LAST UPDATED: 24TH MAY 2018
We are the Farfetch UK Limited (“we”, “us”, “our”), and we are committed to protecting your privacy.
Farfetch UK Limited is the controller for the purposes of the General Data Protection Regulation (the “GDPR”) a company registered in England and Wales (Company No. 06400760), with its registered office located at The Bower, 4th Floor, 211 Old Street, London EC1V 9NR, United Kingdom.
2. THIRD PARTY WEBSITES
3. WHAT INFORMATION DO WE COLLECT, AND HOW?
When you interact with us, whether by using our Website or communicating with us, we may collect the following information about you:
• information you give us: you may give us information about yourself if you sign up for an account on our Website, place an order for products, complete any online forms (such as registration forms, competitions, and surveys), opt in to receive our newsletters and special offers, enter a competition or promotion, participate in social media functions with our Website, or correspond with us (by email, telephone, instant chat, social media or otherwise).
Depending on what you provide, this information can include your name, address or location, phone number and email address, date of birth, gender, purchase information, shopping preferences, images and financial information (including your credit or debit card details, although we do not hold them, our payment processors do).
If you register an account on the Website, then you may choose to give us your photograph and nickname. From your account, you can also invite your friends to shop at our Website (including by email, Facebook, or Twitter). Although we will let them know that we received their details from you, please ensure that you have the permission of your friends before sharing their contact details with us and only forward emails to people you know would be happy to receive them.
• information we receive from other accounts or sources: we can receive information about you from other sources, such as from your other accounts or other websites, including data brokers, our partner boutiques, social media providers like Facebook and Twitter, advertising networks and analytics partners, and payment and delivery service providers.
By logging in to our mobile applications via Facebook or Twitter, or linking your account on our Website to your Facebook or Twitter accounts, you are giving us permission to obtain certain information and content from these accounts. The specific types of information that we may obtain depends on your settings for that account or website, and will be subject to their privacy policies.
We supplement the data you provide to us with data from data append services such as public or social graph data in order to better serve you with content or promotions. We will append this data to our existing customer account information to better understand customers’ interests and to provide more relevant product recommendations and advertising, to increase our customer’s security when using our Website and to comply with our legal obligations, such as sanctions laws. This information may include household size, household income, or profession. This information can be associated with your personal information such as name, email, address, physical address or phone number.
You can see more details about the third parties we use in section 5.
• information our IT systems collect about you: each time you visit the Website, certain information will be created and automatically recorded by our IT systems. That information includes:
device information: the information provided by your device will differ depending on which type of device you are using (whether it’s a PC, Mac, iPhone, Android, or otherwise) and the settings on that device, but includes the type of device you have (such as an iPhone 6S or Samsung Galaxy S7), the device’s IP address, the browser you are using, your mobile network provider (for mobile devices), the pages you have visited, your time zone and country location, and crash or download error reports.
• information we collect in store: the Farfetch Group is always looking for new opportunities to improve your shopping experience and this extends to your experiences in-store. When you visit Browns East shop, you may have the opportunity to use pioneering technology to enhance your in-store experience. You may also give us information about yourself in-store if you make a purchase using a credit or debit card, complete a survey or questionnaire, enter a competition or promotion, provide us with feedback or otherwise interact or correspond with us in-store. Where you use a WiFi-enabled device in-store, certain information may be provided by your device, which will differ depending on your device and settings. The information that may be provided is the type of device you have, the device identifier/media access control (MAC) address, the proximity of the device from the access point, location of the device, and where relevant, when and for how long the device is connected to the Wi-Fi network. You can prevent information being provided by turning off the Wi-Fi feature on your device.
4. WHAT DO YOU USE MY INFORMATION FOR?
To provide you services and the Website, including to allow you to order and receive products using our Website, administer your account and to optimise your experience we need to use the information that we collect in a number of different ways.
