Privacy Notice
1 Who we are?
This website is owned and operated by Adanola Limited. References to "we", "our" or "us" in this privacy notice means Adanola. Adanola have a relationship with you and any reference to "you", "your" and "yourself" is a reference to you as an individual who has a relationship with us or is in contact with us.
2 Purpose of this privacy notice and why we are committed to being transparent
This privacy notice aims to give you information about how we process the personal data we collect about you or you provide to us when you visit our website (www.adanola.com) and when you engage with us through our social media channels.
We are committed to ensuring your privacy is protected and that we comply with data protection laws. For the purposes of data protection laws, we are what is known as the data 'controller' of your personal data. Data protection laws say that the personal data we hold about you must be:
(a) Used lawfully, fairly and in a transparent way.
(b) Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
(c) Relevant to the purposes we have told you about and limited only to those purposes.
(d) Accurate and kept up to date.
(e) Kept only as long as necessary for the purposes we have told you about.
(f) Kept securely.
It is important that you read this privacy notice before you begin interacting with us, so that you understand how and why we will process your personal data.
3 Who this notice applies to
This privacy notice applies to users of our website and our social media channels. This privacy notice will not apply in relation to you to the extent you are currently applying or have applied to work for Adanola or you are one of our current or former employee of Adanola.
4 Contact details
If you have any questions about this privacy notice or how we treat your personal data, please contact us at dataprotection@adanola.com.
5 Third-party links
Please be aware that our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
6 How we use your Personal Data
In the table below, we have set out the different ways in which we use your personal data and the lawful basis we rely upon:
Category of Individuals |
Purpose/Activity |
What information is collected |
Lawful basis for processing |
Website Visitors |
To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). To deliver relevant website content to you and measure or understand the effectiveness of advertising. To monitor use of our website and to use data analytics to improve our website, products/services, marketing, customer relationships and experiences. |
Technical data such as internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website. Usage Data including information about how you use our website and any online surveys of facilities available on our website. |
Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise). Necessary for our legitimate interests (to assess how customers use our products, to develop them, to grow our business and to inform our marketing strategy). Necessary for our legitimate interests (to define types of customers for our products, to keep our website updated and relevant, to develop our business and to inform our marketing strategy). |
Adanola Account holders and new registrations |
When you register with us to create an Adanola account. When you sign into your Adanola account. |
Name, email address, password, delivery address, birthday (if provided but not necessary), previous purchase history, favourited products. |
Necessary for the fulfilment of the contract formed between us when you purchase one of our products. Necessary in our legitimate interests to sell our products to you and to remember you when you sign into your account. Consent for marketing purposes is also obtained separately when you sign up for an Adanola account.
|
Purchasers of our products |
To administer the purchase of a product through our website (or by clicking through a link to a product through our social media channels). To communicate with you about your order. To manage your returns, refunds and any complaints. To detect fraud or theft in connection with online sales. |
Name, billing address, delivery address, payment card details. |
Necessary for the fulfilment of the contract formed between us when you purchase one of our products. In order to comply with our legal obligations when selling products to you. To establish, exercise or defend our legal rights. |
Adanola Rewards Club Members |
To administer the points and perks applicable to the rewards scheme, in relation to purchases made by loyalty members To fulfil offers such as the points rewards offered in relation to birthdays, and vouchers. |
Name, email address, account purchase history, date of birth, other account details, the date of signing up to the scheme.
|
Necessary in our legitimate interests to administer the perks and benefits of the loyalty scheme for products of similar nature to those you have already purchased.
