (a) any of our employees, agents or contractors (b) any person to whom we propose to transfer any of our rights and/or duties under any agreement we have with you (d) as set out above and below.

As part of the services offered to you through this application, the information you provide to us may be transferred to countries outside of the European Economic Area ("EEA") which may not have similar data protection laws to the EEA. If we transfer your information outside of the EEA, we will take steps to ensure that your privacy rights continue to be protected. In addition, if you use our services while you are outside the EEA, your information may be transferred outside the EEA in order to provide you with those services.

Except as set out in this privacy policy, we will not disclose any personally identifiable information without your permission unless we are legally entitled or required to do so or if we believe that such action is necessary to protect and/or defend our rights, property or personal safety and those of our users/customers etc.

This application and the services offered on/through it may be transferred to one of our affiliated companies in the future either as part of a group restructuring or otherwise. We may therefore transfer your personal information to any affiliated company that in the future owns or operates this application or the services available on/through it but such company shall use your personal information in accordance with this privacy policy at all times.

In the course of receiving any purchase services, you acknowledge and agree that Shopify may use Subprocessors to Process the Personal Data. Shopify’s use of any specific Subprocessor to process the Personal Data must be in compliance with Data Protection Legislation and must be governed by a contract between Shopify and Subprocessor.

We may store cookies on your computer when you look at this application. We are able to read these cookies for information purposes when you revisit this application. The type of information we collect as a result of a cookie being accepted by you is specific to your PC and includes the IP address, the date and time the PC visited this application, what parts of this application were looked at and whether the web pages requested were delivered successfully. This information is anonymous; it represents a computer rather than a person. The full details of the information collected can be seen on our cookie policy page.

We use the cookie information to improve our knowledge of the use of this application and to enable us to be able to ascertain whether it is operating at an optimal level. You can erase or block this information by changing the settings on your computer (please refer to your help screens or manuals). If you do erase or block this information you may not be able to utilise some features of this application.

Extreme E and their affiliates are committed to meet the requirements of the European Union’s Anti-Spam Legislation, including through any commercial electronic messages sent by the Extreme E and their affiliates to you and/or your friend. You may “Unsubscribe” of receiving such any applicable communications from Extreme E and their affiliates at any time and your electronic address will be removed from our databases.

Extreme E and their affiliates are highly committed to protecting the online privacy of children all countries.

Children under a certain age are not permitted to submit their personal information to Extreme E, or sign up to our mailing lists or competitions. The minimum age of personal data consent is 13 years for all countries, with the following exceptions:

• Austria-14;
• Finland- 15;
• France- 16;
• Germany- 16;
• Hungary- 16;
• Lithuania- 16;
• Luxembourg- 16;
• Netherlands- 16;
• Slovakia- 16.

 

We aim to keep our information about you as accurate as possible. If you would like to review or change the details you have supplied us with, please contact us at extreme-e@innovation1st.com.

Extreme E will retain your personal information only as long as necessary to fulfil the identified purposes or a legal or business purpose in accordance with this Privacy Policy. We may, instead of destroying or erasing your personal information, make it anonymous such that it cannot be associated with or tracked back to you. In most cases your data will be deleted 6 years after your last correspondence with us.

We have implemented technology and policies with the objective of protecting your privacy from unauthorised access and improper use and will update these measures as new technology becomes available, as appropriate. Your personal information will not be released to the public domain.

Data protection legislation also provides you with certain other rights. These are not always absolute rights and must be considered in the wider scope of the legislation. These rights are:

• Right to erasure, also known as the right to be forgotten. The broad principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing. In some circumstances this is not an absolute right;


• Right to restrict processing. You have the right to ‘block’ or suppress processing of personal data. This is not an absolute right and will depend on the circumstances and any other legal/statutory obligations Extreme E may have;


• Right to data portability;


• Right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);


• Rights related to automated decision-making including profiling.

You may withdraw at any time your consent to our use and disclosure of certain personal information by notifying us in writing through email at extreme-e@innovation1st.com. Please note that your withdrawal request may take up to 30 days to implement. Also note that withdrawing your consent may preclude us from providing you with certain information or may prevent your use of certain features and functionalities of this Website.

 

If you think your data has been misused or not kept secure by Exreme E, you should contact us at extreme-e@innovation1st.com.

If you’re unhappy with our response or if you need any advice you should contact the Information Commissioner’s Office (ICO): gov.uk/data-protection/make-a-complaint or ico.org.uk/

 

From time to time we may make changes to this privacy policy. If we make any substantial changes to this privacy policy and the way in which we use your personal data we will post these changes on this page and will do our best to notify you of any significant changes. Please check our privacy policy on a regular basis.