GDPR

GDPR Compliance

At LewisSmith.co and DropshipUnlocked.com, we are committed to protecting your personal data and respecting your privacy. Our practices adhere to the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, ensuring transparency, fairness, and security in all data processing activities.

This policy outlines how we collect, handle, and store personal information in compliance with GDPR. It applies to individuals we interact with, including customers, affiliates, employees, business contacts, and visitors to our websites.

If you have any questions, you can contact us at [email protected].

Why This Policy Exists

This GDPR policy ensures:

LewisSmith.co and DropshipUnlocked.com comply with applicable data protection laws and follow best practices.

The rights of individuals, including customers, staff, affiliates, and partners, are protected.

Transparency about how personal data is stored, processed, and secured.

Protection against data breaches through robust security measures.

GDPR Principles

We adhere to the following principles as set out in GDPR to ensure personal data is:

Processed lawfully, fairly, and transparently.

Collected for specified, explicit, and legitimate purposes.

Adequate, relevant, and limited to what is necessary.

Accurate and kept up to date.

Retained only for as long as necessary.

Processed in line with the rights of data subjects.

Secured using appropriate technical and organisational measures.

Not transferred outside the European Economic Area (EEA) without adequate safeguards.

Focus on Privacy and Security

At LewisSmith.co, we view your data as one of the most valuable assets you entrust to us. We ensure:

Data is collected and processed only for the purpose it was provided.

Strict protocols are in place to safeguard personal information.

Regular security audits are conducted to ensure compliance with GDPR.

Lawful Basis for Processing

We process personal data based on the following lawful grounds:

Consent: When you actively agree to our terms during sign-up.

Contractual Necessity: When data is required to deliver our services.

Legitimate Interests: To improve our services and support your experience.

Legal Obligations: To comply with applicable laws and regulations.

Your Rights Under GDPR

Under GDPR, you have the following rights:

Access: Request a copy of the personal data we hold about you.

Correction: Request correction of inaccurate or incomplete data.

Erasure: Request deletion of your data (‘right to be forgotten’).

Restriction: Restrict processing of your data in certain circumstances.

Data Portability: Request a copy of your data in a structured, machine-readable format.

Objection: Object to the processing of your data for specific purposes.

Withdraw Consent: Revoke your consent where applicable.

To exercise any of these rights, please contact us at [email protected].

Data Collection and Use

We collect personal data to provide and enhance our services. Examples of data we may collect include:

Identity and Contact Information: Name, email, phone number, and address.

Payment Information: Details required to process payments securely.

Technical Data: IP addresses, browser types, and device information.

Usage Data: Interactions with our website, products, and services.

For more details, refer to our Privacy Policy.

Retention and Deletion of Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. You can request the deletion of your data at any time by contacting [email protected]. All deletion requests are processed promptly and securely.

Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

Encryption and pseudonymisation.

Regular security audits.

Secure data storage systems with controlled access.

Procedures to prevent unauthorised access, loss, or destruction of data.

Data Transfers Outside the EEA

We may transfer personal data outside the EEA. In such cases, we ensure:

Transfers are made to countries with adequate protection as determined by the European Commission.

Appropriate safeguards, such as standard contractual clauses, are in place.

Data Breach Notifications

While we take every precaution to protect your data, in the event of a data breach, we will:

Notify affected individuals promptly.

Report the incident to the relevant supervisory authority within 72 hours.

Providing Information

We ensure individuals are informed about:

How their data is being used.

The purposes and legal basis for processing.

Their rights and how to exercise them.

This information is detailed in our Privacy Policy and communicated when data is collected.

Contact Us

If you have any questions about this policy or how we handle your data, please contact us:

Email: [email protected]

Address: SRL Ecom Ltd, 124 City Road, London, EC1V 2NX

Phone: 02032866553