If you have any questions about this policy, including any requests to exercise your legal rights, please contact us at email@example.com.
This policy was last updated on 12th October 2023.
When you create and log into your account:
We will collect your name, email address, phone number, address, company name and address (if applicable) and your payment details. We collect this in order to take steps to enter into a contract with you.
When you make a purchase:
We will collect your name, delivery address, email address, phone number and payment details when you purchase goods from our website. We need to process your personal data in this way to enter into and perform the contract for the item you have purchased from us
To complete your purchase, we share your personal information with our subcontractors who are involved in the purchase process, such as payment providers, as well as credit reference agencies who we use to assess fraud, credit and/or security risks.
Purchase history and Wishlist items:
We will collect your purchase history, for example, what you have bought in the past, what you’ve searched for, what you’ve saved or added to your Wishlist, and when you have asked us to tell you that something is back in stock. We collect this information to help you keep track of items you like, update you when we have new availability and let you share them, your way
When you create a tailored profile:
We will collect your age range, gender, and other non-essential preference data.
We collect this personal information with your consent and use it to provide you with tailored information about products we think you would like. This includes conducting analysis on what you have bought, or searched for, which helps us find out what you like.
To send you marketing information:
Where you have previously expressed an interest in our products or services (and not opted-out of marketing) we will use your name and email address to send you updates, newsletters or information on our loyalty schemes because it is in our legitimate interests to promote our other products and services we think you might be interested in.
Where you are a new customer and have opted in via our website to receive updates on our products and services including newsletters, offers, promotions and new options or information on our loyalty schemes, we will process your personal information to provide you these updates in line with the preferences you have provided and will only use your personal information in this way with your consent.
You can withdraw your consent to marketing at any time by contacting us at firstname.lastname@example.org or, where relevant, by following the unsubscribe link in any marketing communication you receive from us.
To communicate with you:
When you contact us either by phone, email, via our 'contact us' page or via social media, we will usually collect your name, social media handle and contact details, because it’s in our legitimate interest to make sure we can properly respond to your query. We will use this information to provide customer service and support to you.
When you use our website:
• remind you about incomplete purchases, if you are logged into your online account and don’t complete a purchase.
• make our site more secure, to troubleshoot problems and for testing, research and statistical purposes.
• share aggregated, anonymous data with Google to help us optimise our site.
We process your data for these reasons because we have a legitimate interest to provide you with the best experience we can, to improve our site, and make sure it’s kept secure.
You can prevent us from using your personal information in this way by using the 'do not track' functionality in your internet browser. If you enable do not track functionality, our site may be less tailored to your needs and preferences.
When you provide a customer reviews:
Where you provide a customer review to A Little Find or otherwise response to a customer survey or provide any other opinion related to A Little Find or its business, then A Little Find may use some or all of the contents of your review, response and opinions for marketing.
To understand our audience:
We use limited information from third party platforms such as Facebook or Google for audience targeting purposes (e.g., customer segmenting by demographic or interests) to ensure that we are reaching the right people with our products.
When you attend one of our events:
When you attend one of our events or a third-party event we also attend (including virtual events via video conferencing providers including Zoom), we will usually collect your name, address, email address and phone number. We collect this information because it’s in our legitimate interests to promote our business and to know who’s attending our events.
Where you enter a competition we are running:
We will collect your name, email address and any other personal data that forms a part of the competition entry (this may differ depending on the competition). We do this under our legitimate interest to run our competitions effectively and to award the prizes to the winner.
When you apply for a job with us:
We may collect your name, contact details, recruitment information (e.g. right to work documentation and references), test results (inc. psychometric), qualifications, accreditations and any additional information we may receive from our recruitment partners.
We will use your personal information to assess your suitability for our available roles. We do this to perform our contract obligations or to take steps at your request, before entering into a contract. Where we process your right to work documentation, we will do so to comply with our legal obligations.
If our business is sold:
We process your personal information for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal information in this way, the buyer of our business may not be able to provide services to you.
• Business partners, suppliers and subcontractors (for example, payment providers) for the performance of the contract we enter into with them or you.
• Delivery providers and logistics companies for the performance of the contract we enter into with you to deliver the products you order.
• Promotional events and marketing organisations, we do not sell data for marketing purposes, but may share your data with an event organiser or collaboration brand including where we run workshops with co-presenters and offer a promotion alongside a partner brand. We will always tell you before (usually on the event registration form) and you will be given the chance to opt-out before we do this.
• Prospective buyers of our business under our legitimate interest to ensure our business can be continued by the buyer.
We store your data on [our servers / third party servers] which are based [in the UK / both in the UK and outside of the UK].
When working with third parties we may need to transfer your personal data outside of the UK and / or EU.
Whenever we transfer your personal information outside of the UK and the EU, we ensure it receives additional protection as required by law. To keep this policy as short and easy to understand as possible, we haven’t set out the specific circumstances when each of these protection measures are used. You can contact us at email@example.com for more detail on this.
We will only retain your personal information for as long as we need it unless we are required to keep it for longer to comply with our legal, accounting or regulatory requirements.
[We delete your order information 6 years after your last order with us. Other information related to your account will be deleted 2 years after your account has become inactive.]
In some circumstances we may carefully anonymise your personal data so that it can no longer be associated with you, and we may use this anonymised information indefinitely without notifying you. We use this anonymised information to improve the way we work and our services.
You have various other rights under applicable data protection laws, including the right to:
• access your personal data (also known as a “subject access request”);
• correct incomplete or inaccurate data we hold about you;
• ask us to erase the personal data we hold about you;
• ask us to restrict our handling of your personal data;
• ask us to transfer your personal data to a third party;
• object to how we are using your personal data; and
• withdraw your consent to us handling your personal data.
You also have the right to lodge a complaint with us or the Information Commissioner's Office (ICO), the supervisory authority for data protection issues in England and Wales. If you are based in the EU you can find your relevant supervisory authority here.
Please keep in mind that privacy law is complicated, and these rights will not always be available to you all of the time.
As mentioned above, you have the right to make a complaint to the ICO at any time. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.