Privacy Policy
The Website (found at URL www.christy.co.uk in the UK) is owned and operated by Welspun UK Ltd trading as Christy Towels “Christy”, "Christy Towels”, “Christy Linens”, "we" or "us") and this Privacy Policy is issued by Welspun UK Limited and affiliated companies. We are committed to protecting the privacy and security of your personally identifiable data. We respect your Right to Privacy and are committed to maintaining it. We advise you to carefully read this Privacy Policy, so that you are aware of how, where and why we are using your personal Data. By accessing, browsing or otherwise using the Website you confirm that you have read and understood this Privacy Policy
Purpose of the Privacy Policy
This Privacy Policy sets out why we use your data and the way in which we process your data when you use our website or other digital platforms. We ensure your rights as required by General Data Protection Regulation (GDPR).
Applicability of the Privacy Policy
This Privacy Policy applies to individuals visiting our Website. It applies only to the data we collect through our website, in email, text and other electronic communication received through or in connection with our Website.
Personal Data We May Collect
We may collect your personal data including your corporate/personal email id, demographic information including country, postcode, first name/last name, job title, mobile number, social media profile, preferences and interests, purchase information, payment card information, account password and login details, social media account details, your comments, product reviews and responses on surveys you complete, appointment booking and information given during an appointment, details to help us suggest items for you, details of your interactions with our Customer Contact Centre. We may also capture additional personal data in the form of various usage and user metrics when you use on our website including cookies, IP addresses, device and software identifiers, referring and exit URLs, onsite behavior and usage information/history, feature use metrics and statistics and other similar information. While some of this data is captured directly from you, for example, by way of web forms and web log servers, others can be captured indirectly from third parties, for example, preferences and interests on the basis of IP address and browsing history respectively.
Means Of Processing Personal Data
We will process your Personal Data through the following means:
- Cookies;
- Weblogs;
- Surveys;
- Web forms;
- Newsletter sign-ups;
- Registration for an event/activity;
- Information request mechanism;
Grounds For Lawful Processing Of Personal Data
When we process your personal data, we do so primarily in connection with offering you products, marketing, sale and promotion of our products which we provide or which are procured through our website and to improve and enhance the range of those products and offerings. We may process your personal data included but not limited to the following circumstances:
| Personal data | How we use your Personal Data | Lawful Grounds of Processing your Personal Data |
| Your name and contact details | To fulfil the contract with you | To complete your order and perform the contract with you, i.e. taking payment, updating you regarding the status of your order and shipping the order to you (including the printing of labels). |
| To manage issues during order fulfilment, refunds and taxes | To perform our contract with you. We may also keep a record of this to comply with our legal obligations. | |
| To register your Account | To perform our contract with you. Where you have not yet purchased anything from us, we will ask you if you want to consent to email marketing through this registration. | |
| To provide a Receipt for a store purchase. | In order to perform our contract with you (provision of a digital receipt) we will capture this information. | |
| To detect and prevent any crime or fraud | Christy has a legitimate interest in protecting itself from Fraud. | |
| To enhance your user experience | Christy has a legitimate interest in monitoring the websites to improve customer experience. | |
| Your payment details | To successfully complete your order | We require these details to perform our contract with you and our contracts with partners and suppliers who work with us to provide a service to you. |
| To perform a trend analysis on the customer spend | Christy has a legitimate interest in analysing this information to improve customer experience. | |
| Klarna Payment | In order to be able to offer you Klarna's payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. | General information on Klarna can be found here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna's privacy policy. |
| Your device information, preferences and cookies provided when you browse our website | To enhance your user experience on our website by offering you the right products and services tailored to meet your specific needs | We will do this where you have consented to the use of cookies on our database. Please see our section on Cookies and our Cookie Policy for more details. You can manage your cookie settings at any time; Click here to manage your cookies |
| To market our products on other social media networks | We will do this where you have consented to the use of cookies on our database. Please see our section on Cookies and our Cookie Policy for more details. You can manage your cookie settings at any time; Click here to manage your cookies | |
| Your views about products you have purchased, via an optional email questionnaire | To ascertain your experiences with our products and service allowing us to improve. | Christy has a legitimate interest in conducting market research of this nature, normally by Feefo. Note: all personal information is removed. |
| Financial information, social media information | When combined with personal identification and contact details to investigate cases of fraud. | Christy has a legitimate interest in protecting ourselves from various types of fraud. |
Children’s Privacy
We understand the importance of taking extra precautions to protect the privacy and safety of children using our website. The Website services are not intended for users under the age of 16. We do not knowingly collect any personal data from children under 16 or market to or solicit information from anyone under the age of 16. If we become aware that a person submitting personal data is under 16, we will delete all the information as soon as possible unless it is with the consent and involvement of a parent or guardian. If you believe we might have any information from or about a child under 16, please contact us at DPCO@welspun.co.uk.