We also use the information for marketing and advertising purposes. Where you have told us you would like to receive marketing communications or when you have made a purchase using our services, we and our partner boutiques will use your personal information (including your name, email address and address) to occasionally send you updates, news, and offers via email, post, or other forms of media. We may use your information (including supplemental information received from partners that we append to our existing customer information as described below), to tailor these messages to you. You may unsubscribe from email marketing communications by modifying your preferences in your account’s profile management section, or by following the opt out instructions in the promotional emails we send you.
We also carry out research, analysis, and surveys on your use of our Website, and views. We keep tracking of your spend on our Website to see if you can benefit from our exclusive loyalty programs as the VIP customer program and Access. Finally we use your information to confirm your identity and perform credit checks or anti-fraud checks, in order to ensure your, and our, financial security.
Please note that we do not sell your information without your consent (whether your name, address, emails address, financial information, or otherwise) to any third party.
Please scroll down to find out the detailed purposes for which we collect your information, what specific information is collected and the legal basis for which we purpose that data:
5. WHO DO YOU SHARE MY INFORMATION WITH?
To provide the Website and our services, we work with a number of carefully selected third parties. To do this, we may share your information with these third parties in the following limited circumstances:
• Our partner boutiques from whom you purchase products: We rely on carefully selected partners that supply the products that you see in our Website. Our partners are situated across the globe and you can see the full list here.
• Third party service providers for business purposes: to function properly, we rely on a number of carefully selected third parties to provide us with services and products. We permit these companies to use your personal information only to the extent necessary to provide us with their services and products. Below you can find the types of third parties we use:
• advertisers for marketing purposes: we can provide your information to our advertising and social media partners (including Facebook and Twitter, where you choose) where they require the data to select and serve relevant adverts about our products and services to you and others;
• third party service providers to enrich data: We may also enrich, match or combine information we hold about you with data from other sources, for instance by sharing some of your personal data with selected business partners. These partners are based in the United States. We do this to better understand your customer profile and interests so that we can deliver customised offers and other personalised services;
• third parties where we are considering a corporate transaction: the Farfetch Group is always looking for new opportunities and directions in which to grow. This means sometimes we may consider corporate transactions such as merger, acquisitions, reorganisations, asset sale, or similar. In these instances, we may transfer your information to enable the assessment and undertaking of that transaction. If we buy or sell any business or assets, your personal information may be one of the assets that are transferred;
• to comply with legal requests: on occasion we may be required to liaise with various regulators and law enforcement agencies in a number of different countries, whether as a result of law, a court order, or another legal process. Although we dispute requests wherever suitable, in some cases we may have to share your information with the regulators or law enforcement agencies. Where we consider it appropriate, and provided we are not prohibited from doing so by law or court order, we will attempt to notify you of these legal demands; and
• aggregated information with third parties: we may aggregate your information with the information of other customers, creating a dataset of information about the usage of our Website, purchase of products, and other general, grouped information about our customers on the basis of our legitimate interest to understand the usage of our service and demand for our product. Although this dataset is aggregated and anonymised, meaning it cannot identify you as an individual, it provides a valuable insight into the use of our Website and we may therefore share it with select third parties. These parties may include providers of plugins or similar technologies to help measure traffic, our partner boutiques and other providers to allow them to better stock products, and our investors. Please note that we do not share your information with any third party advertisers or networks for the provision of third party advertising on our Website.
6. TRANSFERS OF YOUR PERSONAL DATA
To provide our Website and our services, in accordance with the purposes set out above, we may transfer and store the personal information that we collect from you to a destination outside of the European Economic Area (“EEA”), mostly to the United States, either to one of our Group Companies, to one of our partner boutiques or to one of the third parties with which we work, as stated below:
• When transferring personal information to one of our Group Companies outside the EEA, which may be the USA, Brazil, Russia, Japan or China, we rely on the Commission’s model contracts for the transfer of personal data to third countries (i.e. the standard contractual clauses) pursuant to Decision 2010/87/EU; • We transfer the personal information to one of our partner boutiques outside the EEA, to the extent such transfer is needed to fulfil the contract between you and the boutique which you are ordering the products from. You can click here to see our partner boutiques and the respective countries. • When transferring personal information to one of our third party services’ providers set out above, we rely on different adequacy measures, as set out below:
We use technology such as "cookies" to collect information and store your online preferences. Cookies are small pieces of information sent by a web server to a web browser, which allows the server to uniquely identify the browser on each page.
