PRIVACY NOTICE
Woystone Ltd collects and processes your personal data according to the PRIVACY and COOKIES notice.
When you visit through our websites, social media pages, email or other digital properties or when you view, we will collect and process information that relates to you, known as personal data.
In this notice we will explain what personal data we collect and process about you, why and what we do with them. This notice applies to both consumers and where indicated, small businesses (jointly referred to as “you” or “Customers”) that buy our clothing and other items and otherwise interact with us off- or online.
Please note that this privacy notice may change. Any changes will become effective when we post the revised privacy notice on our websites.
1. Who Is The Controller?
Woystone Limited and where specifically indicated Woystone (71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UK) are responsible for this privacy notice. These legal entities are referred to as “we” or us” in this document. You can contact us at the address listed at the end of this privacy notice.
2. What Information Do We Collect And Why?
2.1. To handle your purchases, provide (Customer) services and fulfil other requests
2.1.1. Orders and online purchases
Online, when you purchase an item via one of our websites, we collect your name and your company name (in case you are a small business), full postal and/or separate billing address, e-mail address, ordered and returned items, delivery information, invoice information and other data relating to fulfilling your order. Furthermore, we may collect data you choose to provide us with additional fields, such as your date of birth and telephone number.
We use this data because it is necessary to conclude, execute and manage your purchase and to handle your order. Please note that in some cases requested information may be mandatory. If you do not provide us with a name and delivery address, we will not be able to deliver your items.
During online or contactless purchases, ff you have opted in to receive an e-receipt, we will process your e-mail address. This data is collected via our point of sale terminal.
We process this personal data because it is necessary to conclude, execute and manage your purchase with and/or returns to us.
Please note that Woystone Ltd will act as a controller in relation to the processing of your personal data related to your online or in person purchases.
2.1.2. Customer service and other requests
We also collect data to answer your queries on the phone, via post, via email or online functionality. In such case we will only ask you to provide the data necessary to handle your request (to manage our contractual relationship with you and/or to comply with a legal obligation). For example, if you contact us regarding item return, we may ask you for purchase date and location, or information about your decision to return.
We may process this data either on the basis of your consent, because it is necessary to manage our contractual relationship with you in case your request is related to an order or because we have a legitimate interest in helping you and thereby improving our services.
2.1.3. (Changed) terms, conditions or notices
We are required by law to inform you about any (changes in) terms and conditions, and notices that apply to the relationship that we have with you. In order to comply with these legal obligations, we may use your contact details such as your email address to inform you.
2.1.4. Payments and check fraudulent credit card usage or excessive credit card charge backs checks
We have to process your personal data in order to process your payment if you buy something with us. Your data will be shared by the payment service providers we partner with. These payments service providers are also a data controller in relation to your data used for payment purposes.
If you wish to pay your order by credit card, we will have a credit check performed in order to establish whether your personal data is not associated with fraudulent credit card usage or excessive credit card charge back. For this purpose, our payment service provider will use your name and banking account details. We do not collect information related to the payment instrument that you use, e.g. credit card information ourselves. This information is processed solely by our payment service provider and by the providers of the payment instruments subject to strict information security assurances. We have this check performed to protect our legitimate business interest to prevent fraud and financial loss, or comply with our legal obligations.
2.2. To maintain our relationship with you through (digital) marketing initiatives and social listening
2.2.1. Events or Promotional communications or clickable links in an e-mail
Where you consent or where we have a legitimate interest to do so, we will collect your e-mail address and/or mobile number and/ or your postal address or other information you voluntarily submit to us, to send you our newsletter and other commercial messages. In addition, we will retain a history of the e-mail and SMS messages that we sent to you and we will record what you do with these messages (for example, if you open them or click on their content). Please note that you can unsubscribe at any given moment via info@woystone.com email, or by requesting us to do so via the contact details on our website.
Furthermore, we will use your personal data to make our newsletter and other commercial messages even more relevant and personalized to your interests. This personalization is done by using a combination of data derived from your interaction with our services, including for example data derived from your previous purchases, and through cookies combined with other data we hold about you or receive from third parties, such as Google or Meta.
We may use your personal data to provide you with such personalized communications because we have a legitimate business interest to provide you with communications that we consider to be relevant for you and of interest to you. If required under applicable local laws we allow you to object to receiving such communications or ask your consent for such use of your personal data.
2.2.2. Personalized experience and improvement of online experience
When you visit our websites, we will drop cookies, pixels and other digital tools with similar functionality (“cookies”) on your browser or device that enable us to understand you better and personalize your experience with us and our communication and marketing towards you.
We may use your personal data to provide you with such personalized experiences because we have a legitimate business interest to provide you with experiences and services that we consider to be relevant for you and of interest to you. If required under applicable local laws we will ask for consent for such use for your personal data.
2.2.3. Participation in a competition or a seasonal or other promotion
We may offer you the opportunity to participate in a competition or other promotion. Some of these promotions have additional rules containing information about how we will use and disclose your personal data.
In general, we only collect information required to allow you to participate in the activity and manage our contractual relationship with you, such as your name and email. Personal data collected by us in the context of a competition or a seasonal or other promotion may be subject to additional privacy notices.
