We are BeOlea Limited (‘BeOlea’ ‘we’ ‘us’ or ‘our’), a company registered in England and Wales under company number 12656871. Our registered office is at 42 Upper Berkeley Street, London W1H 5PW.
We collect, use and are responsible for certain personal information about you. When we do so we are regulated by data protection laws, including the Data Protection Act 2018 (‘Data Protection Legislation’) which applies across the United Kingdom and complements the European Union‘s General Data Protection Regulation. We are responsible as ‘controller’ of that personal information for the purposes of those laws.
CHANGES TO THIS PRIVACY AND COOKIES NOTICE
This Privacy and Cookies Notice was last updated on 20 August 2020. We may change this Privacy and Cookies Notice from time to time when we do, we will inform you via a banner at the top of the Site (as defined below) for two weeks.
Online customerswww.beolea.com (‘Site’) is operated by BeOlea. We collect information that you provide to us by filling in forms on our Site. This includes information provided at the time of registering to use our Site (where applicable), subscribing to our services (where applicable), ordering products through our Site, personalising our Site with your preferences, posting material or requesting further services.
Placing an order
We keep details of the transactions you make through our Site and the fulfilment of orders. This includes payment details, your name, billing and postal addresses, the items you ordered and your email and telephone number.
If you checkout as a guest we will store your order details; name, email address, billing and shipping address, order details and payment method.
We collect details of your visits to our Site including, but not limited to, if applicable which URL you used to get to our Site, searches you make, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access. We collect these details to better understand how our customers arrive on and use our Site and enable us to improve them.
Payment of an order
We use a third-party supplier, to provide our payment gateway and to record our order fulfilment. This includes name, billing and shipping address and order amount which will check if your payment passes fraud security.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
Dispatching your order
We use partners to fulfil our order delivery such as DHL and Royal Mail. We pass your name, telephone and postal address plus order value (for insurance purposes) so that they can track and deliver your parcel and communicate with you via telephone or email to provide the delivery time details.
If you are logged into your account whilst on the Site, the Site will track purchase choices made and record them in your ‘My Account’ order history. These choices are then fed into our cloud based predictive intelligence engine which in turn will suggest other related products that may compliment and add value to your existing purchase choices, known as personalised sorting rules or product recommendations.
If you are a member of our programme, your online purchase history will be stored in your accounts history.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. Although kept on your account, your password is not visible to us.
Security of shared information
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted to our Site, any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access and require our suppliers to do the same.
Third party sites
Our Site may, from time to time, contain links to and from the sites of our partner networks, advertisers and affiliates. If you follow a link to any of these sites, please note that these sites have their own privacy and cookies policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these sites.
Google Analytics tracking
Our Site tracks and gathers data using a third-party app by Google called Google Analytics. This stores information anonymously on Google’s servers. It gathers information such as a visitor’s country of origin, the device used, pages visited and basket value. We use these stats to identify any pinch points for our customer journeys and then use it to improve their journey through our Site. These statistics help us to identify the most common devices used to visit our Site, so we can target specific roadmap improvements for those commonly used platforms (mobile, iPad etc.). Google Analytics only reflects the code update being applied to anonymise your IP address therefore the user’s identity cannot be tracked back to their online account details.
What are cookies?
We don’t store personally identifiable information such as credit card details in the cookies we create, but we do use encrypted information gathered from them to help improve your experience of the Site. For example, they remember the items you have in your basket and also recommend related products to show you when you’re browsing.
Third Party Cookies
When you visit the Site you may notice some cookies that aren’t related to us. If you go on to a web page that contains embedded content, for example from YouTube, you may be sent cookies from these websites. We don’t control the setting of these cookies, so please check the third-party websites for more information about their cookies and how to manage them.
- Google – These cookies help us collect and analyse visitor information such as browser usage, new visitor numbers and response to marketing activity. That information helps us to improve the Site and your shopping experience, and to make our marketing campaigns relevant.
- Affiliate Window – These cookies show us how you found our Site and which website you came from. This helps us know which of our online marketing channels is most effective and enable us to reward some external websites for directing you to us.
- YouTube – These cookies allow us to display video content from YouTube on our Site.
- Mailchimp - These cookies allow us to communicate with you by newsletter.
If you take the opportunity to ‘share’ content from BeOlea content with friends through social networks – such as Facebook and Twitter - you may be sent cookies from these websites. We don’t control the setting of these cookies, so please check the third–party websites for more information about their cookies and how to manage them.
