This Privacy Policy explains what personal information Twelve27 Souvenirs collects when you use our website, why we collect it, how we look after it, and what rights you have over it.
1. Who is responsible for your data
Twelve27 Souvenirs is responsible for the personal information collected through this website. We are based at C. Maria Montes 15, Sosúa, Puerto Plata, Dominican Republic. If you have any question about this policy or about how we use your information, please get in touch through our Contact page.
2. Information we collect
We only collect what we need. Depending on how you use the website, that may include:
Information you give us
- Contact and inquiry details — your name, email address, telephone number and the message you send when you submit our contact form or a product inquiry form.
- Product context — when you send a product inquiry, we record which product you were asking about, together with any quantity or other detail you provide, so we can answer you properly.
- Order details — if your inquiry becomes an order, the delivery address and other information needed to fulfil and invoice it.
- Wishlist items — the products you save, so your wishlist works on your next visit.
Information collected automatically
- Technical data — your IP address, browser type and version, device type, operating system and referring page.
- Usage data — the pages you visit, how long you spend on them, and the links you follow.
- Submission metadata — when you submit a form, we store the time of submission, the page it was sent from, your IP address and browser identifier. This helps us prevent spam and abuse of our forms.
We do not collect payment card details through this website. Payment is arranged separately after an order is confirmed.
3. Why we use your information
| Purpose | Basis |
|---|---|
| Replying to your contact or product inquiry, and providing quotations | To take steps at your request before entering a contract |
| Processing, fulfilling and invoicing a confirmed order | Performance of our contract with you |
| Sending you a confirmation that we received your inquiry | To take steps at your request; our legitimate interest in good service |
| Keeping our website secure and preventing spam and fraud | Our legitimate interest in protecting the website |
| Understanding how the website is used so we can improve it | Our legitimate interest, or your consent where required for cookies |
| Meeting accounting, tax and other legal obligations | Compliance with a legal obligation |
| Sending marketing messages, where you have asked for them | Your consent |
We do not sell your personal information, and we do not use it to make automated decisions that have a legal or similarly significant effect on you.
4. Marketing
We will only send you marketing messages if you have asked us to. You can withdraw your consent at any time by using the unsubscribe link in any message we send, or by contacting us. Withdrawing consent to marketing does not affect messages we send in reply to an inquiry or in connection with an order.
5. Cookies and similar technologies
Cookies are small files placed on your device. We use them to make the website work and to understand how it is used. The main categories are:
- Strictly necessary — needed for core functions such as security, form submission and remembering your wishlist. The website cannot work properly without these.
- Functional — remember preferences so the site behaves consistently between visits.
- Analytics — help us see which pages are popular and where visitors run into problems, in aggregate.
Some cookies are set by third parties whose services we use, such as our website platform, our wishlist feature, our search feature and embedded fonts. You can control or delete cookies through your browser settings; blocking strictly necessary cookies may stop parts of the website from working.
6. Who we share your information with
We share personal information only where we need to, and only with organisations that are required to protect it. That may include:
- Hosting and IT providers who run our website and store our data;
- Email delivery providers who send our notification and confirmation emails;
- Shipping and logistics partners where goods need to be delivered to you;
- Payment providers, where a payment is arranged for a confirmed order;
- Professional advisers such as accountants and lawyers, where necessary;
- Authorities and regulators, where we are legally required to disclose information.
We may also share information if our business is reorganised, sold or transferred, in which case it would remain protected by this policy.
7. International transfers
Some of our service providers operate outside the Dominican Republic. Where your information is transferred abroad, we take reasonable steps to ensure it continues to be protected to a comparable standard, including by using contractual safeguards with those providers.
8. How long we keep your information
We keep personal information only as long as we need it:
- Contact and product inquiries — normally up to 24 months from your last contact with us, so we can follow up and keep a record of what was quoted.
- Order and transaction records — for as long as required by applicable accounting and tax law.
- Technical logs and spam-prevention data — typically a short period, generally no more than 12 months.
- Marketing consents — until you withdraw your consent, plus a short record that you did so.
When information is no longer needed we delete it or anonymise it.
9. How we protect your information
We use appropriate technical and organisational measures to protect personal information, including access controls, encrypted connections, spam and abuse protection on our forms, and keeping our software up to date. No website can be completely secure, but we work to reduce risk and to respond quickly if something goes wrong.
10. Your rights
Subject to applicable law, you may ask us to:
- confirm what personal information we hold about you, and give you a copy;
- correct information that is inaccurate or incomplete;
- delete information we no longer have a valid reason to keep;
- restrict or object to how we use your information;
- transfer your information to another provider, where technically feasible;
- withdraw consent you previously gave.
To exercise any of these rights, contact us through our Contact page. We will respond as soon as we can, and normally within 30 days. We may need to verify your identity first. If you are not satisfied with our response, you may complain to the relevant data protection authority.
11. Children’s privacy
This website is not directed at children, and we do not knowingly collect personal information from children under 13. If you believe a child has given us their information, please contact us and we will delete it.
12. Third-party links
Our website links to other sites, including our social media profiles. This policy does not cover those sites, and we are not responsible for their privacy practices. Please read their own policies before giving them your information.
13. Changes to this policy
We may update this policy to reflect changes in how we work or in the law. The “Last updated” date at the top of this page shows when it last changed. Where a change is significant, we will take reasonable steps to bring it to your attention.
14. Contact us
To ask a question about this policy, or about how we handle your personal information, please use our Contact page. We reply during regular business hours (Monday to Friday, 8:00 a.m. to 5:00 p.m. ET).