This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.bay-2.com (the “Site”).
1. When do we collect your personal data?
- We collect your personal information when you:
- Visit our website and order products.
- Create an account with us.
- Sign up to receive promotional content, e.g. e-mail newsletters or offers by post
- Engage with us on social media.
- Download or install one of our apps.
- Contact us by any means with questions, feedback, requests, complaints etc.
- Enter prize draws or competitions.
- Choose to complete surveys we send you.
- Comment on or review our products and services.
2. What personal information do we collect?
The personal information we collect includes names, e-mail addresses, billing and delivery addresses, telephone numbers, genders, ages, product selections and preferences, order numbers, billing information, payment details, shopping preferences, referring website Uniform Resource Locators (“URLs”), Internet Protocol (“IP”) addresses (which identify the specific computer or device you are using), comments / feedback / reviews, webpage usage, social media profiles.
We also collect:
- Details of your interactions with us by phone, online or by using one of our apps, such as details of any comments, requests or complaints you make, purchases you made, items viewed or added to your basket, products you show interest in, web pages you visit and how and when you contact us.
- When required by the law: Copies of documents such as a passport or driver’s licence provided to us to prove age or identity which includes details as to name, address, date of birth, gender, nationality and facial image.
3. How do we use the personal data we collect?
We use personal data to fulfil product orders, perform our service contracts, enable order status tracking, and to send relevant promotional content which we think you’ll love, via email, text or post. We collect personal information in a few ways, some information you provide directly to us and others we may get from your device, depending on how you have configured your device settings.
When our customers order one of our products we collect and maintain their name, e-mail addresses, billing addresses, delivery addresses, telephone numbers, product selections, order numbers, payment details via our website. We collect IP addresses and other data to support our market research and understand the interests of our visitors. For example we use IPs to monitor the level of activity of different user groups on our site (how many people are on the site, which pages are their favourites and which countries we get the most traffic from etc.) and where relevant, we will send you marketing content related to your purchases.
All of this supports us in our work to improve our products and services. For example, if we learn that we have lots of Italian friends, we will know to translate our site into Italian as a way to better serve them. Or if we learn that our customers need certain sizes such as large, we can personalise our sites for them so they can easily see the products that are available in large size.
If you wish to change how we use your data including opting out of receiving promotional content, you can easily do this as explained in the ‘What are my rights?’ section below.
4. Why do we use the personal information we collect?
Our primary goal in collecting personal information is to provide our visitors a quality, personalised experience and to improve the way we design and offer new products such as to project trends and optimise product development.
We use the personal information we collect on the basis of our legitimate interests and our need to process product orders and perform the services under our contracts, particularly to:
- Process any orders and payments that you make by using our websites or apps.
- Respond to your queries, refund requests and complaints, and to keep a records of these to inform any future communication with us and to demonstrate how we communicated with you. We do this as required by our contractual and legal obligations to you, and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.
- Protect our business and your account from illegal activities, such as maintaining security safeguards on your account and monitoring your browsing activity to identify and resolve problems.
- Send you relevant, personalised communications by email, text and post in relation to updates, offers, services and products. We’ll do this on the basis of our legitimate business interest. You are free to opt out of hearing from us by contacting us by e-mail or post at any time, and you can easily do this as explained in the ‘What are my rights?’ section below.
- Display the most interesting content to you on our websites or apps.
- We’ll use data we hold about your favourite brands or products and so on. We do so on the basis of your consent to receive app notifications and/or for our website to place cookies or similar technology on your device.
- To develop, test and improve the systems, services and products we provide to you.
- Comply with our contractual or legal obligations to share data with law enforcement.
- Send you survey and feedback requests to help improve and make our products or services more relevant to you.
5. How does the law protect your privacy?
Beyond our commitments as explained in this Privacy Policy, your privacy is also protected by law. Here’s how that works.
Data Protection laws allow us to use personal information only if we have a proper reason for doing so. The proper reasons the law permits are when we:
- Have received your consent, or
- Need to fulfil our contracts, or
- Need to fulfil our legal duties, or
- Have a legitimate interest that the law recognises.
This list shows all the ways that we may use your personal information, and the reasons we rely on in doing so. It also explains the legitimate interests when that applies.
Why We Use Your Personal Data:
- To sell, deliver, and enable returns, and support purchases of our products and services.
- To set up and maintain our website.
- To give offers for possible new purchases.
- To manage our relationship with you or your business.
- To develop and manage our brands, products and services.
- To develop new ways to meet our customers’ needs and to grow our business.
- To develop and carry out marketing activities.
- To study how our customers use products and services from us and other organisations.
- To provide advice or guidance about our products and services.
Our Reasons:
- Fulfilling contracts
- Our legal duty
- Legitimate Interests
Our Legitimate Interests:
- Working out which of our products and services may interest you, and improving them.
- Telling you about our new products, services and improvements.
- Maintaining and updating records.
- Defining types of customers for new products or services.
- Being efficient about how we fulfil our legal duties.
6. How do we protect your personal data?
We continuously work to treat your data with the greatest care and to take all appropriate steps to protect it.
