For the purposes of this Privacy Notice, (“European Data Protection Legislation”) is defined as, for the periods in which they are in force, the European Data Protection Directive 95/46/EC, all laws giving effect or purporting to give effect to the European Data Protection Directive 95/46/EC (such as the Data Protection Act 1998) or otherwise relating to data protection (to the extent the same apply) and, from 25 May 2018, the General Data Protection Regulation (Regulation (EU) 2016/670) (GDPR) or any equivalent legislation amending or replacing the GDPR.
The data controller of the information collected through this website is chambeili® Ltd, with its registered office address: chambeili PO Box 359, Shipley, BD18 9FE, West Yorkshire. chambeili® independently establishes the purposes and methods of data processing and the implementation of security procedures to guarantee the privacy, integrity and availability of such data.
Communicating your personal data to chambeili® when requested in any of the many instances where personal data is collected through the site may be essential in order to achieve the purposes set down by the communication itself, or not prejudicial in this regard.
The compulsory or optional nature of the data provision is specified each time – with reference to the specific data requested – at the point of input for each data collection, by marking compulsory information with an asterisk (*).
If you refuse to communicate the information marked as compulsory to chambeili®, it will be impossible to achieve the main purpose of the specific data collection: such a refusal might, for example, make it impossible for chambeili® to fulfil the product sale agreement on chambeili.com or provide the other services available on chambeili.com such as forwarding of the chambeili® company news and special offers newsletter.
Communicating additional data to chambeili® other than those marked as compulsory, is optional and will not produce any consequences with regard to the main purposes of the collection (such as using the web site and its services or purchasing the products on sale, for example).
Your personal data will be processed by chambeili® internal staff who are specifically trained and authorised to process.
Your personal data will also be transmitted to third parties that we use to provide our services; these subjects have been adequately selected and offer a guarantee of compliance with the rules on the processing of personal data. These persons have been appointed as data controllers and carry out their activities according to the instructions given by chambeili® and under its control.
The third parties in question belong to the following categories: banking operators, internet providers, companies specialised in IT and telematic services; couriers; companies that carry out marketing activities; companies specialised in market research and data processing.
Your data may be transmitted to police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow chambeili® to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
You are entitled, at any time, to obtain confirmation from chambeili® that your personal data is or is not being processed, even if not yet registered, and its communication in an intelligible form.
In addition, you may always be entitled to obtain from chambeili®:
a. Updating, correction and integration of your personal data;
b. Cancellation, transformation into an anonymous form or the blocking of your personal data if processed in violation of the law, including the data deemed unnecessary for the purposes for which the data was collected or subsequently processed in the first place;
c. Certification that the operations described at letters a) and b) have been notified, even with regard to their contents, to the persons to whom your data has been communicated or disseminated, except in those instances where such certification turns out to be impossible or would require a clearly disproportionate deployment of means compared to the right protected.
You do, in any case, have the right to totally or partially oppose:
a. Processing of your personal data, for valid reasons, even if pertinent to the purpose of collection;
b. The processing of your personal data for the purposes of advertisement or direct marketing mailings, or if used for the purposes of market surveys or commercial communications.
You may freely exercise your rights at any time by sending a written request to chambeili® – to the mailing address or to the e-mail address firstname.lastname@example.org – and we will reply promptly.
To ensure that your personal data is always exact, up to date, pertinent and complete, please advise us of any variations by writing to email@example.com.
We wish to inform you that the law regulating protection of personal data permits chambeili® – without any obligation to obtain your prior consent – to use your data for direct selling activities involving products similar to those you have already purchased, unless you refuse to allow such use of the e-mail address you communicate to us.
