Purpose of this privacy notice
This Privacy Notice explains our approach to any personal information that we might collect from you or which we have obtained about you from a third party and the purposes for which we process your personal information. This Privacy Notice also sets out your rights in respect of our processing of your personal information.
This Privacy Notice informs you of the nature of the personal information about you that is processed by us and how you can request that we delete it, update it, transfer it and/or provide you with access to it.
This Privacy Notice is intended to assist you in making informed decisions when using the Sites and our products and services. Please take a moment to read and understand it. It should be read in conjunction with our Website Terms and Conditions.
This Privacy Notice only applies to the use of your personal information obtained by us; it does not apply to personal information collected during your communications with third parties or your use of their products or services.
How to Contact Us
If you have any questions about this Privacy Notice or want to exercise your rights set out in this Privacy Notice, please:
Send us an email at: email@example.com
Personal information we collect and how we use it
We may collect and process personal information from you in the following circumstances:
C1: When you create an account with us or you change your account settings;
C2: when you place an order with us and during the order process (including for payment and order delivery);
C3: Communication data between you and us, including calls to our service centres, e-mail communication, online chats, comments and reviews collected through surveys or posted on our channels and on social media platforms.
C4: Digital information data collected when you visit our websites, applications or other digital platforms, including IP-addresses, browser data, traffic data, social media behaviour, and user patterns. If you subscribe to our newsletters, we may collect data regarding which newsletters you open, your location when opening them and whether you access any links inserted in the newsletters.
Information that we collect from you
When you make a Go Zipper order through the Sites, you are asked to provide information about yourself including your name, contact details, delivery address, order details and payment information such as credit or debit card information.
We also collect information about your usage of the Sites and information about you from any messages you post to the Sites or when you contact us or provide us with feedback, including via e-mail, letter, phone or chat function.
We collect technical information from your mobile device or computer, such as its operating system, the device and connection type and the IP address from which you are accessing our Sites.
We also collect technical information about your use of our services through a mobile device, for example, carrier, location data and performance data such as mobile payment methods, interaction with other retail technology such as use of NFC Tags, QR Codes and/or use of mobile vouchers. Unless you have elected to remain anonymous through your device and/or platform settings, this information may be collected and used by us automatically if you use the service through your mobile device(s) via any Gozipper mobile application, through your mobile's browser or otherwise. Please note most of the data that we have about you are provided by you. We collect C3 and C4 data from our websites, applications and similar digital platforms.
Use of your informationCommunication
Description: We use C1, C2 and C3 data to ensure that we can supply services you have requested. We may provide such information by electronic or other means.
Legal basis: We use such data as part of our business relationship. Further, we use such data to provide you with other information necessary to fulfil our legitimate interests, including to ensure that we process invoices and to contact you, where necessary, concerning any orders you may place with Gozipper.
Disclosure: We may disclose C1 and C2 data to our corporate partners, as they may need this information to communicate with you and to provide support and assistance.
Description: We use C1, C2 and C4 data to provide you with newsletters from us about our products and services.
Legal basis: Our use of such data is based on our legitimate interests in providing you with relevant information to promote our products and services. You may at any time opt out of receiving such information.
Disclosure: We may process your data to enable us to send you relevant information to promote our products services.
Description: We may use and compile C1, C2, C3 and C4 data for profiling purposes. Profiling is an automated processing of personal data where your personal data is used to evaluate, analyse and predict your preferences, interests and behaviour (profiling). We use this data to provide you with customised information about services and offers that you may appreciate.
Legal basis: We carry out profiling to fulfil a legitimate interest, which is to customise our services for your benefit. You may at any time object to our use of your personal data for profiling purposes.
Disclosure: We will not disclose the profiles we have generated based on your data to third parties other than any member of our group.
Description: We may carry out video surveillance on premises and store C4 data to prevent crime and ensure your safety.
Legal basis: We carry out video surveillance that is necessary to fulfil a legitimate interest which is to prevent crime and ensure your safety while you are on our premises.
Disclosure: We will not disclose video surveillance footage to third parties unless required by law or on request from authorities.
