The Water Mother Ltd, registered company under which Wyld Woman operates, is referred to here on as 'we', 'us' or Wyld Woman. It acts as the Data Controller.Our registered office is
67, Building 36
We are carrying out regular evaluations of our compliance efforts. As our business may evolve in new directions we are making sure to update our compliance with the GDPR to be in line with every change.
We are treating your data as ‘private by design’. It’s a key part of all our operations.
All data is treated in accordance with the General Data Protection Regulation.
Your rights and our commitment to privacy
With regards to data collected, processed, retained and transferred (and thereby all actions with that data) Wyld Woman ensures that the Data Subject (the customer) has the right to
(1) information and transparency,
(2) access and rectification of her/his data,
(3) erasure of data (‘to be forgotten’),
(4) restrict processing,
(5) data portability,
(6) to object.
We are ensuring to catalogue all personal data processing activities, in each line of our business, as it is required by GDPR.
How to communicate your privacy preferences
Manage your preferences by emailing us at firstname.lastname@example.org
In line with the GDPR we ensure that an employee will forward your data handling request and a data breech to Supervisory Authority within 72 hours.
We collect, process and retain personal information from you and any devices you may use when you navigate through a Wyld Woman web or mobile view, by transacting and otherwise interacting with us.
Use of your data
We collect and process only the data that is required to allow us to provide our services to you.
We use the personal information we collect to: provide and improve our services, provide you with a personalised experience on our site, provide you customer service, provide you with personalized advertising and marketing, and detect, prevent, mitigate and investigate fraudulent or illegal activities.
We process personal data for purchases, payments, customer support and fulfilment to enable us to perform our contract with you; where your contact details and transactional information are processed.
We process personal data relating to your interaction (transactions, site visits, wishlist, account) with Wyld Woman to enable us to personalise your experience with Wyld Woman. This processing constitutes profiling under the GDPR and we process your personal data in this way as it is in our legitimate interest to offer you a personalised experience on our sites and to provide you with personalised advertising and marketing.
We retain your personal information as long as it is necessary and relevant for our operations.
In addition, we may retain personal information from closed accounts to comply with legal requirements, prevent fraud and resolve disputes. Where a legal requirement obliges the retention of personal data for a specific minimum period, we will retain data for at least that period. When we determine the maximum retention duration of any personal data we hold we do so with regard to our legitimate interests to retain data, our obligation under GDPR to minimise data we hold with what we do hold as personal data being kept proportionate; the nature, and sensitivity of the personal data and the potential risk of harm from unauthorised use or disclosure of your personal data.
We use and retain your personal information to provide, improve and personalise our service to:
- Offer you site content that includes items and services that you may like and to keep track of your basket
- Customize, measure and improve our services
- Provide other services requested by you as described when we collect the information
Where we have the right to do so, we shall use and retain your personal information to personalise communications, to contact you, either via email, telephone or social media in order to inform you of account activity, delivery fulfilment and marketing related activity.
We use and retain your personal information to prevent, detect, mitigate and investigate fraudulent or illegal activities. This will involve the machine learning based statistical analysis which permits the identification of buying patterns which allow us to further personalise your experience.
We retain your personal information as long as it is necessary and relevant for our operations. In addition, we may retain personal information from closed accounts to comply with legal requirements, prevent fraud and resolve disputes. After it is no longer necessary for us to retain your personal information, we dispose of it securely according to our data retention and deletion policies.
Activities that require your specific and separate consent (i.e. marketing activity) such as consent giving and consent withdrawing are tracked, as is required by GDPR.
Disclosure & Security
We may disclose your personal information to authorised third parties if necessary to do so for the fulfilment of your order. We do not disclose your personal information to third parties for marketing purposes.
We protect your information using measures that reduce the risks of loss, misuse, unauthorised access, disclosure and alteration. We minimise the amount of personal information we disclose to what is directly relevant and necessary to accomplish the specified purpose.
In doing so, we may disclose your personal information to authorised third party service providers who help us to provide our services such as:
- Payment providers to facilitate purchases
- Fulfilment providers to facilitate order management, packaging and delivery
We do not disclose your personal information to third parties for marketing purposes.
Where legally compelling grounds exist, we may also disclose your personal information to governmental and law enforcement agencies, and otherwise in the defence of legal claims.
We protect your information using measures that reduce the risks of loss, misuse, unauthorised access, disclosure and alteration. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Data outside the EEA
We may transfer your personal information outside of the European Economic Area to authorised third parties. Where we use third party service providers based outside of the European Economic Area, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
Where we use third party service providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US.
The transfer of your personal data to countries that do not belong to the European Union and that have not been assessed as offering adequate levels of protection will be performed only:
- after the completion between The Water Mother Ltd and said parties of specific agreements containing safeguard clauses and appropriate guarantees for the protection of your personal data (known as "standard contractual clauses" and approved by the European Commission), or
- if the transfer is necessary for the completion and execution of a contract between you and The Water Mother Ltd (for the purchase of goods offered on our website, for registration on the website or use of services on the website), or
- for the management of your requests.
For questions email@example.com
67, Building 36
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the data protection supervisory authority in the UK (www.ico.org.uk).