Privacy Notice
Who we are?
This website is owned and operated by Adanola Limited. References to "we", "our" or "us in this privacy notice, means Adanola.
Purpose of this privacy notice
This privacy notice aims to give you information about how we process the personal data we collect about you or you provide to us when you visit our website (www.adanola.com) and when you engage with us through our social media channels.
We are committed to ensuring your privacy is protected and that we comply with data protection laws. For the purposes of data protection laws, we are what is known as the data 'controller' of your personal data.
Who this notice applies to
This privacy notice applies to users of our website and our social media channels and individuals who apply for jobs with us.
Contact details
If you have any questions about this privacy notice or how we treat your personal data, please contact us at dataprotection@adanola.com
Third-party links
Please be aware that our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
How we use your Personal Data
In the table below, we have set out the different ways in which we use your personal data and the lawful basis we rely upon:
|
Category of Individuals
|
Purpose / Activity
|
What information is collected?
|
Lawful basis for processing
|
|
Website Visitors
|
To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
To deliver relevant website content to you and measure or understand the effectiveness of advertising
To monitor use of our website and to use data analytics to improve our website, products/services, marketing, customer relationships and experiences
|
Technical data such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage Data including information about how you use our website and any online surveys of facilities available on our website.
|
Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
Necessary for our legitimate interests (to assess how customers use our products, to develop them, to grow our business and to inform our marketing strategy)
Necessary for our legitimate interests (to define types of customers for our products, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
|
|
Adanola Account holders and new registrations
|
When you register with us to create a Adanola account.
When you sign into your Adanola account.
|
Name, email address, password, delivery address, birthday (if provided but not
necessary), previous purchase history,
favourited products.
|
Necessary in our legitimate interests to sell and market our products to you and to remember you when you sign into your account.
|
|
Purchasers of
our products
|
To administer the purchase of a product through our website [or by clicking through a link to a product through our social media channels].
To communicate with you about your order.
To manage your returns, refunds and any complaints;
To detect fraud or theft in connection with online sales.
|
Name, billing address, delivery address,
payment card details.
|
Necessary for the fulfilment of the contract formed between us when you purchase on of our products.
In order to comply with our legal obligations when selling products to you.
To establish, exercise or defend our legal rights.
|
|
Individuals who
we market to
|
Where you have favourited, saved or bought one of our products, to market similar products to you. |
Name, email address, phone number; |
Necessary in our legitimate interests to market out products. You can opt-out to marketing at any time by contacting us at
dataprotection@adanola.com or by clicking the unsubscribe link in our email. |
Individuals who engage
with us through
our social media platforms
such as Instagram, TikTok,
Facebook, and Pinterest |
Where you send us a direct message so that we can respond to you.
Where you mention us in a tag, we may repost your post on our social media.
|
Name, email, and the information you provide in your direct message
The contents of your post, including your image or video.
|
Necessary in our legitimate interests to respond to messages and to promote our business.
You can opt-out to our use of your post at any time by contacting us at
dataprotection@adanola.com
|
Individuals who contact
us by email |
To respond to enquires made through our email addresses
To respond to enquires made through our Contact Us page
|
Name, email, and the information you provide in your email
Name, email, order ID (if applicable), images of product faults (if applicable), tracking number of order (if applicable)
|
Necessary for our legitimate interests in responding to your email or Customer Service enquiry |
| Job Applicants |
To respond to enquires made through our email addresses
To respond to enquires made through our Contact Us page
To recruit members of staff to fulfil vacant positions and to undertake equal opportunities monitoring
|
Name, email address, contact details, details you provide in our application forms and in your CV, the details of necessary background checks, information from referees and right to work documentation
|
Necessary for us to take required steps before potentially entering into an employment contract with you
Necessary for our legitimate interests (to keep a record of applications in the event of a claim) |
Who we share your personal data with?
We may share your personal data with the categories of third parties set out below:
→ third party payment processing services who have their own privacy notices which you should consider, including
— Klarna;
— Google Payments;
— PayPal; and
— Shopify (Shop Pay)
→ social media platforms tools to advertise our products;
→ third parties who we work with in order for us to deliver our products to you and manage any returns;
→ third parties who we work with in order for us to provide our services, including Yotpo who help us to manage the Adanola loyalty scheme;
→ service providers who provide IT, administration and HR services to us;
professional advisers including funders or potential funders, lawyers, bankers, auditors, tax advisers and insurers who provide consultancy, banking, legal, insurance, tax and accounting services;
→ regulators and other public authorities who regulate our activities in the jurisdictions in which we operate;
→ fraud prevention agencies and crime prevention agencies; and
third parties to whom we sell, acquire, transfer or merge parts of our business or our assets;
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
International Transfers
We may transfer personal data to countries other than the country in which the data was originally collected (for example, outside the UK/EEA) in order to provide you with our products. These countries may not have the same data protection laws as the country in which you initially provided the information and may not provide the same level of protection.
If we transfer personal information to countries outside of the UK or EEA, we may rely on a decision from the European Commission or UK Information Commissioner's Office determining that the country provides an adequate level of protection to the data protection laws. Alternatively, we may rely on appropriate safeguards in respect of transfers of personal information to a country outside of the UK, for example, by entering into international data transfer agreements or the UK/ European standard contractual clauses.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK and how this is protected.
How do we keep your personal data secure?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How long will we retain your personal data?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Subject to the above, our general retention periods are as follows:
→ Users of the website and social media channels: when you no longer have an account with us or where you delete our social media interactions; and
→ Job applicants: where your application is unsuccessful, we shall not store your personal data for longer than 6 months. If successful your data will be retained in accordance with our employee privacy notice.
What are your legal rights?
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
→ The right to access personal data we hold about you: You can contact us to request a copy of the data we hold about you, as well as why we process that data, who has access to it, and where we got it.
→ The right to correct, restrict and update the personal data we hold about you: If the data we hold about you is out of date, incomplete or incorrect, please let us know and we will ensure that it is updated.
→ The right to have your personal data erased: In some circumstances if you no longer wish us to process your data, you can request that we erase it. When we receive your request, we will confirm whether the data has been deleted, or tell you the reason why it cannot be deleted.
→ The right to object to processing of your personal data: You have the right to request that we stop processing your data. Upon receiving the request, we will contact you to tell you if we are able to comply or if we have lawful grounds to continue, for example if the data is required to allow us to provide you with services or to comply with legal or regulatory obligations. If data is no longer processed, we may continue to hold your data to comply with your other rights.
→ The right to data portability: You have the right to request that we transfer your data to another controller. Once we have received your request, we will comply where it is feasible to do so.
→ Automated decision making and profiling: You have the right not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affect you. We may undertake automated processing when you purchase a product to check that your order doesn't have any fraudulent characteristics. Please note that in the event you opt-out to this processing, we may not be able to process your order.
→ The right to complain: You have the right to make a complaint at any time to the ICO, the UK supervisory authority for data protection issues (ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Marketing - Opting out
→ You can ask us to stop sending you marketing messages at any time by contacting us dataprotection@adanola.com or (where the communication is an email) you can click the "unsubscribe" link contained in the email.
→ Please note it may take up to 5 working days in order for us to action your request within our systems.
If you wish to exercise any of the rights set out above, please contact us at dataprotection@adanola.com.
Updates to this privacy notice
We keep our privacy notice under regular review. We may update our website and this privacy notice from time to time in which case we shall update you.
Last updated: 22nd May 2023