Consent for marketing purposes is also obtained separately when you sign up for an Adanola account.
|
Individuals who we market to |
Where you have favourited, saved or bought one of our products, to market similar products to you, or for customers who have signed up to our newsletter. |
Name, email address, phone number. |
Necessary in our legitimate interests to market out products. You can opt-out to marketing at any time by contacting us at dataprotection@adanola.com or by clicking the unsubscribe link in our email. Consent for marketing purposes is also obtained separately when you sign up for an Adanola account.
|
Individuals who engage with us through our social media platforms such as Instagram, TikTok, Facebook, and Pinterest |
Where you send us a direct message so that we can respond to you. Where you mention us in a tag, we may repost your post on our social media. |
Name, email, social media handle name, and the information you provide in your direct message The contents of your post, including your image or video. |
Necessary in our legitimate interests to respond to messages and to promote our business. You can opt-out to our use of your post at any time by contacting us at dataprotection@adanola.com |
Individuals who contact us by email |
To respond to enquires made through our email addresses. To respond to enquires made through our Contact Us page. |
Name, email, and the information you provide in your email. Name, email, order ID (if applicable), images of product faults (if applicable), tracking number of order (if applicable). |
Necessary for our legitimate interests in responding to your email or Customer Service enquiry. |
Individuals who contact us using the Dixa Chatbot |
To respond to enquires made through our email addresses. To respond to enquires made through our Contact Us page. |
Name, email, and the information you provide in your email. Name, email, order ID (if applicable), images of product faults (if applicable), tracking number of order (if applicable). Data will be provided to Dixa (see paragraph 7.1 of this policy). |
Necessary for the fulfilment of the contract formed between us when you purchase one of our products. Necessary to comply with our legal obligations when selling products to you. Necessary for our legitimate interests in responding to your email or Customer Service enquiry. |
6.1 We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason, and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you by updating this privacy notice on our website, so please check back regularly for any updates.
6.2 Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law. We will rarely need to rely on your consent to process any of your personal information.
7 We aim not collect personal data about children
7.1 Our website, promotions, materials and other services we provide are not intended for use by anyone under the age of 18 years, and we do not knowingly collect personal data relating to anyone under the age of 18 years old unless for some reason you provide it to us.
8 Who has internal access to your personal data?
8.1 Your personal data may be shared internally with our employees, (including with our managers, researchers, the procurement, media, insights, events, campaign, tech and legal teams, and senior employees in the business area involved in your relationship with us) where access to your personal data is necessary for the performance of their roles. We only provide access to your personal data to those of our staff who need to have access to your personal information.
9 Who do we share your personal data with externally?
We may share your personal data with the categories of third parties, we have provided further information of the third parties we will share your data with as set out below:
9.1 third party payment processing services who have their own privacy notices which you should consider, including (but not limited to):
(a) Klarna;
(b) Klaviyo;
(c) Dixa;
(d) Loyalty Lion;
(e) TrustPilot;
(f) Google Payments;
(g) PayPal; and
9.2 social media platforms tools to advertise our products;
9.3 third parties who we work with in order for us to deliver our products to you and manage any returns;
9.4 third parties who we work with in order for us to provide our services, including Yotpo and LoyaltyLion who help us to manage the Adanola loyalty scheme;
9.5 service providers who provide IT, administration and HR services to us;
9.6 professional advisers including funders or potential funders, lawyers, bankers, auditors, tax advisers and insurers who provide consultancy, banking, legal, insurance, tax and accounting services;
9.7 regulators and other public authorities who regulate our activities in the jurisdictions in which we operate;
9.8 fraud prevention agencies and crime prevention agencies; and
9.9 third parties to whom we sell, acquire, transfer or merge parts of our business or our assets.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We do not disclose personal information to anyone else except as set out above, unless we are legally entitled to do so. We may provide third parties with aggregate statistical information and analytics about users of our products and services, but we will make sure that no one can be identified by/from this information before we disclose it.
10 International Transfers
We may transfer personal data to countries other than the country in which the data was originally collected (for example, outside the UK/EEA) in order to provide you with our products. These countries may not have the same data protection laws as the country in which you initially provided the information and may not provide the same level of protection.
