PRIVACY NOTICE

We appreciate you putting your trust in us concerning your personal data.

Please read this Privacy Notice ("Privacy Notice") carefully as it describes how we collect, use and disclose your personal data. Personal data is any information relating to a living person.

In this Privacy Notice, when we refer to "we", "our", "us" or "ToDiveFor", we mean ToDiveFor Limited.

If you have any questions about this Privacy Notice please contact us using the details in the "How to contact us" section at the end of this Privacy Notice.

DATA CONTROLLER

For purposes of this privacy notice the Data Controller is:ToDiveFor Limited

WHAT INFORMATION DO WE COLLECT ABOUT YOU?

(1) Information you give to us

We may collect personal data from you when you use our website, buy our products or services, visit us at a pop-up store, when you sign up to receive marketing information and newsletters, enter into offers or promotions, interact with us on social media platforms or contact our customer services.

The personal information you give us may include your name, title, email address, phone number, postal address, credit or debit card details, shipping address, billing address, and any other information that you consider necessary to provide to us.

We may also keep copies of any correspondence you send us which may include personal data.

(2) Information collected by automated means

We also obtain some of your personal data by automated means, for example, when you visit our website we collect the IP address of the device you use, the geographical location of your device, the browser you are using, the type of device you are using (tablet, mobile, desktop), the URL you came from and the web pages you access.

(3) Information collected from third parties

We may receive personal data about you from the following third parties. We may request information about you from credit reference agencies and fraud prevention agencies to assist us in the provision of our goods and services to you.

CHILDREN'S PRIVACY

We will never knowingly collect personal data from individuals under the age of sixteen (16) without first obtaining verifiable parental consent. If you are under the age of 16 you should not provide information to us. If we become aware that a person under 16 has provided personal data to us without verifiable parental consent, we will remove this personal data.

HOW DO WE USE YOUR PERSONAL DATA?

We are required by law to provide you with information about the purposes for which we use your information and the legal justification for us to use that information. For example, there may be a legal justification for us to use your personal data where:

We need to use your information to perform a contract with you or to fulfil a request originated by you.
Using your information is in our legitimate business interests (provided these interests are balanced against your rights).
You have given your consent to us to use your information.
We need to process your personal data to comply with legal obligations to which we are subject.

The table below sets out the different purposes for which we may use your personal data and the legal basis for each one. If the the purposes for which we use your personal data changes we will update this privacy notice (see "Updates to our Privacy Notice" below).

We will always take steps to ensure that your personal data is only used for these purposes.

We will only send you marketing information if you have consented to receive our newsletter or marketing communications. You can opt out from receiving these at any time by following the instructions in any of the messages you receive.

We may use your personal data to:	How do we use personal data for this purpose	Legal basis:
Improve your experience on our website	We use personal data such as your name, email address, postal address, telephone number, IP address, preferences, site usage information and purchase history to improve your experience on our website. We may use this information to track your activities on our website; to recognise your computer or device so that you are able to save your preferences and stay logged in to the website without having to re-enter your online account credentials; to keep the contents of your shopping cart and remind you if you have left items in it and to otherwise enhance, monitor and analyse your usage of the website.	Our legitimate business interests in providing the best shopping and browsing experiences to our customers and visitors, to enable the use of our website and functionality and to protect their operation, to identify and resolve possible technical issues, and to continuously improve and protect our company, property and customers against fraud (referred to as “our legitimate interest”)
Identify you when you contact us	We may use your name, email address, postal address, telephone number or payment information to identify you when you contact us, for the purposes of processing and fulfilling your requests for products and services and keeping you informed about your requests.	Performance of our contractual obligations, our legitimate interest, or your consent.
Process and track your orders	We need to use your personal data to process your orders and keep you informed of their delivery or progress.	Performance of our contractual obligations, or our legitimate interest.
Resolve complaints and other customer service issues	We use your personal data to resolve your complaints or other customer service issues, such as delivery of, returning or replacing items you have ordered.	Performance of our contractual obligations, or our legitimate interest.
Answer your product or service enquiries	We use your personal data to answer your queries about our products, service and website and any other enquiries you make.	Performance of our contractual obligations, or our legitimate interest.
Detect and prevent fraudulent transactions	We may need to process your personal data in order to keep your payments safe and secure and protect against fraudulent transactions.	It is in our legitimate interests to process personal data to keep our customers' payments secure.
Comply with legal obligations to which we are subject	We may need to process your personal data to comply with legal obligations binding or accepted by us. For example, we may need to retain your transaction records for a period of time to comply with tax or accounting requirements.	Compliance with our legal obligations
Send you marketing information and staying in touch with you	We use your personal data to send you newsletters and marketing information about our products, services, offers and promotions that you may be interested in. You can unsubscribe from marketing communications at any time by following the instructions in any of the messages you may receive from us.	Your consent.
Carry out surveys and market research	We use your personal data to carry out market research of our customers’ opinions. This is to help improve our products and services, advertising and marketing, website content, customer service, and your overall customer experience.	Your consent.
Defend our legal rights and to protect the security or integrity of the websites, our customers and our business in general	We may need to process personal data in order to defend our legal rights, for example to enforce our terms and conditions or to collect unpaid debts that we are owed. We may also need to process personal data to protect the security and integrity of our websites, our customers and our business in general.	Our legitimate interest.

