Privacy Policy

Privacy Policy

Welcome to the xBubble Invitations website located at xBubble.net. We believe that the privacy and security of your information and data is very important. This Privacy Policy explains the type of information we collect from users of the Website, how that Information is used, how the Information may be shared with other parties, and what controls our users have regarding their Information. We encourage you to read this Policy carefully. Any updates or modifications to this Policy will be posted to our website on this page. By using or accessing the Website, you signify that you have read, understand and agree to be bound by this Policy. This Policy is effective as of November 9, 2019 and has not been modified since that date.

Who We Are


xBubble
https://xBubble.net/

What personal data we collect


For purposes of this policy, “personal information” means any information that could identify you as an individual through information that is unique to you. This type of information is often referred to a “unique identifier,” which is often a numeric or alphanumeric string of characters that can be used to uniquely identify an individual. Obvious unique identifiers are name, address, and phone number. Other unique identifiers include your email address, a website URL, billing information, Internet Protocol (IP) addresses, or any other data that could reasonably be linked to your identity.

Unique identifiers can be used for various purposes, including remembering your browsing preferences, sending you a periodic newsletter, collecting information about your browsing history, as well as determining whether emails sent to you by us were received and/or opened.

Unique identifiers are sometimes stored in “cookies” to help websites display certain content in your browser.

Personal Data Collected


When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:


Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.


Hosting and content delivery network


Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our instructions. All data collected on our website is processed on Shopify's servers. Within the scope of the aforementioned Shopify services, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. for further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.
For more information on Shopify's privacy policy, please visit the following website: https://www.shopify.com/legal/privacy
Further processing on servers other than the aforementioned servers of Shopify will only take place within the scope of the following information.


Use of Payment Service Providers

Apple Pay
If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your terminal device operated with iOS, watchOS or macOS by debiting a payment card deposited with "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. In order to release a payment, it is therefore necessary to enter a code previously defined by you and to verify it using the "Face ID" or "Touch ID" function of your terminal.
For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website from which the purchase was made can access the payment information. After the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment.
If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymised transaction data, including the approximate amount of the purchase, the approximate date and time and whether the transaction was completed successfully. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on iPhone or the Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate through an encrypted channel on Apple's servers. Apple does not process or store this information in any format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone preferences. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac".
For more information about Apple Pay privacy, please visit the following web address: https://support.apple.com/en-gb/HT203027


Paypal
When you pay via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 (1) point b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies based on PayPal's legitimate interest in determining your solvency pursuant to Art. 6 (1) point f GDPR. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including the credit agencies used, please refer to PayPal's data protection declaration at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.


Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europe House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment is processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will forward the information you have provided in connection with your order (name, address, account number, sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point f GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary. You can view Shopify Payments' privacy policy at: https://www.shopify.com/legal/privacy.
You can view more information about the privacy policy of Stripe Payments Europe Ltd. at: https://stripe.com/en-de/privacy.

 

Analytics


Our site is utilizing Google Analytics tracking to assist with our marketing efforts. To learn more about Google’s privacy policies click here.


California Residents


The California Online Privacy Protection Act (CalOPPA) requires California companies to provide an opportunity for California residents to opt-out or unsubscribe from having personal information used by third parties (such as advertisers or affiliated companies) for direct marketing purposes.

This Company is NOT a California based business and therefore does not honor behavioral advertising opt-out or “do not track” mechanisms. This includes general web browser “Do Not Track” settings and signals.

If you are a California resident you may contact us to exercise your disclosure choice options. See our contact information, below.

EU Privacy Rights


If you are in the European Union (EU), the General Data Protection Regulation grants you certain rights under the law. In particular, the right to access, correct, or delete the personal data we hold about you. We will retain your data for the length of time you engage with our services until you request deletion of such personal data.

Upon request, we will grant individuals reasonable access to personal data that it holds about them. In addition, we will take reasonable steps to permit individuals to correct, amend, or delete information it holds about them. We also rely upon each individual to assist in providing accurate updates of his or her personal data. In order to access, correct, amend, or delete the personal data we hold about an individual, the individual should contact.

If you have a comment, question, or complaint about how we are handling your personal data, we hope that you contact us in order to allow us to resolve the matter. In addition, individuals located in the EU may submit a complaint regarding the processing of their personal data to the EU data protection authorities (DPAs). The following link may assist you in finding the appropriate DPA: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.


Minors

This website complies with the Children’s Online Privacy Protection Act of 1998 (COPPA). COPPA and its accompanying regulations protect the privacy of children using the Internet.

This website is intended for persons eighteen (18) years of age or older. Per COPPA rules, anyone under the age of thirteen (13) must seek the permission of a parent or guardian before using this website.

No one under the age of eighteen (18), however, should visit this website.

Furthermore, this website will not knowingly contact or collect personal information from anyone under 18 and does not intend to solicit information of any kind from persons under the age of 18.


How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.


What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.


Where we send your data

Visitor comments may be checked through an automated spam detection service.

Changes to this Privacy Policy


We reserve the right to change this Policy at any time. In the event we make material changes to this Policy, such policy will be re-posted in the “Privacy” section of our Website with the date such modifications were made indicated on the top of the page. Therefore, please review this Policy from time to time so that you are aware when any changes are made to this Policy. If you have any questions about the changes that were implemented, please contact us and include “Information Regarding Updated Policy” in the subject line. In any event, your continued use of the Website after such change constitutes your acceptance of any such change(s), and if you do not accept any changes, you may choose not to use the Website or opt out by sending us an appropriate notice.