Information we Collect.
To enable us to fulfil your order, you must provide us with certain information (which you authorised eBay or Etsy or Amazon to provide to us) without which we would be unable to send your products: such as your name, email address, postal address, payment information, and the details of the product that you’re ordering. You may also choose to provide us with additional personal information (for a custom order or personalised card for example), if you contact us directly.
Why we Need Your Information and How we Use It
We rely on a number of legal bases to collect, use, and share your information, including:
as needed to provide our services, such as when we use your information to fulfil your order, to settle disputes, or to provide customer support;
when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for our mailing list;
if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
Information Sharing and Disclosure
Information about our customers is important to our business. We share your personal information for very limited reasons and in limited circumstances, as follows:
Service providers. We engage certain trusted third parties to perform functions and provide services to our shop, such as delivery companies, couriers and Royal Mail. Also, when fulfilling wholesale or retail orders, we will often need to use a third-party printing or fulfilment company to print and distribute the orders to the customer. We will share your personal information with these third parties, but only to the extent necessary to perform these services, which means they may need a contact name, contact address and possibly an email or telephone contact telephone number. We share no other personal information with them.
We may also share personal data with specific third parties in order for us to complete the financial transactions you are required to make:
How we may otherwise collect data
There are lots of different ways in which we may collect data, or receive data, and you can see an explanation of the main ways below.
You may give us data when you interact with us
You may give us data by filling in forms or by corresponding with us by post, phone, email or through chat or social media. This includes data you provide when you:
- sign up to receive our newsletter and or emails;
- make enquiries or request information be sent to you;
- create an account on our website;
- order our products, either from our own website or through a third party seller;
- ask for direct marketing to be sent to you;
- engage with us on social media for example Facebook, Instagram or Twitter;
- enter a competition or promotion
- contact customer services
- leave comments or reviews on our products or services.
We are a company that provides Greeting Cards and associated products and as such we do not need to collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. If you share personal data referred to in this category we will not know and can only treat it as personal data. If you post any of this data on the forum, you have chosen to make it public online, and anyone can read it.
The table below gives you a breakdown of the details of how we are using your personal data, the types of personal data that applies to and why it is we can do this. When we explain why, we will identify the relevant category from Explaining the legal bases for using personal data above, and, where it’s based on being able to do so for our legitimate interests, we will highlight what that legitimate interest is.
We may process your personal data for more than one legal basis depending on how we are using it.
|How we are using the personal data||What types of personal data do we use to do that||Why it is that we can do that|
|To register you as a new customer||Identity, Contact||Performance of a contract with you|
|To manage a potential sale with you, including letting you know you have left products in your basket without checking out||Identity, Contact
Financial, Transaction, Marketing and Communications
|Necessary for our legitimate interests (including being able to progress purchases of products by our customers)|
|To process and deliver your order including manage payments and collect and recover money owed to us||Identity, Contact
Financial, Transaction, Marketing and Communications
|Performance of a contract with you
Necessary for our legitimate interests (including to recover debts due to us)
Necessary to comply with a legal obligation
Necessary for our legitimate interests (to keep our records updated)
|To ask you to leave a review or take a survey||Identity, Contact, Profile, Marketing and Communications||Necessary for our legitimate interests (to study how customers use our products/services)|
|To enable you to take part in a prize draw or competition||Identity, Contact, Profile, Usage, Marketing and Communications||Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)|
|To deliver direct marketing to you||Identity, Contact, Profile, Usage, Marketing and Communications, Technical, Tracking||Necessary for our legitimate interests (to promote our own business and our products and services), unless the law requires that the direct marketing be based on consent
Consent, before we share your personal data with any company outside the Huel group of companies for their own marketing purposes
|To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)||Identity, Contact, Technical, Tracking||Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud)
Necessary to comply with a legal obligation
|To deliver relevant website content to you and measure or understand the effectiveness of the content we have on our website||Identity, Contact, Profile, Usage, Marketing and Communications, Technical
|Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)|
