Who We Are
Ecotrade Europe Ltd (‘our’ ‘we’ or ‘us’) gather and process your personal information in accordance with this privacy notice and in compliance with the GDPR and DPA (18). This notice provides you with the relevant information regarding your rights and explains how we manage your data.
Ecotrade Europe Ltd registered office is at Unit D3 Stanley Green Business Park Commercial Avenue Handforth, SK8 6QH and we are a company registered in England and Wales under company number 07094768.
We are registered on the Information Commissioner's Office Register of Data Controllers under registration number Z345927X, and act as the data controller.
Our designated Data Protection Officer/Appointed Person for the organisation is our Compliance Officer, and we can be contacted at [email protected]
Information That We Collect
Ecotrade Europe Ltd are the controller of your personal data and we process your personal information in line with our legal obligations and to provide you with the services associated with our products. We are committed to and have processes in place to avoid ever collecting any unnecessary personal data from you and do not process your information in a way that differs from the purposes specified in this document.
The personal data that we collect from is: -
- Date of Birth
- Email address
- Telephone/mobile number
- Call Recordings of calls made to our customer services team
- When you registered online at our website
- When taking notes during job interviews
- Requesting information to check a successful applicant’s eligibility to work in the UK
- Your employment history (CV)
- IP Address (via analytics)
- Data on how you use our website (via analytics)
- Your approximate location data based on your IP address (via analytics)
- When processing telephone orders we take your card details – we do not store this information and have strict policies and training to ensure your card details are not stored. We abide by PCI-DSS security standards for transmission of payments.
NB – All online financial transactions are completed outside of our systems and we have no access to your financial data.
We collect information in the below ways: -
- When you register online
- In dealing with enquiries either by phone, email or face to face
- When you use our support services
- When you provide services to us (Contractors)
- When you apply for a position with our organisation
NB. We never collect data from public sources
How We Use Your Personal Data
Your privacy is taken very seriously by Ecotrade Europe Ltd and we commit to never disclose, share or sell your data without your consent, unless required to do so by law and the methods detailed below (see Sharing and Disclosing Your Personal Information). Retention of your data is only for as long as is necessary and for the purposes specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw consent at any time. The purposes and reasons for processing your personal data are detailed below: -
- We collect your identity data to provide you with the products that you have ordered
- We collect the data about how you use our website to enable us improve your browsing experience and maintain and improve the security of our website. This is based on our legitimate interests to maintain security and make our site easy to use.
- We also process your data based to comply with UK tax law
- For our newsletter and promotional marketing emails. Each email we send you will include the facility to unsubscribe from the service. Alternatively you can contact us at [email protected] to request not to be sent marketing emails. At this point we will delete all your personal data from our marketing database, and if we do not have any legal basis any other information held about you (If you have ordered from us previously we have to keep some personal data). When we delete your information we maintain some anonymised information to comply with the law so that we have a record of your request.
- We collect your data when you promote or sell your services and products to us.
- Via cookies to assess and improve our security and improve user experience
- Via Social Media, when you contact us to answer your questions
- When you apply for a job with us, to assess your suitability for the role
- When you provide identity data having been offered a position with us
The legal basis on which we process your data
We process data based on the following legal basis:
- When you buy something from us or make enquiries regarding our products – Performance of a Contract
- Where you provide services to us (Contractors) - Performance of a Contract
- Where we keep records of sales – Legal Obligation
- Where you request promotional emails and newsletters – Consent
- Where, as clients we send you promotional emails and newsletters – Legitimate Interests to promote our business.
- Where we use information from your usage of the site (via cookies) – Legitimate Interests
- Where you engage with us via Social Media – Legitimate Interests / Negotiating a Contract
- When we process your data as part of our recruitment process, we do so on the basis that we have a legitimate interest in doing so to ensure an effective recruitment process.
- When processing data related to your eligibility to work in the UK we do this on the basis of our legal obligation
- When we process special category data as part of our recruitment process this is to carry out our obligations and exercise specific rights in relation to employment. All special category data is subject to additional security measures.
Whenever we use legitimate interests as our legal basis for processing, we always undertake a testing process to ensure that our legitimate interests do not outweigh your rights and freedoms.
You have the right of access to any personal information that Ecotrade Europe Ltd processes about you and to request what information we hold
If you believe that the data we hold is incomplete or inaccurate, you have the right to ask us to correct that information. We will provide corrections in as shorter period of time as is reasonable.
You have the right to withdraw consent for our newsletter, by emailing [email protected] or by clicking on the unsubscribe option in all newsletters and marketing material we send.