If we transfer personal information to countries outside of the UK or EEA, we may rely on a decision from the European Commission or UK Information Commissioner's Office determining that the country provides an adequate level of protection to the data protection laws. Alternatively, we may rely on appropriate safeguards in respect of transfers of personal information to a country outside of the UK, for example, by entering into international data transfer agreements or the UK/ European standard contractual clauses.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK and how this is protected..
How do we keep your personal data secure?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know as set out above. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
10.1 We will develop, implement and maintain safeguards appropriate to our size, scope and business, our available resources, the amount of personal data that we process, and identified risks (including use of encryption and pseudonymisation where applicable). We will regularly evaluate and test the effectiveness of those safeguards to ensure security of our processing of personal data. The safeguards put in place to protect your personal data include, but are not limited to:
(a) Encryption and pseudonymisation: Protecting data by making it unreadable without a decryption key.
(b) Antivirus and antimalware software: Detecting and preventing malicious software.
(c) Firewalls and intrusion detection systems: Monitoring and controlling incoming and outgoing network traffic.
(d) Role-based access controls, limiting system users' only access to those systems necessary for them to perform their duties and ensuring your data is processed only for the purposes detailed in this privacy notice.
(e) Deployment of information security tools (eg virus protection procedures, data loss prevention etc.).
(f) Annual and ad-hoc IT health checks and penetration tests by independent organisations and certified test teams; with follow-up treatment of identified vulnerabilities.
(g) Procedures for the reporting of data breaches in accordance with data protection laws.
11 How long will we retain your personal data?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Subject to the above, our general retention periods are as follows:
Users of the website and social media channels
When you no longer have an account with us or where you delete our social media interactions.
12 What are your legal rights?
Under certain circumstances, you have rights under data protection laws in relation to your personal data. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person or dealt with by a person who has no right to do so.
The rights available to you are:
12.1 The right to withdraw your consent
You can withdraw any consent you have given to us, although this will only be relevant where we are relying on your consent as a lawful basis to use your personal data (but it is an absolute right). Once we have received notification that you have withdrawn your consent, we will no longer process your personal data for the purpose or purposes for which you originally gave your consent, unless we have another lawful basis for doing so.
12.2 The right to access personal data we hold about you
You can contact us to request a copy of the data we hold about you, as well as why we process that data, who has access to it, and where we got it.
12.3 The right to correct, restrict, object and update the personal data we hold about you
If the data we hold about you is out of date, incomplete or incorrect, please let us know and we will ensure that it is updated.
12.4 The right to have your personal data erased
In some circumstances if you no longer wish us to process your data, you can request that we erase it. When we receive your request, we will confirm whether the data has been deleted, or tell you the reason why it cannot be deleted.
12.5 The right to object to processing of your personal data
You have the right to request that we stop processing your data. Upon receiving the request, we will contact you to tell you if we are able to comply or if we have lawful grounds to continue, for example if the data is required to allow us to provide you with services or to comply with legal or regulatory obligations. If data is no longer processed, we may continue to hold your data to comply with your other rights.
12.6 The right to data portability
You have the right to request that we transfer your data to another controller. Once we have received your request, we will comply where it is feasible to do so.
12.7 Automated decision making and profiling
You have the right not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affect you. We may undertake automated processing when you purchase a product to check that your order doesn't have any fraudulent characteristics, and for the purposes of the Adanola Rewards Club. Please note that in the event you opt-out to this processing, we may not be able to process your order.
12.8 The right to complain
You have the right to make a complaint at any time to the ICO, the UK supervisory authority for data protection issues (ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
13 Marketing - Opting out
13.1 You can ask us to stop sending you marketing messages at any time by contacting us dataprotection@adanola.com or (where the communication is an email) you can click the "unsubscribe" link contained in the email.
13.2 Please note it may take up to five working days in order for us to action your request within our systems.
If you wish to exercise any of the rights set out above, please contact us at dataprotection@adanola.com.
Updates to this privacy notice
We keep our privacy notice under regular review. We may update our website and this privacy notice from time to time in which case we shall update you.
Last updated: 11 April 2025
Thank you
Your notification has been registered.