Privacy Policy

This privacy notice aims to inform you about how Hamseys Trading Ltd collect and process any information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information. It tells you about your privacy rights and how the law protects you.

Who we are

We are Hamseys Trading Ltd. In this document, “we”, “our”, or “us” refer to Hamseys Trading Ltd. We are a company registered in England and Wales under company number 03866841. Our registered office is at Unit 5 Crawley, West Sussex RH10 9RX, United Kingdom

Introduction

We are committed to protecting your privacy and the confidentiality of your personal information. Our policy is not just an exercise in complying with the law, but a continuation of our respect for you and your personal information.

We undertake to preserve the confidentiality of all information you provide to us and hope that you reciprocate.

Our policy complies with UK law accordingly implemented, including that required by the EU General Data Protection Regulation (GDPR). The law requires us to tell you about your rights and our obligations to you in regards to the processing and control of your personal data. We do this now, by requesting that you read the information provided at http://www.knowyourprivacyrights.org

Except as set out below, we do not share, or sell, or disclose to a third party, any information collected through our website.

What information do we collect about you?

We process your personal data to meet our legal, statutory and contractual obligations and to provide you with our products and services.

The personal data we collect is as follows:

  • Your on-site browsing behaviour, including the pages you have viewed, IP address and browser details etc.
  • Your name, email, telephone and preferences.
  • Your organisation details, if provided.
  • Your addresses, payment details and any other data you provide as required for processing your orders and returns.
  • Communication between us, including emails, online chat messages and telephone calls.
  • Gift card details.
  • Other data entered into our site for specific purposes, for example, the creation of wishlists.

Any other data collection is detailed at the point it is collected in a separate notice.

How do we collect information about you?

We collect data from you in the following ways:

  • The data you enter into online forms on our websites.
  • Your browsing behaviour on our websites.
  • When you contact us, for example over email, telephone or online chat.

How will we use the information about you?

Our processing activities are:

  • Tracking and analysing your browsing behaviour on our website for our own performance purposes.
  • Sharing your onsite behaviour with third parties for marketing purposes.
  • Fulfilling your orders, including placing them, taking payment, dispatching them and dealing with any returns.
  • Responding to customer services requests via chat, email, telephone etc.
  • Analysis of data for reporting, forecasting and site performance.
  • Analysis of data for marketing purposes, including profiling.

Sharing and disclosing your personal data

We do not share or disclose any of your personal data to third parties without your consent, other than for the purposes specified in this notice or where there is a legal requirement.

Onsite browsing and marketing controllers

As is normal for the e-commerce industry, we share your browsing data with some third-party marketing organisations, primarily through Javascript tracking code. Those organisations become the controllers of that data, so if you opt-out of any further tracking on our site you would need to contact those organisations directly to exercise your other data rights. These data transfers are in Amara’s legitimate interest.

Paid On Results

Paid On Results power some of our referral programmes. You may be interested in their Privacy Notice,

You can opt out of the tracking and data transfers on our browsing data preferences page.

Facebook

We use Facebook to advertise to you on their platform.

You can opt out of the tracking and data transfers on our browsing data preferences page.

Google Adwords

We run advertising campaigns via the Google platform.

You can opt out of the tracking and data transfers on our browsing data preferences page.

Google DoubleClick

We use DoubleClick, a service of Google Inc. DoubleClick uses cookies to place user-based web ads. The cookies detect which ads have already appeared in your browser and whether you visited a website via an ad placed. In doing so, the cookies do not collect any personally identifiable information, nor are they able to link to any.

If you do not want to receive user-based advertising from Google, you can disable the placement of ads by using Google’s ad settings.

For more information about how Google cookies are used, please refer to Google’s privacy statement.

Google Dynamic Remarketing

We use the dynamic remarketing function of Google AdWords on our website. This technology allows us to place automatically generated ads oriented towards target groups after you visit our website. Ads are oriented towards products and services that you clicked on during your last visit to our website.

Google uses cookies to generate interest-based ads. Cookies are small text files that are stored in your browser when you visit our website. In this process, Google typically stores information such as your web request, IP address, browser type, browser language, and the date and time of your request. This information only serves the purpose of mapping the web browser to a specific device. It cannot be used to identify an individual.

If you do not want to receive user-based advertising from Google, you can disable the placement of ads by using Google’s ad settings.

For more information about how Google cookies are used, please refer to Google’s privacy statement.

Order fulfilment controllers

We share your personal data with some other organisations as part of the order fulfilment process. This data processing is part of your contract with us when you place an order.

These companies are joint controllers with Amara of your customer data, so you will need to contact them directly to exercise your data rights. Our other fulfilment partners are:

  • Apple Pay provides us with payment processing and fraud analysis.
  • PayPal provides us with payment processing and fraud analysis.

Our data processors

We engage the following organisations which we use as processors of your data. All processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.

Akismet

AWS

Online.net

Zendesk

Marketing, promotions and offers

We will only send you email marketing communications if you have opted in to receive them. You have the right to opt-out at any time, please see the footer of the emails for details.

You may opt out of other marketing communications via post, telephone or SMS, from the My Account area.

How long will we keep your data for?

The data you can manage from your My Account area will be stored until you remove it, for example, your wishlists and saved addresses.

Data about your orders and communications with us will be held indefinitely as we need a legal record of these.

Website behavioural data will be kept for up to 38 months, after which time we aim to store only aggregated, non-personal data.

You may also delete your account which removes most of the data we hold about you – see the “Right to erasure” section for more details.

Securing your data

We take your privacy and data security seriously and we take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place.

Your rights

You have many rights around the use of your personal data. We are implementing them in the following ways:

Right to be informed

Your right to be informed about how we use personal data is contained within this notice, including:

  • The purposes for which we process your data.
  • The categories of personal data we hold about you.
  • The recipients to whom your personal data has/will be disclosed.
  • How long we intend to store your personal data for.
  • If we did not collect the data directly from you, information about its source.

Right of access

You have the right to request the personal data which we hold about you. We have implemented a process within the My Account area which allows you to request access.

If you have placed orders as a guest only, you must create an account for us to be able to verify your identity before we can process your request.

Right to rectification

You are able to rectify most data from within your My Account area. If there is any other data which you want to be rectified, please contact customer services.

Right to erasure

You have the right to request that we delete the personal data we hold about you. We have implemented a process within the My Account area which allows you to delete your account and most of the associated data.

There is some data which we do not delete:

  • Your name and email, which we use to store the deletion request.
  • Your order data, which we require for reporting and tax purposes. However, we will stop using your personal data for marketing profiling.
  • Your communications with us.

If you have placed orders as a guest only, you must create an account for us to be able to verify your identity before we can process your request.

Right to restrict processing

You have the right to restrict our data processing, which you may do in two places:

If the processing is done by a different data controller, you will need to contact them directly.

Right to data portability

You may download the data we hold about you in the My Account area. We have not implemented any specific data portability initiatives, as we do not believe there are any standard approaches in the e-commerce sector. We will implement more data portability initiatives if this changes in the future.

Right to object

You have the right to object to our data processing, to do this, please contact customer services.

Translated privacy notices

The non-English translations of this notice are for convenience only, in the event of conflict or ambiguity the English version is authoritative.

Changes to our privacy notice

Any changes to this notice will be posted onto this page. If the changes are significant we may display a notice or seek your consent.

How to contact us or lodge a complaint

You may contact customer services to lodge a complaint.