Privacy

This Privacy Policy sets out how we, Chilly’s Bottles Limited, collect, store and use personal data about you. This includes information collected online such as through our websites and social media and offline, for example, through our customer services or physical locations such as pop-up stores.

This Privacy Policy is effective from 21 May 2024.

1.        Personal Data We Collect About You

We may collect the following information about you:

  • Your name, age/date of birth and gender
  • Your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and email address
  • Your location and device information
  • Your shopping habits from purchases and orders made by you
  • Your online browsing activities on the Chilly’s website
  • Your payment card details when you make a purchase or place an order with us
  • Your communication and marketing preferences
  • Your interests, preferences, information about your lifestyle, feedback, competition and survey responses
  • Your correspondence and communications with us
  • Other publicly available personal data, including any you have shared via a public platform (such as social media)

This list is not exhaustive and, in specific instances, we may need to collect additional data. Some of the above personal data is collected directly, for example when you set up an online account on our websites or send an email to our customer services team. Other personal data is collected indirectly, for example, from your browsing or shopping activity. We may also collect personal data from third parties, including information from commercially available sources, such as public databases and data aggregators or social media. If you do not want us to receive your personal data from other sources, you will need to communicate your preferences directly with the relevant sources.

 

2.        How Do We Use Your Personal Data?

We use the information we collect about you for the purposes set out below:

·      Providing you with our products and services

·      For data analytics - we use information about you to help us improve our products and our users’ experience, including by monitoring aggregate metrics such as total number of visitors, traffic, and demographic patterns

·      To communicate with you about your purchases or our products and services

·      To market our products and offers to you via e-newsletter that you subscribe to or where you have opted in to receive news, offers from us

·      For marketing purposes where we suggest tailored products or services (including those of relevant third parties) that we think may be of interest to you based on your shopping history and behaviour, your preferences, and our market segmentation strategies. We may do this by sending you - via post, email, newsletter, SMS, push notifications or phone - details of products, services, special offers, promotions and other information

·      For research and surveys to improve our products and services

·      For advertising - we use information about you, including cookies information and other information we (and our third-party partners) collect from you automatically about your use of our services, to serve, personalise and measure the effectiveness of advertising. This includes showing you advertising we think you might find interesting as well as displaying advertising to potential new users that have similar interests

·      To carry out prize draws or competitions which you choose to participate in and to determine the winner or to provide the prize if you win

·      To provide you with customer services

·      To carry out administrative services, including processing payment instructions or orders, preventing or detecting fraud or other crimes and verifying your identity and credit/payment status

·      For matters that you have specifically consented to - Chilly’s may seek your consent to use your information for a particular purpose. Where you consent to our doing so, we will use it for that purpose. Where you no longer want us to use your information for that purpose you may withdraw your consent to this use

·      For matters that we are required to use your information by law

 

  1. Legal Bases for Processing

Generally, Chilly’s will rely on the following legal bases to collect and use your information:

Contractual necessity: We need it to provide our products and services to you and fulfil our obligations to you under our contract.

Legitimate interests: It is necessary for our legitimate interests for example, providing a useful and customised service, sending you relevant marketing messages, displaying advertising and tracking its effectiveness, using information we collect about you (like your spending, shopping habits) so that we can make more informed predictions, decisions and offers for our customers and enhancing our products and services via research and development.

Consent: You consent to us, and our third party partners, using your information in a certain way – for example, to hear about new features or offers. If you consent to our use of your information, you can withdraw that consent at any time.

Legal obligations: It is necessary for compliance with our legal obligations – for example, to disclose your information in response to law enforcement requests and to retain your information for our record keeping purposes.

 

  1. Cookies and Similar Technologies

We use cookies and similar technologies (“Cookies”) to improve our products and your experience on our websites by collecting information on how you use our websites. Some of the Cookies we use are required to enable core site functionality, for example to provide secure log-in or to remember how far you are through an order, but we also use Cookies that allow us to analyse site usage (so we can measure and improve performance), and advertisement Cookies which are used by advertising companies to serve ads that are relevant to your interests.

We may also tailor our websites and our products to your interests and needs, by collecting information about your device and linking this to your personal data so as to ensure that our websites present the best web experience for you.

You can view more information on the Cookies we use and adjust your preferences at our Cookies Policy. Please note, however, that without Cookies you may not be able to use all of the features of our websites or online services.

 

5.        Children

Our websites are not intended for children and we do not knowingly collect data relating to children.

 

  1. Disclosure of Your Information to Third Parties

 We do not sell your personal data. We do share it with others in these ways:

Our Service Providers:

We use a number of trusted third parties to provide us with services which are necessary to, or assist us, with running our business and who process your information on our behalf, for example:

  • If you order a product or service from us, our trusted third parties allow payment and delivery of the products and services you have ordered
  • To help us process and analyse your personal data for us, to support us when suggesting products and services which may interest you
  • Affiliates and individuals or entities we work with to promote our business
  • Professional advisors including consultants, public relations professionals, financial advisors, legal advisors, bankers, auditors and insurers

Other Recipients:

We share your personal data with the following third parties that process your personal data for their own purposes (i.e. these third parties are not processors on our behalf):

  • Interested third parties that will send you marketing, but only if you consented to receive such communications from them
  • Law enforcement or other agencies if we are required to do so by law or court order to disclose your personal data

 

  1. How Long We Retain Your Information

We will store your personal data only until the purposes for which we have collected or received your personal data are fulfilled and once our statutory obligations to preserve records have expired. 

