Privacy Policy

LAST UPDATED: 1st January 2023

 

UNDERHANCE PRIVACY POLICY

ABOUT UNDERHANCE AND THIS PRIVACY POLICY ("Privacy Policy")

Underhance is the controller for the purposes of the General Data Protection Regulation (the “GDPR”) and is committed to protecting your privacy.

This Privacy Policy provides information on how we collect and use personal data. It sets out the information that we collect, the reasons for which we collect the information, and how we can use and share the information. By visiting or using our website underhance.com and services (the “Website” or “Site”), you confirm your agreement to this Privacy Policy.

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, you can contact the Underhance Data Protection Officer at privacy@underhance.com.  


THIRD PARTY WEBSITES

Our website can contain links to and from the websites of our partner boutiques, retailers and brands (collectively our “Partners”), advertisers, and affiliates, amongst others. If you follow a link to any of these websites, please note that this Privacy Policy does not apply to those websites. We are not responsible or liable for the privacy policies or practices of those websites, so please check their policies before you submit any personal data to those websites.


PERSONAL INFORMATION WE COLLECT

When you interact with us, whether by using our website or communicating with us, we may collect the following information about you:

  • Information you provide us: you may give us information about yourself if you sign up for an account on our website, place an order for products, complete any online forms (such as registration forms, competitions, and surveys), opt in to receive our newsletters and special offers, enter a competition or promotion, participate in social media functions with our website, or correspond with us (by email, telephone, instant messaging apps, social media or otherwise).

Depending on what you provide, this information can include your name, address or location, phone number, email address, date of birth, gender, purchase information, addresses, shopping preferences, images and financial information (including your credit or debit card details, although we do not hold them, our payment processors do).

If you register an account on the website, you may choose to give us your photograph and nickname. From your account, you can also invite your friends to shop at our website (including by email, Facebook, TikTok or Twitter). Even though we will let them know that we've received their details from you, please ensure that you have your friend's permission before sharing their contact details with us and only forward emails to people you know would be happy to receive them.

  • Information we receive from other accounts or sources: we can receive information about you from other sources, such as other accounts or other websites, including data brokers, our partners, social media providers like Facebook and Twitter, advertising networks and analytics partners, and payment and delivery service providers. The specific types of information that we may obtain depends on your settings for that account or website, and will be subject to their privacy policies.
  • Information our IT systems collect about you: each time you visit the website, certain information will be created and automatically recorded by our IT systems. That information includes:
  • Cookies: you can see more details about cookies in the cookies section below, but these small text files can help improve your experience with the website and make it easier to interact with us. This may include storing your location or language preferences to save you having to re-enter information when returning to, or ensuring that items you wish to order don’t disappear as you navigate between pages on our Website. We also use cookies to provide you with tailored advertising;
  • Device information: the information provided by your device will differ depending on your operating system (eg. PC, Mac, iPhone, Android, or otherwise) and the settings on that device, but also includes the type of device you have (eg. an iPhone 6S or Samsung Galaxy S7), the device’s IP address and location, the browser you are using, your mobile network provider (for mobile devices), the pages you have visited, your time zone and country location, and crash or download error reports.

HOW DO WE USE YOUR PERSONAL INFORMATION?

To provide you services and the website, including to allow you to order and receive products using our website, administer your account and to optimise your experience, we need to use the information that we collect in a number of different ways.

Please scroll down to find out the detailed purposes for which we collect your information, what specific information is collected and the legal basis for which we purpose that data:

  • To register and manage your account on our website: we collect your name, email, and other additional details you may wish to add in your account, like phone number, addresses and gender. The legal basis is the performance of a Contract with you.
  • To fulfill the orders you make through our website: we collect your name, addresses, phone number, order details, like the products you are buying, the size and price. The legal basis is the performance of a Contract with you.
  • To collect payment from you we collect your payment information, which comprises the credit/debit card’s number, holder’s name and CVV. We don't store them and only transfer them to our authorized payment providers. The legal basis is the performance of a Contract with you.
  • To provide you with our customer service (including helping you to solve any issue you have with our services, updating you about any change to our terms of service, or contacting you to know how was your experience with us) we collect your name, email, phone number and addresses and your contact history with us. The legal basis is the performance of a Contract with you and our legitimate interests in retaining you as a customer.
  • To monitor the quality of our customer service: we collect your name, email, phone number and addresses, your response to our inquiries about the quality of the service and your contact history with us (including phone records of our conversations and conversations through email or other instant messaging apps). The legal basis is the legitimate interests in running our business.
  • To administer, maintain and optimise our website and our services: we collect your device information (such as your device IP address and device type), cookie identifiers and browsing information. The legal basis is the legitimate interests in running our business.
  • To perform fraud and credit checks and assess if we can do business with you: we may collect your name, email, addresses, credit/debit card details, browsing history, purchase history, date of birth, gender, specific behavioral cookies, device information (such as IP address and device type) and any publicly available information (like social media profiles or news). The legal basis is the legitimate interests to protect Underhance and its customers from fraudulent activities and compliance with a legal obligation.
  • To send you marketing communications and personalised offers: we collect your name, email, phone number, addresses, date of birth, purchase history, browsing history and behavior, device information, shopping preferences, cookie identifiers, internal identifiers and country. The legal basis is the legitimate interests in the electronic direct marketing of similar products and services which you have acquired using our Website or, when such is not applicable, your consent to send your special offers, news and campaigns.

