The entity responsible for the processing of your personal data (Controller) is Berry Red London Shop Trading LTD, a private limited liability company constituted under the laws of United Kingdom and registered under number 14196468, with registered office at 55 Eglinton Drive, Chelmsford Essex CM2 6YL, United Kingdom, hereinafter referred as “Berry Red London”, “us” or “we”. If you have any questions about this Privacy Policy or how we process your date, please refer to the ‘Contact Us’ section below.

Information you provide

Personal Information is any information that can be directly or indirectly associated with you.

We automatically collect information about you when you visit our Site, interact with us, or shop one of our products, as well as when you register an account or complete a transaction through our Site:

· Profile information: name, title, profile picture, VAT number
· Contact information: email address, phone number, address;
· Device information: information about the devices you use or interact with our Site, namely IP address, device identifiers, cookie IDs, browser, network connection, and other unique identifiers or device information;
· Billing information and purchase data;
· Use and interactions with our Site: viewed and visited products, product reviews and ratings written and shared by you, your order history, and marketing activities;
· Information when you communicate with us, including message and email content;
· Social network accounts: when you link, connect or link to our Site through a third-party online service;
· Email and shopping service integrations: information from the email that you link to your Loyalty Rewards Program account;
· And other similar information.

We may also collect personal data of a third person, e.g., when you are sending a gift to someone else and you provide their address.

We will only retain your personal data for as long as we need to in order to fulfil the uses we describe in this Policy (which is explained in the section Storage of your Personal Information).

Here you can find a more detailed list of the data we process:

When you visit, register, or make orders on our Site, we collect:
· Contact details, such as your name and email.
· Demographic data, such as your age and gender.
· Your account login details, which will be your email address.
· Some specific data you have shared with Social network accounts: when you link, connect or link to our Site through a third-party online service.
· Billing information and purchase data.
· Email and shopping service integrations: information from the email that you link to your Loyalty Rewards Program account.

When you answer questions in surveys, or on our Site, we collect:
· Your opinions on our brand.
· Information about your behaviors, for example what shops you like to shop in, what TV shows you have recently watched, or what kind of things you own.
· Device and browser “metadata” (basically an audit trail of your device and browser use), including IP address, the make, model and operating system of the device you have used and browser type.  This data is collected automatically when you answer questions in surveys or browse our website or mobile apps.

When you browse our Site, we collect:
· Information through the use of cookies and similar technologies  (click here to go to the section about the data we collect using cookies)

When you contact us or interact with our Site or social media pages, we collect:· Any personal data that you may you provide about yourself, including your name and contact details and the conversation history of our communications with you.· Any comments you make on our website or social media pages.

We generally process Personal Information that we collect to fulfil our contractual obligations to you, in furtherance of our legitimate interests in operating the Services and our business and where you have consented to such usage. We may also process your Personal Information to comply with a legal obligation, namely regarding fraud prevention.

If your data is being processed based on your consent, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent that Berry Red London carried out before the withdrawal.

More specifically, Berry Red London processes your Personal Information:

01. To provide, update, maintain, protect, improve, and customize the Services and our business. This includes processing of Personal Information to support delivery of the Services, transaction processing, prevent or address service errors, security or technical issues, analyze and monitor usage, trends and other activities or at your request.

02. Berry Red London may use your email address or phone number to send you notices (including any notices required by law, in lieu of communication by postal mail). If you correspond with Berry Red London by email, we may retain the content of your email messages, your email address and our responses.

03. To personalize your experience, when you register an account or complete a transaction. This includes Personal Information to understand your buying/shopping preferences so that we may be able to advertise other products that you might be interested, to notify you of items left as uncompleted transactions in your shopping cart, and related communications. Berry Red London has a legitimate interest in collecting and using your email and information about your abandoned shopping cart to communicate with you about your uncompleted transaction.

04. To improve customer service. Your information enables us to more effectively respond to your customer service requests and support needs.

05. To communicate with you by responding to your transactions, requests, comments and questions.

06. To provide advertisement and promotion services and send you marketing communications, including offers, discounts, when you have consented to it.

07. To track and implement your privacy preferences and settings.

08. For reasons of authentication, integrity, security, and safety.

We also use Information as otherwise described in this Privacy Policy.

