What type of information do we collect?
How do we use the information?
We use this information to provide you with the products and services we offer and to make your shopping experience easier and more specific your preferences. This means:
o Processing your order
o Keeping you up-to-date on what’s happening at IRIS
o Improving our products and services
We do this on the basis that it is necessary to fulfil our contract with you or to meet our legitimate business interests (where of course they don’t compete with your rights). Contractual necessity, for instance, includes identifying you, responding to enquiries you may have, providing requested services (including processing orders and refunds), allowing you to register and set up an account on our website etc. Legitimate interest includes fraud prevention, website security, personalising your online experience, allowing you to leave reviews, add items to your wish list and keep you informed of new collections, promotions, in-store events or anything IRIS related we think you may be interested in. You have the right to withhold your personal information or request that we not process it. (See more about your rights below.) However, that may result in us not being able to provide products and services to you or our service being significantly impaired. In addition, we may be required to process your personal data for legal reasons -(legal compliance)
Do we share this information with any third parties?
We have to share your personal information with a number of third parties to allow us to provide the services we do. For instance, processing your order involves sharing information with our payment service providers (who process the payment), our delivery company provider (who deliver the order to you) Keeping you up-to-date regarding new collections etc. involves sharing your information with our data marketing agency) and our email service provider (who we use to send out the marketing emails), plus we use digital marketing networks, specific services (like Google and Facebook Custom Audiences) and various advertising partners to ensure we only show you adverts that are relevant to you. Analysing sales and customer behaviour involves sharing information with our data marketing agency, as well as technology providers who help us understand how we can provide you with better products and a better service. if you have indicated that you are happy to receive catalogues from like-minded brands, we will also share your information with data co-operatives. In all instances, we share only the minimum information required and we have agreements in place with all these partners to ensure that they treat your personal information with the same care that we treat it.
What communication will you receive from us after you place an order?
We will ordinarily send you an email confirming the order; a further email when the order has been despatched; and, if you return any part of the order, an email confirming that you have been refunded.
Will you receive marketing communications from us?
We would like to contact you by email and/or by post (in the form of a catalogue) to show you our new collections, let you know about promotions, offer styling advice and to let you know about events etc. When you place an order with us, therefore, you should expect to receive marketing emails and catalogues from us unless you opt out at the point of creating an account or during the checkout process. However, you have the right at any stage to change your mind and unsubscribe (or resubscribe if you wish). Please see below for details.
How can you unsubscribe from marketing communications?
If you no longer wish to receive marketing communications from IRIS, we make it as easy as possible for you to unsubscribe. Every marketing email we send out has an unsubscribe link at the bottom. If you are a registered user of our website, you can also log in to your account and adjust your marketing preferences. Alternatively, you can email us directly at email@example.com to let us know what marketing communications you do want to receive.
How can you find out what information about you we hold?
As part of the new regulation, you have the right to know what personal data we hold and how it is being processed. You should make any request by email to firstname.lastname@example.org or in writing to:
141 Greyhound Rd
We will provide the following information within 30 days of the request:
o Confirmation of what personal data we hold about you and where it is held;
o A copy of the data;
o Any supporting documentation
Can you request your personal information be provided in a certain format? (Right of portability)
In addition to the above right of access, you can normally ask us to provide a copy of any information in a commonly used format.
Can you ask to have your personal information deleted? (Right to be forgotten)
You have the right to ask us to remove any personal information that you no longer want us to hold (unless we are required by law to retain it). You should make any request by email to email@example.com (or by post to the above address). We will delete or make anonymous any information that is stored by us (or by any third party who processes the data on our behalf). However, please note that we can only do this when an order is complete and, after your data has been deleted, we will not be able to identify you, so we cannot accept any returns or answer questions around previous orders or any other information about you
How can you correct personal information that is inaccurate? (Right of rectification)
You should make any request by email to firstname.lastname@example.org (or by post to the above address), specifying what information you believe to be incorrect and what the correct information is.
Please note that in all the above instances we will ask you to provide proof of your identity to ensure that you are the owner of the personal information in question. We reserve the right not to comply with the request if we are not satisfied that the proof of identity provided.
How long do we keep your personal information?
We keep your information on our databases until you ask us to delete it or for as long as it is relevant to IRIS. That means we will delete it if you have not interacted with us for a while and we believe you have no intention of doing so in the future. The exact time period for this is kept under constant review.
How is this information stored and transmitted?
We have measures in place to restrict access to your data, to maintain data integrity and to prevent data loss. Data can only be accessed or processed by employees of IRIS or third parties with whom we have appropriate contractual arrangements. We use technologies like SSL, password protection and encryption to ensure that it is stored and transmitted securely. And we regularly review all procedures, including how – and how much - information is stored in order to minimise any risk.
However, while we will always do our best to keep your data secure, we cannot completely guarantee the security of data transmitted to us. For instance, if you use a password to access your account online, please make sure you keep the password to yourself and do not disclose it to anyone else.