Last update : 22.05.2018
This Policy applies to our website, products or services that link to this statement or do not have a separate privacy statement (collectively our “Services”). This purpose of this privacy statement is to give you a better understanding of what type of data we are collecting, the reasons behind the collection and other useful privacy matters.
1. Information we collect
Information you provide
When you use our services you provide us with information through our subscription box forms, orders placed on our Eshop, account you created. When you purchase a subscription box or an item from our Eshop, as part of the buying and selling process, we collect the personal information you give us to complete the transaction such as your name, shipping/billing address, email address, phone number and payment details.
Marketing email preferences : If you decide to subscribe to our email newsletter, we will collect your email address. We may send you emails about our store, new products and other updates.
We may also collect the following information from our website, our blog, our mailbox and our social media platforms.
Name, contact information and message if you contact us or participate in a survey, contest or promotion;If you contact us via email, we will collect your name and email address, as well as any other content included in your email to us, in order to send you a reply.
Details such as traffic information, location data and other communication data (including IP address and browser type) collected by your availing of the Services
Information and communications on our website and blog comments
Your Phone number - when you contact us by phone
Your response to marketing campaigns from us or through our third parties i.e. open/click on such emails;
Your social media profile details (name, profile photo and other information you make available to us) when you connect with or contact us through a social media account;
Information from third party databases to comply with our legal and regulatory obligations.
2. Your consent
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no. If you change your mind after you opt-in, you can withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at firstname.lastname@example.org. Please allow up to 48 hours for any changes you make to your marketing preferences to be fully processed.Please remember that even if you opt out of receiving marketing emails, we may still send you important Service information related to your accounts and subscriptions.
3. How and why we use this information
We process personal information for these Services- and business-related purposes:
Account setup, verification and management: We use personal information such as your name, email address, phone number, and information about your device to set up and administer your account, provide technical and customer support, verify your identity, process payment information and send important account and Service information.
As a condition to using our Services, we may ask you to share your precise geolocation so we can ensure that we are authorised to provide the Services to you in your location. The above processing is required in order for us to provide the Services to you pursuant to our terms and conditions.
Marketing and events: Subject to any preferences you have expressed (where applicable), we use personal information to deliver marketing and event communications to you across various platforms, such as email, direct mail, online or otherwise. We will do this during the period of your relationship with us and, unless specifically instructed otherwise by you, for a reasonable period of time after the relationship has ended in order to inform you about products, services, promotions and special offers which we think may be of interest to you.
Marketing emails : These communications will provide you with information about the products, services, active promotions or offers available to you by Hazelnut Box and information about products and services provided by our selected partners and third parties. This is on the basis of your prior written consent and subject to any opt out preferences you notify to us in respect of electronic direct marketing communications
We may publish customer names and images, along with any prizes received through our promotions, on our websites in accordance with our legitimate interests. We will contact you in first hand to seek your consent
Risk Management: In order to provide the Services to you and for our legitimate purposes, we process personal data to evaluate and manage risks to our business.
Show and measure ads and Services: We use a combination of information collected such as advertising cookies, your activity on our website to measure and analyse the effectiveness and reach of these ads, to help us improve and refine our marketing strategy in accordance with our legitimate interests.
Surveys and polls: If you choose to participate in a survey or poll, any personal information you provide may be used for marketing or market research purposes in accordance with our legitimate interests.
Diagnostics, research and development: We use personal information for internal research and development purposes, to help diagnose system problems, to administer our websites, to improve and test the features and functions of our Services, to develop new content, products and services. To carry out testing and analysis. This processing is necessary for the purpose of our legitimate interests.
Messaging: Our Services provide features including website messaging services, and blog comments for collaboration, peer connection and information exchange purposes. Depending upon the Service, the personal information you choose to post, share, upload, or make available is public and visible to others who use those Services.
Legal and regulatory obligations: We may be required to use and retain personal information for legal and compliance reasons, such as the prevention, detection, or investigation of a crime; or fraud. We may also use personal information to meet our internal and external audit requirements, information security purposes, and as we otherwise believe to be necessary or appropriate: (a) under applicable law, which may include laws outside your country of residence; and (b) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence.
4. How is your data shared
Your personal information may be transferred or disclosed, subject to appropriate agreement, to third parties, for the processing of that personal information based on our instructions and in compliance with this policy and any other appropriate confidentiality and security measures.
5. Third-party service providers & partners
Hazelnut Box may, from time to time, retain trusted third parties to process your information to provide us with services globally, including for payments, sales, marketing, data analysis, research and surveys. As part our agreements with our partners, we may be required to share your information for the purposes of calculating fees and benefits owed.
Third parties for legal reasons:
We will share personal information when we believe it is required, such as:
To comply with legal obligations and respond to requests from government agencies, including law enforcement and other public authorities, which may include such authorities outside your country of residence;
To protect our rights, users, systems, and Services.
Third Party website
Please be aware that by clicking through any external links your are subjected to the policy of the linked website (Third-Party Website) which might differ from ours. Therefore, we are not responsible for the content or privacy statement and cookies policy of the linked website. We do not accept any responsibility or liability for these policies. The inclusion of a link on the website does not imply endorsement of the linked website by us.
6. Your rights
Under the General Data Protection Regulation, you, as a data subject have the right to :
Know about the processing of your personal data
Obtain access to the personal data Hazelnut Box holds about you. Should you wish to request a copy of those personal data, please contact us : Contact@hazelnutbox.com
Ask for incorrect, inaccurate or incomplete personal data to be corrected;
Request that personal data be erased when it’s no longer needed or if processing it is unlawful;
Object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation;
Request the restriction of the processing of your personal data in specific cases;
Receive your personal data in a machine-readable format and send it to another controller (‘data portability’);
Request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computers. You also have the right in this case to express your point of view and to contest the decision.
Withdraw consent: Where we have relied upon your consent to process your personal data, you have the right to withdraw that consent.
To exercise your rights can contact us by email email@example.com. Hazelnut Box will do its best to respond to your requests without undue delay and at the latest within 1 month. You may be asked to provide information to confirm your identity (such as, clicking a verification link, entering a username or password) in order to exercise your rights. Please note that some of these might only apply in specific circumstances and are qualified in several respects by exemptions in data protection legislation. We will advise you in our response to your request if we are relying on any such exemptions.
7. Retention of your data
We retain personal information for as long as we reasonably require it for legal or business purposes. For the unregulated jurisdictions in which operate, and subject to us not having a legal or regulatory requirement or a risk management reason for retaining your information for a longer period, your information will not be kept for longer than 7 years post account closure.
Please note that we may be required in certain circumstances to retain your information indefinitely. We will take all necessary steps to ensure that the privacy of information is maintained for the period of retention.
We recognise that online security and data protection is a vital importance for our customers, so it is important to us that you have confidence in the way we protect your personal data before you use our Services. We are committed to employing security measures to protect your information from access by unauthorised persons and to prevent accidental or unlawful processing, disclosure, destruction, loss, alteration and damage. Our approach is focused on preventing risks. As the security of some communications via the internet is not completely secure, we cannot guarantee the security of any information that you disclose using your internet connection. You accept the inherent security implications of using the internet and Hazelnut Box will accept no liability for any direct, consequential, incidental, indirect, or punitive losses or damages arising out of such an occurrence.
We are making updates periodically to this page. Please update your knowledge of our policy periodically. Should important update take place, please be ensure we will let you know by placing a notice on the relevant Service and/or contact you using other methods such as email or through on social media platform
10. Contact us
If you would like to contact us with any queries or comments in relation to data privacy please send us an email at firstname.lastname@example.org