Privacy Notice
Last updated: 01/03/2024
This privacy notice governs how Plainandsimple (“Plainandsimple”, “we”, “our” or “us”) collects, uses, maintains and discloses information collected from users (each, a "User" or “you”) of the plainandsimple.com website (the “Site”) and customers in the retail stores we operate.
Who Is Responsible For The Processing Of Your Personal Data?
Plainandsimple is responsible for the processing of personal data obtained through the Site in accordance with the EU General Data Protection Regulation (GDPR) and other applicable laws and regulations, because we determine how and why your personal data is processed.
What Personal Data Do We Process, For What Purpose And On What Grounds?
Any information related to a person that can be used to identify them directly or indirectly is personal data.
Personal Data
Personal Information, which consists of: Contact information (first and last name; postal address; billing address; shipping address; email address and telephone number) and gender and language preference.
Purpose of processing: To create an account on our website; to fulfil your orders, process payments and manage returns and refunds; to inform you about your order and/or products that are back in stock; to complete a purchase in a retail store or online; to provide you with product repair services; to send you event notification e-mails and product review e-mails; to publish your product review; to send you our newsletters; to send you targeted e-mails based on your purchase history and your profile; to create and manage targeted advertising campaigns by using third party online advertising tools; to send you emails about products similar to those you purchased; to participate in a petition; to ask for User feedback; to make back-ups; to detect fraudulent activities on our website; and to respond to binding requests or orders from authorities and courts and comply with relevant legal and regulatory requirements.
Legal basis: Performance of our contract; explicit consent of the User; our legitimate interest to improve the quality of our products and services; or compliance with a legal obligation.
Survey Data
Survey Data, which consists of: Feedback in surveys; product reviews; customer service reviews; photos uploaded when providing product reviews; videos uploaded when providing product reviews.
Purpose of processing: To send you our newsletters and surveys and to respond to binding requests or orders from authorities and courts and comply with relevant legal and regulatory requirements.
Legal basis: Explicit consent of the User; or compliance with a legal obligation.
Details Of Purchases
Details of Purchases, which consists of: Details of purchases; details of returned goods; and correspondence exchanged between User and customer service team.
Purpose of processing: To fulfil your orders placed on our website; to process payments and refunds; to address customer service concerns; and to respond to binding requests or orders from authorities and courts and comply with relevant legal and regulatory requirements.
Legal basis: Performance of our contract; or compliance with a legal obligation.
Website Interaction Data
Website Interaction Data, which consists of: Universal Unique Identifier (UUID); and IP address.
Purpose of processing: To use cookies, JavaScript, HTML 5 and other digital technologies to improve site functionality by tracking usage; to measure the effectiveness of our ads and other communications on social media platforms; to provide social media functionality; and to respond to binding requests or orders from authorities and courts and comply with relevant legal and regulatory requirements.
Legal basis: Explicit consent of the User; or compliance with a legal obligation.
Profiling Data
Profiling Data, which consists of: Details of purchases and returns over the last 12 months.
Purpose of processing: To build a profile based on the purchases and returns of the User and to respond to binding requests or orders from authorities and courts and comply with relevant legal and regulatory requirements.
Legal basis: Performance of our contract; or compliance with a legal obligation.
Social Media
We have implemented one or more social media pixels or other Java script enabled trackers on the Site (“social media pixel”). Social media pixels are made available to us by the relevant social media platform. They enable us to identify you if you landed on the Site by clicking on an ad or a link that we published on the social media platform and identify to us which products you subsequently acquired from us. The tracker drops a cookie on your computer or mobile phone when it is first loaded by your browser or app. By means of the tracker, the social media platform and Plainandsimple collect your IP address (including associated location information), your user agent or browser string and specific information on how you interact with the Site. The user agent or browser string provides the basics as to which operating system your computer or mobile phone is running, basic security information, screen resolution and the Internet browser that you are using. The social media platform processes all personal data it obtains by means of the social media pixel in accordance with its privacy statement. For the social media pixels and the associated privacy statements of the social media platforms please check our Cookie Notice.
Storage of Personal Data
We will retain your personal data for as long as you maintain an account or as otherwise necessary to fulfil our contractual relationship with you. Your purchase history over a period of 12 months will be retained to enable us to build a profile that is based on what products you buy from us and how you buy them.