You may unsubscribe from our email marketing communications by modifying your preferences in your account’s profile management section, or by following the opt out instructions in the promotional emails that are sent to you.

  • To provide you with personalised recommendations and enhance your experience: we collect your name, email, phone number, addresses, date of birth, purchase history, browsing history and behavior, device Information, shopping preferences, nickname, cookie identifiers, internal identifiers, country and spent tier level. The legal basis is our legitimate interests in running our business and improving your shopping experience.
  • To advertising and retarget advertising of both ours and our partners’ products and services: we collect your email, cookie identifiers and device information. The legal basis is our legitimate interests in running our business.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work. Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

  • To carry on research, analysis, enquiries and surveys on your use of our website: we collect your name, addresses, email and device information. The legal basis is our legitimate interests in running our business and improve our Website and your experience.
  • To produce aggregated statistical reports: we use your order history, provided that the result of such reports do not identify you. The legal basis is our legitimate interests in running our business and improving our website.

SHARING YOUR PERSONAL INFORMATION

To provide our services and the website, we work with a number of carefully selected third parties. To do this, we may share your information with these third parties in the following limited circumstances:

  • Our partner boutiques and brands from whom you purchase products: We rely on carefully selected partners that supply the products that you see in our website.
  • Third party service providers for business purposes: to function properly, we rely on a number of carefully selected third parties to provide us with services and products. We permit these companies to use your personal information only to the extent necessary to provide us with their services and products. Below you can find the types of third parties we use:
- Courier companies, that we use in order to deliver the products to you and, as such, they need to have access to your order information, including your name and address;
- Payment providers that we use to process your payment information (including your credit/debit card details) so that we can collect payment from you;
- Anti-fraud and credit check providers to keep us and you secure. They have access to and process your information and associated orders to check for any fraudulent behavior;
- Customer service management providers, that allow us to provide our customer services and improve and manage your customer experience.
- Analytics and search engine providers, like Google, that we use to assist us in the improvement and optimisation of the website;
- Marketing companies and tools providers that help us enable our marketing;
- Performance marketing and recommendations providers that help us deliver advertising and recommendations of Underhance products tailored to your interests and needs;
- Research companies that we can engage to help us carry out surveys regarding your use of our Website and Services;
- IT/technology providers that we use to support, maintain and provide our technology and IT infrastructure that supports our website and the storage of your information. This includes Shopify (you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy).
    • Advertisers for marketing purposes: we can provide your information to our advertising and social media partners that you select (including Facebook and Twitter) where they require the data to select and serve relevant adverts about our and our partners’ products and services to you and others;
    • Third party service providers to enrich data: We may also enrich, match or combine information we hold about you with data from other sources, for instance by sharing some of your personal data with selected business partners. We do this to better understand your customer profile and interests so that we can deliver customised offers and other personalised services;
    • Third parties where we're considering a corporate transaction: Underhance is always looking for new opportunities and directions in which to grow. This means sometimes we may consider corporate transactions such as merger, acquisitions, reorganisations, asset sale, or similar. In these instances, we may transfer your information to enable the assessment and undertaking of that transaction. If we buy or sell any business or assets, your personal information may be one of the assets that are transferred;
    • To comply with legal requests: on occasion we may be required to liaise with various regulators and law enforcement agencies in a number of different countries, whether as a result of law, a court order, or another legal process. Although we dispute requests wherever suitable, in some cases we may have to share your information with the regulators or law enforcement agencies. Where we consider it appropriate, and provided we are not prohibited from doing so by law or court order, we will attempt to notify you of these legal demands.
    • Aggregated information with third parties: we may aggregate your information with the information of other customers, creating a dataset of information about the usage of our website, purchase of products, and other general, grouped information about our customers. The legal basis is our legitimate interest to understand the usage of our service and demand for our product. Although this dataset is aggregated and anonymised, meaning it cannot identify you as an individual, it provides a valuable insight into the use of our website and we may therefore share it with select third parties. These parties may include providers of plugins or similar technologies to help measure traffic, our partners and other providers to allow them to better stock products, and our investors.