1. Process data exclusively for the purposes and according to the methods illustrated in the notice presented to users at the time of its collection;
2. Use data for other purposes, with respect to those specified at the time of collection, only where the user has expressed its express consent to such use;
3. Make data available to third party companies only for purposes that are strictly necessary to provide the requested service(s) and only where monitored by a data supervisor; not communicate, cede or transfer data to third parties for purposes exclusive to the third party unless the users have received prior warning and have granted their consent;
4. Answer all requests for cancellation, variation and integration of personal data, opposition to data processing for the purpose of sending commercial information and advertising;
5. Ensure that data processing is conducted fairly and legally, protecting user privacy and implementing appropriate measures for security and protection of the privacy, integrity and availability of the data provided by users.
When you buy goods from us, you are entering into a contract with us. When shopping online then we will require information before you can place an order with us. We will ask you to provide some personal information such as;
- Full name
- Address (shipping and billing address)
- Contact numbers
- Email address
Personal data processing is conducted primarily by means of information systems and electronic devices by chambeili.com and other parties who, selected with care for their reliability and competence, conduct operations that are essential in order to achieve the purposes strictly related to the use of the web site, its services and sale of products via the web site (see below, ‘Parties who may process your personal data’).
The specific purposes for which your personal data is processed are summarized each time you communicate your personal data, in the notice presented in compliance with this Privacy Notice (European Data Protection Directive 95/46/EC & General Data Protection Regulation (Regulation (EU) 2016/670) (GDPR)). In general, data is processed in order to provide the following services available to those who visit our site:
1. Registration on the site for frequent shoppers;
2. Subscription to additional specific services, such as our chambeili® company news & special offers newsletter, and other similar information bulletins about our activities, inviting your friends to join the chambeili® social networks (google+, twitter, facebook, instagram, snapchat, youtube, pinterest, flickr, vero or linkedin), making yourself known to other users by sending us your your comments / product reviews;
3. Payments, including anti-fraud checks (3D Secure) for credit card payments; in this case, the data provided during the order process (first name, surname, address, credit card number, delivery address if different from billing address) will be sent to the supervisor responsible for anti-fraud control, Cardinal Commerce, and will be processed strictly for that purpose (see also the section “Data supervisors”);
4. Handling of your requests: be they technical, commercial, concerning progress reports on your orders and generally speaking all information requests;
5. Contacting the managers of our services (Press Office, Business Development, Web Marketing, Buying Office, Customer Care);
6. Evaluating requests on your behalf to be included in our personnel by submitting your CV. In processing personal data that may, directly or indirectly, identify you, we aim to abide by the principle of strict necessity.
7. For made-to-order services where we require your contact details to inform you of quotations, appointment bookings, order progress, order payments etc;
8. For event bookings such as bridal shows;
9. Completing surveys we send you;
10. When you comment on or review our products and services via trustpilot, google reviews, facebook reviews or social media comments relating to any of our posts;
11. Completing any of our online forms;
12. When you use our car park space bays opposite or adjacent to our store which has CCTV systems operated for the security of both customers and our staff members. These systems may record your image during your visit.
For this reason we have set up the site in such a way as to reduce use of your personal data to the absolute minimum: therefore, your personal data is not processed when the purpose of the specific activity can be achieved by using anonymous data (such as market surveys intended to improve services) or by means of other methods that make it possible to identify the person involved only if strictly necessary or at the request of authorities or the police (such as site traffic data, the time you spend visiting our site or your IP address).
In some cases, as expressly cited in the notice, your personal data will be processed, if you expressly grant your consent, to create a user profile based on your preferences and your purchases, so that we can send you information that is pertinent to your needs and interests. With the exception of the case specified in this Privacy Notice (European Data Protection Directive 95/46/EC & General Data Protection Regulation (Regulation (EU) 2016/670) (GDPR)), authorising the data controller to use your data to send you advertising e-mails about products and services similar to those you have already purchased, unless you refuse your consent for such use, chambeili® may use your personal data to send you advertising about its products and services only if you grant your consent.