Security: How Secure Is Your Information With Us?
We have implemented appropriate physical, electronic, procedural and managerial procedures to safeguard your information against loss, unauthorized access, misuse or modification. We require any third parties processing your information to do the implement the same levels of protection with respect to your data. We strive to use commercially acceptable means for protecting your information.
Your Rights over your Personal Data
Right of Access: You have a right to access your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you.
Right to Rectification: You have a right to rectify the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
Right to be Informed: You have a right to be informed about the collection and use of personal data.
Right to be Erasure [Forgotten]: You will be able to ask us to delete or remove personal data which we process about you subject to limited circumstances in accordance with the GDPR requirements.
Right to Object to Processing: Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground you have the Right to Object to Process your Personal Data. Similarly, you may access this Right where we are processing your personal data for direct marketing purposes.
Request the Restriction of Processing of your personal data: This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
Right of Data Portability/Transfer to another party: You may move, transfer or copy your information so that you can use this information in a different service. To the extent we are able to do so, we will make this information available to you in a commonly used format so that you can transfer this to another service.
Right to Withdraw Consent for processing of Personal Data: In limited circumstances, where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the Right to Withdraw your Consent for that specific processing at any time. To withdraw your consent, please contact DPCO@welspun.co.uk. Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Right Related to Automated Decision Making Including Profiling: You will have a Right not to be subjected to a decision based solely on automated processing including profiling. Such decisions can be made only if, they are necessary for the entry into or performance of a contract or authorized by the Union or member state law applicable to Christy or based on your explicit consent.
All the above mentioned Rights can be exercised (subject to the limitations mentioned above and applicable data protection laws) by contacting DPCO@welspun.co.uk.
Cookies
Cookies are alphanumeric identifiers with small amount of data that is commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive. Please note, a cookie in no way gives us access to your computer. Our website uses these “cookies” to collect information and to improve our Service. At any time, you also have the option to change/control your cookies through your browser settings.
Retention of your Personal Data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of providing the relevant goods and services to you, satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. Christy’s general retention policy is to retain information for 6 years.
Data Protection Officer
Christy has appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Policy. If you have any questions about this Privacy Policy or how we handle your personal data, please contact the DPO at DPCO@welspun.co.uk. You have the Right to make a complaint at any time to the regional supervisory authority for data protection issues.
Transferring Your Personal Data
As a global business, if necessary, we may transfer your personal data to servers, entities and partners located outside the European Economic Area (EEA) or other trusted third parties based in other countries so that they may process personal data on our behalf. By using our website or otherwise providing us with your personal data, you agree to us doing so in accordance with the terms of this Privacy Policy and applicable data protection laws and regulations. To ensure that your personal data does receive an adequate level of protection when transferred outside EEA, we have executed Intercompany Transfer Agreements containing standard contractual clauses in accordance with the EU Data Protection Laws. We may also transfer your data to third party service providers and web analytics tool providers. They may permit certain third party companies to help us to tailor the advertising that it thinks may be of interest to you, based on your use of our website.
Changes to the Privacy Policy
This Privacy Policy is effective as of 24/05/18. We reserve the Right to update or change this Privacy Policy at any time, and we will provide you with the updated Privacy Policy when we make any substantial updates at the earliest either through email or by providing a prominent notice of change on the website. Your continued use of the website after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
Contact Us
Apart from the DPO details mentioned above for contact, you may also reach out to us for any questions related to our Privacy Policy or your Personal Data at the following contact details:
By Email: info@christy.co.uk
Write to us: Christy (Welspun UK) Ltd, Regent House, Heaton Lane, Stockport, SK4 1BS
