Personal Data We May Collect
We may collect your personal data including your corporate/personal email id, demographic information including country, postcode, first name/last name, job title, mobile number, social media profile, preferences and interests, purchase information, payment card information, account password and login details, social media account details, your comments, product reviews and responses on surveys you complete, appointment booking and information given during an appointment, details to help us suggest items for you, details of your interactions with our Customer Contact Centre. We may also capture additional personal data in the form of various usage and user metrics when you use on our website including cookies, IP addresses, device and software identifiers, referring and exit URLs, onsite behavior and usage information/history, feature use metrics and statistics and other similar information. While some of this data is captured directly from you, for example, by way of web forms and web log servers, others can be captured indirectly from third parties, for example, preferences and interests on the basis of IP address and browsing history respectively.
Means Of Processing Personal Data
We will process your Personal Data through the following means:
- Web forms;
- Newsletter sign-ups;
- Registration for an event/activity;
- Information request mechanism;
Grounds For Lawful Processing Of Personal Data
When we process your personal data, we do so primarily in connection with offering you products, marketing, sale and promotion of our products which we provide or which are procured through our website and to improve and enhance the range of those products and offerings. We may process your personal data included but not limited to the following circumstances:
|Personal data||How we use your Personal Data||Lawful Grounds of Processing your Personal Data|
|Your name and contact details||To fulfil the contract with you||To complete your order and perform the contract with you, i.e. taking payment, updating you regarding the status of your order and shipping the order to you (including the printing of labels).|
|To manage issues during order fulfilment, refunds and taxes||To perform our contract with you. We may also keep a record of this to comply with our legal obligations.|
|To register your Account||To perform our contract with you. Where you have not yet purchased anything from us, we will ask you if you want to consent to email marketing through this registration.|
|To provide a Receipt for a store purchase.||In order to perform our contract with you (provision of a digital receipt) we will capture this information.|
|To detect and prevent any crime or fraud||Christy has a legitimate interest in protecting itself from Fraud.|
|To enhance your user experience||Christy has a legitimate interest in monitoring the websites to improve customer experience.|
|Your payment details||To successfully complete your order||We require these details to perform our contract with you and our contracts with partners and suppliers who work with us to provide a service to you.|
|To perform a trend analysis on the customer spend||Christy has a legitimate interest in analysing this information to improve customer experience.|
|Your views about products you have purchased, via an optional email questionnaire||To ascertain your experiences with our products and service allowing us to improve.||Christy has a legitimate interest in conducting market research of this nature, normally by Feefo. Note: all personal information is removed.|
|Financial information, social media information||When combined with personal identification and contact details to investigate cases of fraud.||Christy has a legitimate interest in protecting ourselves from various types of fraud.|
We understand the importance of taking extra precautions to protect the privacy and safety of children using our website. The Website services are not intended for users under the age of 16. We do not knowingly collect any personal data from children under 16 or market to or solicit information from anyone under the age of 16. If we become aware that a person submitting personal data is under 16, we will delete all the information as soon as possible unless it is with the consent and involvement of a parent or guardian. If you believe we might have any information from or about a child under 16, please contact us at DPCO@welspun.co.uk.
Security: How Secure Is Your Information With Us?
We have implemented appropriate physical, electronic, procedural and managerial procedures to safeguard your information against loss, unauthorized access, misuse or modification. We require any third parties processing your information to do the implement the same levels of protection with respect to your data. We strive to use commercially acceptable means for protecting your information.
Your Rights over your Personal Data
Right of Access: You have a right to access your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you.
Right to Rectification: You have a right to rectify the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
Right to be Informed: You have a right to be informed about the collection and use of personal data.
Right to be Erasure [Forgotten]: You will be able to ask us to delete or remove personal data which we process about you subject to limited circumstances in accordance with the GDPR requirements.
Right to Object to Processing: Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground you have the Right to Object to Process your Personal Data. Similarly, you may access this Right where we are processing your personal data for direct marketing purposes.
Request the Restriction of Processing of your personal data: This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
Right of Data Portability/Transfer to another party: You may move, transfer or copy your information so that you can use this information in a different service. To the extent we are able to do so, we will make this information available to you in a commonly used format so that you can transfer this to another service.
Right to Withdraw Consent for processing of Personal Data: In limited circumstances, where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the Right to Withdraw your Consent for that specific processing at any time. To withdraw your consent, please contact DPCO@welspun.co.uk. Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Right Related to Automated Decision Making Including Profiling: You will have a Right not to be subjected to a decision based solely on automated processing including profiling. Such decisions can be made only if, they are necessary for the entry into or performance of a contract or authorized by the Union or member state law applicable to Christy or based on your explicit consent.
All the above mentioned Rights can be exercised (subject to the limitations mentioned above and applicable data protection laws) by contacting DPCO@welspun.co.uk.
Cookies are alphanumeric identifiers with small amount of data that is commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive. Please note, a cookie in no way gives us access to your computer. Our website uses these “cookies” to collect information and to improve our Service. At any time, you also have the option to change/control your cookies through your browser settings.
Retention of your Personal Data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of providing the relevant goods and services to you, satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. Christy’s general retention policy is to retain information for 6 years.
Data Protection Officer
Transferring Your Personal Data
By Email: email@example.com
Write to us: Christy (Welspun UK) Ltd, Regent House, Heaton Lane, Stockport, SK4 1BS