    TRANSFERS OF YOUR PERSONAL DATA

    By using our Website and our services, you acknowledge and accept that your personal information will be processed within the European Economic Area (“EEA”) or the United Kingdom.

    To provide our Website and our services, in accordance with the purposes set out above, we may transfer and store the personal information that we collect from you to a destination outside of the European Economic Area (“EEA”), as stated below:

    • When transferring personal information outside the EEA, we rely on the Commission’s model contracts for the transfer of personal data to third countries (i.e. the standard contractual clauses) pursuant to Decision 2010/87/EU;
    • We transfer the personal information to third parties outside the EEA, to the extent such transfer is needed to fulfil the contract between you and the third parties which you are ordering the products from;
    • When transferring personal information to one of our third party services’ providers set out above, we rely on different adequacy measures or shields as safeguards for countries without adequacy decisions from the European Commission.

    COOKIES

    We use technology such as "cookies" to collect information and store your online preferences. Cookies are small pieces of information sent by a web server to a web browser, which allows the server to uniquely identify the browser on each page.

    We use the following categories of cookies on our Website:

    • Strictly necessary cookies: These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for such as remembering your login details or shopping basket items cannot be provided. These cookies will also inform us, by your behaviour in our website, if we can do business with you and protect Underhance and its customers from fraudulent activities.
    • Performance cookies: These cookies collect anonymous information on how you use our website (eg. we use Google Analytics cookies to help us understand how customers arrive at our site, browse or use our site and highlight areas we can improve such as navigation, shopping experience and marketing campaigns. The data stored by these cookies does not show personal details from which your individual identity can be established. They are also used to help measure the effectiveness of an advertising campaign. You may opt-in to these cookies using your browser settings.
    • Functionality cookies: These cookies remember choices you make such as the country you visit our website from, language and search parameters such as size, colour or product line. These can then be used to provide you with an experience more appropriate to your selections and to make the visits more tailored and pleasant. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites. You may opt in to these cookies using your browser settings.
    • Targeting cookies or advertising cookies: These cookies collect information about your browsing habits in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advert. The cookies are usually placed by third party advertising networks. They remember the websites you visit and that information is shared with other parties such as advertisers. You may opt-in to these cookies using your browser settings.

    You can withdraw your consent to these cookies at any time through the following options:

    • Google Analytics cookies across all websites, please visit Google Analytics Opt-out Browser Add-on.
    • Other third party cookies relating to behavioural advertising, please go to www.youronlinechoices.eu.
    • Any other type of cookies, you can clean the cookies through your browser settings. Please note that refusing cookies does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver adverts tailored to your web preferences and usage patterns, so you may see a greater number of adverts that are irrelevant to you and your preferences.

    SECURITY

    Keeping you and your personal information secure is very important to us. We take a number of reasonable steps to try to protect the personal information that you provide, including:

    • Requiring you to establish a unique username and password to access your account on our Website;
    • Not keeping details of your credit or debit card that would enable any third party to transact using that credit or debit card (such as your CVV number); and
    • Regularly monitoring our servers and IT systems for possible vulnerabilities and attacks. Unfortunately, despite this, the transmission of information via the Internet is not completely secure. We cannot guarantee the security of your personal data transmitted to or through our website, and any such transmission is at your own risk. In particular, please keep in mind that if you voluntarily disclose personal information through other means of communication than the website in a non-protected environment (such as through email, sms, online messages) then that information can be collected and used by others outside of our or your control.

    HOW LONG WILL WE USE YOUR INFORMATION FOR?

    We retain the data you provide to us for as long as you have your account with us and thereafter for such period as you may have questions or a claim in relation to our services, notwithstanding any superior retention period that we may be obliged to observe in accordance with legal requirements applicable to us.

    In some circumstances you can ask us to delete your data as set out below. After you have terminated your use of our services, we may store your information in an aggregated and anonymised format.


    YOUR RIGHTS

    You have certain rights in relation to the personal data we hold about you, which we detail below. Some of these only apply in certain circumstances. We also set out how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights and that can include asking a set of security questions to ensure it is you. When you have appointed someone else to do the request on your behalf, that person and/or organisation needs to show a valid power of attorney issued by you. We must respond to a request by you to exercise those rights without undue delay and within at least one month (although this may be extended by a further two months in certain circumstances). To exercise any of your rights, please contact us at privacy@underhance.com. 

    • Access: You have the right to know whether we process personal data about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with. Please note that in “My Account” dashboards, you can see information about you, namely your account details (such as name, email, phone number, date of birth), the addresses you use for billing and shipping, your order history and shopping preferences.

    You can also request a copy of your information. If you require more than one copy of the data we hold about you, we may charge a reasonable administration fee.

    We may not provide you with certain personal data if providing it would interfere with another’s rights (e.g. where providing the personal data we hold about you would reveal information about another person) or where another exemption applies.

