Identity and Contact Details of the Data Controller
Bob and Lush
Unit 1, Paramount House Gelderd Road, Birstall, Batley, England, WF17 9QD.
Phone: 020 8089 3865
Purpose of and Legal Basis for Processing
When you interact or place an order with Bob and Lush, we may collect certain information from you. This information is necessary to fulfill our contractual obligations, provide customer support, and comply with legal requirements. The legal basis for processing your personal data is either your consent, the necessity for the performance of a contract, or our legitimate interests.
Types of Personal Data Collected
We collect the following types of personal data when you create an account or place an order on Bob and Lush:
- Email address
- First name
- Last name
- House address
- Phone number
- Consent preference for email marketing
- Order history
Additionally, if you have created a pet profile, we may store the following pet information:
- Pet's weight
- Pet's age
- Pet's name
Data Collection Methods
Personal data is collected on Bob and Lush through the following methods:
- Account creation form: When you create an account on our website, we collect your email address, first name, last name, house address, phone number, and pet information (if provided).
- Order placement: When you place an order, we collect the necessary information to process and deliver your order.
- Mailing list subscription: If you choose to subscribe to our mailing list, we collect your email address through a sign-up form on our website.
Data Storage and Retention
We store and retain your personal data in secure databases. Your data is stored for as long as necessary to fulfill the purposes outlined in this policy or as required by law. We regularly review and assess the need to retain personal data.
Data Security Measures
Bob and Lush takes the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or disclosure. These measures include encryption, secure socket layer (SSL) technology, restricted access controls, and regular security assessments.
We may share your personal data with third parties for the following purposes:
- Product fulfillment: We may share your name and address with couriers and postal operators to deliver your goods.
- Marketing: We may share your data with trusted third parties to conduct marketing activities on our behalf.
- Legal requests: We may disclose your data to government bodies or authorities when required by law or in response to a legal request.
We ensure that any third parties with whom we share your data are compliant with data protection regulations and maintain appropriate safeguards.
International Data Transfers
Personal data collected by Bob and Lush may be transferred to countries outside the European Economic Area (EEA). If such transfers occur, we will take appropriate measures to ensure that your data receives an adequate level of protection, as required by data protection laws.
Data Subject Rights
As an individual whose personal data is processed by Bob and Lush, you have the following rights:
- Right of access: You can request information about the personal data we hold about you.
- Right to rectification: You can request to update or correct any inaccurate or incomplete personal data.
- Right to erasure: You can request the deletion of your personal data, subject to certain legal obligations.
- Right to restrict processing: You can request the restriction of processing your personal data in certain circumstances.
- Right to object to processing: You can object to the processing of your personal data based on legitimate interests or direct marketing purposes.
- Right to data portability: You can request to receive a copy of your personal data in a commonly used and machine-readable format.
- Right to withdraw consent: If we rely on your consent for processing, you can withdraw it at any time.
To exercise any of these rights or if you have any privacy-related inquiries, please contact us at firstname.lastname@example.org.
Complaints and Supervisory Authority
If you have any concerns about how we process your personal information, please contact us in the first instance. You also have the right to lodge a complaint with your supervisory authority if you believe that your rights have been infringed.
Terms and Conditions