We use the following categories of cookies on our Website:
CATEGORY 1: STRICTLY NECESSARY COOKIES These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for such as remembering your login details or shopping basket items cannot be provided.
CATEGORY 2: PERFORMANCE COOKIES These cookies collect anonymous information on how you use our Website. For example, we use Google Analytics cookies to help us understand how customers arrive at our site, browse or use our site and highlight areas where we can improve areas such as navigation, shopping experience and marketing campaigns. The data stored by these cookies does not show personal details from which your individual identity can be established. You may opt in to these cookies using your browser settings but it may affect the performance of our Website.
CATEGORY 3: FUNCTIONALITY COOKIES These cookies remember choices you make such as the country you visit our website from, language and search parameters such as size, colour or product line. These can then be used to provide you with an experience more appropriate to your selections and to make the visits more tailored and pleasant. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites. You may opt in to these cookies using your browser settings but it may affect the functionality of our Website.
CATEGORY 4: TARGETING COOKIES OR ADVERTISING COOKIES These cookies collect information about your browsing habits in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advert as well as help measure the effectiveness of an advertising campaign. The cookies are usually placed by third party advertising networks. They remember the websites you visit and that information is shared with other parties such as advertisers. For example, we use third party companies to provide you with more personalised adverts when visiting other websites. You may opt-in to these cookies using your browser settings.
CATEGORY 5: SOCIAL MEDIA COOKIES These cookies allow you to share what you’ve been doing on the website on social media such as Facebook and Twitter. Please refer to the respective privacy policies for how their cookies work.
If you want to delete any cookies that are already on your computer, please refer to the help and support area on your Internet browser for instructions on how to locate the file or directory that stores cookies. Information on deleting or controlling cookies is available at www.AboutCookies.org. Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our Website.
You can withdraw your consent to these cookies at any time through the following options:
• Google Analytics cookies across all websites, please visit Google Analytics Opt-out Browser Add-on; • other third party cookies relating to behavioural advertising, please go to www.aboutads.info. • any other type of cookies, you can clean the cookies through your browser settings.
Please note that refusing cookies does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver adverts tailored to your web preferences and usage patterns, so you may see a greater number of adverts that are irrelevant to you and your preferences.
Many web browsers support Do Not Track technology. While we strive to offer you choices when you use our website and services, we do not promise that we will be able to receive or honour web browser Do Not Track signals.
Keeping you and your personal information secure is very important to us. We take a number of reasonable steps to try to protect the personal information that you provide, including: • using a Secure Socket Layer (“SSL”) to encrypt the personal data that you send us during the order process (including any financial information such as credit or debit card details);
• requiring you to establish a password to access your account on our Website;
• not keeping details of your credit or debit card that would enable any third party to transact using that credit or debit card (such as your CCV number); and
• regularly monitoring our servers and IT systems for possible vulnerabilities and attacks. Unfortunately, despite this, the transmission of information via the Internet is not completely secure. We cannot guarantee the security of your personal data transmitted to or through our Website, and any such transmission is at your own risk. In particular, please keep in mind that if you voluntarily disclose personal information through other means of communication than the Website in a non-protected environment (such as through email, sms, online messages) then that information can be collected and used by others outside of our or your control.
9. HOW LONG WILL YOU USE MY INFORMATION FOR?
We retain the data you provide to us for as long as you have your account with us and thereafter for such period as you may have questions or a claim in relation to our services, notwithstanding any superior retention period that we may be obliged to observe in accordance with legal requirements applicable to us.
In some circumstances you can ask us to delete your data as set out below.
