Privacy notice

General Data Protection Regulation, or GDPR, governs how businesses process and handle customer data. Our helpful guide explains what it means for you. It won’t take long, so you’ll soon be back to shopping stuff you love.

Data Controllers and Data Protection Officer

A data controller is an organisation that collects, uses and manages personal data and has responsibility for how the personal data is collected, used and managed.

A data protection officer is the person in an organisation who has responsibility for monitoring compliance with data protection law and for ensuring that personal data is protected within an organisation.

Olesia Harford provides goods and is the data controller of personal data that you provide when you order goods. Olesia Harford is registered in Spain, number NIF ESZ0178521T. Registered Office: street Pedro 111 El Grande 24, Valencia, Spain. Website https://bchs-shop.com

The Data Protection Officer for Olesia Harford can be contacted at tienda.bchs@gmail.com

How We Use Your Personal Data

We collect, use and manage your personal data to provide goods and services to you and to enter into and administer any credit accounts or financial services products you may have with us.

We will use your personal data in the following ways:

• To provide goods and services and to manage your retail account including administering payments, returns and responding to queries.
• To assess whether to offer you a credit facility and for ongoing administration of any credit facility. This includes accessing and sharing information with the Credit Reference Agencies.
• To verify your age to prevent unlawful purchases of age restricted products. This involves sharing your information with a Credit Reference Agency.
• To administer any financial services products that you have.
• To administer any prize draw or competition you may enter.
• To analyse your shopping preferences or how you interact with or use our websites.
• For research and statistical purposes.
• For marketing purposes including to send you special offers or discounts and to tell you about products and services from us or third parties. This may also include levels of profiling to ensure we market to you about relevant products and services. You control your preferences in respect of how your personal data is used for marketing and you can change these preferences when you log in to My Account.
• To record and monitor outbound and inbound telephone conversations with you to ensure consistent service levels, to prevent or detect fraud, to resolve queries and complaints and for performance management and training purposes.

We will collect personal data directly from you when you purchase goods or services or change any of your details (such as your name or address) via My Account. We require you to provide personal data in order to assess whether to enter into a contract with you or to perform our contract with you and if you do not provide the personal data we request, we will be unable to enter into or fulfil this contract. We may also collect personal data through cookies. For further information please see our cookies policy:

Cookies are small text files stored on your device by a web browser (e.g. Internet Explorer) that hold information about your previous visits to our site and may contain personal data relating to you. We use this information to offer you a more personal browsing experience and to enhance your use of our site.

Cookies can be “first party”, which are cookies set by us, or “third-party” which are cookies that are placed on your device by a third party when you visit our site.

Third-party cookies may be placed on your device by a third party providing a service to us. These cookies are placed by trusted third parties (such as advertising networks) who we have a relationship with. They remember that you have visited a website and what pages you have viewed. Information within the cookie is shared with other organisations such as advertisers. These third parties may combine data which we share with data from other sources such as other websites or mobile applications. This combined data may then be used to ensure that we can better target you with products and services that are relevant to you.

Consent management. We will record your preferences (consent) and will reaffirm preferences every six months. The consent management tool specifically controls functional and targeting/advertising cookies set by using our site. Strictly necessary cookies and performance cookies cannot be disabled, nor can the tool be used to block cookies on third-party websites linked from our site.

Удаление файлов cookie. Сбор ваших данных с помощью наших аналитических файлов cookie можно удалить. Если файлы cookie будут удалены из вашего браузера, информация, собранная до изменения предпочтений, все равно может использоваться, однако мы прекратим использовать отключенные файлы cookie для сбора любой дополнительной информации о вашем пользовательском опыте.

We obtain data from third party sources such as credit reference agencies, fraud prevention agencies and publicly available information relating to you on the internet (for example on social media websites).

We may also obtain personal data from third party companies for the purposes of sending marketing communications to you. Such marketing communication may be sent by ourselves or by the third parties. These third parties must check you have given your permission for such contacts to take place.

