Privacy Policy 2018-05-28T11:07:21+00:00

Privacy Policy

Go La La Privacy Policy in Compliance with EU GDPR regulations that are in force from 25thMay 2018.

This Privacy Policy describes how and when we collect, use, and share information when you purchase an item from us, contact us, or otherwise engage with us either by being a wholesale customer or if you use our services through third party selling sites such as Etsy.com, eBay.co.uk, Amazon.co.uk or their related sites or other online shopping services.

This Privacy Policy does not apply to the practices of third parties that I do not own such as Amazon, eBay or Etsy.  You can reference Their Privacy Policies to learn more about their privacy practices at their relevant websites or by contacting their data control centres.  Etsy’s privacy policy can be viewed here, Ebay can be viewed here, while Amazon’s privacy policy is available here.

Information we Collect.

To enable us to fulfil your order, you must provide us with certain information (which you authorised eBay or Etsy or Amazon to provide to us) without which we would be unable to send your products: such as your name, email address, postal address, payment information, and the details of the product that you’re ordering. You may also choose to provide us with additional personal information (for a custom order or personalised card for example), if you contact us directly.

Why we Need Your Information and How we Use It

We rely on a number of legal bases to collect, use, and share your information, including:

as needed to provide our services, such as when we use your information to fulfil your order, to settle disputes, or to provide customer support;
when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for our mailing list;
if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
as necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving our services. We use your information to provide the services you requested and in my legitimate interest to improve our services; and 2) Compliance with the Etsy and eBay Seller Policy and Terms of Use. We use your information as necessary to comply with our obligations under the Etsy and eBay Seller Policies and Terms of Use.

Information Sharing and Disclosure

Information about our customers is important to our business. We share your personal information for very limited reasons and in limited circumstances, as follows:

Etsy, Ebay and Amazon. We share information with these companies as necessary to provide you our services and comply with our obligations under their Seller Policies and Terms of Use.

Service providers. We engage certain trusted third parties to perform functions and provide services to our shop, such as delivery companies, couriers and Royal Mail.  Also, when fulfilling wholesale or retail orders, we will often need to use a third-party printing or fulfilment company to print and distribute the orders to the customer.  We will share your personal information with these third parties, but only to the extent necessary to perform these services, which means they may need a contact name, contact address and possibly an email or telephone contact telephone number.  We share no other personal information with them.

We may also share personal data with specific third parties in order for us to complete the financial transactions you are required to make:

  • WordPress and Woocommerce is the ecommerce platform we use for our website. Their privacy policies will tell you all the details you need to know about what information is collected from you when you use our website or buy a Go La La product, and how they may use and share it when we use them to support us with processing orders, risk and fraud screening, authentication and payments. You can read the Woocommerce privacy policy here.
  • Paypal is also used for completing payments through eBay, and some of our business customers actually request invoices via Paypal, which require some personal information. The financial details are not passed onto us.  Paypal’s Privacy Policy is here.

How we may otherwise collect data

There are lots of different ways in which we may collect data, or receive data, and you can see an explanation of the main ways below.

You may give us data when you interact with us

You may give us data by filling in forms or by corresponding with us by post, phone, email or through chat or social media. This includes data you provide when you:

  • sign up to receive our newsletter and or emails;
  • make enquiries or request information be sent to you;
  • create an account on our website;
  • order our products, either from our own website or through a third party seller;
  • ask for direct marketing to be sent to you;
  • engage with us on social media for example Facebook, Instagram or Twitter;
  • enter a competition or promotion
  • contact customer services
  • leave comments or reviews on our products or services.

Our email lists are managed using a third party provider Mailchimp.  We use Mailchimp to send out mailshots to customers to advise of new ranges, new designs, offers and other information that we need to send to our customers at any time.  You can opt out at any time and there is an opt out link at the footer of each communication.  Mailchimp Privacy Policy can be viewed here.

We are a company that provides Greeting Cards and associated products and as such we do not need to collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. If you share personal data referred to in this category we will not know and can only treat it as personal data. If you post any of this data on the forum, you have chosen to make it public online, and anyone can read it.

The table below gives you a breakdown of the details of how we are using your personal data, the types of personal data that applies to and why it is we can do this. When we explain why, we will identify the relevant category from Explaining the legal bases for using personal data above, and, where it’s based on being able to do so for our legitimate interests, we will highlight what that legitimate interest is.

We may process your personal data for more than one legal basis depending on how we are using it.

