Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from flossandjet.com (the “Site”).

Personal information we collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together in table 1 below:

Identity Data	Includes first name, last name, and title
Contact Data	Includes billing address, delivery address, email address and telephone numbers
Financial Data	Includes bank account and payment card details
Transaction Data	Includes details about payments to and from you and other details of products and services you have purchased from us
Technical Data	Includes internet protocol (IP) address, browser type and version, time zone setting and location
Usage Data	Includes the webpages and products that you view on our Site, the Site or search terms that referred to you our Site, and information about how you use and interact with our Site, products and services
Marketing and Communications Data	Includes your preferences in receiving marketing from us and our third parties and your communication preferences

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic and bio-metric data). Nor do we collect any information about criminal convictions and offences. This Site is not intended for children and we do not knowingly collect data relating to children.

HOW IS YOUR PERSONAL DATA COLLECTED?

We use different methods to collect data from and about you, as set out in table 2 below:

Direct interactions

You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

• Purchase our products or services;

• Subscribe to our service or publications;

• Request marketing to be sent to you;

• Enter a competition, promotion or survey

• Or give us some feedback.

Automated technologies or interactions

As you interact with our Site, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server log files, web beacons, tags, pixels and other similar technologies. We may also receive Technical Data about you if you visit other sites employing our cookies. Please see our cookie policy for further details;

https://flossandjet.com/pages/cookie-policy

Third parties or publicly

available sources.

We may receive personal data about you from various third parties as set out below:

• Technical Data from analytics providers such as Google;

• Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as PayPal.

How do we use your personal information?
We have set out below in table 3 a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Purpose/Activity

Type of data

Lawful basis for processing including basis of legitimate interest

To register you as a new customer

(a) Identity

(b) Contact

Performance of a contract with you

To process and deliver your order including:

(a) Manage payments, fees and charges

(b) Collect and recover money owed to us

(a) Identity

(b) Contact

(d) Transaction

(e) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary for our legitimate interests (to recover debts due to us)

To manage our relationship with you which will include:

(a) Notifying you about changes to our terms or privacy policy

(b) Asking you to leave a review or take a survey

(a) Identity

(b) Contact

(a) Performance of a contract with you

(b) Necessary to comply with a legal obligation

(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)

To enable you to partake in a prize draw, competition or complete a survey

(a) Identity

(b) Contact

(d) Marketing and Communications

(a) Performance of a contract with you

(b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)

To administer and protect our business and this Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identity

(b) Contact

(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)

(b) Necessary to comply with a legal obligation

To deliver relevant Site content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

(a) Identity

(b) Contact

(d) Marketing and Communications

(e) Technical

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)

To use data analytics to improve our Site, products/services, marketing, customer relationships and experiences

(a) Technical

(b) Usage

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our Site updated and relevant, to develop our business and to inform our marketing strategy)

To make suggestions and recommendations to you about goods or services that may be of interest to you

(a) Identity

(b) Contact

(d) Usage

(e) Profile

Necessary for our legitimate interests (to develop our products/services and grow our business)

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

- Communicate with you;
- Screen our orders for potential risk or fraud; and
- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

- We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.

- These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

- Your personal information is used with certain trusted third parties to perform functions and provide services to our shop, such as delivery companies and product manufacturers.
We use a production partner called Two Fifteen based in the UK to manufacture and dispatch some of our items directly to you.
We will share with these third parties, but only to the extent necessary to perform these services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you via Mailchimp and other service providers. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

Sharing your personal Information

We may have to share your personal data with the parties set out in table 4 below for the purposes set out in the table in paragraph 3 above.

Third Party	Purpose of disclosure	Link to Third Party Privacy Policy
Mailchimp	To send email communications and manage email subscriber lists	https://mailchimp.com/legal/privacy/
Shopify	To manage the ecommerce functions on the Site	https://www.shopify.com/legal/privacy
Google Analytics	To understand how the Site is used by visitors and customers	https://www.google.com/intl/en/policies/privacy/
PayPal	To take and make payments through our ecommerce Site	https://www.paypal.com/au/webapps/mpp/ua/privacy-full
Facebook	To manage targeted advertising	https://www.facebook.com/legal/FB_Work_Privacy
Royal Mail	To allow for the delivery of purchases to customers	https://www.royalmail.com/privacy-notice
Hermes	To allow for the delivery of purchases to customers	https://international.myhermes.co.uk/content/privacy-policy

International Transfers

Some of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioural advertising
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by using the links below:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Google Analytics: https://tools.google.com/dlpage/gaoptout
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/

Do not track
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

Your rights
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Data retention
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

This version was last updated in November 2019.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

For purposes of EU data protection law, I, Angela Drake, am the Data Controller of your personal information. If you have any questions or concerns, you may contact me at by e‑mail at hello@flossandjet.com