Disclaimer & Privacy Policy
DISCLAIMER
To the maximum extent permitted by applicable law, we exclude all representations, warranties and conditions relating to our website and the use of this website. Nothing in this disclaimer will:
- Limit or exclude our or your liability for death or personal injury
- Limit or exclude our or your liability for fraud or fraudulent misrepresentation
- Limit any of our or your liabilities in any way that is not permitted under applicable law
- Exclude any of our or your liabilities that may not be excluded under applicable law
The limitations and prohibitions of liability set in this section and elsewhere in this disclaimer:
The limitations and prohibitions of liability set in this Section and elsewhere in this disclaimer: (a) are subject to the preceding paragraph; and (b) govern all liabilities arising under the disclaimer, including liabilities arising in contract, in tort and for breach of statutory duty.
PURPOSE OF THIS PRIVACY POLICY
We value your privacy and are committed to protecting and respecting your personal data.
The purpose of this Privacy Policy is to explain how we look after your personal data when you visit our website (regardless of where you visit it from), use our online services, or otherwise engage with us as a client, and or have any other commercial relationship or contract with us.
This Privacy Policy , together with our terms and conditions, as set out at https://www.bosidengfashion.com/pages/terms-conditions and any additional terms of use, applies to your use of any of the products and services which are accessible via our websites.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
It is important that the personal data that we hold about you is accurate and current. Please keep us informed if your personal data changes during our relationship with you.
Changes to our Privacy Policy
This Privacy Policy may change over time. Any changes we make to our Privacy Policy will be posted on this page If there are any significant changes, we will contact you and explain the changes.
Important information and who we are
We are Bosideng Retail Ltd. Where this Privacy Policy refers to “we”, “our” or “us” below, unless it mentions otherwise, it’s referring to Bosideng Retail Ltd.
You can contact us at:
Postal Address: 28 South Molton Street, Mayfair, London, W1K 5RF
And / or via Email: privacy@bosidengfashion.com
We are the controller and responsible for your personal data unless otherwise stated. As a data controller, we decide how to use your personal data and are responsible for looking after it in accordance with applicable data protection legislation.
We are registered with the Information Commissioner Office (ICO) under registration number ZC066718.
Third-party links
Our websites may include links to third-party websites or links to other websites of interest, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies. When you leave our website, we encourage you to read the Privacy Policy of every website you visit.
Collection of your personal data
Personal data means any information about you that can be used to identify you. This does not include data where your identity has been removed (such as anonymous data).
We collect, use, store and transfer different kinds of personal data about you. To make it easier for you to use this Privacy Policy, we group these into the following categories.
· Identity information: information which identifies you for example your name, date of birth
· Contact details: your postal, billing and / or delivery address, email address and telephone number;
· Payment information and transaction history: your payment card number, and other information necessary for identification and verification of payments, and records of payments, details of products or services purchased and associate billing history;
· Technical data or Cookies: internet protocol (IP) address or browsing actions and patterns (collected through cookies). For more information about how and why we use cookies, please take a look at our Cookie information ;
· Profile information: your account login details including your username and where relevant password;
· Feedback Data: responses to surveys, questionnaires, reviews, or other feedback mechanisms, including any comments or ratings you provide;
· Competition data: information submitted as part of your entry, such as answers to competition questions, photographs, or other materials required by the competition rules;
· Usage Data: includes information about how you use our website, products and services;
· Marketing and communication preferences: how you prefer to receive marketing messages and other communications from us; and
· Publicly available information: available on third party sites such as social media sites or our website.
This list is not exhaustive, and in specific instances, we may need to collect additional data for the purposes set out in this Privacy Policy.
We do not intentionally collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).
All your personal data will be processed in accordance with this Privacy Policy.
Anonymised data
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you). This can be for research or statistical purposes; in which case we may use the anonymised information indefinitely without further notice to you.
We collect, use and share anonymised and aggregated data such as statistical or demographic data for purposes including reporting. Anonymised and aggregated data could be derived from your personal data but will not directly or indirectly reveal your identity. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.