Why We Need Your Personal Data

We need to process your personal data for a number of different reasons and these are our legal bases for processing. We also need to keep your personal data for as long as is necessary for us to operate our business and to comply with legal and regulatory obligations.

We rely on one or more of the following legal bases for processing personal data:

• To perform our contract with you or to enter into a contract with youWe need to process your personal data to fulfil our contract with you or to assess whether to enter into a contract with you, whether this is in selling and delivering goods and services to you or providing credit facilities or other financial services products to you.
• To fulfil our legitimate interests or the legitimate interests of a third partyWhen we process personal data to fulfil our legitimate interests we will use it in a way in which you would reasonably expect and which will have a minimal privacy impact. When we or third parties are relying on legitimate interests to process your data we will balance our interests against your interests and the privacy impact of the processing on you and we will process your personal data responsibly.Examples of our legitimate interests are: direct marketing, fraud prevention, preventing and investigating crime, assessing affordability and credit worthiness, IT security and development by us and third parties of new products and services.
• To comply with legal obligations to which our business is subject.We have to comply with relevant law and regulation in order to provide retail and financial services products and we will need to process your personal data in order to comply with these legal obligations.
• ConsentIf we are relying on your consent as our legal basis to process your personal data, you have the right to withdraw consent at any time.

We will keep your personal data for the purposes set out in this privacy notice and only for as long as any legal basis continues to apply. Below is a non exhaustive list of some of the reasons we need to retain your personal data:

• Compliance with the requirements of the Financial Conduct Authority
• Compliance with Anti Money Laundering Regulations
• Reporting obligations to the Credit Reference Agencies
• Ensuring we have relevant information in the event of any queries or complaints
• Being able to identify if you have purchased a product which is subject to a product recall
• Being able to service any product or service guarantee you have purchased
• To assist with the establishment, exercise or defence of legal claims

The length of time we need to keep the personal data will vary depending on the nature of the personal data and the reason we are obliged to hold it. We will apply appropriate risk based measures to protect your personal data which may include pseudonymising or anonymising the personal data. If personal data is pseudonymised, this means it is de-identified so you are no longer identifiable, but we can re-identify you if we have a requirement to do so. If personal data is anonymised, it is de-identified, but can never be re-identified in the future.

Who We Transfer Personal Data To

Transferring personal data to other organisations needs to take place with appropriate safeguards and you can be assured that we will only share the personal data that is needed for these organisations to be able to provide the right service or support us in doing so.

We may transfer your personal data to the following third parties:

• Customer service providers – our partners who work with us to administer your account and provide you with any help you may need.
• Telephony providers – our partners who provide telephone services and functionality.
• Delivery companies – our couriers, parcel firms and mail firms who deliver your goods or services and manage any returns on our behalf.
• Repair companies – our partners who provide repair services for products.
• Distributors and manufacturers of goods – our partners who fulfil orders and deliver products to you and manage any returns on our behalf.
• Product service providers – our partners who provide retail or financial products and services including credit facilities, payment facilities, insurance or extended warranties.
• Research service providers – our partners who work with us to provide research and data analysis services.
• Marketing service providers – our partners who work with us to send you information about products, services and special offers that we or they believe are of interest to you.
• Data pool facilitators – we may share and pool information (on an anonymous basis or otherwise) with other third party retailers or financial service providers. This may help up to improve our products and quality of service to all customers.
• Debt collectors, tracing agencies, debt purchasers or organisations providing debt support – our partners who help us to recover debts, who purchase debts or who offer debt advice and support.
• Regulators and other governmental agencies or law enforcement agencies.
• Organisations who may be interested in purchasing our business or organisations who we may be interested in purchasing – we may sell parts of our business or acquire other businesses and your personal data may be shared with such third parties as part of this process.