In principle we get your personal data directly from you. However, in some cases we receive personal data such as your buying preferences and activity for example through publicly available databases or our digital marketing activities and partners when they share the information with us.
2.2.4. Social listening
If you actively communicate about us or our brands on social media, we collect a copy of your communication. For example, if you use #Woystone in relation to one of our items we will retain a copy of the tweet and may use it for our brands awareness. In order to enable us to do so, we contracted a third parties for the provisioning of social listening services. Please note that any information you post or disclose through these services will become public and may be available to other users and the general public.
Please be mindful when disclosing any personal data relating to other people to us or to our service providers, as you are responsible for the disclosure of such third-party personal data.
2.3. To improve our services and items
We process your personal data in order to identify usage trends and service personalized content (e.g., item, size recommendations) across websites. The information that we gain is used to further improve our services and our items, for instance to help create and design our new collection, or to make improvements to current collections so as to meet your expectations.
For example, if you actively communicate about us or our brands on social media, interact with our chatbot or our customer service communication channels (including live chat) we may use your input to improve our services and items. We will engage in this activity where we have a legitimate interest.
2.4. To manage and improve the functionality of our websites
When you visit our websites we will drop cookies on your browser or device that enable us to improve the design and functioning of our websites, the responsiveness of our chatbot(s), live chat and to enable the technical and functional management of our websites (including maintaining information security), for example by identifying parts of the websites that have a low latency. We will engage in this activity where we have a legitimate interest. Our use of cookies is described in more detail in our cookie notice which can be found Here
2.5. For security and fraud prevention
Insofar necessary we may use your personal data to manage security and fraud, for example, to detect and prevent cyberattacks or attempts to commit identity theft, which is our legitimate interests as it also serves your and third party’s interests to keep our services and your personal data safe and secure.
2.6. To protect our rights and to defend against lawsuits
We may use your personal data to protect our rights and to defend against lawsuits and to respond to legal and regulatory duties, such as requests from public and government authorities. We engage in these activities to comply with a legal obligation or because we have a legitimate interest.
3. Use By Minors
Please note that our websites are not directed to individuals under the age of sixteen (16). We ask that you do not post comments or submissions of anyone under that age.
4. Who Has Access To Your Personal Data?
Your personal data can be accessed by our employees to the extent that this access is required to enable them to perform their work for us. In addition, we disclose personal data to:
• Our affiliates for the purposes described in this privacy notice, including Woystone Ltd.
• Our third party service providers, including those of Woystone Ltd, who facilitate the administration of our websites, marketing initiatives (including competitions and similar promotions), social listening services, chatbot services, booking tool services, and other business needs, for example data hosting, data analysis, information security and technology and related infrastructure provision, customer service, auditing, payment service providers, marketing service providers, and other business purposes.
• Other individuals with whom you elect to share your personal data including: for example, third parties with whom we partner or interact with, including marketing partners and social media parties.
• Public authorities, justice and law enforcement, fiscal authorities and other authorities assigned with investigative powers or public authority pursuant to applicable law.
• Other parties where we have legal basis, such as to comply with a legal obligation or where we have obtained your consent.
5. How Long Do We Retain Your Personal Data?
We retain your personal data for the period that you actively interact with us. You are no longer considered to be actively interacting with us if, for a consecutive period of two (2) years, you have not purchased an item from us or have not visited one of our website(s). After this two (2) year period we will only retain specific personal data that need to be retained (i) in light of the purpose(s) for which they were obtained (ii) if required to comply with a legal obligation or (iii) if necessary to protect our rights and legal position.
The personal data that we use to send you direct marketing communications will be used (processed) by us until you opt-out from receiving them.
6. Do We Transfer Your Data Outside Of The EEA?
Yes, your personal data may be transferred outside of the European Economic Area (“EEA”) for example to countries where we have facilities or engage service providers, such as to Indonesia where our production facility is located. For transfers from the EEA to countries not recognized by the European Commission as offering an adequate level of data protection, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission to protect your personal data. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in countries outside the EEA may be entitled to access your personal data. If you would like to receive a copy of our implemented safeguards (where possible) you can contact us using the contact details listed below.
7. Your Rights
We respect the rights granted to you under applicable laws, including the right to access your personal data that we hold about you, to rectify or erase certain personal data, to restrict processing of your personal data and to get an electronic copy of your personal data for purposes of transmitting it to another company.
In addition, where we rely on our legitimate interest to process your personal data, you have the right to object to such processing, wholly or partly, on grounds related to your particular situation. This includes that you are entitled to object to the processing of your personal data for direct marketing purposes, including profiling related to such direct marketing. If you wish to opt-out from receiving direct marketing communications you can click on the opt-out link in the respective message.
Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time.
To exercise your rights, please send us an e-mail to the e-mail address listed below.
For your rights in relation to cookies, please check our cookie notice which can be found Here
You are also entitled to lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available at this link: Information Commissioner's Office (ICO)
8. Our Contact Details
Woystone Ltd
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UK
For any request related to this Privacy Notice:
e-mail: info@woystone.com