After you have terminated your use of our services, we may store your information in an aggregated and anonymised format.
10. WHAT ARE MY PRIVACY RIGHTS?
You have certain rights in relation to the personal data we hold about you, which we detail below. Some of these only apply in certain circumstances as set out in more detail below. We also set out how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights and that can include asking a set of security questions to ensure it is you. When you have appointed someone else to do the request on your behalf, that person and/or organization needs to show a valid power of attorney issued by you. We must respond to a request by you to exercise those rights without undue delay and at least within one month (although this may be extended by a further two months in certain circumstances). To exercise any of your rights, please contact us at firstname.lastname@example.org or by writing to Data Protection Officer, at The Bower, 4th Floor, 211 Old Street, London EC1V 9NR.
• Access. You have the right to know whether we process personal data about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with (including the categories of personal data we share with businesses for their direct marketing uses and the names and addresses of those businesses). Please note that in “My Account” dashboards, you can see information about you, namely your account details (such as name, email, phone number, date of birth), the addresses you use for billing and shipping, your order history and shopping preferences.
You can also request a copy of your information. If you require more than one copy of the data we hold about you, we may charge a reasonable administration fee.
We may not provide you with certain personal data if providing it would interfere with another’s rights (e.g. where providing the personal data we hold about you would reveal information about another person) or where another exemption applies.
• Portability. You have the right to receive a subset of the personal data we collect from you in a structured, commonly used and machine-readable format and a right to request that we transfer such personal data to another party. The relevant subset of personal data is data that you provide us with your consent or for the purposes of performing our contract with you.
If you wish for us to transfer the personal data to another party, please ensure you detail that party and note that we can only do so where it is technically feasible. We are not responsible for the security of the personal data or its processing once received by the third party. We also may not provide you with certain data if providing it would interfere with another’s rights (e.g. where providing the personal data we hold about you would reveal information about another person or our trade secrets or intellectual property).
• Correction. You have the right to correct any personal data held about you that is inaccurate. You can edit your personal information in “My Account” settings. You can also request the correction by emailing us. Please note that in some cases we can ask you to explain in detail why you believe the personal data we hold about you to be inaccurate or incomplete so that we can assess whether a correction is required. Please note that whilst we assess whether the personal data we hold about you is inaccurate or incomplete, you may exercise your right to restrict our processing of the applicable data as described below.
• Erasure. You may request that we erase the personal data we hold about you in the certain circumstances. Please scroll below to know what those are:
Also note that you may exercise your right to restrict our processing the data whilst we consider your request as described below.
Please provide as much detail as possible on your reasons for the request to assist us in determining whether you have a valid basis for erasure. Please note, however, that we may retain the personal data if there are valid grounds under law for us to do so (e.g., for the defence of legal claims or freedom of expression) but we will let you know if that is the case.
Where you have requested that we erase data that we have made public and there are grounds for erasure, we will use reasonable steps try to tell others that are displaying the data or providing links to the data to erase the data too.
• Restriction of Processing to Storage Only. You have a right to require us to stop processing the personal data we hold about you other than for storage purposes in certain circumstances. Please note, however, that if we stop processing the personal data, we may use it again if there are valid grounds under data protection law for us to do so (e.g. for the defence of legal claims or for another’s protection).
Please scroll below to know the cases where you may request we stop processing and just store the personal data we hold about you.
You also have the right to object to our processing of data about you and we will consider your request in other circumstances as detailed below:
• Withdrawal of Consent. You can withdraw your consent at any time by changing your marketing preferences in “My Account” or by unsubscribing at the bottom of each email received or by writing emailing us as set out below.
• by emailing us at email@example.com; or • by writing to the Data Protection Officer, at The Bower, 4th Floor, 211 Old Street, London EC1V 9NR.
This is without prejudice to your right to launch a claim with the Information Commissioner’s Office (www.ico.org.uk) or the data protection supervisory authority in the EU country in which you live or work where you think we have infringed data protection laws.”
12. UPDATES TO THIS POLICY