PRIVACY

Last updated: 14 May 2018


1. INTRODUCTION
1.1 We are committed to safeguarding the privacy of our website visitors; in this policy we explain how we will treat your personal information.

2. COLLECTING PERSONAL INFORMATION
2.1 We may collect, store and use the following kinds of personal information:
(a) Browser and device data, including your IP address, geographical location, device type, operating system, Internet browser type and version, operating system, referral source, length of visit, and page views
(b) information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters including your name and email address
(c) Transaction data relating to any purchases you make of our goods, including your name, billing and shipping address, telephone number, and email address
2.2 Before you disclose to us the personal information of another person, you must obtain that person's consent to both the disclosure and the processing of that personal information in accordance with this policy.

3. USING PERSONAL INFORMATION
3.1 Personal information submitted to us through our website will be used for the purposes specified in this policy or on the relevant pages of the website.
3.2 We may use your personal information to:
(a) administer our website and business
(b) send you goods purchased through our website
(c)  send you non-marketing commercial communications by email
(d) send you email notifications that you have specifically requested
(e) send you our email newsletter/updates, if you have requested it. You can inform us at any time if you no longer require these email updates.
(f) send you marketing-related communications relating to our business, which we think may be of interest to you, by email, where you have specifically agreed to this. You can inform us at any time if you no longer require marketing-related communications
(g) deal with enquiries and complaints made by relating to our website
(h) keep our website secure and prevent fraud
3.3 If you submit personal information for publication on our website, we will publish and otherwise use that information in accordance with the licence you grant to us.
3.4 Your privacy settings can be used to limit the publication of your information on our website, and can be adjusted using privacy controls on the website.
3.5 We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party's direct marketing.
3.6 All our website financial transactions are handled through our payment services provider, Stripe. You can review Stripe's Privacy Policy here, and PayPal, whose Privacy Policy can be viewed here. We will share information with our payment services provider only to the extent necessary for the purposes of processing payments you make via our website, refunding such payments and dealing with complaints and queries relating to such payments and refunds.

4. DISCLOSING PERSONAL INFORMATION
4.1 We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, or suppliers insofar as reasonably necessary for the purposes set out in this policy.
4.2 We may disclose your personal information:
(a) to the extent that we are required to do so by law;
(b) in connection with any ongoing or prospective legal proceedings;
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
(d) to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information
4.3 Except as provided in this policy, we will not provide your personal information to third parties.

5. INTERNATIONAL DATA TRANSFERS
5.1 Personal information that you publish on our website or submit for publication on our website may be available, via the internet, around the world. We cannot prevent the use or misuse of such information by others.

6. RETAINING PERSONAL INFORMATION
6.1 This Section 7 sets out our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information.
6.2 Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
6.3 Notwithstanding the other provisions of Section 7, we will retain documents (including electronic documents) containing personal data:
(a) to the extent that we are required to do so by law;
(b) if we believe that the documents may be relevant to any ongoing or prospective legal proceedings; and
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).

7. SECURITY OF PERSONAL INFORMATION
7.1 We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
7.2 We will store all the personal information you provide on our secure (password and firewall protected) servers.
7.3 All electronic financial transactions entered into through our website will be protected by encryption technology.
7.4 You acknowledge that the transmission of information over the Internet is inherently insecure, and we cannot guarantee the security of data sent over the Internet.

8. AMENDMENTS
8.1 We may update this policy from time to time by publishing a new version on our website. The date at the top of the page indicates when the Policy was last revised.
8.2 You should check this page occasionally to ensure you are happy with any changes to this policy.
8.3 We may notify you of changes to this policy by email.

9. YOUR RIGHTS
9.1 In practice, you will expressly agree in advance to our use of your personal information for marketing-related purposes. 
9.2 You reserve the right to opt-out of receiving electronic communications from us at any time. You may opt-out via the unsubscribe link included in such emails.

10. THIRD PARTY WEBSITES
10.1 Our website includes hyperlinks to, and details of, third party websites.
10.2 We have no control over, and are not responsible for, the privacy policies and practices of third parties.

11. UPDATING INFORMATION
11.1 Please let us know if the personal information you have previously disclosed to us needs to be reviewed, corrected or updated. You may do that be emailing us at info@islaapothecary.com. If emailing your request, please specify the personal data you would like to have reviewed/corrected/updated. For your protection, we may only implement requests with respect to the Personal Data associated with the particular email address that you use to send us your request. We may need to verify your identity before implementing your request. We will aim to comply with your request in a timely manner.

12. OUR DETAILS
12.1 This website is owned and operated by KIKI Body Ltd T/A Isla Apothecary.
12.2 We are registered in England and Wales under registration number 09498551, and our registered office is at 37 Church Way, London N20 0JZ.
12.3 Our principal place of business is at 37 Church Way, London N20 0JZ.
12.4 If you have any questions about our Privacy Policy, you can contact us by writing to the business address given above, or by email to info@islaapothecary.com.