Under certain circumstances (depending on the legal basis we are using to process your data) you also have the right to restrict processing or request erasure of your personal data in accordance with data protection laws, as well as to object to any direct marketing from us. We do not undertake any automated decision making that would implicate any risk to your rights and freedoms.
You have the right to object to us undertaking profiling of your data (which we do to make advertising more relevant to you). Please email [email protected]
You have the right to port your data to another service – we will undertake this in a safe and secure manner
If you would like to us to undertake any actions based on your rights, we may ask you to confirm your identity.
Sharing and Disclosing Your Personal Information
We do not share or disclosure any of your personal information, other than for the purposes specified in this notice or where there is a legal requirement. Ecotrade Europe Ltd uses the companies we partner with to provide the below services and business functions, however all these companies (processors) are acting in accordance with our instructions and in line with the details described in this privacy notice, each processor has provided us with assurances with regard to the security of your data.
- Nimbus Hosting – they supply and manage our physical webservers – privacy notice
- Dotdigital – they provide email services for our newsletter - privacy notice
- Google – (Joint. Controller) they provide analytic services (via cookies) – privacy notice
- How Google uses your data – Google Information
- Facebook (Joint. Controller) – privacy notice
- Magento – they provide software for our website – privacy notice
In addition, we also share your data for these services:
- For the purposes of IT Support and Security
- For order processing
- For accounting purposes
- For Communication purposes
- For the purposes of customer support
We may share your data with a 3rd party as part of the due diligence afforded to any company wishing to invest in or buy our company.
While all the servers used in providing you this mobile application are UK based some of our partners are based and use services hosted in the US. All our US based partners are Privacy Shield certificated, and as such provide you and us with the assurances associated with that certification
Ecotrade Europe Ltd employs several layers of security measures, including: -
- SSL encryption - SHA-256 with RSA Encryption
- Enterprise level Web Application Firewall
Third-Party Payment Processor
Beauty Works do not store credit / debit card details or your financial information
Beauty Works use third party payment processors Sage Pay, PayPal, Payl8r and Klarna, for all payment processing. Beauty Works does not store credit card details and instead relies on the third-party payment processor in the previous list of companies for this service.
- Sage Pay - www.sagepay.co.uk/policies/privacy-policy
- PayPal - www.paypal.com/en/webapps/mpp/ua/privacy-full
- Payl8r - payl8r.com/privacy-policy
- Klarna - klarna.com/1.0/shared/content/legal/terms/Klarna/en_gb/privacy
Klarna payments and your personal information.
In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you.
Consequences of Not Providing Your Data
You are not obligated to provide your personal information to Ecotrade Europe Ltd, however, as some of this information is required as part of our registration and ordering process, you will not be able to order products without providing this.
How Long We Keep Your Data
Ecotrade Europe Ltd have strict review and retention policies in place to meet our obligations and we only retain personal data for as long as is for the purposes we have specified. UK tax law requires us to keep your personal data for a 6-year period (plus current year) after which time it will be destroyed.
Where we have your consent for direct marketing, we will keep such data until you notify us to withdraw your consent.
Where you have applied for a position within the organisation, we destroy all CV’s and associated communication 6 months after the position has been filled. In some circumstances we may want to keep your details for a longer period, at which point we will write and ask
Special Categories Data
Ecotrade Europe Ltd never knowingly processes your special category (or sensitive) personal data (see exception below). In the unlikely circumstance that you do, we employ additional security measures to ensure the security of that data.
Where you provide us with information relating to health, religion or trade union membership (or any other data which constitutes special category data) during the recruitment process, we ensure additional security measures are employed by way of both process and technical means to maximise protection from unauthorised access or loss.
Ecotrade Europe Ltd never knowingly processes children’s data.
Lodging A Complaint
Please tell us if you're not happy with how we've handled your personal information. You are also entitled to make a complaint to the Information Commissioner's Office.
Ecotrade Europe Ltd
Information Commissioner’s Office
Helpline number: 0303 123 1113https://ico.org.uk/concerns/
Privacy notice review
We regularly review this Privacy Notice. If we make changes they'll be updated here, and we will place a prominent notice on our website.
This privacy notice was updated on 16th December 2019
Well done for getting to the bottom of this policy. We have designed it to be as transparent, useful and engaging as possible and we would love to hear your feedback on how we can make it even better - please contact us at [email protected]
Please don’t make this the last time you read it as we will post any changes on this page - significant changes will of course be notified to you by email.