Privacy Policy

1. Introduction

By using our website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of this policy. Our website incorporates privacy controls which affect how we will process your personal data.

2. How we use your personal data

Usage data — your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as the timing, frequency and pattern of your service use. Sourced from our internal analytics tracking system and Google Analytics, processed to monitor and improve our website and services.

Account data — your first name, last name, email address, billing and delivery addresses, submitted prescriptions, and previous order and transaction details. Processed to operate our website, provide our services, ensure security, maintain back-ups and communicate with you.

Notification data — information you provide to subscribe to our email notifications and/or newsletters, including your name, email address, number of orders, products ordered, address and pages visited. Processed to send you relevant notifications and/or newsletters on the basis of consent.

Transaction data — details of purchases you make with us, including billing and delivery addresses, telephone number, order and prescription details, and card and transaction details. Processed to supply the purchased goods and services and keep proper records of those transactions.

Correspondence data — information contained in any communication you send to us, including communication content and metadata. Processed to communicate with you and for record-keeping.

We may also process your personal data where necessary for the establishment, exercise or defence of legal claims, for compliance with a legal obligation, or in order to protect your vital interests.

3. Providing your personal data to others

We may disclose your personal data to members of our group of companies, and to our insurers and/or professional advisers, insofar as reasonably necessary for the purposes set out in this policy.

Financial transactions are handled by our payment services providers, Stripe and PayPal. We share transaction data with them only to the extent necessary to process your payments, refunds and related queries.

We may also disclose your personal data where required for compliance with a legal obligation or in order to protect your vital interests.

4. Our data processors

The following companies act as our data processors. We have DPA agreements in place with each of them to ensure they only process your data in accordance with current law:

• ✓Google — usage data, for tracking website usage and advertising
• ✓Stripe — transaction data, to process payments
• ✓PayPal — transaction data, to process payments
• ✓Brevo — correspondence data (live chat help) and notification/account data (email notifications and newsletters)
• ✓Amazon AWS — our hosting provider, serving the website and retaining off-site data back-ups
• ✓Facebook and Bing — usage data, for advertising
• ✓TrustPilot — account data, to request service and product reviews

5. Retaining and deleting personal data

Personal data that we process for any purpose shall not be kept for longer than is necessary for that purpose:

• ✓Usage data: retained for a minimum of six months and a maximum of 38 months from your last website visit.
• ✓Account data: retained as long as you have an active account, and for a maximum of three months following a request to close your account.
• ✓Notification data: retained as long as you have an active newsletter subscription, and for a maximum of two months after unsubscribing.
• ✓Transaction data: retained for a minimum of nine years and a maximum of twelve years following the transaction date.
• ✓Correspondence data: retained for a minimum of one year and a maximum of four years following the communication.
• ✓We may retain personal data where necessary for compliance with a legal obligation or to protect your vital interests.

6. Your rights

Your principal rights under data protection law are: the right to access; the right to rectification; the right to erasure; the right to restrict processing; the right to object to processing; the right to data portability; the right to complain to a supervisory authority; and the right to withdraw consent.

The first copy of your personal data will be provided free of charge; additional copies may be subject to a reasonable fee. You may exercise any of your rights in relation to your personal data by written notice to us.

7. About cookies

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies may be either 'persistent' cookies, which remain valid until their set expiry date, or 'session' cookies, which expire at the end of the user session when the browser is closed.

We use cookies for purposes including saving frames that you add to favourites, storing your session ID, recording that you have accepted our cookie policy, page caching, and Google Analytics. Our service providers also use cookies, including Bing (MUID, MUIDB), Zopim live chat (_cfduid), Google advertising (1P_JAR, NID) and Facebook (fr).

Most browsers allow you to refuse to accept cookies and to delete cookies — see your browser's help pages for details. If you block cookies, you will not be able to use all the features on our website, including placing an order.

8. Marketing

If you subscribe to our email notifications and/or newsletters, we use your notification data to send you relevant communications. This processing is based on your consent, and you may withdraw your consent at any time — for example by unsubscribing, after which your notification data will be retained for a maximum of two months.

9. Third party websites, children and updates

Our website includes hyperlinks to third party websites. We have no control over, and are not responsible for, the privacy policies and practices of third parties.

Our website and services are targeted at persons over the age of 16. If we have reason to believe that we hold personal data of a person under that age, we will delete that personal data.

We may update this policy from time to time by publishing a new version on our website. Please let us know if the personal information we hold about you needs to be corrected or updated.

10. Our details

This website is owned and operated by Fashion Specs Direct Ltd, registered in England and Wales under registration number 5986776, with its registered office at 61 Rodney Street, Liverpool, L1 9ER. Our principal place of business is at Spex4Less, Everite House, Carr Lane, Hoylake, Wirral, CH47 4BG.

You can contact us by post to the address above, using our website contact form, by telephone on 0151 632 6611 from 9.00am to 5.00pm, or by email at info@spex4less.com.