MAISON VELENDRA LIMITED
CUSTOMER PRIVACY NOTICE
Last updated January 20, 2021
The purposes of the document
We are committed to protecting the personal data that we obtain about you. This notice (the “Website Privacy Notice”) has been prepared to provide you with an explanation of how and why we process the personal data that we hold about you.
It is important that you read and understand this Website Privacy Notice. If you are under the age of eighteen, please have your parent or legal guardian read and explain it to you.
In this Website Privacy Notice, references to “we”, “us” and “our” means: Maison Velendra Limited, a company registered in England and Wales with registered address 105 Seven Sisters Road, London N7 7QR and registered company number 12236204.
If you have any questions about this Website Privacy Notice, please contact Kaushik Velendra at:
Telephone: +44 20 3404 6799
Email: K@maisonvelendra.com
When we collect and use information about you, we will likely do so as the “data controller”. This means that we are responsible for deciding the purposes and means for which the personal data that we hold about you is being processed. We will comply with all applicable data protection laws, including without limitation the General Data Protection Regulation 2016/679 and the Data Protection Act 2018.
This Website Privacy Notice applies to personal data we may collect from you, or that you provide to us, through or in connection with our website: www.maisonvelendra.com (the "Website"). This Website Privacy Notice also applies in respect of booking appointments or purchasing our products, as well as any other related services we may make available from time to time, through the Website (“Orders”).
You have the right to object to the processing of your personal data, including where your personal data is being processed for direct marketing purposes. Further information on this right, and your other rights, is set out below.
The types of information we hold about you
We may collect, store, and use the following categories of personal data about you:
Personal contact & background data
-
Personal contact details such as your full name, title, home address, personal telephone numbers and personal email addresses (and, where applicable, the personal contact details of your representatives, such as your agent or other persons liaising with us on your behalf).
-
Date of birth.
-
Gender.
-
Social media usernames.
-
Any information relating to your Orders (including invoices, payment details, order details and shipping details).
-
Information regarding the usage of our website (including user preferences, how often you use the Website, the pages that you visit, your IP address and device and browser operating system, version, make and model).
-
Any other personal data that you send to us.
Special categories of personal data
-
Biometric data (such as your height, weight and clothing sizes).
-
Any further special categories of personal data which you may voluntarily supply to us from time to time.
How your personal data is collected
We may collect personal data about you in a variety of ways. Mostly, we collect personal data directly from you in circumstances where you actively provide your personal data to us (or, if you are a minor, from your parent or legal guardian).
For example, when you
-
create a customer account on the Website;
-
make payments for purchases on the Website, or otherwise place an Order;
-
communicate with us online either via email, the Website (including via “chat-bots”), customer surveys or social media;
-
agree to receive any marketing communication from us in the form of emails, postal communication or SMS communication; and
-
when you take part in any event organised by us.
Certain information must also be provided by you in order to enable us to enter into a contract with you for your engagement. If you do not provide such information, this may hinder our ability to administer the rights and obligations arising as a result of our relationship. We may also be prevented from complying with our legal obligations.
How we will use information about you and on what basis
We need to process the information listed in paragraph 2 above:
-
where you have given your consent to the processing of your personal data for one or more specific purposes;
-
to perform our contract with you;
-
to enable us to comply with our legal obligations; and
-
to pursue legitimate interests of our own or of third parties to operate our business, provided that the resulting impact on your interests and fundamental rights does not override those interests.
The purposes for which we will process your personal data are set out in the table below. Sometimes the legal bases for processing will overlap and there may be several legal bases that support our processing of your personal data.
Purposes
-
To set-up your customer account and populate your customer account’s profile, if you choose to do so.
-
To take receipt of your enquiries, understand them and respond to them..
-
To fulfil any Orders that we receive from you.
-
To make suggestions and recommendations to you and other users, provided that you consent to us doing so, of our services about: (i) news and updates relating to us, our partners, products, services and content; (ii) content, goods and services that may interest you; and (iii) other promotional activity and events we think may be of interest. You can revoke your consent at any time by letting us know, including by messaging us.
-
To understand how you use the Website, record your preferences for using the Website, remedy any issues, and assess and improve the Website’s performance.
How we use special categories of personal data
‘Special categories’ of personal data such as (without limitation) data concerning health, are granted higher levels of protection by data protection laws. We will only process special categories of personal data if it is appropriate given the nature of the circumstances of our relationship and where we are legally able to do so.
We need to have further justification for collecting, storing and using this type of personal data. We may process special categories of personal data in the following circumstances:
-
In limited circumstances with your prior explicit consent (or, if you are a minor, the consent of your parent or legal guardian).
