Privacy notice - Snap store

Version - April 2018

This privacy notice tells you about the information we collect from you when you download and install and purchase snaps and software (“Software”) on Ubuntu Core and any compatible supported systems. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data.

Who are we?

We are Canonical Group Limited. Our address is 5th Floor Blue Fin Building, 110 Southwark Street, London, SE1 0SU. You can contact us by post at the above address or by email to dataprotection@canonical.com for the attention of “Legal”.

We are not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above.

What personal data do we collect?

When you purchase Software from us online, we ask you for your name, address, contact telephone number, your email address and credit card information.

Why do we collect this information?

Your information will be used by our third party payment provider to verify your credit card details for your purchase and for Canonical or our third party suppliers to process your order for the Software. We will also send you a receipt via email and we or a third party supplier may use your telephone number to contact you regarding your purchase.

We require this information in order to process your payment, provide you with Software and fulfil our contract with you.

What do we do with your information?

Your information is stored in our order processing system and may be processed outside of the European Economic Area.

Your credit card details are passed to a third-party payment processor who retains credit card details in the European Economic Area or where required, is certified to the EU-US Privacy Shield (which requires effective safeguards for your information). We do not retain your credit card information.

Our third-party payment processor is a company called Stripe who we use to process and confirm your payments. We share with them your name, address and credit card information only for payment purposes. We do not retain credit card data but our payment service providers do. For your safety, we have in place agreement between us to protect, safeguard your information and prohibit any sharing for any reasons whatsoever.

We will not use the information you provide to make any automated decisions that might affect you.

How long do we keep your information for?

Unless you create an account with us, we keep your order information for so long as reasonably required thereafter in accordance with our record retention policy. Your personal information associated with the order will then be removed.

Your rights over your information

By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate.

You can also ask us to give you a copy of the information and to stop using your information for a period of time if you believe we are not doing so lawfully.

To submit a request by email, post or telephone, please use the contact information provided above.

Your right to complain

If you have a complaint about our use of your information, you can contact the Information Commissioner’s Office via their website at ico.org.uk/concerns/ or write to them at:

  • Information Commissioner’s Office
  • Wycliffe House
  • Water Lane
  • Wilmslow
  • Cheshire
  • SK9 5AF