Account information: Information about your account can be found on our Terms and Conditions. To place and order you must create an account. To create an account, you are asked to submit details such as name, email address and telephone number, date of birth, a password you create, and details of your method of payment.
Information given by Users: this includes information that we may ask Users to provide from time to time for research processes, quality control and to improve the Service. For example, we may collect such information through direct correspondence, surveys, other activities through the website etc.
Device and Browsing Information: From time to time, we may use automatic data collection technologies to collect data for research, development and statistical purposes. This data includes but is not limited to data regarding the products that were recommended to you, products that you chose to purchase, other aspects of our website or other aspects of the Service. We may monitor browsing actions or usage patterns by Users, such as external sites you visit just before or after using our Services and information about your internet connection or device ID, such as your operating system or IP address.
How we use your data and why
We want to give you the best possible customer experience. To ensure we do this, we collect and process your personal data for the following purposes:
• To meet our obligations to you in fulfilling your order. If we don’t collect your personal data during checkout, we won’t be able to process your order and comply with our legal obligations.
• To respond to your queries, refund requests and complaints. The data we hold enables us to respond, and we may keep a record of these to inform any future communication with us. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interest in providing you with the best service.
• To manage your account and with your consent, communicate with you including by sending you promotional offers or other marketing information or to invite you to participate in surveys, questionnaires or research projects. You can opt out of promotional communications through your account.
• To send you relevant personalised communications by post in relation to updates, offers or products. We’ll do this on the basis of our legitimate business interest.
• For research and development purposes in order to improve or personalise our website and to help us understand our customers and how our services are used
• To aggregate data and to anonymise or depersonalise data to allow it to be used for statistical and research purposes;
• To meet our legal obligations and the regulatory requirements to which we are subject, for loss prevention purposes and to protect and enforce our rights and meet our obligations to third parties;
• For our internal business purposes such as keeping records of our communications with you, compiling statistical data, and performing analytics relating to the use of the website.
The lawful basis for processing users’ personal data
‘The law on data protection sets out a number of different reasons for which a company may collect and process your personal data. The processing of your Personal Data is lawful on the basis of the following:
• Your express consent, where you consent for us to process your data for the purpose of receiving the Service; for example when you tick a box to receive our newsletter
• The fulfilment of our contractual obligations to you in accordance with our subscription terms & conditions; for example to deliver your order we’ll collect your address details to deliver your purchase and pass these on our courier
• The pursuit of our legitimate interests including, amongst others:
• Selling and supplying goods to our customers
• Understanding our customers’ behaviour, activities, preferences and needs, improving existing products and developing new products
• Promoting, marketing and advertising our products
• Protecting the security or integrity of our databases or the website,
• Protecting our business or reputation, taking precautions against legal liability, protecting and defending our rights or property, or for resolving disputes, investigating and attending to inquiries or complaints with respect to your account with Pour Moi.
• For example we will use your purchase history to send you or make available personalised offers. We can also combine the shopping history of many customers to identify trends and develop new products. We will also use your address details to send you direct marketing information by post telling you about products and services that we think might interest you.
When do we disclose your personal data to third parties?
In connection with the above activities, we may share your personal personal data with our subcontractors, service providers, representatives and agents that provide services to us or act for or on our behalf (“Related Parties”). Personal data is shared with Related Parties only for the purpose of fulfilling your order, maintaining and improving the website and related purposes.
We ensure that such Related Parties do not use your personal data for any other purposes, that they do not disclose it to any other third parties and that they do not retain copies of your personal data except as necessary to provide services to us or to our Users or as may be required by law. We require Related Parties to protect personal data of our Users that is received from us from unauthorised access, corruption or loss.
Examples of cases where personal data may be shared with Related Parties are set out below:
• Related Parties that we use to assist us in fulfilling your order (including administration services, technical services relating to the maintenance, servicing and upgrading of the website hosting and cloud computing services, data migration and analytical services, marketing and customer service, payment processing services, and other outsourced services);
• Related Parties that help us to test, monitor, improve and develop our service;
• Related Parties that help us compile, aggregate and analyse personal data in order to produce Anonymised and Aggregated Data that we use to enhance our service.
• Related Parties that help us perform analytical studies and research. We will not disclose the results of such analysis or research to third parties or publish it except in the form of Anonymised and Aggregated Data.
Other circumstances in which your personal data may be used or disclosed include the following:
• If we believe that such disclosure is reasonably necessary to enforce or apply our terms and conditions or to protect our rights, property, the safety or integrity of our services, software or products;
• To protect Pour Moi against abuse or unauthorised access and to protect the personal data of our Users in general;
• Where necessary to satisfy a legitimate request or order of a government body, public authority, regulator or enforcement agency, in response to a third-party subpoena (if on legal advice such response is required) or otherwise as provided by law or required by any court of competent jurisdiction or any regulatory authority acting under statutory powers; or if necessary to defend us or our subscribers (for example, in a lawsuit).
We will fully co-operate with regulators, law enforcement agencies and other authorities to identify anyone who uses our products, service or software for illegal activities. We reserve the right to report to regulators and law enforcement agencies any activities that are believed to be unlawful.
Transfer of personal data across borders
We operate from the United Kingdom. We may use servers and cloud services to store and process data in other countries and may transfer the data to other countries for the purpose of storage and data management. Our Related Parties may have access to your personal data in different countries including, without limitation, the UK, the EU and the USA. We ensure that when personal data is transferred across borders, we do so in compliance with the law including (in the case of data exported from the EU) by putting in place, as between us and the party receiving the data, contractual terms for the protection of the interests of data subjects in the form approved by the European Commission.
How do we protect your personal data?
We use a range of technical and organisational measures to protect your personal data including the following:
• We only collect and maintain personal data insofar as is necessary for the proper functioning of the Service;
• We limit and control access to records of personal data to members of staff and Related Parties that require such access to perform their duties and services, through passwords, variable log-in rights and other technical and organisational access controls;
• We apply security measures (including as part of the cloud services we use and when using the services of Related Parties to process your data) including encryption, firewalls and physical security for our servers and information centres.
• We ensure confidentiality obligations are put in place when dealing with our Related Parties and other third parties;
• We avoid the collection or storage of personal data when it is unnecessary or for longer than reasonably needed or legally permitted or required and erase it (or anonymise it) once we no longer need it or are no longer required to keep it as personal data;
• User’s account details are held in our records for as long as the User maintains his or her account. The data is erased when the User’s account is closed down;
• Data collected from monitoring Users’ use of the website is aggregated and anonymised before we share it with third parties.
We ask that you do not share your account password or log-in credentials with anyone. Please contact Customer Services immediately if you suspect unauthorised use of your account.
How to access, edit or delete your information
You can contact our Customer Services team ([email protected]) to request access to, edit or delete any personal information you have provided to us. We cannot guarantee we will be able to grant a request to change information, for example, if we believe granting such a request would violate the law or cause the information to be incorrect. It may not be possible to retrieve, remove or correct data from any database where the data had been de-identified and/or aggregated.