Changes to our cookies notice
Any changes we may make to our Cookies Notice in the future will be posted on this page.
We will keep details of purchases made through our till system and the fulfilment of your orders. This may include payment details, your name, email address and the items ordered. We will ask you for your email address and postcode for us to communicate and gather demographic locations on our store customers, this will be explained to you when asked for your details at the point of ordering and you can choose not to give this information at any time.
When you join our loyalty program the following details are collected from the form you fill in: name, address, email address, date of birth (optional), time and location of signing up for your loyalty card, marketing opt-in preference and acceptance of our terms and conditions.
We use a third-party supplier to support our loyalty program. For more information on the terms and conditions for our loyalty card please read our Loyalty Terms and Conditions.
Unsubscribing from marketing communications
If you have consented to us sending you marketing information you have the right to change your mind and ask us not to send you marketing information any more. We will always ask you (before collecting your information) if you would like to receive information from us for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your information.
Catalogue Mailings / Postcards: Please email firstname.lastname@example.org with your full name, customer no. (if you have one) and your postal address and we will remove you from our postal mailings.
Emails: If you would like to unsubscribe from any email newsletter(s) you can also click on the ‘unsubscribe’ button at the bottom of the email newsletter. It may take up 72 hours for this to take place. Or contact email@example.com.
Special category data
Generally, we do not seek to collect special category data that is, information relating to: race or ethnic origin; political opinion; religious or other similar beliefs; trade union membership; physical or mental health; sexual orientation; criminal records. We recommend that you do not provide such information to us. If you choose to do so for any reason, this will mean that you have given (and we accept) your explicit consent for us to use that information for the reasons described in this notice, or as explained at the time you provide the information.
Disclosure of your information
We do not sell our customer lists and we will never pass your details on to third parties for any purpose unless you have consented to us doing so or it is for the following reasons:
- in the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets;
- in the event we outsource any of our business functions under which we collect or store your information (including the hosting and maintenance of our Site, email marketing, catalogues and postal mailings and statistical reports and analysis) in which case we will ensure that any such service provider keeps your information confidential and adheres to at least the same obligations of security with regard to your information as undertaken by us; or
- we have a legitimate business reason to do so; or
- if we are under a duty to disclose or share your personal information in order to comply with any legal or contractual obligation, or
- in order to enforce or apply our Terms and Conditions and other agreements; or
- to protect our rights, property, or safety of our employees, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Under the Data Protection Legislation, you have a number of important rights. In summary, those include rights to:
- fair processing of information and transparency over how we use your use personal information;
- access to your personal information and to certain other supplementary information that this Privacy and Cookies Notice is already designed to address;
- require us to correct any mistakes in your information which we hold;
- require the erasure of personal information concerning you in certain situations;
- receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
- object at any time to processing of personal information concerning you for direct marketing;
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
- object in certain other situations to our continued processing of your personal information;
- otherwise restrict our processing of your personal information in certain circumstances;
- you can claim compensation for damages caused by our breach of any data protection laws.
If you would like to exercise any of those rights, please:
- email firstname.lastname@example.org
- let us have enough information to identify you full name, address and if you’re an existing customer
- let us have proof of your identity and address a copy of your driving licence or passport and a recent utility or credit card bill
- let us know the information to which your request relates including any invoice or customer number, if you have them
Transfer of information out of EEA
The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services (i.e. management of survey processes etc.). Such countries do not have the same data protection laws as the United Kingdom and EEA. Any transfer of your personal data will be subject to appropriate contractual arrangements that are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal information. By submitting your personal information to us, you agree to this transfer, storing or processing.
We may transfer your personal information to the following which are located outside the EEA as follows:
- Shopify who provide our ecommerce platform
- MailChimp who provide our email marketing service
- SurveyMonkey who administer some surveys on our behalf
Shopify, MailChimp , SurveyMonkey Inc. all participate in and have certified its compliance with the EU-U.S. Privacy Shield framework set out by the U.S. Department of Commerce and the European Union and will transfer your personal data as part of its delivery of its service to us.
For more information on the EU–U.S. Privacy Shield, please visit the U.S. Department of Commerce’s Privacy Shield website at www.privacyshield.gov
The third party service provider list above will be updated from time to time.
How we keep your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.