Who we are
For the purposes of the General Data Protection Regulation Act 2017, the data controller is BV Brands Limited (our registered company name) and our registered address is Croft Chambers, Bancroft, Hitchin, England, SG5 1JQ.
Our data protection officer is our Head of Digital. Please see below for contact details for any data protection queries.
What we collect
We may collect the following types of personal information:
How we collect it
We use different methods to collect data from and about you including:
This includes data that you provide when making an purchase from our website, corresponding with us by post, phone email or otherwise and when entering competitions or participating in surveys.
When you visit our website we may automatically collect information which helps us build a picture of our users. For example, technical data via cookies when you browse and use our website or our app.
We may receive additional information about you, such as demographic data or fraud detection information, from third party service providers and/or partners. We add this to the information that we have collected from you in order to improve our service and any marketing that you receive from Stubble & Co. We also receive data from third party providers such as Yotpo (an e-commerce brand marketing platform).
What we do with the information we gather
We use your data for the following:
What is our legal basis for processing your data
When you make a purchase from us, we will process your data to fulfil our contractual obligations for the contract that we have entered in to. For example, using your address to deliver your online purchase to you.
When you make a purchase from us, we will process your data to fulfil the legal obligations that we are bound to comply with, such as tax for VAT purposes.
When you make a purchase from us, we will process your data under the basis of legitimate interests. Legitimate interest is the interest of our company to conduct and manage our business and provide you with the best and most secure customer experience possible. When we process your information under legitimate interests, we take care to balance our actions with your rights and interests under data protection law.
Who we share your information with
In order to provide our services, we may need to provide your information to our third party partners, for example:
In the event that we in the event that we sell or buy any business or assets, we may also disclose your personal data to the prospective seller or buyer of such business or assets.
Links to other websites
To deliver products and services to you, it is sometimes necessary for us to share your data outside of the UK and/or EEA. This will typically occur when service providers are located outside the UK/EEA or if you are based outside the UK or EEA. These transfers are subject to special rules under data protection laws.
In the case of such transfers, we will ensure that the transfer will be compliant with data protection law so that your personal information will be secure. We ensure safeguards are in place to protect your data and use data protection clauses to protect your privacy. Our standard practice is to use ‘standard contractual clauses’ for international transfers which have been approved by the European Commission.
We take all appropriate technical and organisational measures to protect your data. These include measures that reduce the risk of loss, misuse, unauthorised access, disclosure and alteration. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using TLS technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Under applicable data protections law you have the following rights:
If you would like to exercise any of these rights, or just ask a question, please contact us a email@example.com.
We will keep your personal information for as long as is necessary for the purpose for which it has been obtained and then for as long as there is any risk of a potential claim, which will be dependent upon the limitation period for the particular type of claim. We have set out below the main retention periods which will apply:
Contacting us about your personal information
Privacy Addendum for California and Certain Other U.S. Customers
The following provisions apply to our customers and website users who are California residents and are intended to address the requirements of the California Consumer Privacy Act of 2018, as amended from time to time (the “CCPA”). As applicable, this Addendum also applies to residents of other States in the United States of America that provide for similar consumer privacy protections.
Selling your information. We do not sell personal data in exchange for monetary compensation. We may allow certain third parties (such as advertising technology partners, data analytics providers, and social networks) to collect or receive your data in order to provide you with tailored content and advertising. You have the right to opt out of this disclosure of your information as follows:
Your rights: Subject to exceptions and certain limitations under applicable law, you may have certain choices regarding our use and disclosure of your personal data, as described below:
To exercise these rights, you can contact us directly at firstname.lastname@example.org. If we deny your privacy request, you may appeal the decision by contacting us at the email address provided. You must describe the basis for your appeal.
Non-discrimination Statement. Stubble & Co will not discriminate against any consumer for exercising their rights under the California Consumer Privacy Act, or similar U.S. state privacy laws, as applicable.