Privacy Policy

1. 1.How will my personal information be collected?
   
   We may collect your personal information when you:
   
   
   
   • Register or use smythson.com (the "website")
   • Register at a till point in a Smythson store
   • Register or use Smythson's in-store WiFi, in any ot our stores
   • Contact Smythson by telephone or email
   • Enter any prize draws or competitions run by Smythson
   • Complete any forms for transactions, employment or other purposes
   • Sign up for an email newsletter



2. 2.What personal information may be collected?
   
   
   
   • In addition to personal details such as your name, date of birth, address,email and telephone number, we may also collect:
     
     
   • Details of transactions or orders you make at Smythson, whether in-store or via our website
   • Details of your shopping preferences, such as your favourite products and which of our stores and stockists you prefer to shop with
   • Details of your visits to our website, in-store WIFI and the resources that you access
   • Details of when you contact Smythson by email, post, social media or telephone (please note that we may keep a record of this correspondence)
   • Any other information from which we can identity you, or which is available on public registers
   • Email open and click behaviour
   
   
   

   With your permission, we retain your personal information, preferences and details of your transactions to keep you informed by email, post, phone and/or through other digital means (including social media) about products and services (including special offers, discounts, promotions, events, competitions and so on) offered by Smythson.
   
   

   We may also use your information to:

   
   
   
   • Maintain and update your account details if you set up an account via our website or one of our in-store services (e.g.a change to your address, order information or marketing preferences)
   • Improve and tailor the content and appearance of the website to ensure that the most relevant content is presented to you
   • Administer any prize draws or competitions run by Smythson. Please refer to the specific terms and conditions tor each prize draw or competition
   • Carry out assessment and analysis (for example market, customer and product analysis) to enable us to review, develop and improve the products and services we offer
   
   
   
3. 3.Where and how will my information be shared?
   
   
   We do not sell any of your personal data to third parties. However, whilst providing our services to you, we share your data with the following categories of companies:
   
   
   • Companies involved with the payment and logistics of your purchase, such as payment service providers (e.g. Paypal, our warehouses, order packers, and delivery companies
   • Professional service providers who help us run our business,such as website hosts and marketing agencies
   • Credit reference agencies, law enforcement and fraud prevent on agencies, in an effort to prevent fraud
   • Third party sites approved by you, such as social media sites (if you choose to link your accounts to us)
   
   
   

   As our website contains links to third party websites, the information you provide will be subject to the third party's privacy policy, as well as this privacy policy. Smythson assumes no responsibility for the privacy practices or the content of these websites.

   
   
   
4. 4.How long will my personal information be kept for?
   
   
   

   We will not retain your data for longer than necessary tor the purposes set out in this policy. Please note that different retention periods apply tor different types of data. Once data reaches its disposal date it will be deleted from our systems, physically destroyed or put beyond use it not permanently deleted.

   
   
   
5. 5.What rights do I have relating to my personal information?
   
   
   You have the following rights relating to your personal information:
   
   
   • Be informed about how your personal information is being used
   • Access the personal information we hold about you
   • Request a change to the personal information we hold about you
   • Request that we delete your data.stop collecting or processing it
   • Unsubscribe from marketing communications
   • Make a complaint to the Information Commissioner's Office
   
   
   
6.How can I unsubscribe and/or request a change to my personal information?




You may request to unsubscribe from our communications or have your details changed or deleted by contacting our customer service team directly via enquiries@smythson.com or 0808 164 1801.





You may also unsubscribe by clicking the "unsubscribe" link in any communication that we send to you by email. Please also note that while your request is being processed, for a brief period you may continue to receive communications which are already on their way to you.




7.Credit card transactions




Your full card details are not recorded or stored in our database.We collect only the final four numbers of your credit or debit card along with the expiry date and cardholder name to enable you to select that card when making future purchases.They are encrypted and are transferred securely to one or more third party payment service providers for immediate authorization. Once we have received authorization from the payment service provider we will confirm your order.




6. 8.Phone calls
   
   
   

   We may record calls that you receive from us or make to us. We do this to establish facts and evidence tor business transactions and to assess the quality of our interactions with customers.

