This Privacy Policy describes how restandrail (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal information when you visit or make a purchase from www.restandrail.com (the “Site”).
This policy is designed to comply with applicable data protection laws, including the European Union General Data Protection Regulation (EU GDPR) and the UK General Data Protection Regulation (UK GDPR).
—
1. DATA CONTROLLER
For the purposes of applicable data protection legislation, the data controller responsible for your personal information is:
Brand / Data Controller: restandrail
Official Website: www.restandrail.com
Contact Email: fraud@restandrail.com
—
2. PERSONAL INFORMATION WE COLLECT
When you visit or interact with the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases of bathroom accessories.
A. Information Automatically Collected (Device Information)
When you access the Site, we automatically collect technical details about your device and browsing session, including:
IP address, browser type, and language settings
Time zone and general location data
Operating system and device attributes
Usage data, such as pages viewed, referral URLs, and interactions on the Site
B. Information You Provide directly (Order & Contact Information)
When you place an order or attempt to place an order, contact us, or create an account, we collect information necessary to fulfill your request, including:
Full name
Billing address and shipping address
Email address (e.g., fraud@restandrail.com for communication)
Phone number
Order details and transaction history
—
3. HOW WE USE YOUR PERSONAL INFORMATION
We process your personal data under the following legal bases pursuant to Article 6 of the GDPR:
Performance of a Contract: To process orders, manage billing, arrange shipping, fulfill delivery, and provide customer support.
Legal Obligation: To comply with mandatory statutory, tax, accounting, and anti-fraud regulations.
Legitimate Interests: To maintain site operational security, improve user experience, optimize site performance, and protect our business against fraudulent transactions.
Consent: Where required by law, for direct marketing communications or non-essential analytical cookies (which you may withdraw at any time).
—
4. PAYMENT PROCESSING AND DATA SHARING
We strictly limit access to your personal information to third parties essential for business operations.
Payment Processing
All payment transactions on www.restandrail.com are processed securely by Stripe, our third-party payment processing provider.
Your payment card details are collected and processed directly by Stripe pursuant to their PCI-DSS compliant standards and privacy policy.
We do not store, view, or retain your full credit card details on our servers.
Other Service Providers
We share necessary personal data with reputable service providers bound by strict confidentiality and data protection obligations, including:
Logistics and courier services for order delivery.
IT and web hosting infrastructure providers.
We do not sell, rent, or trade your personal information to third parties for commercial or marketing purposes.
—
5. INTERNATIONAL DATA TRANSFERS
As we operate internationally, personal data collected from individuals in the European Union or United Kingdom may be transferred, stored, or processed outside the European Economic Area (EEA) or UK.
Where international transfers occur, we implement appropriate safeguards in compliance with legal requirements, such as standard contractual clauses approved by the European Commission, to maintain an adequate level of data protection.
—
6. DATA RETENTION
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or to satisfy legal, statutory, accounting, or reporting obligations.
Order Records & Transaction Data: Retained for a period required by applicable commercial and tax tax laws (typically 6 to 10 years following completion of the transaction).
Communication & Support Records: Retained for up to 3 years from the last interaction to resolve potential inquiries or legal claims.
Browsing & Technical Logs: Retained for a limited duration necessary for security audit purposes and analytical reviews.
Upon expiry of applicable retention periods, data is permanently deleted or anonymised.
—
7. DATA SECURITY
We implement technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, or disclosure. These measures include encryption protocols (SSL/TLS) for data transmission and restricted access controls.
While we employ rigorous industry practices to safeguard your information, no method of transmission over the Internet or method of electronic storage can be declared completely exempt from risk.
—
8. YOUR DATA PROTECTION RIGHTS (EEA & UK RESIDENTS)
If you are a resident of the European Union, European Economic Area, or United Kingdom, you possess specific rights regarding your personal data under the GDPR:
Right of Access: The right to request copies of your personal data held by us.
Right to Rectification: The right to request correction of inaccurate or incomplete information.
Right to Erasure (“Right to be Forgotten”): The right to request deletion of your personal data, subject to lawful exceptions (such as mandatory tax record retention).
Right to Restrict Processing: The right to request limitation of data processing under certain conditions.
Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: The right to object to our processing of your personal data based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at fraud@restandrail.com.
You also have the right to lodge a complaint with your local Data Protection Authority in your EU/EEA member state or the UK Information Commissioner’s Office (ICO).
—
9. COOKIES AND TRACKING TECHNOLOGIES
The Site utilizes cookies and similar tracking technologies to ensure basic functionality, store preferences, and analyze site traffic. You can manage or block cookies through your individual browser settings at any time.
—
10. CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or regulatory guidance. Updated versions will be published directly on www.restandrail.com with a revised “Last Updated” date.
—
11. CONTACT INFORMATION
For questions, requests, or concerns regarding this Privacy Policy or your personal data, please reach out to us:
Brand: restandrail
Email: fraud@restandrail.com
* Website: www.restandrail.com