|To deliver relevant advertisements to you and measure or understand the effectiveness of the advertising we serve to you||Identity, Contact, Profile, Usage, Marketing and Communications, Technical
|Necessary for our legitimate interests (to promote our business and products/services, to develop them, to grow our business and to inform our marketing strategy)|
|To use data analytics to improve our website, products/services, marketing, customer relationships and experiences||Technical, Usage||Necessary for our legitimate interests (to define types of customers for our products/services, to keep our website updated and relevant, to develop our business and to inform our product and marketing strategy)|
|To make suggestions and recommendations to you about products/services that may be of interest to you||Identity, Contact, Technical, Usage, Profile||Necessary for our legitimate interests (to develop our products/services and grow our business)|
|To prevent and detect unlawful acts||Identity, Contact, Financial, Transaction, Technical, Tracking||Necessary for our legitimate interests (to protect our business and our customers by way of undertaking fraud monitoring and suspicious transaction monitoring)
Necessary to comply with a legal or contractual obligation to share personal data for the purposes of law enforcement
|To administer our business and keep proper records||All relevant data categories||Necessary to comply with a legal obligation
Necessary for our legitimate interests (to administer our business and keep proper records)
|In order to resolve legal claims or disputes involving you or us||All relevant data categories, depending on the nature of the allegation or claim||Necessary for our legitimate interests (to bring or defend a claim, whether in court proceedings or in an administrative or out of court settlement, for the protection or assertion of our legal rights, your legal rights or the legal rights of others)|
Tracking Data, and in particular cookies, help us to deliver website and social advertising that we believe is most relevant to you and to potential new Go La La customers. The cookies used for this purpose are often placed on our website by specialist organisations – and this is also why when you’ve been on Huel website, you might see content from our website again. This is called retargeting. Cookies can also tell us if you have seen a specific advert, and how long it has been since you have seen it. This is helpful, because it means we can control the effectiveness of our adverts and control the number of times people might be shown our adverts. Cookies also help us understand if you’ve opened a marketing email because we don’t want to send you things you don’t read.
If you want more information about Tracking Data, in particular cookies, keep reading.
Almost all the cookies that relate to advertising are part of third party online advertising networks. If you’d like to read about how you can control which adverts you see online, see opt-out programs established by the European Interactive Digital Advertising Alliance and the Digital Advertising Alliance (United States). We do not control cookies which are set by advertising networks.
A cookie is a small file of letters and numbers that we store via your browser.
We use the following categories of cookies:
- Strictly necessary cookies. These are cookies which are needed to make the website work properly. They include, for example, cookies that enable you to log in, use a shopping cart or make secure payments.
- Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). These also allow us to tell if you’ve left any products in your basket without checking out.
- Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website relevant to your interests and for advertising and retargeting purposes.
You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site. For further information about how to block cookies, please refer to your browser ‘help’ section or All About Cookies.
Please be aware that if you delete your cookies, two things will happen:
- We will no longer know that you’ve opted out of online behavioural advertising, so our adverts will still appear to you on other websites.
- We will no longer automatically recognise any website preferences that you have set.
Compliance with laws
We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.
Transfers of Personal Information Outside the EU
We will generally not store or process your details outside the EU. If we do need to store and process your information through third-party hosting services in the US and other jurisdictions we would endeavour to only use Privacy Shield certified companies in the US or equivalent in other regions.
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. We describe these rights below:
Access. You may have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information below.
Change, restrict, delete. You may also have rights to change, restrict our use of, or delete your personal information. Absent exceptional circumstances (like where we am required to store data for legal reasons) we will generally delete your personal information upon request. The easiest way to opt out is to use the unsubscribe link at the bottom of our communications or just email us at firstname.lastname@example.org
Object. You can object to (i) our processing of some of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent to receive them. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
Complain. If you reside in the EU and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
How to Contact Us
For purposes of EU data protection law, I, John Higgins, on the behalf of Go La La, am the data controller of your personal information. If you have any questions or concerns, you may contact me at email@example.com Alternately, you may mail me at:
John Higgins, Go La La, 2/7a Benedict Street, Glastonbury, Somerset. BA6 9NE