We will only transfer your personal data to third parties who adhere to appropriate data security standards and controls. This may include transferring your personal data to third parties who become joint controllers of the data, including some organisations within the following categories:

• Credit reference agencies and credit providers
• Distributors of goods
• Marketing service providers, such as Google or Facebook
• Regulators and other governmental agencies or law enforcement agencies
• External auditors
• Debt collectors, tracing agencies, debt purchasers or organisations providing debt support

For more information about third parties with whom we have joint controller status, please contact us at tienda.bchs@gmail.com

From time to time we may need to transfer your personal data to other countries. Where this is the case, we will ensure that the transfer is subject to appropriate safeguards to protect your personal data and complies with applicable law which may include having standard contractual clauses in place with the third party. For further information on how data can be transferred to other countries, please find enclosed a link to the European Commission website: https://ec.europa.eu/info/law/law-topic/data-protection_en

Your Rights

You have certain rights in respect of your personal data and we have processes to enable you to exercise these rights.

Right to Rectification

If you believe that we hold inaccurate personal data about you, then you can update this information directly by logging in to My Account and updating the relevant details.

Alternatively, you can request that we carry out a review and rectify any incomplete or inaccurate personal data we hold about you: tienda.bchs@gmail.com

Depending on the type of personal data you believe is inaccurate, we may ask you for further proof to ensure that the personal data is being corrected properly. If we are satisfied that the personal data is inaccurate we will make the necessary changes.

Right to Erasure

You have a right to ask for your personal data to be erased. However, we are not required to erase your data where we need your personal data to comply with a legal obligation or for the establishment, exercise or defence of legal claims. Therefore we cannot comply with an erasure request where you have a retail shopping account, owe money on a credit facility or have otherwise bought products and services for which we must keep records. In addition, if you opt out of marketing communications or have previously opted out of marketing communications, we have to keep a record or such opt out to ensure that we don’t contact you in the future.

Right to Restriction

You have a right to request that processing of personal data is restricted in certain circumstances. Where we restrict your data, we are permitted to store your data but we cannot process in any other way apart from for the establishment, exercise or defence of legal claims or with your consent.

You may also object to other processing when we rely on our legitimate interests as the basis for processing, but we do not have to stop the processing if we can demonstrate compelling legitimate grounds for the processing (taking into account our processing activities, the nature of our business and our legitimate interests) and that these grounds override your interests, rights and freedoms or in the event that we need the personal data for the establishment, exercise or defence of legal claims. To enable us to consider any objection we will need to know what specific interests, rights or freedoms relating to your particular situation you believe will potentially be put at risk by our processing. If we do stop processing your personal data (apart from for direct marketing purposes), this may affect our ability to trade with you.

Automated Processing/Profiling

From time to time, in deciding whether to enter into a contract with you, or during the ongoing performance of a contract, we take decisions based on automated processing which produces legal affects or similarly significantly affects you, for example, deciding whether to offer a credit facility or assessing a fraud risk. We use data from a variety of sources in our automated processing for credit scoring and fraud decisioning and we use statistical methods to produce the results. This logic helps us understand the risk posed by individuals by placing a weighting on certain criteria which is then calculated to give an overall score.

There are a number of consequences of such automated processing:

• we may open a credit account and you can purchase goods and services using this credit account
• we may increase or decrease your credit limit from time to time
• we may decide to offer you other credit terms such as buy now pay later or interest free credit which will facilitate your purchase of goods and services
• we may refuse your application for credit or we may decide not to offer certain credit products which may have an impact on your ability to purchase goods and services from us. This is in line with our obligations as a responsible lender as we have to assess affordability for credit purposes and to protect customers from financial distress and difficulty
• we may conduct a further review or request additional information from you in relation to your request to purchase goods and services if our fraud decisioning highlights any issues

We also use automated processing in relation to the information we hold about you to make recommendations of products and services we think you would be interested in and to improve your experience when you visit our website by making it relevant and tailored to you.

If you object to our use of your data for targeting through cookies, we will opt you out. You can do this by managing your cookie settings through the Privacy Preference Centre, please see our Cookie Policy for more information.

Right to Portability

In certain circumstances, you can request that we provide to you your personal data in a commonly used format. If you wish to make such a request you can call our Customer Services Team tienda.bchs@gmail.com, for details.