-
Where we need to carry out our legal obligations or exercise rights in connection with our relationship with you.
Less commonly, we may process this type of information where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else's interests) and you are not capable of giving consent, or where you have already made the information public.
We may need to process your special categories of personal data in the following ways (where appropriate):
-
We will use information relating to your allergies (e.g. to certain fabrics) when processing and fulfilling your Orders.
-
We will use information relating to your height, weight and other biometric data when processing and fulfilling your Orders.
Information about criminal convictions
We will only use information relating to criminal convictions or alleged criminal behaviour where the law allows us to do so. This can arise when it is necessary for us to comply with the law or for another reason where there is a substantial public interest in us doing so.
Less commonly, we will, if necessary, use information relating to criminal convictions or alleged criminal behaviour where it is necessary in relation to legal claims, where it is necessary to protect your interests (or someone else's interests) and you are not capable of giving your consent, or where you have already made the information public.
Data sharing
Third party service providers
We may share personal data with third party service providers insofar as it is reasonably necessary for the purposes set out in this Website Privacy Notice, provided that they do not make independent use of the information. We only permit them to process your personal data for specified purposes and in accordance with our instructions. All our third party service providers are required to take appropriate security measures to protect your personal data in line with our policies. The following activity may be carried out by our third party service providers: website analytics.
Group companies
We may share your personal data with other entities in our group as part of our regular reporting activities on company performance, in the context of a business reorganisation or group restructuring exercise, for system maintenance support and hosting of data.
Other third parties
We may share your personal data with other third parties, for example in the event of a sale or merger, where using professional advisors (e.g. bankers, accountants, auditors, legal representatives) or where required by law, court order, administrative agency or other government body (e.g. to HMRC), public authority or regulator to meet national security, law enforcement or other legal requirements.
Children
We do not intentionally collect personal data from any children under the age of thirteen (13) and our Website and Orders systems are not intended for use by those under the age of thirteen (13).
If you believe we have inadvertently collected personal data from a child under the age of thirteen (13), please contact us at: K@maisonvelendra.com. We will then delete the personal data as soon as possible.
International data transfers
We are established in the United Kingdom and we do not envisage transferring your personal data to entities located outside the European Economic Area in the ordinary course of business.
However, in the event that we would need to do so, we would not transfer your personal data except where we had first put in place appropriate measures to ensure the adequate protection of your personal data. Those measures may include, for example, specific contracts containing the EU Commission's standard contractual clauses or another appropriate measure.
In the event an international data transfer of your personal data occurs and you require further information about the protective measures that we apply, please contact K@maisonvelendra.com.
Data security
We will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal data.
Please be aware that, while we place a high priority on the security of all information that we hold and process and we endeavour to provide robust, commercially reasonable security at all times, no security system can prevent every possible kind of security breach.
Data retention
We will only retain your personal data for as long as necessary, bearing in mind the purpose for which the data was collected, or as otherwise described in this Website Privacy Notice.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or accidental disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Your rights in connection with personal data
You have the following rights over the way we process personal data relating to you:
-
Request access. You have the right to ask for a copy of personal data we are processing about you.
-
Request correction. You have the right to request correction of the personal data we hold about you, such as if it is incomplete or inaccurate.
-
Request erasure. You have the right to request erasure of your personal data, where there is no legitimate reason for us to continue to process it, or where you have exercised your right to object to the processing (see below).
-
Object to processing. You have the right to object to the processing of your personal data where we rely upon the legal basis of our (or a third party’s) legitimate interests for that processing.
-
Request processing restriction. You have the right to ask us to suspend processing of your personal data, such as if you want to establish its accuracy or the reasons for it being processed.
-
Request machine-readable copy and transfer. You have the right to request a machine-readable copy of your personal data, which you can use with another data controller. Where it is technically feasible, you can also ask us to send this information directly to another data controller if you prefer.
-
Right to make a complaint. You have the right to make a complaint to a data protection supervisory authority. In the UK, the relevant supervisory authority would be the Information Commissioner’s Office.
-
Right to withdraw consent. In the limited circumstances for any processing by us of your personal data for which we rely upon the legal basis of your consent (or the consent of your parent or legal guardian), you (or your parent or legal guardian) have the right to withdraw such consent at any time upon notice to us. If consent is withdrawn, we will no longer process the relevant personal data.
If you wish to make a request or exercise your rights, please contact K@maisonvelendra.com. We aim to comply without undue delay, and within one month of your request.
Please be aware that we may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Changes to this Website Privacy Notice and applicability
We reserve the right to update this Website Privacy Notice at any time, and we will provide you with a new Website Privacy Notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
If you are unsure about how or if this Website Privacy Notice applies to you, please contact K@maisonvelendra.com.