LAST UPDATED: 13/3/2023
WHAT INFORMATION DO WE COLLECT ABOUT CUSTOMERS?
INFORMATION THAT YOU PROVIDE
At Baia + Bo, we take our customers' privacy seriously and strive to be transparent in our data collection practices. We collect information from you in several ways, including information you provide to us directly, and information we collect when you use our Services.
REGISTRATION AND PROFILE INFORMATION.
When you register for an account, or place an order, we will ask you for personal information such as your name, email address, phone number, payment information, billing and shipping address, demographic information, and any other information you choose to provide us with.
When you make a purchase, we will collect payment card information. Depending on your chosen payment option, we may use a third-party service provider to handle payments on our behalf, who will receive your payment card information.
If you contact us directly, we may receive additional information about you. This may include your name, email address, phone number, the contents of a message or attachments that you may send us, and any other information you choose to provide. For quality assurance and training purposes, we may also record your calls with our Customer Service team.
INFORMATION WE COLLECT WHEN YOU USE OUR SERVICE
Our Services receive your general location information when you use them, and this information includes your internet protocol ("IP") address that may indicate your more general geographic region.
When accessing our Services, we receive information about the device and software you use. This includes your IP address, web browser type, operating system version, phone carrier and manufacturer, application installations, device identifiers, mobile advertising identifiers, and push notification tokens.
To improve our Services and gain a better understanding of how you interact with them, we automatically receive information about your interactions with our Services. This includes the pages or other content you view, the searches you conduct, purchases you make, and the dates and times of your visits.
INFORMATION FROM COOKIES AND SIMILAR TECHNOLOGIES
We and our third-party partners collect information using cookies, pixel tags, or similar technologies. These technologies enable us to provide you with a more personalized experience when you use our Services. For instance, we may use pixel tags to recognize and alert you if you leave items in your shopping cart. Our third-party partners, such as analytics and advertising partners, may use these technologies to collect information about your online activities over time and across different services.
COOKIES AND SIMILAR TECHNOLOGIES
Cookies are small text files containing a string of alphanumeric characters that are stored on your device. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser, while a persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services.
When you use our Services, we collect information about ratings and reviews that you post.
INFORMATION INFERRED ABOUT YOU
Based on information we collect about you, we may infer information about your preferences. For example, we may infer your purchasing preferences based on your browsing or purchasing activities, and your approximate location based on your IP address.
INFORMATION FROM THIRD PARTIES
INFORMATION FROM THIRD PARTY SERVICES
If you link our Services to a third-party account, we may receive information about you, including your profile information and your use of the third-party account. If you wish to limit the information available to us, you should review the privacy settings of your third-party accounts.
OTHER THIRD PARTIES
We may receive additional information about you, such as demographic data, from third parties such as data or marketing partners and combine it with other information we have about you.
USE OF COLLECTED INFORMATION
We, as the data controller, utilize all the information collected from you, including your contact information, for the following purposes:
We use your email address and phone number to send you security alerts, shipping notifications, and other administrative messages. We also use this information to provide customer support and send you information about products, promotions, surveys, news, and events that we believe may interest you.
We use your email address to help you create, manage, and maintain an account on our Services.
We utilize all information we collect to tailor our Services and product offerings for you. This includes remembering your information so that you don't have to re-enter it during your visit or the next time you visit our website. Additionally, we use this information to provide customized advertisements, content, and information. We monitor and analyze the effectiveness of our Services and third-party marketing activities, track aggregate site usage metrics, and track your entries, submissions, and status in any promotions or other activities on our website.
ANALYSIS AND IMPROVEMENT
We monitor and analyze trends, usage and activities to improve our Services and product offerings. We also use this information to provide, maintain, and improve our products and Services, including customer service.
We record purchases that you make through our Services.
We allow you to post comments and communicate with us through our Services, including on our social media pages. Additionally, we facilitate the connection of third-party services or applications, such as social networks.
We facilitate transactions and payments.
We protect against fraud and unauthorized transactions, including by identifying potential unauthorized users and/or hackers.
We use collected information for compliance purposes, including enforcing our Terms Of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.