Your personal data will be communicated to third parties only with your express consent, except for the cases when such communication is obligatory by law or is required for purposes envisaged by the law, for which the person’s consent is not required; in these cases the personal data may be made available to third parties who will process the data autonomously and exclusively for such purposes (for example, in reply to a request from police or the courts or other competent authorities, or in order to fulfil duties that descend from a completed contract with you, such as communicating your personal data to chambeili® Ltd for payment of the products you have bought).
Any other type of processing, other than related to the specific purpose for which you have communicated your personal data will be indicated in the information notice and will be carried out by chambeili® only if you have expressly granted your consent (this is the case, for example, when a customer profile is created based on your preferences and buying habits).
There are, however, instances of data processing for which the law established that your consent is not required: for example, we wish to inform you that chambeili® can process your personal data without your consent if this is necessary to comply with the provisions of the law or whenever this is necessary to fulfil the contractual obligations it may have entered into with you (for example, when you have bought products or have requested specific services through our web site).
Finally, we wish to inform you that your personal data will not be transferred abroad to countries that do not belong to the European Union that do not provide a sufficient level of privacy protection. If such a transfer should be necessary to provide you with the services or to conclude a contract with chambeili® for purchasing our products, we wish to assure you that your personal data will not be transferred to countries that do not belong to the European Union and do not provide a sufficient level of privacy protection unless specific agreements are concluded by chambeili® with such parties, in accordance with applicable laws and regulations.
It could happen that chambeili® may find itself processing personal data of third parties, communicated directly to chambeili® by its own users, such as when a user has bought a product to be delivered to a friend, or when the person who pays for a product is different from the addressee, or again, when a user wishes to inform a friend about a service or the sale of a specific product on chambeili.com.
We wish to inform you that the consent of these persons is not required when their data is communicated to chambeili® in order to conclude a contract with chambeili® in their favour.
Data Protection says that we are allowed to use and share your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons and these are:
Contract – your personal information is processed in order to fulfil a contractual arrangement e.g. in order to send you your online order or custom made-to-order outfit.
Consent – where you agree to us using your information in this way e.g. for storing your personal details for future made-to-order requests.
Legitimate Interests – this means the interests of chambeili® in managing our business to allow us to provide you with the best products and service in the most secure and appropriate way e.g. to transfer your data to certain Third Party’s such as delivery partners.
Legal Obligation – where there is statutory or other legal requirement to share the information e.g. when we have to share your information for law enforcement purposes.
Here is a list of the ways that we may use your personal information, and which of the reasons described above we rely on to do so. Where we list legitimate interests as a reason, we also describe below what we believe these legitimate interests are.
|What We Use Your Personal Information For||Our Reasons (Legal Basis)||Our Explanation of chambeil’s Legitimate Interests|
|Set up your chambeili shopping account||Legitimate interest||Process efficiency in dealing with such activity.|
|Storing payment cards||Consent||N/A|
|Process your orders including made-to-order||Fulfilling a contract||N/A|
|Notify you of your order status.||Legitimate interests||Process efficiency in dealing with such activity, and to make improvements to our services.|
|Manage your account/provide customer services to you. This may include: our suppliers who undertake your made-to-order to communicate your order activities, order complaints/queries||Legal obligation/ Legitimate interests (depending on nature of services)||Keeping our records up to date, handling our customer contact efficiently and effectively, working out which of our products and services may interest you and telling you about them.|
|To detect, investigate and report financial crime (e.g. Fraud)||Legal Obligation / legitimate interests||Developing and improving how we deal with financial crime. Complying with any legal obligation placed on us by regulators such as the FCA. Complying with any regulations that apply to us. Process efficiency in dealing with such activity, and to make service and process improvements.|
|Undertake website personalisation and administration.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers. Improving customer interaction with our sites. Defining types of customers for new products or services|
|Marketing communications to inform you of special offers, promotions, new lines and Sales. Provide you with online advertising.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers. Improving customer interaction with our sites.|
|Notifying you about enhancements to our services, such as changes to the website and new services that may be of interest to you.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers. Improving customer interaction with our sites.|
|Contact you to undertake customer satisfaction surveys, invite you to provide product reviews or for market research.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers. Improving customer interaction with our sites.|
|Maintaining network and data security||Legitimate interests||To maintain the security of our network this in turns helps us to maintain the safety and confidentiality of your information.|
|Logistics planning, demand forecasting, management information and research||Legitimate interests||We use information about shopping habits, products bought and volumes, to help us to respond to demand, ensure the right products get to the right areas and to help us plan our ranges.|
chambeili® has chosen to call on other companies for processing your personal data, for certain specific activities such as shipping. The companies that conduct such operations have been carefully selected and are experienced, capable and trustworthy, and offer sufficient guarantees that they abide by the applicable laws and regulations that regulate data processing, including the security profile of such data.