   
   
   

   We will keep the recording tor five years. A request can be made for a copy of the recording under data protection legislation and is known as a "subject access request". You can make this request by contacting our customer service team directly via enquiries@smythson.com or 0808 164 1801.

   
   
   
7. 9.Job applications
   
   
   
   

   By providing us with personal data contained in your job application form and/or resume you are giving Smythson the consent to processing your details for work-finding purposes.

   
   
   

   The Conduct Regulations state that candidates’ application forms and CVs must be kept for at least one year from the date of their creation and at least one year after the date on which you last provided services to the company.

   
   
   

   The Asylum & Immigration Act states that copies of any documents (e.g. Passports & Right to Work Visas) must be kept for at least three years after an employee ceases employment.

   
   
   
8. 10.CCTV at our stores
   
   
   

   By entering our stores, you are giving Smythson your consent to the reasonable operation of CCTV for the purposes of crime prevention and detection, and other appropriate uses.

   
   
   
9. 11.International transfers
   
   
   

   To deliver products and services to you, it is sometimes necessary for us to share your data outside of the European Economic Area. This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws.

   
   
   

   If this happens, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to use ‘standard data protection clauses’ which have been approved by the European Commission for such transfers.

   
   
   

To improve your experience on smythson.com, we use cookies, tracking pixels and web beacons. A cookie is a piece of data that our website automatically transfers to the hard drive of your computer or mobile device when you access the website and is used to:

1. • Access stored information when you log into your account with us
   • Carry information from page to page of our website
   • Store site preferences and the items in your shopping basket
   • Identify whether you have visited our website previously
   • Monitor the number of times you’ve visited smythson.com, where you browse and what you’ve purchased
   • Offer you tailored content
   
   
   

   When accessing any page on smythson.com for the first time, a banner informing our use of cookies is displayed. By accepting the cookie policy you are agreeing to our use of cookies.

   
   
   

   It is possible to adjust your cookie settings and remove cookies at any time through your browser settings. You can find links below to the instructions of the following browsers:

   
   
   
   • Internet Explorer
   • Chrome
   • Firefox
   • Opera
   • Safari
   
   
   

   Please note that if you do disable cookies, you may not be able to access all the services on smythson.com.

   
   
   

   Tracking pixels and web beacons work in a similar way to cookies and allow us to gather information about your behaviour on our site.

   
   
   

   The following data may be collected each time you visit smythson.com regardless of whether you are logged in to your account:

   
   
   

   We make an effort to keep this list up to delay, but there may be some delay in editing detail when we move software suppliers from time to time. We have endeavoured to maintain a comprehensive list, but some omissions may occur for a short period if software suppliers are changed.

