Privacy policy
THC Privacy Notice
This website (the “Website”) are owned and operated by X Terrace Fashion Ltd., 7 Cambridge Walk, Henham, Bishop's Stortford, CM22 6UE United Kingdom (“we”, “us”, or “our”). We are committed to protecting and respecting the privacy of our customers when you use this Website to make purchases. This privacy notice sets out how we may use the personal data that we collect from you or that you provide to us in the course of you using our Website. Please read the following carefully to understand how we will use your personal data.
What data do we collect about you?
When you are using our Website we may collect certain data about you, such as: 1) Basic contact information* If you decide to register for an account on our Website, then we will collect the following information during the sign up process which will form part of your account: -your name -email address -telephone number -date of birth -address during the sign-up process and retain this information as part of our records If you setup an account on our Website you will provide us with your chosen username (this will be the email address which you use when you sign up) and a password which you will be able to change. You may provide us with further information or edit your existing information during the course of using your account through the Website. You may also provide us with additional contact information (e.g. your mobile number) if you contact our customer support team. 2) Your payment details* If you wish to make a purchase on the Website using your credit/ debit card then you will need to provide us with your credit/debit card information. 3) Technical information about your device and Website usage* When you use our Website we will collect certain technical information including: -Details about your device including IP address, device type, operating system, platform, location data, the browser type and version (including any plug-ins you may be using) and your time zone setting. -Information relating to your use of the Website, including telephone number, date of birth and address page response times, the pages of our Website that you visit, methods used to browse away from the page and any download errors. 4) Records of how you use our services* We will keep a record of the products you have bought from us and any returns that you have made. We will also record how you have interacted with any marketing campaigns we have sent you, for example whether you have read emails, used discount codes or entered any competitions. 5) Records of communications you have with us* If you contact us with a question or to provide feedback, for instance, we will keep a record of your communications with us through email or telephone (although we don’t record your calls). 6)Other information that you provide to us voluntarily* This may include data that you provide to us if you enter a competition or prize draw on our Website or the details of any feedback that you provide to one of our online surveys or focus groups.
Cookie Policy
Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our Website. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive. We use the following cookies: - Essential cookies. These are cookies that are required for the operation of our Website. They include, for example, cookies that enable you to log into secure areas of our Website, use a shopping basket or make use of e-billing services. - Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our Website when they are using it. This helps us to improve the way our Website works, for example, by ensuring that users are finding what they are looking for easily. - Functionality cookies. These are used to recognise you when you return to our Website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Website. Except for essential cookies, all cookies will expire after 2 years, although most of our cookies are session cookies which means that they will only last for as long as your browser is open.
For what purposes do we use data about you, and on what legal basis?
We use your data for various purposes, including: - to set up and manage your account with us; - to facilitate your use of our Website; - to communicate with you in relation to your use of the Website, products you have purchased; - to provide you with customer support; - for internal management, administrative and organisational reasons; - to share information with our suppliers and other third parties where required; - to send offers, promotions or other marketing which we think you may like; and - to perform data analytics and benchmarking. In order to use your data we must have a legal basis for doing so. The legal bases that we rely upon are explained further in the “find out more” section below. We will only use your data where it is necessary for: - the performance of an agreement to which you are a party; - compliance with a legal obligation to which we are subject; or - a legitimate business interest that is not overridden by your interests, rights and freedoms where none of the above applies, we will request your consent (which we will ask for before we process the data).
Who do we share your data with, and for what purposes?
Web development agencies: We will only share your personal data with our web development agencies if you are experiencing technical difficulties and we needed their help to fix an isolated incident. Payment service providers: We use certain third parties such as payment processors to administer and process payments to and from you. Warehousing and fulfilment providers: We will share your data with our warehousing and fulfilment providers so that they may dispatch and deliver your purchased products. IT providers: We make use of certain IT providers to support our business, including for services such as customer support. We will share your data with our customer marketing service providers so that they may send you emails and SMS messages about products and offers that may be of interest to you, these emails and messages will all be from us and we don’t sell your data to third parties. To comply with legal or regulatory requests: If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation, we may share your personal data with a regulator or law enforcement agency, for example the police or HMRC. If you would like to receive a full list of our suppliers and other third parties who we share your data with then you can get in touch with us at hello@thehatcircle.com
Where might data about you be sent?