We will also retain your personal data as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. Where we no longer need to process your personal data for the purposes set out in this notice, we will delete your personal data from our systems. Where permissible, we will also delete your personal data upon your request; information on how to make a deletion request can be found in the section “Your rights and withdrawal of permission” below.
The storage period of personal data processed using social media pixels is determined by the relevant social media platforms. The storage period of personal data processed using cookies is determined by your engagement with our website. If you have not visited our website for at least 2 years we will remove the historic record of your interaction data. The storage period of personal data processed by our service providers and other third parties (see below) who are independent controllers is determined by their respective privacy notices.
Your Rights And Withdrawal Of Permission
You have the right to opt-out of the use of your personal data by Plainandsimple for our mailing list or other direct marketing purposes at any time. You may do so by either clicking the unsubscribe option at the bottom of each email or by making a request to us by emailing or customer service team at info@plainandsimple.com.
You can opt-out of the processing of your personal data for the purpose of building a profile as described above by making a request to us through our customer service team at info@plainandsimple.com.
You also have the right to request an overview of your personal data processed by Plainandsimple, object to or restrict its processing, and request removal or correction if your data appears incorrect or irrelevant, by making a request to us through our customer service team at info@plainandsimple.com. Please note that if you request the removal of or restrict the processing of some or all of your personal data, we may not be in able to meet our contractual obligations with you or respond adequately to your customer service queries.
If you wish to opt-out from the social media pixel please change your cookie preferences on our Site and withhold your consent for advertising cookies. When you do so, the social media platform will no longer receive your personal data through our Site. The social media platform will however retain historic data related to your cookie id. Any request related to such historic data will need to be directed to the relevant social media platform. For the social media pixels and the associated privacy statements and contact information please check our Cookie Notice.
In addition, you have the statutory right to complain to a competent data protection authority.
Providing And Sharing Your Personal Data
Plainandsimple employees, may have access to your personal data. Access rights of our employees are limited and granted only on a need to know basis, determined based on their job functions and roles.
Services providers and other third parties of Plainandsimple may also share your personal data with third parties including logistics providers, product repair centres, order status communication providers, workflow software suppliers, email service providers, e-mail form (pop-up) providers, CRM providers, address verification service providers, online User review service providers, e-commerce platform providers, fraud engine providers, payment service providers, order management system providers, petition organisers, online advertising platforms, including, but not limited to, Google Ads, event management platforms and social media platforms. We use the services of these third parties to process your purchases, payments, returns, repairs and complaints, to send you marketing and promotional email communications, to inform you by email about the status of your order, to send you e-mail invitations to participate in Plainandsimple surveys or reviews, or email with information about a petition or Plainandsimple event that you signed up for, and to create and manage targeted advertising campaigns. To the extent that such third parties are data processors, they are contractually bound by Plainandsimple to only process data in accordance with Plainandsimple’s instructions and applicable legal requirements. Some of these third parties, for example logistics providers, petition organisers and event management platforms, are independent controllers, meaning that they determine the purposes for which and the manner in which your personal data is processed. For transfers of data to third parties outside the EEA, please see below.
All transfers of personal data to either Plainandsimple employees, our affiliated group companies or to third parties who are located outside the European Economic Area (comprising all the EU countries plus Iceland, Liechtenstein and Norway) are subject to the EU Standard Contractual Clauses.
Links With Third Party Websites And Social Media
Users may find advertising or other content on the Site that link to the sites and services of Plainandsimple’s partners, suppliers, advertisers, sponsors, licensors, social media and other third parties. Plainandsimple does not control the content or links that appear on these sites/social media outlets and is not responsible for the practices employed by websites/social media outlets linked to or from the Site, except for official Plainandsimple campaigns or official Plainandsimple social media posts. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interacting on websites and social media outlets which have a link to the Site is subject to that website's or social media outlet’s own terms and policies.
Changes To This Privacy Policy
Plainandsimple has the discretion to update this privacy notice at any time. When Plainandsimple does, Plainandsimple will revise the updated date at the bottom of this page. Plainandsimple encourages the Users to frequently check this page for any changes to stay informed about how Plainandsimple is helping to protect the personal information Plainandsimple collects.
Questions & Contact Information
For any questions or queries please don't hesitate to contact us using our contact form, by email at info@plainandsimple.com or by post at 16 Great Queen Street, Covent Garden, London, WC2B 5AH.