How do we collect your personal data?
We collect your personal data in the following way:
· Registration: We collect your identity and contact details when you create an account with us, either online or in-store.
· Shopping and Transactions: When you make a purchase, whether online or in our store, we collect your contact details, payment information, and transaction history to process your order and provide customer service.
· Communications: If you contact us by email, telephone, in-store, through our website, or via social media or online chat, we collect your contact details and may also collect device and cookie data (for online interactions) to help us respond to your enquiry. If your communication relates to an issue with our website, or services, we may also collect usage data to diagnose and resolve the problem.
· Use of Our Services: Each time you use our website or shop in-store, we collect information about your interactions, including content you upload, device and cookie data (for online use), and usage data. This helps us personalise your experience and improve our services.
· In-Store Technology: Where available, we may use in-store technology (such as using CCTV or offering Wi-Fi) which collects your image, monitors store usage or collects device data we will always use in store technology in accordance with our Privacy Policy and applicable law.
· Marketing and Preferences: We collect and record your marketing preferences when you join our mailing list, request to change your preferences, or interact with our marketing communications, whether online or in-store.
· Publicly available information: We may collect information, which is publicly available, if you contact us or tag us through your social media platform, we may collect your username, profile details and the content of your message.
How we use your personal data
All personal data we collect or are provided with will only be held and stored in accordance with this Privacy Policy and applicable data protection laws.
We will only use your personal data when the data protection law allows us to do so. Data protection law sets out a number of different reasons for which we may collect and process your personal data.
The lawful bases that we typically rely on to collect and process your personal data include:
· where you have provided your consent for us to use your personal data;
· where the processing is necessary for us to enter into or perform our obligations under our contract with you;
· where we need to comply with our legal or regulatory obligations;
· where necessary to protect the vital interests of individuals (e.g., in emergencies); and/or
· where the processing is necessary for our legitimate interests (or those of a third party) and your interests and rights do not override those interests.
If you have provided your consent for us to use your personal data, you have the right to change your mind at any time and withdraw that consent. However, this will not affect the lawfulness of any processing carried out before your consent was withdrawn.
Purposes for which we will use your personal data
We have set out below, in a table format, a description of all the ways we use your personal data, and the legal basis we rely on to do so.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.
|
Purpose/Activity |
Type of data |
Lawful basis for processing including basis of legitimate interest |
|
To take steps towards providing you with products and services at your request, to process and fulfil orders/purchases and deliver products and services to you, including managing payments and sending you service communications |
(a) Identity (b) Contact (c) Transaction (d) Device |
(a) Performance of a contract |
|
To fulfil your purchase or redemption of gift cards |
(a) Identity (b) Contact (c) Transaction |
(a) Performance of a contract with you (b) Necessary for our legitimate interests |
|
CCTV footage to ensure the safety and security of our colleagues, customers, and visitors
|
(a) Identity |
(a) Necessary for our legitimate interests (b) Legal obligation (c) Vital interests |
|
Enforce our terms and conditions, including to collect money owed to us |
(a) Identity |
(a) Necessary for our legitimate interests |
|
To register you as a new account holder |
(a) Identity (b) Contact |
(a) Performance of a contract with you (b) Necessary for our legitimate interests |
|
To send you direct marketing communications via email, text and / or post. |
(a) Contact (b) Technical data (c) Marketing |
(a) Consent (b) Unless we can rely on the soft opt-in and you have not opted out, in which case we rely on legitimate interest |
|
To send you direct marketing communications by telephone or post |
(a) Contact (b) Technical data (c) Marketing |
(a) Necessary for our legitimate interests (b) Unless you have opted out, in which case we rely on Consent |
|
To deploy and process personal data collected via Cookies that are strictly necessary, as set out in the cookies section |
(a) Marketing (b) Cookies |
(a) Necessary for our legitimate interests |
|
To deploy and process personal data collected via Cookies that are not strictly necessary, as set out in the cookies section] |
(a) Marketing (b) Technical / Cookies |
(a) Consent |
|
To deliver (personalised) advertisements to you |
(a) Marketing |
