This Privacy Policy describes how xxx, Inc. and its subsidiaries and affiliates (“xxx,” “we,” “us,” and/or “our”) handle personal data we collect online (through our websites) and offline (through customer support channels, our retail locations, and in-person promotional activities). We call all of these the “Services.” This Privacy Policy explains the types of personal data we collect and process, how we may use and share the data, and the choices that are available to you with respect to our handling of your personal data.
Information We Collect We collect personal data from you when you provide it to us directly and through your use of the Site. This information may include:
Information you provide to us when you use our Site (e.g., your name, contact details, gender, product reviews, and any information which you add to your account profile);
Transaction and billing information, if you make any purchases from us or using our Site (e.g., credit/debit card details and delivery information);
Records of your interactions with us (e.g., if you contact our customer service team, interact with us on social media);
Information you provide us when you enter a competition or participate in a survey;
Information collected automatically, using cookies and other tracking technologies (e.g., which pages you viewed and whether you clicked on a link in one of our email updates). We may also collect information about the device you use to access our Site;
Other information necessary to provide the Site, for example, we may access your location if you give us your consent.
If you also shop in one of our stores, we may combine information you give us in-store (e.g., if you make a purchase or join our mailing list in-store) with the information above.
Information We Collect by Automated Means When you visit our sites, interact with our communications, or visit our stores, we collect certain information automatically. To collect this information, we may use cookies, web beacons, and similar technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as a pixel tag or clear GIF, is used to transmit information back to a web server. We may also collect information about your online activities over time and across third-party websites. The information we collect automatically may include:
URLs that refer visitors to our websites;
Search terms used to reach our websites;
Details about the emails we send, such as opens, clicks, and unsubscribes;
Details about the devices that are used to access our websites (such as IP address, browser information, device information, and operating system information);
Details about your interaction with our websites (such as the date, time, length of stay, and specific pages accessed during your visits to our websites, referral activity, and which emails you may have opened);
Information about activity in our stores, such as through closed circuit TVs for security monitoring or geofencing to identify traffic in our stores;
Usage information (such as the number and frequency of visitors to our websites).
We may associate this information with your xxx account if you have one, the device you use to connect to our Services, or email or social media accounts that you use to engage with xxx.
How We Use Your Information Depending on how you use our Site, your interactions with us, and the permissions you give us, the purposes for which we use your personal data include:
To fulfil your order and maintain your online account.
To manage and respond to any queries or complaints to our customer service team.
To personalise the Site to you and show you content we think you will be most interested in, based on your account information, your purchase history, and your browsing activity.
To improve and maintain the Site and monitor its usage.
For market research, e.g., we may contact you for feedback about our products.
To send you marketing messages and show you targeted advertising, where we have your consent or are otherwise permitted to do so.
For security purposes, to investigate fraud and where necessary to protect ourselves and third parties.
To comply with our legal and regulatory obligations.
We rely on the following legal basis, under data protection law, to process your personal data:
Because the processing is necessary to perform a contract with you, or take steps prior to entering into a contract with you.
Because we have obtained your consent.
Because it is in our legitimate interests as an e-commerce provider to maintain and promote our services.
Who May Have Access to Your Information Third-Party Service Providers: We may use third-party service providers acting on xxx’s behalf to perform some of the services described above. We share certain information with service providers who assist with processing payments, hosting, managing our data, distributing emails, conducting research and analysis, and administering certain services. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Your Rights and Choices
Managing or deactivating your xxx account: You may review, update, or modify your account information at any time. You may also deactivate your xxx account by emailing xxx@xxx.com.
Opting out of email marketing: You may unsubscribe from our promotional emails at any time by following the instructions included in those emails.
Restricting cookies: Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject cookies.
Children Our Services are not designed for children. If you have reason to believe that a child has provided personal data to us, please contact us.
INFORMATION SECURITY We work hard to keep your data safe. We use a combination of technical, administrative, and physical controls to maintain the security of your data.
Data Transfers and Privacy Shield xxx is headquartered in xxx, and we may transfer your personal data to jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction.
European Residents Data Subject Requests: If you are a European Resident, you have the right to access personal data we hold about you and to request corrections, updates, or erasure.
California Privacy Rights If you are a California resident, the California Consumer Privacy Act or “CCPA” applies to you.
Links to Other Websites and Third-Party Content We may provide links to third-party websites that are not operated or controlled by xxx. This Privacy Policy does not apply to such third-party services.
Text Marketing and Notifications By entering your phone number, you agree that we may send you text notifications and marketing offers.
Data Retention Our retention periods for personal data are based on business needs and legal requirements.
