1. About this policy

The website charityshopexchange.com is owned and operated by Beyond Bazaar Limited, trading as 'Charity Shop Exchange'. References to "we", "us", or "our" are references to Beyond Bazaar Limited. We are a company registered in England and Wales (company number 12583240).

We are committed to respecting the confidentiality of the personal information you supply to us and all data will be processed in accordance with data privacy laws. For the purposes of UK data protection legislation, we are the data controller.

You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we are providing you with the information in this Privacy Policy.

1. About this policy

The website charityshopexchange.com is owned and operated by Beyond Bazaar Limited, trading as 'Charity Shop Exchange'. References to "we", "us", or "our" are references to Beyond Bazaar Limited. We are a company registered in England and Wales (company number 12583240).

We are committed to respecting the confidentiality of the personal information you supply to us and all data will be processed in accordance with data privacy laws. For the purposes of UK data protection legislation, we are the data controller.

You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we are providing you with the information in this Privacy Policy.

2. Your rights

You have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, deleted, or only used for certain purposes.

You have the right to change your mind at any time and ask us to stop using your information, for example, by unsubscribing from marketing emails or opting out of cookies.

If you would like to exercise this right, please contact us. The various rights are not absolute and each is subject to certain exceptions or qualifications.

3. Information we collect

When you use charityshopexchange.com, we collect and retain information that you, as a customer or potential customer, provide to us through the website, as well as information that is automatically or passively collected from you, your device or your browser.

3.1 Information that you may provide to us

• Contact information, including name, email address, postal address (including postcode) and telephone number.
• Account information, including your user-name (which may be your email address), password, log-in details, transaction details and successful referrals.
• Credit card information, including the name on the card, card type, card number, expiry date and CV2 is collected and processed by our third party payment processor. We retain limited credit card information for our records (e.g. the last four digits for validation purposes) but we do not store or retain complete credit card information.
• Your preferences, including ratings you provide in relation to products that are available on the website and survey responses.
• Communications to us, for example reporting a problem or submitting queries, concerns or comments regarding the website, its content or your account.
• Any other content or information you choose to provide, including photos you may upload.
• Details of your visits to the website, the resources you access and any data you download.

You are under no obligation to provide any such information. However, if you should choose to withhold requested information, we may not be able to provide you with certain services.

3.2 Information we collect from other sources

We may receive information about you from third parties, such as our partners, advertisers, and integrated services. If we associate or combine information from other sources with personal information that we collect through this website, we will treat this information as personal information in accordance with this policy.

3.3 Information from your use of our website

We collect information about your use of our website and the devices you use. We collect information on:

• how often you access our website;
• the way in which you navigate around it;
• how long you spend on particular pages;
• the operating system, hardware, software versions, browser configuration of the devices you use;
• location information;
• any web chat messages and email correspondence with us; and
• connection information such as IP addresses.

We also use cookies to log your website behavioural information. For more information on our use of cookies, please refer to our cookie statement.

4. How we use the information we collect

We use your Information to better serve you, such as by letting you know about new products that we think you'll like. Some other examples of how we may use your Information include to:

• process your orders and provide you with the services (such as sending you your order);
• customise our services to you, for instance by establishing your preferences to facilitate better recommendations;
• transmit your order details to our partner charities who in turn fulfil and dispatch orders;
• inform you about your scheduled delivery, rewards earned by you on our website and ask you for feedback on your recent deliveries;
• provide, operate and maintain, our services, including, for instance (without limitation) to administer your account, provide you with order and billing information, monitor use of and downloads from the website;
• improve the website and services for customers, analyse website usage, investigate complaints or website operations and identify visitors to the website;
• analyse our users' demographics and track sales data;
• provide you with personalised offers, rewards, competitions; marketing materials and other promotional materials, both online (via email and through advertisements), offline (via post), and through other marketing channels, such as third party social networks, like Facebook;
• to assist us in finding other potential customers similar to you including using social network platforms (but we would never disclose your data in doing so to any of those customers);
• send you information or content you have requested and develop relevant advertising material for you which will be viewable when you visit the website or other websites across the Internet;
• communicate with you and investigate any complaints;
• perform market research, data analytics and data appends. To accomplish some of these tasks, we may enhance or append other data collected from or about you to the information we possess;
• ensure that as an existing customer you are not included on proposed marketing campaigns aimed at attracting new customers;
• protect against fraud, unauthorised transactions, security issues, claims and other liabilities and manage risk exposure and quality;
• verify whether you have had a previous account with us to prevent fraudulent take-up of our offers;
• provide customer support and diagnostic assistance, for instance, by analysing the Information, our service’s integration with other platforms and the contact information and other materials you submit to us;

If you have elected to unsubscribe from marketing communications, we will keep a record of this and ensure that we include your email address on suppression lists to ensure that we do not contact you with marketing communications.

