This Notice applies to anyone who visits OrangeShoppers’s websites or OrangeShoppers’s mobile applications (the “Sites”), and any other platforms OrangeShoppers owns or controls and makes available (the “OrangeShoppers Platforms”). We refer to the Sites and the OrangeShoppers Platforms as the “Services”.

When you use the Services, you access linked pages or blogs, features and content (including any information, text, graphics, photos, lists of items compiled by you, comments, reviews, links, or other materials uploaded, downloaded or appearing on, or linked to the Services) (collectively the “Content”).

Any personal data about our users (the “User” or “you”) provided to or gathered by the Services is controlled by HUMBLEBEE SOLUTIONS LTD (a company incorporated in Cyprus, with company HE 449911 and with a registered office at 3026, Limassol, Cyprus, Vasili Michailidi, 9) ("OrangeShoppers’", “we”, “our” or “us”). For the purposes of General Data Protection Regulation (the "GDPR"), OrangeShoppers acts as a “Controller” as defined under the GDPR (“Controller”).

1. What Does This Notice Cover?

This Notice covers OrangeShoppers’s treatment of personal data that OrangeShoppers gathers when you access the Services and/or access the Content. We explain what information we gather, why we gather it and the choices you have regarding your personal data.

2. What Information Does OrangeShoppers Collect, and How?

As customers, you do not have any legal obligation to provide any information to OrangeShoppers. However, we require certain information from you in order to operate properly, including completing a transaction on your behalf. Login credentials (email and username) enable us to personalize and improve our services. You hereby agree and acknowledge that any information you do provide to us is provided at your own free will, for the purposes mentioned in this Privacy Notice and that we may keep such information in a database(s) which will be registered and kept in accordance with applicable laws and regulations.

a) Information You Provide to Us

We receive and store any information you enter on the Services or provide to us in any other way. The types of information provided by you may include your full name, email address, username, password, home and billing address, shipping address, order details of transactions carried out on the Sites, and payment information (payment information is held by our payment processors rather than us).

b) Information Collected Automatically

i. We receive and store certain types of information whenever you interact with the Sites or use another feature of the Services. In other words, when you are using the Services we are aware of it and may gather, collect and record the information relating to such usage, either independently or through the help of third-party services as detailed below. OrangeShoppers automatically receives and records information on our server logs from your browser including your IP address, certain cookie information (please see our Cookie Policy for further information) unique identifiers (such as click IDs) and the page you requested.

ii. We automatically collect usage information, such as the numbers and frequency of visitors to the Services, similar to user music preference data or to TV ratings that indicate how many people watched a particular show. OrangeShoppers only uses this data in aggregate form, that is, as a statistical measure, and not in a manner that would identify you personally. This type of aggregate data enables us to figure out how often customers use parts of the Services or another feature of the Content so that we can make the Services appealing to as many customers as possible, and improve the Content.

iii. We also collect information about the devices you use to access our Services. This includes, for example, the type of computer or device you use, the hardware model, operating system and software.

c) E-mail Communications

We often receive a confirmation when you open an email from OrangeShoppers if your computer supports this type of program. OrangeShoppers uses this confirmation to help us decide how to make emails more interesting and helpful.

3. What About Cookies?

Technologies such as cookies, beacons, tags and scripts are used by OrangeShoppers and our partners, affiliates, analytics or service providers. These technologies are used in analyzing trends, administering the Sites, tracking users’ movements around the Sites and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.

Please see our Cookie Policy for information as to how we use cookies in relation to the Services.

4. Why Do We Collect Information?

We use the information we collect in order to:

Operate and improve the Services and to display Content

Allow you to take full advantage of the Services, including using “Wish Lists”

Allow you to order products on the Sites (where applicable)

Process or facilitate payments through third party payment processors (where applicable)

Recommend relevant products, and make it easier for you to track products you’re interested in

Offer you a personalised experience of the Services and on the OrangeShoppers Sites. This process constitutes profiling under the GDPR

Communicate with you about your orders and provide customer service, technical assistance and collect feedback

Communicate with you about products, sale reminders, services and promotional offers

Administer your account if you have one, and update our records

Enable third-party service providers and contractors to carry out technical, logistical or other functions on our behalf

Conduct research, troubleshoot problems, and detect and protect against error, abuse of the Services, fraud or other criminal activity

Control risk, comply with laws and regulations, and comply with other legal process and law enforcement requirements

Produce aggregated statistical reports (provided that the reports do not identify customers)

5. Where Will We Store Your Information?

To provide the Services, the information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed and used by staff operating outside the EEA who work for us or by one of our third-party service providers. Such staff may be engaged in, among other things, the fulfilment of your request, the processing of your payment details and the provision of support services. We will take all steps reasonably necessary to ensure that third parties to whom we transfer any data provide sufficient protection of that data.