How long we keep your personal information
Regarding personal information we have processed in connection with the supply of our products and services to any member, we will retain personal information relevant to that supply of products or services for a reasonable time from the date of supply and in compliance with our obligations under the EU General Data Protection Regulation (or similar legislation around the world).
Regarding any other personal information we have processed, we will retain relevant personal information for a reasonable time from the date of our last interaction with the relevant individual.
If any personal information is only useful for a short period (e.g. for a specific marketing campaign), we may delete it at the end of that period.
If you have opted out of receiving marketing communications from us, we will need to retain certain personal information indefinitely so we know not to send you further marketing communications in the future.
International transfer of data
Go Zipper does not transfer your information outside the EEA, with the exception of Amazon Web Service’s cloud technology, Amazon S3 which hosts some of the data that you provide to us.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented including:
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
- Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
Disclosure of your information
We are committed to keeping the personal information you provide to us secure and we will take reasonable precautions to protect your personal information from loss, misuse or alteration.
We have implemented information security policies, rules and technical measures to protect the personal information that we have under our control from:
- unauthorised access;
- improper use or disclosure;
- unauthorised modification; and
- unlawful destruction or accidental loss.
All our employees and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above) who have access to and are associated with the processing of personal information are obliged to respect the confidentiality of the personal information of all users of our Sites and our products and services.
your legal rightsYour right of access.
If you ask us, we will confirm whether we are processing your personal information and, if so, provide you with a copy of that personal information (along with certain other details). If you require additional copies, we may charge a reasonable fee for producing those additional copies.Your right to rectification.
If the personal information we hold about you is inaccurate or incomplete, you are entitled to have it rectified. If we have shared your personal information with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you who we’ve shared your personal information with so that you can contact them directly.Your right to erasure.
You can ask us to delete or remove your personal information in some circumstances, such as where we no longer need it or where you withdraw your consent (where applicable). If we have shared your personal information with others, we will let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we will also tell you who we have shared your personal information with so that you can contact them directly.Your right to restrict processing.
You can ask us to block or suppress the processing of your personal information in certain circumstances, such as where you contest the accuracy of that personal information or you object to us processing it. It won’t stop us from storing your personal information, though. We will tell you before we lift any restriction. If we have shared your personal information with others, we will let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we will also tell you who we have shared your personal information with so that you can contact them directly.Your right to data portability.
You have the right, in certain circumstances, to obtain personal information you have provided to us (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer it to a third party of your choice.Your right to object.
You can ask us to stop processing your personal information, and we will do so, if we are:
- relying on our own or someone else’s legitimate interest to process your personal information, except if we can demonstrate compelling legal grounds for the processing;
- processing your personal information for the purposes of personalised direct marketing; or
- processing your personal information for the purposes of non-personalised direct marketing.
Your rights in relation to automated decision-making and profiling.
You have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for the entering into, or the performance of, a contract between you and us.
If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time. You can exercise your right of withdrawal by contacting us using our contact details in the “How to Contact Us” section above or by using any other opt-out mechanism we may provide, such as an unsubscribe link in an email.Your right to lodge a complaint with the supervisory authority.
If you have a concern about any aspect of our privacy practices, including the way we have handled your personal information, please contact us at firstname.lastname@example.org
We take appropriate measures to ensure that any personal data is kept secure, including security measures to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
If you wish to make a complaint about how your personal data is being processed by Go Zipper (or third parties), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and Go Zipper data protection representatives. Please see the relevant contact details below.
Go Zipper contact details
Gozipper ltd of Kemp House,
160 City Road, London,
United Kingdom, EC1V 2NX
changes to this privacy notice
We may make changes to this Privacy Notice from time to time.
To ensure that you are always aware of how we use your personal information we will update this Privacy Notice from time to time to reflect any changes to our use of your personal information. We may also make changes as required to comply with changes in applicable law or regulatory requirements. We will notify you by email of any significant changes. However, we encourage you to review this Privacy Notice periodically to be informed of how we use your personal information.