We collect your personal data when you place an order, call our Customer Care team, sign up for our marketing communications, browse our website or use the other services offered by our website. The data we collect includes details you provide to us, such as your given name and surname and your shipping and billing addresses. We also collect data regarding your shopping habits and the pages and products you have viewed from your use of the website. We use this data to: Take your orders, process your payments and deliver the items you have purchased; Provide any additional services you have requested, such as our marketing communications; Give you access to services reserved for registered users, such as Wish Lists and product alerts; Provide you with help and assistance via our Customer Care team; Personalize your visit to the website and ensure that content from our site is presented in the most effective manner for you and for your computer. Under the Law, we must have a valid legal basis to process your data. In most instances, we will process your data because we have a contract with you e.g. to deliver your purchases or magazine, or to provide you with other services you have requested. We will also use your personal data to send you sales and marketing communications that we believe may be of interest to you if we have your explicit consent for this activity, or if you are an existing customer where we have a legitimate interest in communicating with you. You can opt out of sales and marketing communications from us at any time.
Your personal data will be processed by Andyhugfoundation, as the data controllers, and may also be processed by other Group companies acting under our instructions. We may also retain the services of external suppliers to help meet our business needs and may share your data with these suppliers. These suppliers have been selected after a rigorous evaluation process and chosen for their security, reliability and competence. They will process your data only under our instructions. Some of these suppliers and some Group companies may be based in non-EU countries. Where this is the case, the transfer of your personal data to these countries is carried out in compliance with the guarantees provided by law.
We will not retain your personal data for longer than is necessary to fulfil the purposes for which you provided that personal data, unless the law permits or requires that we retain it for longer. The retention period varies depending on the purpose of the processing. For example, the data collected during your purchase of goods on Andyhugfoundation are retained in accordance with local tax law (seven years in the UK), while those data used to send you our marketing communications are retained until you ask to be unsubscribed.