HOW DO WE PROTECT YOUR PERSONAL DATA?

We endeavour to protect your data by storing it on cloud based secure servers and by using technical and organisational security measures to safeguard your personal data and to reduce the risk of loss, misuse, and unauthorised access, disclosure, and alteration.

Some of the safeguards we use are SSL data encryption, information access controls and Payment Card Industry Data Security Standard (PCI DSS). Please understand, however, that no system is perfect or can guarantee that unauthorised access or theft will not occur.

Where you have chosen a password which enables you to access restricted areas of the website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

YOUR DATA PROTECTION RIGHTS

You have the following rights in relation to your personal data:

Access. You have the right to request a copy of the personal data we are processing about you, which we will provide back to you in electronic form. For your own privacy and security, we may require you to prove your identity before providing the requested information. If you require multiple copies of your personal data, we may charge a reasonable administration fee where we are permitted to do so in accordance with GDPR.

Rectification. You have the right to have incomplete or inaccurate personal data that we process about you rectified. Note that you can always make adjustments to certain personal data directly through your online account.

Deletion. You have the right to request that we delete personal data that we process about you, except we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.

Restriction. You have the right to restrict our processing of your personal data where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it.

Portability. You have the right to obtain personal data we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal data which you have provided to us, and (b) if we are processing that data on the basis of your consent (such as for direct marketing communications) or to perform a contract with you.

Objection. Where the legal justification for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.

Withdrawing Consent. If you have consented to our processing of your personal data, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out from marketing messages that you receive from us. You can unsubscribe from marketing communications at any time by following the instructions in any individual message. The legality of the processing of your personal data prior to you withdrawing your consent remains unaffected by this.

You can make any of these requests in relation to your personal data by submitting your request in the Contact us section of our website or by contacting us by post using the details in the "How to contact us" section of this Privacy Notice.

You also have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. If you are based in the UK, the Information Commissioner’s Office can be contacted via details at the ICO Website: www.ico.org.uk

If you are based in or the issue you would like to complain about took place elsewhere in the European Economic Area (EEA), you can contact the data protection authority in your place of residence or your country.

WHO DO WE SHARE YOUR INFORMATION WITH?

We may disclose personal data we process for the following purposes and in the following ways, to the extent permitted by law and depending on such purpose(s) or way(s):

Recipient purpose:

What we share:

Legal basis:

Our service providers and suppliers, who process such information for us or on our behalf, for the same purposes described in the How We Use Information section above.

Name, email address, postal address, telephone number, order history, IP address, payment information, preferences, site usage information

Performance of our contract obligations, our legitimate interest and/or consent depending on the purpose as described in the How We Use Information section above

To provide information to and as required by local law enforcement agencies, other government authorities, or otherwise required by law or to protect the rights and safety of our property, company and customers.

Name, email address, postal address, telephone number, order history, IP address, payment information

Our legitimate interest, compliance with our legal obligations

COOKIES

Cookies are small text files that can be stored on your computer, mobile or device in order to recognise your device on future visits, offer you certain functionality, to make the website more convenient and to optimise our website. If you do not want cookies to be used, you can disable them by configuring the relevant settings in your web browser. Please note that this may restrict the functionality and your use of our website and certain features may not work as a result.

DATA PROCESSING IN NON-EU COUNTRIES

Your personal information may be transferred to organisations which are based in or whose data processing takes place in a jurisdiction which is not a member of the European Union or a member state of the European Economic Area, before transferring the data we will ensure (unless a legally applicable exemption applies) that the recipient has an appropriate level of data protection in place (e.g. through a determination of adequacy by the European Commission, through appropriate guarantees such as the recipient being self-certified for the EU-US Privacy Shield, or an agreement in the form of the EU standard contractual clauses with the recipient).

UPDATES TO OUR PRIVACY NOTICE

We sometimes need to make changes to the way we collect and use your personal information and this Privacy Notice may be updated from time to time. If we make changes to this Privacy Notice, we will notify you of these changes by email and on our website.

HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

Your personal information is processed by us and/or our service providers only for the period necessary for the purposes for which the information is collected, or where we are relying upon your consent until you withdraw that consent. When we no longer need to use your information for those purposes or if we are relying on your consent where you withdraw that consent, we will remove it from our systems and records or take steps to anonymise it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject).

HOW TO CONTACT US

If you have any questions or comments about this Privacy Notice or if you would like to make a request relating to your personal data, please submit your request to the Contact us section of our website or write to us at:

Units SCF 1&2, Western International Market,

Hayes Road,

Southall,

Middlesex UB2 5XJ

Version 2018/1. This Privacy Notice was last updated: 25 May 2018