DISCLOSURE OF CUSTOMER INFORMATION
AFFILIATES AND SUBSIDIARIES
We may share your information with our affiliates and subsidiaries to provide you with seamless access to our Services and to improve our products and services.
VENDORS AND SERVICE PROVIDERS
We may share your information with vendors and service providers retained in connection with the provision of our Services, such as payment processors, shipping companies, and customer service providers.
THIRD PARTY APP INTEGRATIONS
If you connect a third-party application to our Services, we may share your information with that third party to enable integration of the application and to provide you with a better experience.
We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google's practices by going to https://www.google.com/policies/privacy/partners/ (opens in a new tab), and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout (opens in a new tab). We may also share this analytics data with our partners to improve our Services and better understand how our customers use our products and services.
We may also disclose your information in the following circumstances:
- As required by law, such as to comply with a subpoena, court order, or other legal process;
- To protect our rights and property, or the safety and security of our customers, employees, and the public;
- To investigate and prevent fraud, illegal activities, or misuse of our Services;
- In connection with a merger, acquisition, or sale of all or a portion of our assets, including during due diligence; and
- With your consent or at your direction.
ADVERTISING PARTNERS AND TARGETED ADVERTISING
We collaborate with third-party advertising partners to provide you with ads that we believe may be of interest to you. These advertising partners may use their own cookies, pixel tags, and similar technologies on our Services. They may also collect information about you, which they can collect over time and across different websites and online services. For more information about interest-based ads and to learn about options for opting out of having your web browsing information used for behavioural advertising purposes, please visit www.aboutads.info/choices (opens in a new tab). If you are in the EU, you can visit www.youronlinechoices.eu/ (opens in a new tab). You may also use the settings offered by your mobile operating system to limit ad tracking. To learn more about how you can opt-out of personalized ads in mobile apps, you can install the AppChoices mobile app. It is important to note that some of the activities described in this section may be considered "targeted advertising," "sharing," or "selling" under certain laws. For more information about the choices available to you with respect to these practices, please refer to the section titled "Opting out of Targeted Advertising, Sharing and Sales" below
AGGREGATED OR DE-IDENTIFIED INFORMATION
We may provide certain automatically-collected, aggregated, or otherwise de-identified information to third parties for a variety of purposes, including (i) fulfilling reporting obligations; (ii) for business or marketing reasons; or (iii) to help such parties understand the interests, habits, and usage patterns of our users for certain programs, content, services, advertisements, promotions, and/or functionality available through the Service. If we generate any de-identified data and intend to treat it as non-personal data under Jordanian privacy laws, we will maintain and use the information in de-identified form and will not try to re-identify the information, except as permitted by law.
DISCLOSURES AS REQUIRED BY LAW
We may access, maintain, and reveal your information if we believe it is necessary or appropriate to: (i) comply with law enforcement or legal process, such as a court order or subpoena, or other lawful requests by public authorities, including meeting national security or law enforcement requirements; (ii) respond to your requests; or (iii) safeguard your, our, or others' rights, property, or safety. For clarification, we may disclose your information if you post any objectionable content on or via the Services.
MERGERS, SALES, OR OTHER ASSET TRANSFERS
We may also disclose your information with your consent or at your request.
YOUR PRIVACY RIGHTS AND CHOICES
You may have the following rights with respect to the personal information we process about you, subject to certain limitations and depending on your jurisdiction:
- Request a copy of the personal information we hold about you, including as necessary to support your right of data portability.
- Request to know information about the categories of personal information we process about you.
- Request that we correct your data.
- Request that we delete your data.
- Withdraw consent for any processing where we have requested your consent.
To exercise any of these rights, you may submit your request via email. If we deny your request, you may appeal our decision by contacting us at firstname.lastname@example.org and putting “APPEAL” in your subject line.
Please note that some of these requests may impact our ability to provide you with certain services or features of our website, and we may not be able to fulfill your request if we are required to retain certain information by law or for legitimate business purposes.
OPT-OUT OF TARGETED ADVERTISING, SHARING, AND SALES
As described in the Advertising Partners section above, we may engage third parties to help serve you targeted advertisements on other properties. Under certain privacy laws, some of these activities may be considered “sales” or “sharing” of your personal information, or “targeted advertising.”
