Privacy Policy

WHAT IS THE PURPOSE OF THIS PRIVACY NOTICE?

This privacy notice aims to give you information on how Natoora collects and processes your personal data through your use of our app.

WHAT DATA IS BEING COLLECTED?

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data includes first name, last name, username or similar identifier.
• Contact Data includes billing address, delivery address, email address, telephone numbers.
• Financial Data includes bank account details.
• Transaction Data includes details about payments to and from you and other details of products you have ordered from us.
• Technical Data includes your login data, time zone setting and location, operating system and platform.
• Profile Data includes your username and password, your preferences and orders made by you.
• Usage Data includes information about how you use our app, products and services.

HOW IS YOUR PERSONAL DATA COLLECTED?

We use direct interactions to collect data from and about you. You may give us your Identity, Contact and Financial Data by filling in the New Customer Application Form or when we set you up for an App account. Our site uses technologies of third-party partners to collect information about your activity on our site.

WILL THE DATA BE SHARED WITH ANY THIRD PARTIES?

We sometimes share your personal data with trusted third parties in order to improve our services and offer you content that is likely to be of more interest to you. In order to keep your data safe and protect your privacy, we provide only the information they need to perform their specific services and they only use your data for the exact purposes we specify in our contract with them.

Examples of the kind of third parties we work with are:

• Direct marketing companies who help us manage our electronic communications with you.
• Technology companies that allow payment transactions.
• Technology companies that support our delivery process.
• Technology partners to help us recognise your device and understand how you use our site.

COOKIES WE USE

Natoora’s app will collect personal data through the use of cookies. We use strictly necessary cookies and if opting in, we use analytical and functionality cookies. These cookies expire after 2 weeks and are stored by Google Analytics. More information can be found on our website on our Cookies Policy page.

HOW WILL THE INFORMATION BE USED?

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where we have your consent.
• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.
• In order to improve our services to reflect your interests and serve you advertisements about the products and services that are likely to be of more interest to you

WHAT ARE YOUR RIGHTS?

Your principal rights under data protection law are:

• (a) the right to access;
• (b) the right to rectification;
• (c) the right to erasure;
• (d) the right to restrict processing;
• (e) the right to object to processing;
• (f) the right to data portability;
• (g) the right to complain to a supervisory authority; and
• (h) the right to withdraw consent.

If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.

HOW LONG WILL THE DATA BE STORED FOR?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

For more information, please see here our Privacy Notice.

CONTACT US

If you have any questions regarding our privacy practices or would like to review or update your Personal Information, you may email us at gdpr@natoora.com or contact us at the following address: Natoora Ltd, Discovery Business Park, Unit 6, St James's Rd, London SE16 4RA