These companies have therefore been appointed data supervisors, and they conduct their activities according to the instructions and under the control of chambeili®. We verify on a regular basis that they have fulfilled the duties assigned to them and that they continue to offer sufficient guarantees of compliance with the provisions that govern the protection of personal data.
Your personal data is also processed by our employees assigned to specific services; the categories of employees involved in these activities depend on the purposes for which the data was communicated and are always specified in the notice displayed when you communicate your personal data.
To help personalise your journey through our websites we currently use the following companies, who will process your personal data as part of their contracts with us:
- Google Adsense
- Google Tag Management
- Google Analytics
- Google Adwords
You can contact them by calling 0303 123 1113.
Or go online to www.ico.org.uk/concerns (opens in a new window; please note we can’t be responsible for the content of external websites)
If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence. Details can be found in Section 16.
The code guarantees that the processing of personal data must be conducted in accordance with the fundamental rights and liberties as well as the dignity of the person, with particular reference to confidentiality, personal identity and the right to protection of personal data.
You have a right to access the personal data that we hold on you. If you would like to see a copy please send a £10 fee and a written request to the Group Data Protection Manager at Head Office, quoting Security and Privacy Enquiry. If you think the information we hold on you is incorrect please contact the Group Data Protection Manager at Head Office or via firstname.lastname@example.org, quoting Security and Privacy Enquiry.
The GDPR provides the following rights for individuals:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
You can find further detail explanation of your rights under GDPR by visiting: Right to be informed
Head Office Contact Details
Group Data Protection Manager
PO Box 359
Click the following link to unsubscribe from our mailing list:
To Opt out of SMS text messages simply text STOP to 84433.
If you wish to receive more information about how chambeili® processes your personal data, please write a message and send it by e-mail to email@example.com.
Our site uses automatic systems to collect data that is not directly communicated by the user, such as cookies. A cookie is an application transmitted to the user’s hard disk; it does not contain any comprehensible information but associates the user with the personal information registered on the web site. Cookies are stored on our server and no one has access to the information they contain. Only chambeili® processes the information collected through cookies, only in anonymous and aggregate status, in order to optimize our services and our site in relation to the specific requirements and preferences of our users.
Internet browsers have a function that makes it possible to cancel cookies after each session. The browser provides instructions on the cancellation procedure. Familiarise yourself with it.
However, chambeili® cannot guarantee its users that the security measures adopted to protect the site, data transmission and information on the site, limit or exclude any risk whatsoever of unauthorised access or dispersion of data via user devices: we advise you to ensure that your computer is equipped with appropriate software to protect data transmission on the network, both incoming and outgoing (such as up to date antivirus systems) and that your Internet service provider has also adopted adequate security measures to protect network data transmission (such as a firewall and anti-spamming filters).
How do we protect your information?
We use a server certificate (also known as a digital certificate) to assure you of our identity and secure sockets layer (SSL) to encrypt data transmissions.
If you want to check our certificate/security you can do so by clicking the GeoTrust Logo on our web security page.