You have the right to opt-out of targeted advertising, sharing, and sales of your personal information by submitting your request via email with the subject line "Do Not Sell or Share My Personal Information." You may also visit our Services with a legally recognized opt-out preference signal enabled, such as the Global Privacy Control.
You may manage and update your information or close your account by emailing us at email@example.com.
If you wish to stop receiving marketing emails from one of our brands, simply click on the unsubscribe link at the bottom of any of those emails. If you opt-out of receiving marketing emails, you may still receive other types of messages, such as purchase receipts, shipment information, or emails about your account. For more information about managing text messages received from one of our brands, please review our Text Messaging Program Terms & Conditions.
We may transfer the information we collect about you to other countries, including the Hashemite Kingdom of Jordan, as permitted by applicable law. The data protection laws in these countries may not be the same as those in your home jurisdiction. However, we will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it. If you are located in the European Economic Area ("EEA"), Switzerland, or the United Kingdom (“UK”), please refer to the "Note to Individuals in the EEA, UK and Switzerland" section below.
SECURITY OF YOUR PERSONAL INFORMATION
NOTE TO CUSTOMERS IN THE MIDDLE EAST
We may collect several categories of personal information from you, including identifiers (such as name, contact information, and device identifiers), commercial information (such as purchased items), internet or network activity information (such as browsing behavior and usage data), approximate location data, inferences (such as purchasing preferences and approximate location), demographic data (such as gender), audio, electronic, visual or similar information (such as customer support call information), and other personal information (such as product feedback or payment method information). For more information about the personal information we collect, including the categories of sources, please refer to the "What Information Do We Collect About Customers" section above. We disclose this information for the business and commercial purposes outlined in the "How Do We Use the Information We Collect" section above. We disclose this information with the categories of recipients described in the "How Do We Disclose Information" section above.
Further details on our disclosures are provided below:
- Identifiers: This may include your name, contact information, and device identifiers.
- Commercial information: We may collect information related to items purchased, transactions, and purchase history.
- Internet or other network activity information: This may include browsing behavior, other usage data, and information related to your interactions with our Services.
- Approximate location data: We may collect information about your approximate location through various means, including IP address and GPS.
- Inferences: We may collect information about your purchasing preferences and approximate location, which may be inferred from other information we have collected.
- Demographic data: This may include information such as your gender.
- Audio, electronic, visual, or similar information: We may collect information related to customer support calls, including call recordings.
- Other personal information: This may include product feedback or payment method information.
For more information about the types of personal information we collect, please refer to the "What Information Do We Collect About Customers" section above.
We may share your personal information with the following categories of recipients:
- Affiliates and subsidiaries
- Analytics companies
- Cloud storage providers
- Communications providers
- Fraud prevention providers
- Fulfillment partners
- Marketing and advertising partners
- Payment processing companies
- Providers of third-party app integrations
- Webhosting providers
We disclose personal information for business and commercial purposes as described in the "How Do We Use the Information We Collect?" section above. We disclose personal information to the categories of recipients described in the "How Do We Disclose Information?" section above. We require these recipients to maintain the confidentiality of the personal information we provide to them and to not use the information for any purpose other than to provide services on our behalf.
Some countries provide their residents with certain rights related to their personal information. These rights may include the ability to request more information about the categories or specific pieces of personal information that we collect, use, disclose, share, or sell, the ability to request deletion of personal information, the ability to opt out of any sales or sharing that may be occurring, the ability to limit certain uses of sensitive personal information, and the right to not be discriminated against for exercising these rights, subject to certain limitations.
We use third-party cookies and related technologies to send targeted ads, which may be considered a "sale" under certain countries and jurisdictions. Based on this interpretation, we may have "sold" and "shared" the following categories of personal information to the following categories of third parties in the past, and we may continue to do so in the future:
Categories of Personal Information:
- Device identifiers, such as IP addresses and cookie IDs
- Internet or other network activity information, including browsing behavior, search history, and other usage data.
Categories of Third Parties:
- Marketing and advertising partners who help us deliver targeted advertising and measure the effectiveness of our marketing campaigns.
