Privacy Policy

PRIVACY STATEMENT

We take your privacy seriously and this privacy statement explains how we collect, use, share and process your information.

Collection and Use of Personal Data

Personal data is information that can be used to directly or indirectly identify you. Personal data also includes anonymous data that is linked to information that can be used to directly or indirectly identify you. Personal data does not include data that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you.

Promoting Safety and Security

We abide by the principles of legality, legitimacy, and transparency, use, and process the least data within a limited scope of purpose, and take technical and administrative measures to protect the security of the data. We use personal data to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is based on our legitimate interest in helping ensure the safety of our products and services.

Here is a description of the types of personal data we may collect and how we may use it:

What Personal Data We Collect

ⅰ. Data you provide:

We collect the personal data you provide when you use our products and services or otherwise interact with us, such as when you create an account, contact us, participate in an online survey, use our online help or online chat tool. If you make a purchase, we collect personal data in connection with the purchase. This data includes your payment data, such as your credit or debit card number and other card information, and other account and authentication information, as well as billing, shipping, and contact details.

ⅱ. Data about the use of our services and products:

When you visit our websites, we may collect data about the type of device you use, your device's unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, and location information from or about the computers, phones, or other devices on which you install or access our products or services. Where available, our services may use GPS, your IP address, and other technologies to determine a device's approximate location to allow us to improve our products and services.

How We Use Your Personal Data

Generally speaking, we use personal data to provide, improve, and develop our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our customers.

ⅰ. Providing, improving, and developing our products and services:

We use personal data to help us provide, improve, and develop our products, services, and advertising. This includes using personal data for purposes such as data analysis, research, and audits. Such processing is based on our legitimate interest in offering you products and services and for business continuity. If you enter a contest or other promotion, we may use the personal data you provide to administer those programs. Some of these activities have additional rules, which may contain further data about how we use personal data, so we encourage you to read those rules carefully before participating.

ⅱ. Communicating with you:

We may use your personal data to communicate with you about your account, orders, transactions, customer service requests, policies, and other service-related matters. Where necessary, we process this information to perform our contract with you, comply with our legal obligations, or pursue our legitimate interests.

Where permitted by applicable law, we may also use your personal data to send you marketing communications about our products and services. For electronic marketing communications, including email and SMS, we will obtain your consent where required under applicable law, including the Privacy and Electronic Communications Regulations 2003 ("PECR"). Where consent is not required, we may rely on another lawful basis permitted under applicable data protection law.

You can opt out of marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

Where required by law, we will obtain your consent before sharing your personal data with third-party partners for their own direct marketing purposes.

We may also use personal data to personalize your experience with our products and services, including on third-party websites and applications, and to measure the effectiveness of our promotional campaigns. Where these activities involve cookies or similar technologies for which consent is required, we will obtain your consent before using those technologies.

Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Definition of "Cookies"

Cookies are small pieces of text used to store information on web browsers. Cookies are widely used to store and receive identifiers and other information on computers, phones, and other devices. We also use other technologies, including data we store on your web browser or device, identifiers associated with your device, and other software, for similar purposes. In this Cookie Statement, we refer to all of these technologies as "cookies."

Use of Cookies

We use cookies and similar technologies to operate, secure, and improve our websites, products, and services. These technologies may also be used to understand how visitors use our websites, personalize content, measure advertising performance, and provide relevant advertising.

Some cookies and similar technologies are necessary for the operation and security of our websites and services.

Where consent is required under applicable UK law, including PECR, we will ask for your consent before using non-essential cookies or similar technologies, such as those used for analytics, personalization, or advertising.

You may manage or withdraw your cookie preferences at any time through the cookie preference controls available on our website.

Disclosure of Personal Data

We make certain personal data available to strategic partners that work with us to provide our products and services or help us market to customers. Personal data will only be shared by us with these companies in order to provide or improve our products, services, and advertising; it will not be shared with third parties for their own marketing purposes without your prior express consent.

Klarna

To offer you Klarna's payment options, we may share certain personal information with Klarna, including your contact details and information about your order. Klarna may use this information to assess your eligibility for its payment options and to provide payment options that are appropriate for you.

Any personal information shared with Klarna will be processed in accordance with applicable data protection laws and Klarna's own Privacy Notice.

For more information about how Klarna processes your personal information, please see Klarna's Privacy Notice.

Data Disclosure or Storage, Transfer, and Processing

ⅰ. Applicable UK Data Protection Law and Lawful Bases

If you are located in the United Kingdom, we process your personal data in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, PECR where applicable, and other applicable UK data protection laws, as amended from time to time.

Depending on the purpose and circumstances of the processing, we may rely on one or more lawful bases, including the performance of a contract, compliance with a legal obligation, our legitimate interests, or your consent.

Where we rely on consent as our lawful basis, we will request it in accordance with applicable law. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

ⅱ. For the purpose of reasonable implementation or application of this article:

We may share personal data with all our affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal data to the relevant third party. We may also disclose personal data if we determine in good faith that disclosure is reasonably necessary to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

ⅲ. Legal Compliance and Security or Protect Other Rights

It may be necessary—by law, legal process, litigation, and/or requests from public and governmental authorities within or outside your country of residence—for us to disclose personal data. We may also disclose personal data if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.

Children

Our products and services are intended for adults. Accordingly, we do not knowingly collect, use, or disclose data from children under 16. If we learn that we have collected the personal data of a child under 16, or the equivalent minimum age depending on the jurisdiction, we will take steps to delete the data as soon as possible. Please immediately Contact Us if you become aware that a child under 16 has provided us with personal data.

Your Rights

Under applicable UK data protection law, you may have certain rights in relation to your personal data. Depending on the circumstances and the lawful basis on which we process your personal data, these may include:

the right to be informed about how your personal data is collected and used;
the right to access the personal data we hold about you;
the right to request correction of inaccurate or incomplete personal data;
the right to request deletion of your personal data in certain circumstances;
the right to request restriction of processing in certain circumstances;
the right to object to certain processing, including the right to object at any time to the use of your personal data for direct marketing;
the right to data portability in certain circumstances; and where processing is based on consent, the right to withdraw your consent at any time.

These rights are not absolute and may be subject to conditions, limitations, or exemptions under applicable law.

To protect the privacy and security of your personal data, we may request information from you to verify your identity before responding to a request.

We will respond to valid requests without undue delay and generally within one month of receiving the request. Where permitted by law, we may extend this period by up to a further two months if the request is complex or if you have submitted a number of requests. If an extension is necessary, we will inform you within the initial one-month period.

If you have concerns about how we process your personal data, you may contact us. You also have the right to lodge a complaint with the Information Commissioner's Office ("ICO"), the UK's data protection supervisory authority.

Third-Party Websites and Services

When a customer operates a link to a third-party website that has a relationship with us, we do not assume any obligation or responsibility for such a policy because of the third party's privacy policy. Our websites, products, and services may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to data collected by us through our products and services. We encourage you to read the privacy policies of any third party before proceeding to use their websites, products, or services.

Data Security, Integrity, and Retention

We use reasonable technical, administrative, and physical security measures designed to safeguard and help prevent unauthorized access to your data and to correctly use the data we collect. We will retain your personal data for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement unless a longer retention period is required or permitted by law.

Changes to this Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our practices, services, technologies, legal requirements, or regulatory requirements.

Where we make material changes to this Privacy Statement, or where we intend to use personal data for a new purpose, we will provide appropriate notice as required by applicable law before the relevant new processing begins.

Where the new processing requires your consent, we will obtain valid consent before carrying out that processing.

We encourage you to review this Privacy Statement periodically to stay informed about how we collect, use, and protect your personal data.