   PURPOSE	SUPPLIER	EXPIRATION IN DAYS	COOKIE/PIXEL
   Analytics
   This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited.	Google Analytics	1	_gid
   This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.		0	_gat_UA-974865-16
   This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.		730	_ga
   Performance
   This domain is owned by Mircosoft - it is the site for the search engine Bing.	bing.com	390	MUID
   This domain is owned by Atlas Solutions which is in turn owned by Facebook. Atlas is an online advertising business, targeting users through tracking their web activity. From September 2014 the company re-launched under the ownership of Facebook, promising the ability to reach known users and target adverts based on profiles generated using Facebook's user data.	atdmt.com	730	ATN
   This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange	doubleclick.net	390	IDE, test_cookie
   Test cookie in Google Campaign Manager	doubleclick.net	15 min	test_cookie, FLC
   Security and Functionality in Google Campaign Manager	doubleclick.net	30 min	pm_sess, pm_sess_NNN, aboutads_sessNNN
   Security and Functionality in Google Campaign Manager	doubleclick.net	2 weeks	DSID
   This domain is owned by DC Storm, which provides third party analaytics, tracking and tag management solutions.	dc-storm.com	365	rmuid
   This domain is owned by Facebook, which is the world's largest social networking service. As a third party host provider, it mostly collects data on the interests of users via widgets such as the 'Like' button found on many websites. This is used to serve targeted advertising to its users when logged into its services. In 2014 it also started serving up behaviourally targeted advertising on other websites, similar to most dedicated online marketing companies.	www.facebook.com	0	also includes Instagram
   Contains browser and user unique ID combination, used for targeted advertising.		90	fr, _fbp
   This domain is owned by Google and used for online advertising and analytics	google.com and local variations, e.g. google.de, googleadservices.com	13 months EEA UK / 24 months elsewhere	ANID, AID, IDE
   Collect the following information including the technical specifications of the device for a better measurement of conversions, improved optimisation capabilities, creation of lookalike audience and retargeting segments: User ID, IP address (truncated after 30 days), User agent, URL, Placement section, Click event, Timestamp, Engagement	Taboola	30	tfa
   Genie Goals are our PPC agency; This is to track PPC performance and to improve results for this channel	genieventures.co.uk	30	__cfduid
   Linkshare/Rakuten are our Affiliate partner. This cookie is to track performance and to improve results for this channel	linksynergy.com	365	rmuid
   Online chat funtion	Olark	0 - 730	_okck, _okgid, _oklv, olfsk, _okdetect, _okbk, wcsid, _okcs, hblid, _ok
   Web site personalisation and product recommendation engine	Nosto	1460	2c.cId, nostojs
   		0	nostoskipcache, nostodev, nostorecotrace, nostopreview
   Emarsys is our email partner. They use cookies and tracking pixels in our emails to evaluate and improve performance.	Emarsys	-	pixel
   This cookie that stores the visitor id which will identify the visitor through sessions.		1 year	scarab.visitor
   This is the 3rd-party version of scarab.visitor. It stores a server side generated visitor id to identify the same visitors through different sessions. It provides the capability to identify a visitor as a known user even if no identification event has taken place. If this cookie is blocked, the user cannot be identified without an identification event.			bs_cdv
   This cookie stores user profile information, products the user browsed, etc. It also stores performance metrics about our scripts, load times, execution times, and so on after being generated by the first event (go command). The information stored in this cookie is encrypted. This cookie is only present if the xp cookie is blocked.		1 year	scarab.profile
   This is the 3rd-party version of the first party cookie scarab.profile. It is set from the first party version. It contains user profile data in a serialized, encrypted format. The data is covering events, such as, item view, category view and searches.			xp
   If this cookie is blocked, the personal recommendation feature for visitors will not be available.
   A session cookie that is used for click and add-to-cart tracking. When a user clicks on a recommended item, and there is not enough time to report the click to our server (to avoid blocking the user flow), the click information is stored in a cookie. The next time the script loads in the same browser, these cookies are read and the data is sent to our servers.		current session of the visitor	scarab.mayViewed
   This is a 3rd-party cookie used for similar purposes as scarab.mayViewed. It stores a server side generated session id for session length identification. If this cookie is blocked, the visitors session lengths are estimated by event timestamps.		current session of the visitor	s
   Force cohort cookie: It is used for A/B testing.		30 minutes	fc

   
   
   
   • Computer and connection information
   • Browser information, operating system and platform details
   • The time/s you accessed our site
   
   
   

   We may use an IP address to identify and gather broad demographic information about you, which we will use to help detect fraud, identify problems, web administration and for other marketing purposes. Our email service provider includes tracking pixel in emails. If you don’t want tracking pixels in email please contact customer services at customer.services@smythson.com.

   
   
   

   If you have provided us with an email address, we will be able to associate this email address back to your previous browsing and purchase experiences. If you log in, then in addition, we will be able to associate your log in with your billing addresses, delivery addresses and your payment details.

   
   
   

   Sometimes we may ask for your consent to use your information for particular purposes (e.g. to send you marketing communications). Where we do so, this consent will be our legal basis for our use of the information. You can withdraw your consent at any time and we will then stop processing your information for that purpose. If you wish to withdraw your consent, then please contact us using the details at the end of this notice, for email please use the unsubscribe link.

   
   
   

We know you love to share content we have on smythson.com. Please be aware that social networking sites, like Facebook and Twitter, might send cookies. We don't control the setting of these third-party cookies, so we suggest you check the third-party websites for more information about their cookies and how to manage them.

To offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. You can find general information on Klarna here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy.