Jo Heath respects your privacy and ensures that the personal information you provide to us is treated confidentially and in accordance with applicable laws and regulations, including the General Data Protection Regulation. In this privacy statement we provide information about how we handle your personal data.
Which data and for which purpose
We only process your personal data for the purpose for which you provide it to us and we do not process more data than is necessary for this.
We use your data to process your orders as quickly and effectively as possible, but also to carry out sales analysis and personal marketing campaigns. If we want to use your data for another purpose, we will ask for your permission.
If you place an order with Jo Heath, we need your name, gender, e-mail address, billing address, delivery address and payment details to process your order and to keep you informed of the progress. In your Jo Heath account we store information such as your name and address, gender, e-mail address, telephone number, delivery and payment details, so that you do not have to re-enter them with every new order. When you place an order, or consult your Jo Heath account, your data is protected by Secure Socket Layer (SSL) technology. This makes the information unreadable for third parties. You can check this via the lock in your web browser and via the 's' after http in the web address.
Provision to third parties
We may provide the data that you provide to us to third parties (processors) if this is necessary for the implementation of the purposes described above.
We use a third party for:
- Fulfillment partner
- Logistics partners
- Marketing service provider
- IT service provider
- Development partner
- Hosting partner
We make the necessary agreements with these processors to guarantee the security of your personal data. Furthermore, we will not provide the information you provide to other parties, unless this is required by law. Outside of that, we will not share personal data with third parties without our explicit permission.
We do not provide personal data to parties located outside the EU.
We only process personal data of minors (persons under the age of 16) if written permission has been given by the parent, guardian or legal representative.
We do not store your personal data longer than necessary for the purpose for which it was provided or required by law.
Customers: 7 years after agreement termination
Suppliers: 7 years after agreement termination
Marketing: up to 14 months after contact moment
We take the protection of your data seriously and have taken appropriate technical and organizational measures to protect your personal data. Among other things through:
- Information Security Policy
- Access security
- Password Policy
- Protocol data leaks
- Anti virus
- Encryption using SSL certificate (HTTPS)
- Data minimization
Rights regarding your data
With regard to the personal data that we process about you, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure (forgetfulness)
- Right to restriction of processing
- Right to portability (data portability)
- Right to object
- Right to withdraw consent
- Right to lodge a complaint
If you want to inspect the personal data that Jo Heath has recorded about you or if you want to make use of one of the other rights mentioned above, you can contact our customer service by e-mail at firstname.lastname@example.org . Jo Heath will respond to your request within four weeks.
Links to other websites and social media
Our website contains a number of references to websites of other organizations. We have no control over these external websites and are not liable for the way in which these parties handle personal data.
Jo Heath may ask you if we can use your Instagram, Facebook or Pinterest photo for marketing purposes. We will contact you if you post a photo and mention Jo Heath in it, by tagging our account (@joheathbags) or using one of our hashtags. We will not use the photo without your permission. You can then find your photo on our website, on our Instagram account or in our social media advertisements on Facebook, Pinterest and Instagram.
Cookies and web statistics
If you have a complaint about the processing of your personal data, we ask you to contact us immediately. We will then try to work it out together with you. In addition, you always have the right to submit a complaint to the supervisory authority: Dutch Data Protection Authority.
If you have any questions after reading this privacy statement, you can contact us via the customer service email : email@example.com