6. Sharing Information With Third Parties

We share your information only as described in this Notice and require commercial entities with which we share your information to agree to keep it confidential.

OrangeShoppers Partners:

We work with a variety of partners (“OrangeShoppers Partners”) in order to offer you the widest possible choice of fashion items on the Sites. There are two ways to buy products through the Services:

Buying on a OrangeShoppers Partner website: Sometimes when you select a product, you will be taken directly to the OrangeShoppers Partner website and asked by the OrangeShoppers Partner to provide further personal details related to the transaction. The information you enter on the OrangeShoppers Partner website will be collected, stored, and processed in accordance with the privacy policy of the OrangeShoppers Partner.

Please note that: (i) you should carefully review the OrangeShoppers Partner privacy policy before completing any transaction involving a OrangeShoppers Partner; and (ii) the OrangeShoppers Partner is solely responsible for its use and sharing of your information.

Promotions: We may also share your data with OrangeShoppers Partners in connection with certain promotions and competitions. These will be subject to additional rules and conditions which will be made available to you at the time of entering any such competition or promotion. You should carefully review the rules and conditions relating to such competitions and promotions.

Aggregate Information: We may also share aggregate information with the OrangeShoppers Partners about how our customers, collectively, use the Content. We share this type of statistical data so that the OrangeShoppers Partners also understand how often people use the Content, so that they, too, may provide you with an optimal online experience. OrangeShoppers never discloses aggregate information to a OrangeShoppers Partner in a manner that would identify you personally, unless we need to in order to complete a transaction on your behalf.

b) Payment processors

For purchases made on the Sites via the Integrated Checkout, your payment information (e.g. credit or debit card details) will be processed by third-party payment process providers such as Klarna or Stripe.

Please note: (i) you should carefully review the third-party payment processor privacy policy before completing any transaction via the Integrated Checkout service; and (ii) the third-party payment processor is solely responsible for its use and sharing of your information.

c) Affiliate Networks

Lyst shares personal data with affiliate networks such as Rakuten (“Affiliate Network”) for the purpose of Lyst participating as a publisher in the Affiliate Network and entering into engagements with Partners. Where the Affiliate Network collects and uses personal data for its own permitted purposes, the Affiliate Network acts as a separate and independent Controller in relation to that personal data. The Affiliate Network will use the personal data in accordance with applicable data protection laws and regulations and will individually and separately fulfil all obligations that apply to it as a Controller.

d) Advertisers

Advertisers and advertising networks may use automated technologies such as cookies to collect information about your website activity on the Sites and other sites. This is used to target advertising to you online that may be of interest to you. For more information on cookies and how to reject targeted advertising or interest-based advertising cookies, please read our Cookie Policy.

e) Social media and other platform services

Information to/from third-party social media services:

We receive the usernames and passwords for your accounts and profiles on third-party sites with which the Sites interoperate. For example, by logging into the Sites via Facebook, you are giving us permission to obtain certain information from your Facebook account, such as your name and email address. This may give us automatic access to certain personal information retained by a social media site about you (e.g. content viewed by you, content liked by you and information about the advertisements you have been shown or may have clicked on). Please be aware that whenever you voluntarily post information to public areas on the Services or any other public forums, such information can be accessed by the public.

f) To comply with legal requests

We may provide your information to relevant third parties when we believe in good faith that it is necessary in order to (i) comply with the law, regulation or a legal request; (ii) enforce or apply our conditions of use in other agreements; or (iii) protect the rights, property, or safety of Lyst, our employees, our users, or others. This may include exchanging information with other companies and organizations for fraud protection and credit risk reduction.

j) Third parties where a corporate transaction is contemplated

In some cases, we may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that are transferred. In addition, in the event of a merger, acquisition, reorganization, asset sale, or in the unlikely event that OrangeShoppers goes out of business or enters bankruptcy, customer information may be one of the assets that are transferred to or acquired by a third party. If such transfers occur, the third-party transferee may continue to use your information as set out in this Notice.

k) Affiliates

We may share some or all of your information with any of our parent companies, subsidiaries, joint ventures, or other companies under common control with us.

7. How is Your Information Kept Secure?

We take care to maintain appropriate safeguards and security features to protect the integrity and privacy of the information you provide us with and to try to prevent unauthorised access to it. We encrypt your information to protect it from unauthorised use, and we use pseudonymisation, information access controls, and firewalls.

