Here at Monsoon we care about your privacy. We collect and process certain types of personal information to operate effectively as a fashion retailer. This policy explains what types of personal information we collect, why we collect it, how we use it, and your rights in relation to your data.
Please read this policy in conjunction with our Cookies Policy.
All personal information is controlled by Monsoon Brands Limited, a company registered in England and Wales with registered company number 12543476. If you have any questions about this privacy policy or wish to exercise your rights you can contact us here. We aim to respond to all enquiries within one month.
WHOM DOES THIS APPLY TO
This privacy notice applies to all personal information we collect from members of the public whether online, in store or through our customer service team. This does not apply to employees, who are covered by a separate policy. Our services are not directed at children under the age of 16 and we do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 16 without appropriate consent, we will delete it promptly.
WHAT TYPE OF INFORMATION WE COLLECT
We currently collect and process the following types of information:
HOW WE COLLECT IT AND WHY
Personal identifiers
Payment details
When you place an order we will collect your payment details and process these securely in order to take payment for your order. You can choose to save your payment details on your online account for ease. We will keep a record of the financial transaction for legal reasons.
Purchase history
We record and keep the details of any transactions you make with us, including details of the products you have bought from us. We use this information to assist with the selection of future products.
Contact history
Whenever you contact the Customer Service team we will store a record of our conversations with you (whether via email or telephone) in order to better assist you next time. Some information will also be used for training purposes.
Online identifiers & technical information
We may collect personal information through our use of cookies, pixels, beacons, log files and other technologies. We may use this information to administer our website for internal operations, trouble shooting, testing and improvements and optimisation. This might be information regarding your mobile device, computer hardware and software used to access our website such as the IP address of device(s) used; browser type; Operating system and device type; Referring website addresses; Access times and dates; and Approximate location e.g. London. This type of personal information is laid out in more detail in our Cookie Policy.
Video Surveillance
We sometimes use CCTV in our stores for security monitoring purposes.
LEGAL BASES FOR PROCESSING
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Consent. You have given clear consent for us to process your personal data for a specific purposes (e.g. marketing emails). You are able to remove your consent at any time.
(b) Contract. the processing is necessary for the performance of a contract (e.g. fulfilling your order).
(c) Legal obligation. We are required by law to retain some data (e.g. for tax).
(d) Legitimate interest. We have a legitimate business reason to process your data, and this is not overridden by your rights and interests (e.g. fraud prevention, improving user experience).
SHARING YOUR DATA
We will not sell or rent your information to any third party without your express consent unless we are required or permitted to do so by law. We share your personal data with trusted third parties who support us in delivering our services. These include:
Where we engage third parties to process your personal data, we ensure that appropriate contracts are in place to safeguard your information in accordance with data protection law.
Some of our service providers are located outside of the UK/EEA. Where this is the case, we ensure adequate safeguards are in place.
SECURITY & RETENTION OF YOUR DATA
We implement physical, technical and organisational safeguards to protect your data from unauthorised access, use or disclosure. This includes encryption, access controls, secure storage and regular review of our security practices.
We retain your personal data only for as long as necessary for the purposes described in this notice or as required by law.
YOUR DATA PROTECTION RIGHTS
Under data protection law, you have rights including:
You can exercise your rights by contacting us using the details above. We will respond within one month. You do not have to pay to exercise your rights.
COMPLAINTS
If you are unhappy with how we’ve handled your data, please contact us. You also have the right to complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline number: 0303 123 1113 Website: www.ico.org.uk