Privacy & Cookie Policy
BrandAlley UK Privacy Notice (Last Updated 24 May 2018)
- BrandAlley is an online retailer of designer items at discounted prices. The company is based at Telephone House, 69-77 Paul Street, London EC2A 4NW.
- This privacy notice provides information about the personal data we process as a data controller, in compliance with the General Data Protection Regulation (GDPR).
- Our ICO registration number is ZA246524.
What personal data do we process?
The personal information we process include:
- Names
- Gender
- Password
- Computer IP address
- Email addresses
- Delivery addresses
- Telephone numbers
- Last four digits of debit or credit card numbers
- Billing addresses
Why do we process these personal data and what is the legal basis for doing so?
In order to browse the BrandAlley website and to make a purchase, you need to register with us and open a secure account. As part of the registration process, you are required to provide your name and gender, and to create a password. Your computer IP address is recorded so as to confirm the date and time of registration, and when your email preferences were set and changed.
This information is processed because it is in the legitimate interests of our business to do so. We need this information in order to run your account.
If you go on to on to make a purchase, you are required to provide your billing and delivery addresses, together with your debit or credit card number. These personal data are saved in your online account, as are the last four digits of the number on your bank card, if you choose to save your card details. This information is processed in anticipation of the contract for sale and in performance of the contract between us.
Promotional emails notifying you of sales and discounts are sent when you have given consent to this in your online account. This consent may be easily withdrawn at any time by altering the settings in your account, or hitting the unsubscribe button at the bottom of the email.
Whom do we collect personal data from and whom do we share it with?
The personal data we collect comes directly from you.
We share your personal data with the following organisations because it is in our legitimate interests to do so in order to run our business:
- Website host Amazon Web Services;
- GFM who provide telephony and customer support services on our behalf;
- Desk.com who provide an online help desk platform which our customer service team and GFM use to log and manage customer enquiries;
- LiveChat so that customers can communicate directly with our customer service team;
- Prism/Whistl for warehousing, delivery of purchases to customers and authorising returns.;
- Sedcom for IT support;
- Wilder and Co for auditing and accounting purposes;
Where suppliers of products we sell on our website manage their own delivery of items, we share your personal information with them in order to perform our contract with you. A list of these suppliers may be obtained from our data protection lead.
Data is shared with Braintree and PayPal so that payment can be made and the contract for sale concluded.
Where you consent, personal information is shared with Mention Me which provides a friend referral system on our behalf.
We also share personal information with Channel Web Consulting, an IT support and development company based in India and our agreement with them contains the model contract clauses approved by the European Union. We share this information as it is in our legitimate interests so as to maintain and improve the functionality of our website.
How we use cookies
Our website uses cookies, which are small files placed on your computer or smartphone hard drive which collect and store information about you. They allow us to recognise your device and store some information about your preferences or past actions. They allow us to respond to you as an individual when you visit our website, tailoring our operation to your needs, likes and dislikes.
Except where the cookies are necessary for the operation of the website, the completion of a purchase, or the provision of security, we obtain your consent before using cookies. They enable the sharing of information with:
- Emarsys, Google Analytics and Avora for tracking and reporting on your visit to our website and websites elsewhere;
- Google Adwords, DoubleClick, Marin, Snapchat, Curalate, Bing Advertising and Facebook Advertising in order to provide information so that you can be shown relevant advertisements. If you abandon a purchase you may receive advertisements for products you did not purchase.
How long do we keep personal data for?
Personal data is retained for six months from the last log in to the person's registered account (or from the creation of the account where there have been no subsequent log ins), except where the data is required for auditing and accounting purposes. Any personal data required for these purposes is retained for six years.
Your rights
We are committed to protecting your rights to privacy. They include:
- Right to be informed about what we do with your personal data;
- Right to have a copy of all the personal information we process about you;
- Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete;
- Right to be forgotten and your personal data destroyed;
- Right to restrict or "block" the processing of your personal data;
- Right to object to the processing we carry out based on our legitimate interest;
- Right to data portability;
- Rights in relation to profiling and automated decision making.
Information Commissioner's Office
If you have questions about your personal data please contact our data protection lead:
Bruce MacInnes, Chairman, BrandAlley UK Limited, Telephone House, 69-77 Paul Street, London EC2A 4NW.
You may also contact the Information Commissioner's Office on 0303 123 1113.
Our details
Registered address: BrandAlley UK, Telephone House, 69-77 Paul St, London, EC2A 4NW
Telephone: 01206 226410
e-mail address: customerservice@brandalley.co.uk