We use a cloud based platform to store your data, which may involve use of geographically distributed data centres. As with any multinational organisation, we are often required to transfer data internationally. Accordingly, data about you may be transferred globally (if your data is collected within the European Union, this means that your data may be transferred outside of it). This includes transfers that have been identified in the previous section: Who do we share your data with and for what purposes. When using data as described in this notice, data about you may be transferred either within or outside the country or territory where it was collected, including to a country, territory or international organisation that may not have UK and/or EU equivalent data protection standards. For example, we may transfer your personal data to our suppliers based outside the European Union. In all cases, the transfer will be on the basis of a European Commission adequacy decision or we will implement adequate measures, for example the EU Model Contracts, and including appropriate security measures, for the protection of personal data in those countries, territories or international organisations in accordance with applicable data protection laws. If you would like more information about any of the data transfer measures on which we rely please get in touch with us at hello@thehatcircle.com
How do we protect data about you?
We implement appropriate technical and organisational measures to protect personal data that we hold from unauthorised disclosure, use, alteration or destruction. Where appropriate, we use encryption and other technologies that can assist in securing the data you provide. We also limit access to your personal data to those employees, agents or contractors who have a business need to access it. We require our service providers to comply with strict data privacy requirements.
How long will data about you be kept?
The period for which we may retain data about you will depend on the purposes for which the data was collected, whether you have requested the deletion of the data, and whether any legal obligations require the retention of the data (for example, for regulatory compliance). We will not retain data about you for longer than is necessary to fulfil the purposes for which the data was collected. Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us at hello@thehatcircle.com
What rights and options do you have?
As a result of us collecting and processing your personal data, you have the following legal rights: 1) to access personal data held about you; 2) to request us to make any changes to your personal data if it is inaccurate or incomplete; 3) to request your personal data is erased where we do not have a compelling reason to continue to process such data in certain circumstances; 4) to receive your personal data provided to us as a data controller in a structured, commonly used and machine-readable format where our processing of the data is carried out by automated means and is based on: (i) your consent; (ii) our necessity for performance of a contract to which you are a party; or (iii) steps taken at your request prior to entering into a contract with us; 5) to object to, or restrict, our processing of your personal data in certain circumstances; 6) if we use your personal data for direct marketing, to ask us to stop and we will comply with your request; 7) if we use your personal data on the basis of having a legitimate interest, to object to our use of it for those purposes, giving an explanation of your particular situation, and we will consider your objection; 8) to object to, and not be subject to a decision which is based solely on, automated processing (including profiling), which produces legal effects or could significantly affect you; and 9) to lodge a complaint with a data protection supervisory body, which at present is the Information Commissioner’s Office. To exercise any of your rights set out above please contact us at hello@thehatcircle.com We try to respond to all legitimate requests within one month. Occasionally it may take us longer where your request is particularly complex, in such cases, we will keep you updated on timescales. Such requests will be responded to free of charge, but a small administration fee may apply where requests are excessive.
Who should you contact with questions?
For the purpose of data protection legislation in the UK, the data controller is XTerrace Fashion Ltd., with our registered address at 7 Cambridge Walk, Henham, Bishop's Stortford, CM22 6UE United Kingdom. If you have any questions, or wish to exercise any of your rights, please contact us at hello@thehatcircle.com If your country has a data protection authority, you have a right to contact it with any questions or concerns. If we cannot resolve your questions or concerns, you also have the right to seek judicial remedy before a national court.
Changes to this notice
We may update this notice (and any supplemental privacy notice), from time to time. We will notify you of the changes where required by law to do so. Last Modified 1st June 2020.