Privacy Policy

In addition to the main body of the Privacy Policy, this notice applies solely to customers who reside in the European Economic Area (“EEA”) and is presented in compliance with the General Data Protection Regulation (“GDPR”).

Relying on our legitimate interests

We have carried out an assessment on all the data processing activities described in this Privacy Policy in order to balance any privacy implications of them with our legitimate business interests. You can obtain information on any of our assessments by contacting us using the details set out in the section “How do I get in touch with you” above.

Withdrawing consent or otherwise objecting to direct marketing

Applicable laws permit us to send you direct marketing without your consent where we rely on our business or legitimate interests. However, regardless of the type of legal basis on which we rely to send you direct marketing, you have an absolute right to opt out at any time from direct marketing by us or from any profiling we carry out for that direct marketing.

Who will we share this data with, where and when?

If we transfer your personal data outside the EEA to a business partner or third-party service provider in a country that is not subject to an adequacy decision by the EU Commission, the personal data will be adequately protected by EU Commission-approved standard contractual clauses, an appropriate Privacy Shield certification or the third party or business partner’s Processor Binding Corporate Rules. A copy of the relevant mechanism can be provided for your review on request to the contact mentioned in the section “How do I get in touch with you” above.

Your personal data may be transferred to the Hong Kong Special Administrative Region, the Macao Special Administrative Region, Mainland China, the Taiwan Region, Indonesia, Singapore, Australia, United States and/or Japan.

What rights do I have in relation to the processing of my personal data?

You can object to our processing of your personal data where we do not need to process the data for business interests, other legitimate interests, purposes for which consent has been given (including direct marketing) or other legal requirements.

You have the right to complain about any unresolved data privacy concerns to an EU data protection authority where you live, work or where you believe a breach may have occurred.

How long will my data be kept?

Where we process personal data for our Site’s security purposes, we retain it for seven years after any business and legitimate interests no longer exist. Where we process personal data in connection with performing a contract or for a competition, event or promotion, we keep the data for seven years from your last interaction with us.