Cookie Policy
We use cookies on our site to give you the best experience. By using our site, you agree to the use of cookies as set out in our Privacy Policy page.
Online Home Shop Privacy Policy
1. Who we are
We are Online Home Shop Limited, trading as Online Home Shop, a company registered in England and Wales with company registration number 8885099 and registered office address at Reedham House, 31 King Street West, Manchester M3 2PJ (“we”, “our” and “us”). We are the company that collects your personal data and controls how it will be used (the “controller”). We operate the website www.onlinehomeshop.com (“our website”) and also sell our products via eBay.
2. Scope of this policy
We are committed to respecting your privacy and protecting the personal data you share with us and that we collect about you. This policy sets out certain information about what personal data we process about you in connection with the use of our website and the purchase of products from us, why we process it and how we handle it. It also provides more information about your privacy rights and how the law protects you.
3. How do we collect your personal data, what do we collect and what do we do with it?
We have set out below the personal data we may collect from you in connection with your use of our website, and how we use the personal data we collect.
|
How and what personal data do we collect? |
What do we do with it? |
|
We collect your full name, title, delivery address, email address and phone number when you sign up to our website and register an account with us. |
|
|
We collect your email address when you register to receive our news and latest offers by email. |
|
|
We collect your full name, title, delivery address, billing address, email address, phone number and payment details when you order products from our website or from our eBay account. |
|
|
Certain behavioural information such as details of your previous orders, browsing history on our website and products stored in your cart. |
|
|
Your name, email address and any other information you include in your message when you send us a message with a comment or question on our website, by email, by social media or phone. |
|
|
Technical information about your computer, tablet or phone (including your IP address, screen resolution, browser type, operating system software type and device type). |
|
|
Technical information about how you use our website (the pages you visit, how long you stay on them, your journey to them etc.) |
|
We may also collect, use and share data relating to you which is not “personal data”, such as demographic data or details of your typical use of our website. You can’t be identified from this information. We will use this information, for example, to improve our website, tailor our marketing strategy and help us stock products we think you will like.
4. Our lawful basis for what we do with your personal data
We will never use your personal data unlawfully. We have set out below our lawful basis for the various ways in which we use your personal data.
|
Our use of your personal data |
Our lawful basis |
|
Creating and maintaining your account. |
Performing our contract with you. Some of this information will also be required for legal reasons such as fraud prevention.
|
|
Processing and delivering orders to you and dealing with returns, refunds and other customer service queries. |
Performance of our contract with you (we need to do this to provide our products to you).
Some of this information will also be required for legal reasons such as fraud prevention and for our legitimate interests of defending against any claims made against us.
|
|
Sending you details of our products, offers and events by email. |
Where you purchase products from our website, our legitimate interests of communicating with our customers to tell you about our new products, offers and events and growing our business. Where you purchase products from us via eBay, your consent. |
|
Displaying our products and offers we think will be of interest to you on our site and third party sites (including your social media accounts).
|
Our legitimate interests of serving relevant adverts to encourage you to get you to come back to our website and see all of the products we have on offer. |
|
Analysing your device information, purchase and browsing history and engagement with our communications. |
Our legitimate interests of ensuring that we are targeting our customers effectively which enables us to improve our website and the marketing messages we send to our customers. |
|
Dealing with your comments/questions (where these are not related to a specific order). |
Our legitimate interests of ensuring we provide the best possible customer service. |
|
Improving and securing our website. |
Legal requirement of preventing fraud and our legitimate interests of ensuring that our website works effectively, is secure and reflects our customers’ browsing habits. |
5. Marketing
Where you have made a purchase from our website we want to make sure that you are kept up to date with all the latest products, events and offers available so will send you messages by email unless you tell us that you do not want to continue receiving these messages by “opting out” or contacting us at [email protected].
6. Sharing of Personal Data
We do not sell your personal data to any third parties. We may share your personal data with our carefully selected third party service providers who help us provide our services to you, including:
- Our logistics providers.
- Our order management software provider.
- Our couriers and similar delivery companies.
- Our payment providers.
- Our professional partners, including our marketing agencies and website hosts.
- Our customer messaging communications provider.
- Our IT and technical service providers.
- Our targeting advertising partners (Google, Bing, Facebook, Instagram and Pinterest).
- Our data analytics providers who help us analyse how people use our website.
In certain circumstances we may also need to share your personal data with our legal advisers, bankers, auditors and insurers and our regulators, including HM Revenue & Customs and with any third parties to who we choose to sell or transfer any part of our business or assets.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third party service providers to use your personal data for their own purposes and only permit them to use your personal data for specified purposes and in accordance with our instructions.
7. Klarna
In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. General information on Klarna you can find here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy.
8. International Transfers
Some of our external and specific third parties are based outside of the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
- Where we use providers based in the US, we may transfer data to them using a lawful transfer mechanism to ensure that any transfer is GDPR-compliant.
9. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such information. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Our website may include links to third-party websites, plug-ins and apps. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website and app you visit.
10. How long will we keep your information for?
In accordance with data protection laws, we only retain your personal data for as long as reasonably necessary to achieve the purpose for which it was collected. Our retention periods for your personal data are set out below:
- Where we collect your personal data in connection with an order submitted by you, for up to 7 years following delivery of such order.
- Where we collect personal data because you are a member of our mailing list, 12 months following your previous activity. For this purpose ‘activity’ shall mean opening a message from us, clicking through from an online advertisement and browsing our website.
- Where we collect technical information about you, for 12 months following its initial collection.
- Where we collect your personal data because you have submitted an enquiry to us, 12 months following submission of your enquiry.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
11. Your legal rights
Under certain circumstances you have the following rights under data protection laws in relation to your personal data, and you may exercise any of these rights by contacting us at the details we have provided in this policy.
- Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, although we may need to verify the accuracy of the new data you provide to us.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
- if you want us to establish the data's accuracy;
- where our use of the data is unlawful but you do not want us to erase it;
- where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
- you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or to a third party.
- Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
If you wish to exercise any of the rights set out above, please contact us at [email protected]
You also have the right to make a complaint to your data protection regulator (in the UK, this will be the Information Commissioner’s Office) but please contact us first before escalating your complaint.
12. Contacting us
If you have any questions about this policy or the personal data we collect about you, please contact us at [email protected].
13. Changes to this Policy
We may change this policy from time to time to reflect how we are processing your personal data so you should review this policy regularly. If we make any significant changes to the policy we will contact you to let you know.
Last updated: 08.10.2020