Name: De La Mode (Fashion) Ltd

Address: 20-22 Wenlock Road, London, N1 7GU, United Kingdom.

Email: [email protected]

Data Protection Officer contact details: [email protected]

a) Information directly provided when you:

• navigate to web or mobile view;
• do a transaction on web or mobile;
• register to create a new account or log in to your account;
• participate in promotional activities;
• sign in to our Account;
• purchase through the web or mobile;
• interact with our customer services team;
• visit our website;
• subscribe to our mailing list.

b) Information we collect from third parties:

• When you share information with social media sites/social networks, or use social media sites to create or connect your DLM account. These social media sites may give us automatic access to certain personal information retained by them about you (i.e. content viewed or liked by you), which we will use to further personalise your experience with DLM;
• We get your personal information from trusted delivery companies which use them to take and handle your orders, deliver products and services;
• content we generate via machine learning algorithms to personalise your experience and support general service optimisation including bid/markdown automation;

• You can control how we send personalised marketing – by channel and by frequency – from the Manage Preferences section of your registered account.

• Accessing Manage Preferences allows you to control how we communicate with you. If you do not wish to receive marketing communications from us you can unsubscribe from the link in the email you received or change your Marketing Preferences.

• For marketing purposes, we occasionally use information about our customers to generate audiences of existing and prospective customers through third-party marketing partners. This allows us to target advertisements to potential customers who appear to have shared interests or similar demographics to our existing customers based on the platforms' own data, or existing customers based on data we have collected. We typically do this by exposing a user’s SHA256 hashed email addresses to third party marketing partners. These partners will match the hashed data against their own customers, generate the audience, then delete the uploaded list and use it for no other purpose. We do not have access to the identity of anybody in the audience as it is uploaded. Based on this, we believe that generating audiences poses little or no threat to the privacy of our customers while it enhances our ability to grow as a company and offer you better service. If you wish to opt out you can send us an email at [email protected].

Under Data Protection laws you are entitled to exercise the following rights:

• Access: you have the right to request access to and/or a copy of your personal information;
• Rectification: you have the right to ask us to modify your personal information if you think it is inaccurate or incomplete. Please do no hesitate to contact us, so that we can keep your personal information up-to-date;
• Erasure: you have the right to request the deletion of the personal information we hold about you;
• Restriction: you have the right to ask us to limit the processing of your personal information;
• Data Portability: you have the right to request that your personal information is provided to you in a machine-readable format and directly transmitted to another controller if the processing is based on consent or contract;
• Object: you have the right to object to the processing of your personal information if it is based on legitimate or public interest;
• Automated decision-making: you have the right not to be subject to decisions based only on automated processing;
• Consent: you can withdraw your consent at any time by contacting our DPO at [email protected] or from the Managing Preference section of your customer account.

You may exercise your rights at any time by contacting our customer service at [email protected].

We will only keep your personal information for as long as it is necessary to fulfil the purposes outlined in this Privacy Notice, to comply with legal requirements, prevent fraud and resolve disputes. Where a legal requirement obliges the retention of personal data for a specific minimum period, we will retain data for at least that period. Once your personal information is no longer necessary or upon expiry of a specific retention period, we will dispose of it securely according to our data retention and deletion policies.

If you need more information about the data retention and deletion policy, please contact us at [email protected].

We share your data with:

• legal entities within the DLM group of undertakings to provide you with the services described in this Privacy Notice;
• selected third-party marketing and advertising providers to personalise your experience with DLM;
• authorised third parties who provide us with services to facilitate purchases and payments
• we employ fulfilment providers to help us performing some e-commerce functions including order management, packaging and delivery;
• where legally compelling grounds exist, we may also disclose your personal information to governmental and law enforcement agencies, and otherwise in the defence of legal claims.

We protect your information using measures that reduce the risks of loss, misuse, unauthorised access, disclosure and alteration. We minimise the amount of personal information we disclose to what is necessary to fulfil the purposes described in this Privacy Notice and service providers may not use it for any other purposes. We have signed contractual agreements with our third-party service providers and we ensure that they respect the security of your personal data in compliance with data protection laws.

Where your personal data is being transferred to countries outside the EEA either by us or by third party service providers acting on our behalf, DLM will ensure that those transfers are adequately protected, by putting in place the necessary organisational and technical measures, and guarantee the lawful processing of your personal information in accordance with the relevant law.

We take all appropriate technical and organisational measures to ensure that your personal information is protected, in compliance with our legal obligations. We protect your information using measures that reduce the risks of loss, misuse, unauthorised access, disclosure and alteration. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Where we transfer your personal information or use third-party service providers based outside of the UK or EEA, we will put in place specific contractual agreements or other necessary measures to ensure that your personal data are equally protected.

We regularly update our Privacy Notice to reflect the changes in our services, privacy practices and data protection legislation. Please, do check frequently our website for any changes that will automatically take effect 30 days after they are posted. We will provide notice of any material changes to this Privacy Policy by email. This notice was last updated in December 2023.