(a) Consent |
|
To notify you of changes to the App, Services, your purchases and our terms and conditions for ongoing contracts |
(a) Contact |
(a) For ongoing or prospective contracts, Performance of a contract (b) Necessary for our legitimate interests |
|
To notify you of updates to this privacy notice |
(a) Contact (b) Transaction |
(a) Legal obligation |
|
To respond to your requests to exercise your rights under this notice |
(a) As relevant to your request |
(a) Legal obligation |
|
To enable you to participate in a prize draw or competition (where applicable, please also see the separate prize or competition Privacy Policy and Terms) |
(a) Contact (b) Marketing (c) Competition |
(a) Legitimate interests (b) Unless you have previously opted out, where we will rely on Consent (c) Performance of a contract (once you have entered) |
|
To ask you to complete a survey and process your response. |
(a) Contact |
(a) Legitimate interests (b) Unless you have previously opted out, where we will rely on Consent |
|
To otherwise respond to your enquiries, fulfil your requests and to contact you where necessary |
(a) As relevant to your enquiry or request |
(a) Legitimate interests |
CCTV
We use CCTV in our store premises for the protection of our colleagues, clients, consumers and our business. This includes investigating accidents, incidents, criminal activities and breaches of our policies.
Our CCTV captures images in real time. These cameras may capture footage of you whilst you are on our premises. Cameras have been situated both inside and outside the building. There are signs in place to inform you where cameras are in use.
Occasionally we share CCTV with public or regulatory authorities, a third-party or in response to requests from individuals seeking to protect their rights, the rights of others or helping to prevent crime and nuisance. We will only share CCTV if we consider a request to be appropriate.
We do not use CCTV for covert monitoring except in exceptional circumstances where permitted by law, and only where it is strictly necessary and proportionate.
Payment card information
We, or our chosen third-party provider, may process your personal data to process any payments made for the provision of our goods and services. The information may include information for identification and verification, such as your name, credit, debit or other card number, card expiration date, and CVV code.
Any payment transactions carried out by us, or our chosen third-party provider of payment processing products and services will be kept secure and encrypted where possible.
If you fail to provide personal data
If we are required by law or by the terms of a contract to collect personal data from you, and you do not provide it when requested, we may be unable to fulfil the contract we have with you or are seeking to enter into (for example, to deliver products to you or provide services). In this case, we may have to cancel the services requested from us, but we will notify you if this is the case at the time.
Who we share your information with
We only ever share your personal data with trusted third parties. Your personal data may be shared or disclosed to third parties in connection with the products and services we are providing.
We may share information with selected third parties including:
· business partners, distributors, suppliers and sub-contractors for the performance of any contract we enter into with them or you,
· advertisers and advertising networks that require the data to select and serve relevant adverts to you and others; and / or
· analytics and search engine providers that assist us in the improvement and optimisation of our website
We may share your personal data with trusted third parties we may work with from time to time to help us with operating and improving our products and services i.e., customer care or payment processing.
The reasons we may share your data with third parties are:
· If we are under a legal or regulatory duty to do so,
· if it is necessary to do so to enforce terms and conditions of sale or other contractual rights,
· it is necessary to provide you with the products and/ or services requested
· to lawfully assist the police or security services with the prevention and detection of crime or terrorist activity,
· where such disclosure is necessary to protect the safety or security of any persons or property, and/or
· otherwise as permitted under applicable law.
Whenever we share your personal data with third parties we will only ever share your personal data with trusted third parties.
We only provide third parties with the information they need to know to perform their specific services. Where personal data is shared with a managed service provider or other third-party supplier, we work closely with them to ensure that your personal data is secure and protected at all times.
Our contracts with third parties make it clear that they must hold personal data securely, abide by the principles and provisions of data protection rules, and only use information as we instruct them to. In all instances where we disclose your information to third parties, we will ensure that your information is appropriately protected. If we stop using their services, any of your personal data held by them will either be deleted or rendered anonymous.