    • Portability: You have the right to receive a subset of the personal data we collect from you in a structured, commonly used and machine-readable format and a right to request that we transfer such personal data to another party. The relevant subset of personal data is data that you provide us with your consent or for the purposes of performing our contract with you. If you wish for us to transfer the personal data to another party, please ensure you detail that party and note that we can only do so where it is technically feasible. We are not responsible for the security of the personal data or its processing once received by the third party. We also may not provide you with certain data if providing it would interfere with another’s rights (e.g. where providing the personal data we hold about you would reveal information about another person or our trade secrets or intellectual property).
    • Correction: You have the right to correct any personal data held about you that is inaccurate. You can edit your personal information in "Account” settings. You can also request the correction by emailing us. Please note that in some cases we can ask you to explain in detail why you believe the personal data we hold about you to be inaccurate or incomplete so that we can assess whether a correction is required. 
    • Erasure: You may request that we erase the personal data we hold about you in certain circumstances. Please scroll down to know what those are:
    • We believe that it is no longer necessary for us to hold the personal data we hold about you.
    • We are processing the personal data we hold about you on the basis of your consent, and you wish to withdraw your consent and there is no other ground under which we can process the personal data.
    • We are processing the personal data we hold about you on the basis of our legitimate interest and you object to such processing. Please provide us with detail as to your reasoning so that we can assess whether there is an overriding interest for us to retain such personal data.
    • You no longer wish us to use the personal data we hold about you in order to send you promotions and special offers.
    • You believe the personal data we hold about you is being unlawfully processed by us. Also note that you may exercise your right to restrict our processing of the data whilst we consider your request as described below.

    Please provide as much detail as possible on your reasons for the request to assist us in determining whether you have a valid basis for erasure. Please note that we may retain the personal data if there are valid grounds under law for us to do so (e.g., for the defence of legal claims or freedom of expression) but we will let you know if that is the case.

    • Restriction of Processing to Storage Only: You have a right to require us to stop processing the personal data we hold about you other than for storage purposes in certain circumstances. Please note that if we stop processing the personal data, we may use it again if there are valid grounds under data protection law for us to do so (e.g. for the defence of legal claims or for another’s protection).

    Listed below are the cases where you may request we stop processing and just store the personal data we hold about you.

    • You believe the personal data is not accurate for the period it takes for us to verify your claim.
    • You wish to erase the personal data as the processing we are doing is unlawful but you want us to retain the personal data for storage.
    • We wish to erase the personal data as it is no longer necessary for our purposes but you require it to be stored for the establishment, exercise or defence of legal claims.
    • You have objected to us processing personal data we hold about you on the basis of our legitimate interest and you wish us to stop processing the personal data whilst we determine whether there is an overriding interest in us retaining such personal data.
    • Objection. At any time you have the right to object to our processing of data about you in order to send you promotions and special offers, including where we build profiles for such purposes and we will stop processing the data for that purpose. You can do so by ticking “unsubscribe” at the bottom of each marketing email we send you. Please note that you will still receive emails related to the orders you make through our website or updates to our Terms & Conditions and Privacy Policy.

    You also have the right to object to our processing of data about you and we will consider your request in other circumstances as detailed below: We are processing the data we hold about you (including where the processing is profiling) on the basis of our or a third party’s legitimate interest and you object to such processing. Please provide us with detail as to your reasoning so that we can assess whether there is a compelling overriding interest in us continuing to process such data or if we need to process it in relation to legal claims. Also note that you may exercise your right to request that we stop processing the data whilst we make the assessment on an overriding interest.

    • Withdrawal of Consent: You can withdraw your consent at any time by unsubscribing at the bottom of each email received or by writing emailing us as set out below.

    YOUR RIGHTS UNDER THE CALIFORNIA CONSUMER PRIVACY ACT

    The California Consumer Privacy Act (CCPA) provides you with rights regarding how your data or personal information is treated. Under the legislation, California residents can choose to opt out of the “sale” of their personal information to third parties. Based on the CCPA definition, “sale” refers to data collection for the purpose of creating advertising and other communications. Learn more about CCPA and your privacy rights.

    Opting out

    By opting out, we will no longer collect or sell your personal information. This applies to both third-parties and the data we collect to help personalize your experience on our website or through other communications.


    COMPLAINTS

    If you have any questions or concerns about this Privacy Policy, please contact us at privacy@underhance.com. This is without prejudice to your right to launch a claim with the Information Commissioner’s Office (www.ico.org.uk) or the data protection supervisory authority in the EU country in which you live or work where you think we have infringed data protection laws.


    UPDATES TO THIS POLICY

    Any changes we may make to this Privacy Policy in the future will be posted on this page. Please check back regularly to keep informed of updates or changes to this Privacy Policy.