- Analytics partners who help us analyze and improve the performance of our website and services, and understand how users interact with our website and services.
NOTICE OF FINANCIAL INCENTIVES:
As part of our business practices, we offer various financial incentives to our customers from time to time. These may include discounts, coupons, or other benefits that are available to customers who sign up to receive our marketing emails or text messages. When you participate in a financial incentive, we will collect certain personal information from you, such as identifiers (such as your email address or phone number) and commercial information (such as your purchase preferences, interests, or purchase history).
To opt-in to a financial incentive, simply follow the sign-up or participation instructions provided. If you wish to opt-out of any ongoing benefits, you may do so at any time by following the unsubscribe instructions in our promotional emails and text messages or by contacting us directly at our email address. In some cases, additional terms and conditions may apply to a particular financial incentive, which will be provided to you when you sign up. We determine the value of your personal information by considering the value of the offer or discount presented to you.
You may choose to opt-out at any time, which can be done by following the unsubscribe instructions included in our promotional emails and text messages or by contacting us at firstname.lastname@example.org
We retain the personal information we collect about you for as long as necessary to fulfill the purposes for which it was collected. We may retain certain information for legitimate business purposes or as required by law. When deciding how long to retain your personal information, we consider factors such as the type of products or services requested by you, the nature and duration of our relationship with you, the impact on our services if we delete some of your information, any mandatory retention periods prescribed by law, and the statute of limitations.
NOTICE TO INDIVIDUALS IN THE EEA, UK AND SWITZERLAND
If you are located in the EEA, UK, or Switzerland, you have certain rights and protections regarding the processing of your personal data under the law. Please refer to the sections below for more information.
LEGAL BASIS FOR PROCESSING
We will only process your personal data in accordance with the following legal bases:
We will process your personal data as necessary to perform our contractual obligations to you, such as processing your orders and delivering the products you purchase.
We may process your personal data when we have a legitimate interest, such as communicating with you about changes to our services or legal documents, preventing fraud, and providing, protecting, and improving our products and services. We will only rely on our legitimate interests to process your personal data when they are not overridden by your rights and interests.
We may seek your consent for specific processing activities, such as sending marketing emails, and we will only process your personal data based on your consent if you provide it to us in the manner we indicate.
In certain circumstances, processing your personal data may be necessary for compliance with a legal obligation, such as responding to legal process requests.
DATA SUBJECT REQUESTS
Please refer to the "Your Privacy Rights and Choices" section above for information on your privacy rights and how to exercise them. Additionally, you have the right to object to certain processing or request that we restrict certain processing. To exercise any of these rights, please contact us via email at email@example.com.
REQUESTS FROM DATA SUBJECTS
If you are seeking to exercise your privacy rights, please refer to the "Your Privacy Rights and Choices" section above for further information. In addition, you have the right to object to certain processing or request we restrict certain processing. If you wish to exercise any of these rights, please contact us at firstname.lastname@example.org.
TRANSFER OF DATA
Whenever we transfer personal information outside of the European Economic Area, United Kingdom or Switzerland, we ensure compliance with applicable data protection laws. We may transfer your personal information to countries that offer an adequate level of protection under applicable data protection law or use contractual protections for the transfer of personal information. To obtain a copy of the safeguards we use to transfer personal information outside of the European Economic Area, United Kingdom or Switzerland, please contact us as specified in the "Contact Us" section.
RETENTION OF DATA
We store the information collected about you for as long as it is necessary for the purposes for which it was originally collected. We may retain certain information for legitimate business purposes or as required by law. When deciding on the retention period, we consider various criteria such as the type of products and services requested by or provided to you, the nature and duration of our relationship with you, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.
QUERIES OR COMPLAINTS
If you have any queries or complaints, please contact us at email@example.com. If you have a concern about our processing of personal data that we are unable to resolve, you have the right to file a complaint with the data privacy authority where you reside. Please refer to the links below for contact details of your local data protection authority.
- For individuals in the EEA: https://edpb.europa.eu/about-edpb/board/members_en (opens in a new tab)
- For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html (opens in a new tab)
- For individuals in the UK: https://ico.org.uk/global/contact-us/
Thank you for choosing Baia + Bo and trusting us with your information.