Our Use of Shopify
We use Shopify as our e-commerce platform to process orders, manage deliveries, and maintain client accounts.
When you place an order or create an account with us, your personal data, including your name, contact details, delivery address, order details, and payment information, is processed and stored securely by Shopify on our behalf.
Shopify acts as a data processor and is contractually required to protect your data and only use it in accordance with our instructions and applicable data protection laws.
Automated Decision Making
We may use automated decision making and profiling to provide some and to tailor the information we provide to you. However, we do not use personal data for automated decision-making processes that produce legal or similarly significant effects on individuals. You will be advised if this changes.
Cookies
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Some of these cookies are essential to our service, for example they ensure that our website loads properly, or enables you to use payment functionalities.
Once you agree, the file is added, and the cookie help analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
We use the following cookies:
• Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services;
• Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
• Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
• Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website, and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
How to find and control your cookies
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.
Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
Data storage and security
The information you provide to us is stored in the United Kingdom on our secure servers or within secure systems. All the information stored on our systems are subject to technical and organisational security measures and controls.
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
If any information is shared with third parties and / or suppliers outside the UK such as Europe or outside Europe, we have procedures in place to ensure your personal data receives the protections as stipulated by the relevant data protection laws. For example, our contracts with third parties stipulate the standards they must follow at all times.
For all transfers of your personal data to other jurisdictions, we will ensure that the information is transferred in accordance with this Privacy Policy and as permitted by applicable data protection laws.
While we implement security measures to protect your personal data, please be aware that transmitting information over the internet (including email) is not entirely secure. As such, we cannot guarantee the security of data sent to us electronically and the transmission of such data is therefore entirely at your own risk.
If we provide you with a password or other security credential, please keep this confidential and do not share it with anyone.
How long we retain your personal data
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of providing you with goods, services satisfying any legal, regulatory, tax, accounting or reporting requirements.
In some circumstances we will anonymise your personal information (so that it can no longer be associated with you) for analytical or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Marketing and Unsubscribe
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
If you have provided your consent to receive marketing emails, you can withdraw this at any time or if we are relying on our legitimate interests to send you marketing, you can object. If you no longer wish to receive these marketing emails, you can unsubscribe by clicking on the unsubscribe link at the bottom of our marketing emails.
Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data as follows:
Request access to your personal data (commonly known as a “data subject access request” or a DSAR). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request rectification or correction of the personal data that we hold about you. You have the right to request the correction of your personal data when it is incorrect, out of date or incomplete. Please note that in some circumstances we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. You can request the erasure of your personal data when it is no longer necessary, you withdraw consent, or you object to its processing. Some information held by us is required by law to be held for a period of time and we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data. In some circumstances you can stop the processing of your personal data for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
· If you want us to establish the data’s accuracy.
· Where our use of the data is unlawful, but you do not want us to erase it.
· Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
· You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. This right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
The right not to be subject to automated decision making and profiling. You have the right to not be subject to solely automated decisions (i.e., decisions that are made about you by computer without any human input) in relation to any processes that have a legal or similarly significant effect on you.
We do not make a solely automated decisions that have a legal or similarly significant upon you. You will be notified if we make a solely automated decision which produces a legal effect or significantly affects you.
Withdraw consent at any time where we are relying on consent to process your personal data. Where our processing of your personal data is based on your consent , you have the right to withdraw your consent at any time. If you do decide to withdraw your consent, we will stop processing your personal data for that purpose
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is deemed unfounded, or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
How can we help?
If you have any questions about our use of your personal data, or you’d like to make a complaint about how your personal data has been handled, we kindly ask that you contact us in the first instance at privacy@bosideng.com.
For further information on data protection please visit the Information Commissioner’s Office (ICO) website.
The ICO regulates data protection. If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the ICO.
You can contact them by calling 0303 123 1113 or by visiting the ICO website.