 

  1. How We Secure Your Personal Data

We employ appropriate security measures to help protect your personal data and guard against access by unauthorised persons. Information storage is on secure computers in a locked and certified information centre and information is encrypted wherever possible. We undergo periodic reviews of our security policies and procedures to ensure that our systems are secure and protected. However, as the transmission of information via the internet is not completely secure we cannot guarantee the security of your information transmitted to our websites.

 

  1. International Data Transfers

The data we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) or the UK. It may also be processed by staff that operate outside the EEA or UK and work for us or our suppliers. These staff may be engaged in the fulfilment of your orders, the processing of your payment details, the maintenance of our services and the provision of support services. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

Where your personal data is transferred outside of the EEA or the UK to a territory not subject to an adequacy decision by the European Commission or the UK, we have agreements in place with the relevant parties which include standard data protection clauses adopted by the European Commission and/or the UK, to ensure that appropriate safeguards are used to protect your personal data. Alternatively, we may put in place other appropriate safeguards as necessary.

 

  1. What Are Your Legal Rights?

Under certain circumstances, you have the following rights under data protection law:

  • Right of access:  This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Right of rectification:  This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Right to erasure: This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it, where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. We may not always be able to comply with your request of erasure for legal reasons.
  • Right to object to processing of your personal data: You may object to the processing of your personal data if you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Right to restrict processing of your personal data: This enables you to ask us to suspend the processing of your personal data in certain circumstances.
  • Right to withdraw consent at any time: This will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you.
  • Right not to be subject to automated decision-making: Where the decision produces a legal effect or a similarly significant effect on you.
  • Right to request the transfer of your personal data to you or to a third party: This enables you to transfer your personal data in a structured, commonly used, machine-readable format to another controller.

If you wish to exercise any of the rights set out above, please contact us at the contact details in the Our Details section below.

 

11.  What If You Don’t Wish to Receive Marketing?

You can click on the ‘unsubscribe’ link in any marketing email you receive to unsubscribe. You can also contact our Customer Care team.  Once you do this, we will update our records to ensure that you don’t receive further marketing messages. 

If you tell us you don’t want to receive marketing messages it might take a few days for all our systems to be updated, so we would ask for your patience as you might get messages from us while we process your request. Please note that opting out of marketing messages will not stop service communications, such as order updates. 

 

  1. How to Make a Complaint

If you have any concerns or would like to make a complaint about our processing of your personal data, you may do so via the Information Commissioner’s Office directly on the details below however we would encourage you to contact us first as we aim to promptly and satisfactorily resolve any concerns or complaints you may have in relation to our processing of your personal data.

Information Commissioner’s Office - https://ico.org.uk/global/contact-us/

 

13.  Changes to Our Privacy Policy

We may update and make changes to our Privacy Policy from time to time. When we make these changes, we will publish the updated Privacy Policy on our websites. If we make any significant changes, we will take additional steps to inform you of these.

 

14.  Our Details

Data Controller: Chilly’s Bottles Limited

Company registration number: 07326177

ICO registration number:  ZB663703

Registered office address: Aston House, Cornwall Avenue, London, N3 1LF, United Kingdom

If you have any questions about this Privacy Policy or your personal data, please email us at privacy@chillysbottles.com.

 

  1.  Information for California Residents

Categories Collected

Below is a summary of the categories of personal data that we collect and share. Please note that this may refer to types of information that we collect and share about people other than yourself. In addition, if you would like more information concerning the categories of personal data (if any) we share with third parties or affiliates for their direct marketing purposes, please submit a written request to us using the information in the "Our Details" section below.

Category

Examples

Identifiers

Name, date of birth, postal address, unique personal identifier, login information, IP address, device identifier, email address, telephone number, account name, or other similar identifiers.

Commercial Information

Products and services that you showed an interest in or purchased at Chilly’s.

Internet or other similar network activity

 

Domain name, browser type and version, browsing history, search history, information about your visit (including products viewed, purchased or search for), details of any website which has referred you to our website, application, or advertisement. Location and time zone setting, browser plug-types and versions, operating system and platform, page responses times and errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouseovers) and methods used to browse away from the page.

 

Inferences drawn from other personal data.

 

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behaviour, attitudes, intelligence, abilities, and aptitudes.

Information ascertained about you from social media such as your profile picture, likes, location and friend list. Product preferences.

 

 

Subject to legal limitations, certain California residents may have the below rights.

Right to Know - You have the right to request information about the categories of personal data we have collected about you, the categories of sources from which we collected the personal data, the purposes for collecting the personal data, the categories of third parties to whom we have disclosed your personal data, and the purpose for which we disclosed your personal data. You may also request information about the specific pieces of personal data we have collected about you.

Right to Delete - You have the right to request that we delete personal data that we have collected from you.

Right to Correct - You have the right to request that we correct inaccurate personal data that we maintain about you.

Right to Opt Out of Sale or Sharing - We do not sell personal data to third parties in exchange for money. However, as we explain above, we share information with advertising partners and allow advertising partners to collect information from our website. This exchange may be considered a “sale” or “sharing” under California law, and you have the right to opt out of this “sale” or “sharing” of personal data.

California residents may request to exercise the Right to Know, the Right to Delete, and the Right to Correct by contacting us. We will not discriminate against you, in any manner prohibited by applicable law, for exercising these rights.