Privacy Policy
We Capture Information About You In Order To Improve Your User Experience With FITIZEN
This notice is to inform you about how we collect and protect any personal information you provide to us and how you can control what personal information we collect from you and what we do with it. It sets out how we intend to use your information, who we will share it with and what rights you have about use of your information. This notice applies however you provide personal information to us, whether you go online to our website(s), contact us via social media, visit us at events and stores, enter competitions, engage in research activities or whether you telephone, email, write to or text us.
What Personal Data Do We Collect?
We may collect the following information about you: • your name, age/date of birth, gender and other relevant demographic information; • your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and email address; • your social media handles; • purchases and orders made by you; • your online browsing activities on any of our websites including which items you store in your shopping cart; • information about the device you use to browse our websites including the IP address and device type; • your communication and marketing preferences; • your interests, preferences, feedback, competition and survey responses; • your location; • your correspondence and communications with us; and • other publicly available personal data, including any which you have shared via a public platform (such as Instagram, YouTube, Twitter or public Facebook page). This list is not exhaustive and in specific instances, we may need to collect additional data for the purposes set out in this Notice. Some personal data is collected directly, for example when you place an order on our website or send an email to our Customer Support team. Other personal data is collected indirectly, for example when you browse our websites or undertake online shopping activity. We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources. We may anonymise and aggregate personal data for insight and research but this will not identify anyone. Our websites are not intended for children and we do not knowingly collect data relating to children.
How We Use Your Data
Cookies
Our website(s) use cookies to capture information. This includes information about browsing and purchasing behaviour by people who access our websites, including pages viewed, products purchased and customer journey around our websites. Detailed information is set out in our [Cookie Policy] and is provided to ensure you are fully aware of the cookies we use, allowing you to make an informed choice about your acceptance of cookies.
Sharing Data With Third Parties
- other companies within our group;
- to purchasers, investors, funders and advisers if we sell our business or assets or restructure whether by merger, re-organisation or otherwise;
- our legal and other professional advisers, including our auditors;
- credit reference agencies where necessary for card payments;
- governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so: to comply with our legal obligations and the administration of justice; • to exercise our legal rights (for example in court cases); • for the prevention, detection, investigation of crime or prosecution of offenders; and • for the protection of our employees and customers.
Legal Basis For Using Data
We are required to set out the legal basis for our processing of your personal data. We collect and use customers’ personal data: 1. as necessary to perform our contract with you: • for the purposes of complying with our duties and exercising our rights under a contract for the sale of goods or services to a customer; or 2. as necessary for the pursuit of our legitimate interests, including: • selling and supplying goods and services to our customers; • promoting, marketing and advertising our products and services; • sending promotional communications which are relevant and tailored to individual customers (including administering loyalty schemes); • to identify and contact competition winners; • understanding our customers’ behaviour, activities, preferences, and needs; • improving existing products and services and developing new products and services; • protecting customers, employees and other individuals and maintaining their safety, health and welfare; • good governance, accounting and managing and auditing our operations and complying with our legal and regulatory obligations; • preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies; • handling customer contacts, queries, complaints or disputes; • protecting our company, its employees and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to us; • handling any legal claims or regulatory enforcement actions taken against us; and • fulfilling our duties to our customers, colleagues, shareholders and other stakeholders; or 3. as necessary for complying with our legal obligations including: • where you exercise your rights under data protection laws • for compliance with legal and regulatory requirements; • to establish or defend legal rights; or 4. based on your consent for example in relation to sending direct marketing communications via email or text message. You have the right to withdraw consent at any time. Where consent is the only legal basis for processing, we will cease to process data after consent is withdrawn.
How We Protect Your Data
Our Controls Fitizen LTD is committed to keeping your personal data safe and secure. Our security measures include: – • encryption of data; • cyber security assessments of all service providers who may handle your personal data; • planning to ensure we are ready to respond to cyber security attacks and data security incidents; • security controls which protect our IT systems infrastructure and our premises from external attack and unauthorised access
What You Can Do To Help Protect Your Data
You should always be cautious when sharing your personal data. No one from our company will ever ask you to confirm any bank account payment or credit card payment details via email. If you receive an email claiming to be from Fitizen LTD asking you to do so, please ignore it and do not respond. If you are using a computing device in a public location, we recommend that you always log out and close the website browser when you complete an online session. In addition, we recommend that you take the following security measures to enhance your online safety: – • keep your account passwords private because anyone who knows your password may access your account or be compromised if your account is accessed without authority. • when creating a password, use a difficult word/number combination of at least 8 characters and something that is not easily guessed by hackers such as your name, email address, or other personal data that can be easily obtained. Also, frequently change your password. You can do this in your account settings. • avoid using the same password for different online accounts.
How Long We Keep Your Data
We will not retain your data for longer than necessary for the purposes set out in this Notice. Different retention periods apply for different types of information. For example, various laws, accounting and regulatory requirements applicable to us require us to retain certain records for specific amounts of time. In relation to your personal data, we will hold this only for so long as we require that personal data for legal or regulatory reasons or for legitimate organisational purposes. We will not keep your data for longer than is necessary for the purposes for which we collect them.
International Transfers Of Your Data
To deliver products and services to you, it is sometimes necessary to share your personal information outside of the European Economic Area (the EEA). This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws. If we transfer your personal information outside the EEA, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to assess the laws and practices of the destination country and relevant service provider and the security measures that are to be taken as regards the data in the overseas location; alternatively, we use standard data protection clauses. An example of where international data transfers exist within Fitizen is when shipping an order to a customer outside of the EEA.