How we are using the personal data  What types of personal data do we use to do that  Why it is that we can do that 
To register you as a new customer Identity, Contact Performance of a contract with you
To manage a potential sale with you, including letting you know you have left products in your basket without checking out Identity, Contact
Financial, Transaction, Marketing and Communications
Necessary for our legitimate interests (including being able to progress purchases of products by our customers)
To process and deliver your order including manage payments and collect and recover money owed to us Identity, Contact
Financial, Transaction, Marketing and Communications
Performance of a contract with you
Necessary for our legitimate interests (including to recover debts due to us)
To manage our relationship with you, including notifying you about changes to our terms or privacy policy Identity, Contact, Profile, Marketing and Communications Performance of a contract with you
Necessary to comply with a legal obligation
Necessary for our legitimate interests (to keep our records updated)
To ask you to leave a review or take a survey Identity, Contact, Profile, Marketing and Communications Necessary for our legitimate interests (to study how customers use our products/services)
To enable you to take part in a prize draw or competition Identity, Contact, Profile, Usage, Marketing and Communications Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To deliver direct marketing to you Identity, Contact, Profile, Usage, Marketing and Communications, Technical, Tracking Necessary for our legitimate interests (to promote our own business and our products and services), unless the law requires that the direct marketing be based on consent
Consent, before we share your personal data with any company outside the Huel group of companies for their own marketing purposes
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) Identity, Contact, Technical, Tracking Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud)
Necessary to comply with a legal obligation
To deliver relevant website content to you and measure or understand the effectiveness of the content we have on our website Identity, Contact, Profile, Usage, Marketing and Communications, Technical
Tracking
Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To deliver relevant advertisements to you and measure or understand the effectiveness of the advertising we serve to you Identity, Contact, Profile, Usage, Marketing and Communications, Technical
Tracking
Necessary for our legitimate interests (to promote our business and products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences Technical, Usage Necessary for our legitimate interests (to define types of customers for our products/services, to keep our website updated and relevant, to develop our business and to inform our product and marketing strategy)
To make suggestions and recommendations to you about products/services that may be of interest to you Identity, Contact, Technical, Usage, Profile Necessary for our legitimate interests (to develop our products/services and grow our business)
To prevent and detect unlawful acts Identity, Contact, Financial, Transaction, Technical, Tracking Necessary for our legitimate interests (to protect our business and our customers by way of undertaking fraud monitoring and suspicious transaction monitoring)
Necessary to comply with a legal or contractual obligation to share personal data for the purposes of law enforcement
To administer our business and keep proper records All relevant data categories Necessary to comply with a legal obligation
Necessary for our legitimate interests (to administer our business and keep proper records)
In order to resolve legal claims or disputes involving you or us All relevant data categories, depending on the nature of the allegation or claim Necessary for our legitimate interests (to bring or defend a claim, whether in court proceedings or in an administrative or out of court settlement, for the protection or assertion of our legal rights, your legal rights or the legal rights of others)

 

COOKIES

Tracking Data, and in particular cookies, help us to deliver website and social advertising that we believe is most relevant to you and to potential new Go La La customers. The cookies used for this purpose are often placed on our website by specialist organisations – and this is also why when you’ve been on Huel website, you might see content from our website again. This is called retargeting. Cookies can also tell us if you have seen a specific advert, and how long it has been since you have seen it. This is helpful, because it means we can control the effectiveness of our adverts and control the number of times people might be shown our adverts. Cookies also help us understand if you’ve opened a marketing email because we don’t want to send you things you don’t read.

If you want more information about Tracking Data, in particular cookies, keep reading.

Almost all the cookies that relate to advertising are part of third party online advertising networks. If you’d like to read about how you can control which adverts you see online, see opt-out programs established by the European Interactive Digital Advertising Alliance and the Digital Advertising Alliance (United States). We do not control cookies which are set by advertising networks.

A cookie is a small file of letters and numbers that we store via your browser.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

We use the following categories of cookies:

  • Strictly necessary cookies. These are cookies which are needed to make the website work properly. They include, for example, cookies that enable you to log in, use a shopping cart or make secure payments.
  • Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
  • Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). These also allow us to tell if you’ve left any products in your basket without checking out.
  • Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website relevant to your interests and for advertising and retargeting purposes.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site. For further information about how to block cookies, please refer to your browser ‘help’ section or All About Cookies.

Please be aware that if you delete your cookies, two things will happen:

  • We will no longer know that you’ve opted out of online behavioural advertising, so our adverts will still appear to you on other websites.
  • We will no longer automatically recognise any website preferences that you have set.

Compliance with laws

We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

Data Retention
We retain your personal information only for as long as necessary to provide you with our services and as described in our Privacy Policy. However, we may also be required to retain this information to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements.

Transfers of Personal Information Outside the EU
We will generally not store or process your details outside the EU. If we do need to store and process your information through third-party hosting services in the US and other jurisdictions we would endeavour to only use Privacy Shield certified companies in the US or equivalent in other regions.

Your Rights

If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. We describe these rights below:

Access. You may have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information below.

Change, restrict, delete. You may also have rights to change, restrict our use of, or delete your personal information. Absent exceptional circumstances (like where we am required to store data for legal reasons) we will generally delete your personal information upon request.  The easiest way to opt out is to use the unsubscribe link at the bottom of our communications or just email us at info@golala.co.uk

Object. You can object to (i) our processing of some of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent to receive them. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.

Complain. If you reside in the EU and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

How to Contact Us
For purposes of EU data protection law, I, John Higgins, on the behalf of Go La La, am the data controller of your personal information. If you have any questions or concerns, you may contact me at info@golala.co.uk Alternately, you may mail me at:
John Higgins, Go La La, 2/7a Benedict Street, Glastonbury, Somerset. BA6 9NE

 

0