WHO ‘WE’ ARE
Ciays is a global company supplying goods to the US, UK, Canada, Europe, and Japan. Ciays is responsible for the personal data that you share with us. When we say 'us,' 'our,' or 'we,' we are referring to the company, Ciays. In accordance with regulations applicable to the processing of personal data, Ciays is the 'data controller.'
WHAT ‘PERSONAL DATA’ IS
Personal data is any data that could directly or indirectly identify you. This includes information like your name, address, telephone number, and email address. In some cases, it may include less obvious identifying information, like your IP Address (see below).
THE DATA WE COLLECT
When you visit ciays.com or shop with us online, we collect information about you and your use of our website. We treat this information as falling into three categories: Customer Information, Usage Data, and your IP Address.
Customer Information is the information you explicitly provide to us when you make an online purchase or sign up to receive our newsletters. This includes:
- Shipping and/or billing address
Usage Data is general information about how you interact with our website. This includes:
- How you came to the website (for example, by clicking on a link)
- The buttons or links you select
- Whether you have visited the website before
When you visit a website, the web server needs to know your computer’s public network address so it can send the requested pages to your browser. The public network address associated with your computer is called its 'public IP address' and is sent automatically each time you access a website.
It is usually possible to determine the general geographic location of a computer with its IP Address. Often, it is not possible to determine the specific computer and/or the specific user. If your IP Address is unique to you and is published somewhere, or if you later identify yourself while using the same IP Address, it is possible that the IP Address could identify you.
HOW WE COLLECT DATA
We may also ask you to provide personal data when you sign up for a newsletter, respond to a job application or an offer, follow us on social media, take part in surveys, or contact us for help. If you do not want to provide personal data, you do not have to. However, it might limit your ability to do certain things on the website.
In the US, your IP Address is considered to be personal data, and we treat it accordingly.
HOW WE USE DATA
We only use your personal data in the following ways:
• To fulfill orders placed by you
• In accordance with legal obligations
• When we have your explicit consent
• Where we have legitimate interests to process the data and our interests are not overridden by your rights
The main reason we use your personal data is to fulfill orders and to manage our relationship with you. For example, when dealing with questions about products, returns, and warranty claims.
Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email. You have the right to withdraw consent for marketing at any time by contacting us using the details set out in our 'Contact Us' section below.
In addition, if you would like further information about the specific lawful basis we rely on when using your personal data, please contact us using the details set out in the 'Contact Us' section below.
We aim to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. As part of our ongoing marketing activity, we may use your personal data in the following ways:
- Promotions: We may use your Identity, Contact Details, Usage, and Profile Data to form a view on what we think you may want, need, or may be of interest to you. We do this in order to provide you with the most relevant products and services. You will receive marketing communications from us if you have requested information from us, purchased products from us, or if you have provided us with your details in order to receive marketing promotions, and in each case you have not opted out of receiving marketing communications from us.
- Third-Party Marketing: We will get your express opt-in consent before we share your personal data with any company outside of Ciays for marketing purposes.
Opting Out: You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing messages sent to you. In addition, you can contact us at any time using the details provided in the 'Contact Us' section. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, experience, or any other transactions.
WHO MAY ACCESS YOUR PERSONAL DATA
The persons having access to your personal data are authorized employees within the competent departments of Ciays and its affiliates.
Your personal data may also be processed on our behalf by our trusted third-party providers.
We rely on trusted third parties to perform a range of business operations on our behalf. We only provide them with the information they need to perform the service, and we require that they do not use your personal data for any other purpose. We always do our best to ensure that all third parties we work with keep your personal data secure. For instance, we may entrust services that require the processing of your personal data to:
Third parties that provide IT services for us.
- Third parties that conduct satisfaction surveys on our behalf and the statistical analyses associated with the use of the website.
We may also disclose your personal data to third parties:
- If we have your consent to do so.
- If we are permitted to do so by law.
We do not offer or sell your personal data.
WHERE WE STORE YOUR PERSONAL DATA
The data we collect from you is stored in the US by Ciays or its trusted service providers. However, this data may at any moment be transferred to, accessed from, or stored at a destination outside the US. It may also be processed by staff members operating outside the US who work for us, or for one of our service providers.
For further information, please contact us using the details set out in our 'Contact Us' section below.
HOW LONG WE KEEP YOUR PERSONAL DATA
We only keep your personal data for as long as we need it for the purpose for which we hold your personal data, to meet your needs, or to comply with our legal obligations. To determine the data retention period of your data, we use the following criteria:
- Where cookies are placed on your computer, we keep them for as long as necessary to achieve their purposes (e.g. for the duration of a session for session ID cookies) and for a period defined in accordance with local regulations and guidance.
If you contact us as part of an inquiry, we keep your personal data for as long as necessary to process your inquiry. We may retain some personal data to comply with our legal or regulatory obligations, as well as to allow us to manage our rights (for example, to assert our claims in law courts) or for statistical or historical purposes.
When we no longer need to use your personal data, it is removed from our systems and records or anonymized so that you can no longer be identified from it.
THE SECURITY OF YOUR PERSONAL DATA
We are committed to keeping your personal data secure, and taking all reasonable precautions to do so. We contractually require that trusted third parties who handle your personal data for us do the same.
We always do our best to protect your personal data, and once we have received your personal data, we use strict procedures and security features to try to prevent unauthorized access. As the transmission of information via the internet is not completely secure, we cannot guarantee the security of your data transmitted to our site. As such, any transmission is at your own risk.
Your personal data belongs to you. You have the right to:
Know what personal data we hold about you.
Make sure that all personal data is correct and up to date.
Ask us to correct any mistakes in personal data.
Object to our continued processing of your personal data.
If you no longer wish to receive any online communications, let us know by clicking the 'unsubscribe' link at the bottom of the newsletter or other communication.
You can notify us if you no longer want us to process your personal data. Please understand that if you do so, it may mean that we can no longer provide our services to you.
. We will generally respond to your request within 24 hours.