5. Our bases for collecting and using the information

We are entitled to use your personal data in the ways set out in this policy on the following bases:

• the use of personal data in this way is necessary for the performance of a contract with you for provision of our products and/or services or to take steps at your request prior to entering into such a contract;
• we have legal obligations that we have to discharge;
• the use of your personal data is necessary for our legitimate interests in ensuring the quality of the products and services we provide to you; collecting information for marketing purposes; and statistical analysis;
• you have consented to such use;
• to establish, exercise or defend our legal rights for the purposes of legal proceedings.

If provision of your personal information is a legal or contractual requirement or a requirement necessary to enter into a contract with us, and you choose not to provide it, we may not be able to perform some of the tasks we need to in order to provide certain products or services to you.

If you do choose to provide your consent you can withdraw it at any time by contacting us (see section 3).

6. Sharing your information

We will not disclose your personal information to third parties except as detailed in this Privacy Policy.

Where necessary, we may share your personal data with the following third parties:

• software providers;
• web analytics providers;
• cloud computing providers;
• payment processing and accounting providers;
• law enforcement agencies and regulators, government departments or competent authorities of the UK or of other countries; and
• if you have consented to any disclosure to a third party.

If provision of your personal information is a legal or contractual requirement or a requirement necessary to enter into a contract with us, and you choose not to provide it, we may not be able to perform some of the tasks we need to in order to provide certain products or services to you.

If you do choose to provide your consent you can withdraw it at any time by contacting us (see section 3).

7. Where we store your information

We transfer, use and/or store your personal information outside of the European Economic Area (“EEA”) and the laws of some of these destination countries may not offer the same standard of protection for personal information as countries within the EEA. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.

Netlify Inc. is a company based in the United States that makes use of servers hosted worldwide, and has been licensed by us to transfer personal information worldwide, including to countries outside the European Economic Area. To provide adequate safeguards for this data transfer, we have entered into a contract with Netlify that contains European Commission approved standard data protection clauses.

Transfers to our third party service providers are to enable them to use and store your personal information on our behalf. We will, however, put in place appropriate security procedures in order to protect your personal information. We also ensure that, where your information is transferred to any country outside the EEA this is done using specific legally-approved safeguards. Please contact us if you wish to obtain a copy of these safeguards.

8. Keeping your information

We will keep your information only for as long as necessary depending on the purpose for which it was provided. When determining the relevant retention periods, we will take into account factors including:

• our contractual and business relationships with you;
• legal obligations under applicable law to retain data for a certain period of time;
• statute of limitations under applicable law(s); and
• guidelines issued by relevant supervisory authorities.

9. Security

We acknowledge that the information you provide may be confidential and will maintain the confidentiality of and protect your information in accordance with our normal procedures and all applicable laws. We employ appropriate technical and organisational security measures to help protect your personal data against loss and to guard against access by unauthorised persons. We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

In addition, those employees, agents, contractors and other third parties who process your personal data will only do so on our instructions and they will be subject to a duty of confidentiality.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, for example by encrypting our outgoing email communications, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use procedures and security features to try to prevent unauthorised access.

10. Links to other websites

Links on the charityshopexchange.com website may take you to third party websites over which we have no control. While such links are provided for your convenience, you should be aware that the information handling practices of the linked websites might not be the same as ours. You should review any privacy notices on those linked websites. We are not responsible for any linked websites.

11. Changes to our Privacy Policy

We reserve the right, at our discretion, to change, modify, add to, or remove portions from, our Privacy Policy. We will of course notify you of any changes where we are required to do so.

Should you have any questions or concerns about this Privacy Policy or the processing of personal data we hold about you, please contact us by email at together@charityshopexchange.com

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. You are advised to review this Privacy Policy periodically for any changes.