General Data Protection Regulation (GDPR)

As part of the GDPR rule changes that come into force on 25^th May 2018 we would like to clarify our position regarding the data we retain for you and exactly what we do with that data. When you create an account on any of our stores at www.keekaboo.co.uk or www.keekmerch.com we require that you provide us with your name, email address, shipping address and a telephone contact number. In addition to the data you save to any of our stores your public IP address is also retained for security purposes.

What we do with your information when you place an order
When you place an order your information is automatically passed to either Stripe or PayPal depending on which option you select to make your payment. Both of these companies have their own GDPR policies which you can view using the following links:
https://stripe.com/gb/guides/general-data-protection-regulation
https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev

We do not store or have any access to your payment card details at any point during your transaction. In rare circumstances customers can choose to make a payment over the phone - we do not store your payment card information in any form.

Keekaboo are fully compliant with the Payment Card Industry Data Security Standard (PCI DSS) – you can find more information on this by using the following link:
https://www.pcisecuritystandards.org/

When you place an order that requires shipping your information is automatically passed to Royal Mail. Royal Mail have their own GDPR policy which you can view using the following link:
https://www.royalmail.com/gdpr

What we do with your information after your order has been placed
The information you provide us with and also details of previous orders are stored on encrypted secure servers. We need to retain that information to allow us to keep your account open, and also so you can view the information we have stored for your account. We have access to the information we have stored for you except for your user password which is encrypted separately – we do not have access to your chosen user password at any stage.

You can request to have your account deleted and all of your personal information deleted from our servers at any time by emailing us at gdpr@keekaboo.co.uk.