We build our systems with Privacy by design principles in mind, and do not store card details or sensitive personal information on our servers. The customer data we do collect is stored in a password protected area and protected against unauthorised access by physical and technical security measures. Data is stored on a secure server which has anti-hacking security measures in place. Personal profile data is stored in a password protected database on this server, which is itself protected with access permissions. User passwords are encrypted with modern non-reversible encryption methods. Transactions take place over a secure encrypted connection. Server software and security updates are installed automatically at a data centre run by insured hosting professionals and further organisational and technical measures are in place as part of our comprehensive digital security policy.
7. Who do we share your personal data with?
We do not sell, rent or trade any personal information.
We need to provide certain information to certain trusted third parties who assist us in providing our products and services and developing our markets. For example, we use third party service providers to enable payment, and other business services we cannot perform internally such as fraud detection. Whenever we transfer personal information to third parties, we only provide the information they need to perform their services, and they are only permitted by contract to use the data for the purposes set out in this privacy policy.
If any police force, regulatory body or other public authority lawfully requests us to provide personal information we may comply with that request without being obliged to inform you.
8. What are your rights regarding your personal information?
You have the right to request:
- Confirmation of our processing, access to or correction of the personal data we hold about you.
- If you have a user account with us, you may confirm our processing, and access, update or correct your personal information by accessing and amending your profile entries in your user account dashboard.
- You can also ask us to confirm our processing of or provide you a copy of your information by contacting us at info@bay-2.com, and to correct or amend information by contacting our Customer Services team at info@bay-2.com. Please note that for confidentiality and security purposes, before we can provide copies of personal data we will need you to verify your identity. To do this we will need you to send us a signed request to the following address, together with a copy of your driver’s license, passport or other official proof of identity card: Labib Group Ltd, E104, Unit 14, Coral Park, Henley Road, Cambridge, CB1 3EA.
- That we stop using your personal data for marketing or our other legitimate interests.
- You have the right and ability to opt out of our using of your personal data for some or all of the applicable activity. You can do this by using the link we provide in any marketing communication we send to you, at the bottom of emails, using the link on postcards, or by navigating to communication preferences in your settings when you are logged in.
- That we stop using your personal data for any reason for which you have given us your consent.
- If we are using your information based on your consent, you have the right to change your mind at any time and withdraw that consent. You can do this by using the link we provide in any marketing communication we send to you, at the bottom of emails, using the link on postcards, or by navigating to communication preferences in your settings when you are logged in.
- A copy of any information about you that we hold about you at any time, and also to have that information corrected if it is inaccurate.
9. How long do we keep your personal information?
We will only keep your information for as long as is necessary to carry out the purposes we collected it for, as set out in this privacy policy (unless a longer retention period is required by the applicable law). We typically keep your personal data for 6 years from the purchase in order to enable us to deal with any issues or concerns you may have about the products or services you have received, and to allow us to bring or defend legal proceedings. In some circumstances, some of your data will be deleted in much shorter timescales, for example:
Cookies are deleted in accordance with our cookies policy.
Marketing consents will be refreshed/deleted after 4 years, however, our aim is only to market to you for as long as we believe you want to continue hearing from us based on how you interact with us.
If reasonably necessary or required to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we will also keep hold of some of your information, even if it is no longer needed to provide our services to you.
10. How do we use cookies?
A cookie is a small data text file which a website stores on your device’s hard drive (if your web browser permits) that can later be retrieved to identify you to us. When you use our site we will store cookies on your device in order to facilitate and customise your use of our site.
We use two types of cookies:
Session cookies: These are temporary cookies that remain in the cookie file of your browser until you leave the website, allowing you to carry information across pages of our website and avoid having to re-enter information. They also allow us to compile statistics that enable us to understand how users use our website and to improve the structure of our website (i.e. which items you added to cart, in what colour and what size).
Persistent cookies: These remain in the cookie file of your browser for much longer (though the duration will depend on the lifetime of the specific cookie), and enable us to make your use of the site easier, allow you to retrieve an earlier shopping cart, make the site run more smoothly and help us to maintain site security. These cookies are also used to show you relevant/personalised marketing content or to display targeted advertising and/or share this data with third parties for the same purpose.
You have the ability to accept or decline cookies by modifying the settings in your browser. However, you may not be able to use all the interactive features of our site if cookies are disabled. You can easily delete any cookies that have been installed in the cookie folder of your browser.
11. Contact Us
Questions regarding this privacy policy should be directed to our customer service team. You can contact them at info@bay-2.com
12. WHAT IF YOU HAVE A COMPLAINT?
If you have any concerns regarding our processing of your personal data, or are not satisfied with our handing of any request made by you, or would otherwise like to make a complaint, please contact our customer contact centre, so that they can do their very best to sort out the problem.
You can also contact the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF www.ico.org.uk.
13. Privacy Policy Changes
We may change, modify, add or remove portions of this Privacy Policy at any time, and any changes will become effective immediately. Any of such changes will be reflected in this online document – so that you will always know what information we gather, how we might use that information and to whom we will disclose it.