privacy notice

At Gina Tricot, we care about your privacy and are committed to protecting your personal data. This Privacy Notice explains how Gina Tricot AB ("Gina Tricot", "we", "us" or "our") collects, uses, stores and shares your personal data when you visit our website, shop with us, become a member, contact customer service or otherwise interact with us. 

This Privacy Notice applies to customers and website visitors located in the United Kingdom. 

Who is responsible for your personal data? 

Gina Tricot AB is the controller of your personal data. 

Gina Tricot AB 
Box 906 
S-501 10 Borås 
Sweden 
Email: dataprotection@ginatricot.com 

 

What personal data do we collect? 

Depending on how you interact with us, we may collect: 

Identity information 

  • First and last name  

  • Date of birth  

  • Customer/member ID  

Contact information 

  • Email address  

  • Telephone number  

  • Delivery and billing address  

Purchase information 

  • Products purchased  

  • Order history  

  • Payment information  

  • Returns and complaints  

Technical information 

  • IP address  

  • Device information  

  • Browser information  

  • Cookies and similar technologies  

Marketing and preference information 

  • Membership information  

  • Marketing preferences  

  • Product interests  

  • Website behaviour and interactions  

 

How do we use your personal data? 

We process your personal data for the following purposes: 

To fulfil your orders 

Including: 

  • Processing payments  

  • Delivering products  

  • Managing returns and refunds  

  • Communicating regarding your order  

Legal basis: Performance of a contract. 

 

To manage your membership 

Including: 

  • Creating and administering your membership account  

  • Providing member benefits  

  • Sending loyalty communications  

  • Offering birthday rewards where applicable  

Legal basis: Performance of a contract. 

 

To provide customer service 

Including: 

  • Responding to enquiries  

  • Managing complaints  

  • Verifying your identity where necessary  

Legal basis: Legitimate interests and legal obligations. 

 

To send marketing communications 

Including: 

  • Email marketing  

  • SMS marketing  

  • Personalised advertising  

Legal basis: Consent or legitimate interests, depending on applicable law. 

You may withdraw your consent at any time. 

 

To improve our products, services and website 

Including: 

  • Analytics  

  • Customer insights  

  • Service development  

  • Fraud prevention  

Legal basis: Legitimate interests. 

 

Automated decision-making and profiling 

We may analyse customer preferences, purchase history and website interactions to personalise marketing communications and product recommendations. 

No decisions producing legal or similarly significant effects are made solely through automated processing. 

 

Who do we share your personal data with? 

We may share your personal data with: 

Service providers 

Such as: 

  • Payment providers  

  • Delivery partners  

  • Marketing providers  

  • IT and cloud service providers  

  • Analytics providers  

Authorities 

Where required by law or regulatory obligations. 

Group companies 

Where necessary for administration, support and business operations. 

All recipients are required to protect your personal data appropriately. 

Advertising and marketing platforms 

Where you have provided your consent, we may share certain personal data (such as online identifiers, cookie identifiers, hashed contact details or information about your interactions with our website) with advertising and social media platforms, such as Google, Meta and other advertising partners. This enables us to measure the effectiveness of our advertising, create relevant audiences and provide personalised marketing. 

International transfers 

Some of our service providers may process personal data outside the United Kingdom and/or the European Economic Area (EEA). 

Where this occurs, we ensure appropriate safeguards are in place, including: 

  • UK adequacy regulations;  

  • the UK International Data Transfer Agreement (IDTA);  

  • the UK Addendum to the EU Standard Contractual Clauses; or  

  • other lawful transfer mechanisms.  

 

How long do we keep your data? 

We retain personal data only for as long as necessary for the purposes described in this Privacy Notice. 

Retention periods may vary depending on: 

  • Legal requirements  

  • Accounting obligations  

  • Tax obligations  

  • Customer relationships  

  • Legitimate business needs  

When personal data is no longer required, it is securely deleted or anonymised. 

 

Your rights 

Under UK data protection law, you have the right to: 

Access - Request a copy of your personal data. 

Rectification - Request correction of inaccurate information. 

Erasure - Request deletion of your personal data in certain circumstances. 

Restriction - Request restriction of processing in certain circumstances. 

Data portability - Receive personal data in a structured, commonly used format. 

Object - Object to processing based on legitimate interests. 

Withdraw consent- Withdraw consent at any time where processing relies on consent. 

 

Cookies 

We use cookies and similar technologies to: 

  • Operate our website  

  • Improve functionality  

  • Analyse website usage  

  • Personalise marketing  

 

Security 

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. 

 

Complaints 

If you have concerns about how we process your personal data, please contact us first. 

You also have the right to lodge a complaint with the UK supervisory authority: 

Information Commissioner's Office (ICO) www.ico.org.uk 

 

Changes to this Privacy Notice 

We may update this Privacy Notice from time to time. Any updates will be published on our website.