Transfer of Personal Information

For providing you our Services, we may transfer and share your Personal Information to other entities of Berry Red London’s group and to third parties that may be located in other countries.  Namely, we use service providers and intermediaries, such as companies that provide technological support and electronic payment processing companies, which must have access to some of your Personal Information, including but not limited to purposes of transaction processing and fraud prevention.

However, these transfers are made solely and exclusively for the fulfillment of the purposes for which your Personal Information is collected and in accordance with our instructions, in strict compliance with the regulations on the processing of personal data and information security.

We may also communicate your personal data to third parties where:
• You have expressly consented to it; or
• The communication is made in order to comply with a legal obligation or a court order.

All transfers of your Personal Information to third parties located outside the European Union or the European Economic Area (i.e. to a third country) shall be made ensuring strict compliance with European legislation on the transfer of data to third countries and with  all necessary information, including an indication of the safeguards for such transfer:
• Adequacy decisions: where the European Commission determines that a third country offers an adequate level of data protection, personal data may be sent to that country without implementing any other measures mentioned above;
• Standard contractual clauses: we use standard contractual clauses for the transfer of personal data to organizations outside the EEA. These contractual commitments have been adopted by the European Commission and ensure adequate protection of personal data transferred to countries outside the EEA by binding recipients of personal data to certain data protection standards, including the obligation to implement appropriate technical and security measures;
• Other contractual commitments: comparable to those provided in the standard contractual clauses.

Storage of Personal Information

Your Personal Information will only be kept for the period of time necessary to achieve the purposes for which it was collected or for the periods of time required by law.

Purchase and billing data will be kept during the execution of the purchase and sale agreement and, after its termination, it may still be kept for a reasonable period, if you decide to use our Services again or to comply with our legal obligations, particularly those of a tax nature.

We make every effort to ensure that your Personal Information is accurate, up-to-date and complete in accordance with the purposes for which we use that information.

According to the GDPR, you have the right, at any time, to access and object to the processing of your Personal Information, as well as the right to update, correct and delete data collected by us that is incomplete, incorrect, out of date, or prohibited by law. You may exercise these rights by contacting us using the contact details provided below, in the section "Contact Us".

You have the following rights:

• Right to be informed: you have the right to obtain clear, transparent and easily understandable information about how we use your personal data.

• Right of access: you can request a copy of the data we hold about you.

• Right of rectification: you have the right to rectify your personal data if it is incorrect or out of date and/or to complete it if it is incomplete.

• Right to erasure of data (“right to be forgotten"): this right is not absolute, as we may have legal or legitimate reasons to retain your personal data.

• Right to, at any time, object to the processing of data on the basis of consent: you may object to the processing of data where such processing is based on consent. Withdrawing consent does not affect the lawfulness of the consent previously given.

• Right to data portability: you have the right to receive personal data concerning you, in a structured, commonly used and machine-readable format, and the right to transmit this data to another organisation. This applies only to data you have provided whose processing is based on your consent or on a contract, and if the processing is carried out by automated means.

• Right to limit processing: you can ask us to limit the use of your data to storage only, to stop using it for all other purposes or to retain data that should be deleted.

• Lodging a complaint to a supervisory authority: you also have the right to lodge a complaint with the data protection supervisory authority in your country when your rights have been violated or your personal information is or is being used in a way that you believe is not in accordance with applicable law. The contact details of the European data protection authorities are available here.

Security of the Personal Information

We implement the technical and organizational measures that ensure the confidentiality of your Personal Information, protecting it from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and against other unlawful forms of data processing, ensuring a level of security appropriate to the risks of data processing, including:
• The pseudonymisation and encryption of your Personal Information;
• The ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;
• The ability to restore the availability and access to Personal Information in a timely manner in the event of a physical or technical incident;
• A process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.

Any entity we outsource to will be bound by equivalent security measures, acting at all times under our duly documented instructions.

Changes to this Privacy Policy

Taking into account that practices regarding the processing of personal data may change from time to time, this Privacy Policy will also be updated accordingly, so we advise you to consult it regularly. If there is a significant change, we will inform you directly by email.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights to access, update or correct any personal information, please contact us by email.