If you choose to create an account with OrangeShoppers (a “OrangeShoppers Account”), the information in your OrangeShoppers Account is protected by a password for your privacy and security. You need to ensure that there is no unauthorised access to your account and information by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your account. You are responsible for safeguarding the password that you use to access the Services and for any activities or actions under your password. OrangeShoppers encourages you to use “strong” passwords (passwords that use a combination of upper and lower case letters, numbers and symbols) with your account. OrangeShoppers cannot and will not be liable for any loss or damage arising from your failure to comply with the above requirements.

The transmission of information via the Internet is not completely secure and we cannot guarantee the security of your data transmitted to the Services. Unauthorised entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time. Any transmission of data is at your own risk.

8. What About Links To Third Party Websites?

The Services contain links to other sites such as OrangeShoppers Partners. OrangeShoppers is not responsible for the privacy policies and/or practices on other sites. When linking to another site you should read the privacy policy stated on that site. This Notice only governs information collected on the Services.

9. Data Retention

Subject to any legal obligations to keep your information longer, we store the data you provide to us for as long as is necessary to provide the Services to you (and if you have a OrangeShoppers Account, for as long as you have a OrangeShoppers Account), or until you ask us to delete it, whichever comes first.

After a request from a User to delete any data, a process will begin that permanently deletes the relevant data. Once begun, this process cannot be reversed and data will be permanently deleted. Any data which is not deleted shall be kept in an anonymized manner.

OrangeShoppers collects and retains usage data, other metadata and statistical information about the use of the Services in an aggregated and anonymised format.

10. What’s Our Legal Basis for Processing Your Information?

We process your information where we have a legal basis for doing so.

a) Necessary for our legitimate interest. Our legitimate interests include:

Improving the OrangeShoppers Sites and Services and offering you a personalised experience.

Ensuring that our marketing communications, advertising and recommendations are relevant to you.

Understanding customer usage of the Services.

Ensuring the Services are managed correctly.

b) Necessary for the performance of our contract with you.

For example, in order to register and manage your OrangeShoppers Account, we collect your email address, password and any other additional details you wish to add to your account.

c) Based on your consent.

For example, where you provide us with marketing consents in order to send you information about products that may be of interest to you. Your consent may be withdrawn at any time by contacting us.

d) Necessary to comply with relevant legal obligations.

For example, to make mandatory disclosures to law enforcement.

11. What rights do You have in relation to the information We hold about You?

You have certain rights in relation to the information that we hold about you, which are detailed below. Some of these rights only apply in certain circumstances.

a) Access

If you are based in the EU, you have a legal right under GDPR to request access to a copy of your personal data held by us. To do this, please contact us at [email protected]., use the subject line “DSAR” and include the details about what personal data you are looking for.

b) Deletion

To ask us to delete your OrangeShoppers Account, please following the instructions in the Account Settings section of your OrangeShoppers Account.

Please note that although your personal data may be removed from our databases, OrangeShoppers may retain the anonymous information contained in the data you provided, and such information will continue to be used by us for statistical purposes.

c) Correction

If you have a OrangeShoppers Account, you can update certain information in your ‘Account’ settings, such as your name, email address, username, and password. The information that you can update or amend may change as the Services change.

d) Marketing opt-out

When you register for a OrangeShoppers Account, you can give your consent to receive certain marketing emails or other communications from us. We will use your information such as your email address to occasionally provide you with information about products and services which may be of interest to you.

If you no longer wish to receive marketing messages from us, or if you want to change the type and frequency of these messages, you can change your preferences at any time in the Account Settings of your registered OrangeShoppers  Account, or by clicking on the unsubscribe button in our marketing emails.

Please also be advised that you may not be able to opt-out of receiving non-promotional, transactional messages, or information about your OrangeShoppers Account (e.g. service announcements or administrative messages).

12. Children

We do not knowingly market or sell products for purchase by children. The Services are not designed for use by children under 13 years old. Children under 13 are not allowed to register with OrangeShoppers or use the Services, or submit personal data through the Services. We do not knowingly collect personal data from anyone under the age of 13. If you have any reason to believe that anyone under the age of 13 has provided their personal data to us, please contact us as specified below, and we will work to delete that information from our databases.

13. Changes To This Notice

OrangeShoppers reserves the right to change this Notice from time to time. Use of information we collect now is subject to the Notice in effect at the time such information is used. If we make substantial changes in the way we use personal data, we will notify you by posting an announcement on the Services or sending you an email. Otherwise, all other changes to this Notice are effective as of the stated “Last Revised” date.

14. Questions Or Concerns

If you have any questions or concerns regarding privacy on our Services or the Content, please send us a detailed message to [email protected] . We will make every effort to resolve your concerns.

Last revised: 9 April 2024