PRIVACY POLICY

 

YU SEI LTD (“YŪ SEI”, “we”, “us” or “our”) operates this website and online store. Our store is powered by Shopify.

This Privacy Policy explains how we collect, use, share and retain personal information when you visit our website, create or use a customer account, place an order, request a return or refund, contact us, subscribe to marketing or otherwise use our services.

For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and Data Protection Act 2018, YU SEI LTD is the data controller of the personal information covered by this policy, except where another organisation acts as an independent controller for its own processing.

We also comply with the Privacy and Electronic Communications Regulations 2003 (“PECR”) where they apply to cookies, similar technologies and electronic marketing.

INFORMATION WE COLLECT

Depending on how you interact with us, we may collect your name, email address, telephone number, billing and delivery addresses, customer-account information, order history, transaction and payment-related information, returns and refund information, correspondence with us, marketing preferences and information about how you use our website.

We do not ordinarily receive or store your complete payment-card number. Payments are processed through Shopify and/or the payment providers available through our checkout.

When you use our website, information such as your IP address, browser, device information, website activity and online identifiers may also be collected through Shopify, cookies and similar technologies.

DELIVERY, RETURNS AND CLAIM INFORMATION

When fulfilling an order or investigating a delivery, return, refund, damage or non-delivery claim, we may process information including tracking records, delivery scans, proof-of-delivery photographs, delivery timestamps, parcel information, proof of postage, photographs supplied by you and, where available, GPS or other location information associated with the delivery.

We use this information to fulfil orders, confirm delivery, process legitimate claims, investigate disputes and prevent fraudulent or false claims.

WHERE WE GET YOUR INFORMATION

Most personal information is provided directly by you when you use our website, create an account, place an order, request a return, subscribe to marketing or contact us.

We may also receive information from Shopify, payment providers, delivery providers, fraud-prevention or security providers and other service providers involved in operating our business.

HOW AND WHY WE USE YOUR INFORMATION

We process personal information only where we have a lawful basis under the UK GDPR.

We process information necessary to accept payment, fulfil orders, arrange delivery, manage customer accounts and administer returns or refunds because it is necessary to perform our contract with you.

We process information necessary for tax, accounting, regulatory and other legal requirements because it is necessary to comply with our legal obligations.

We may process order information, delivery evidence, photographs, tracking records, location information, correspondence and other relevant evidence where necessary for our legitimate interests in preventing fraud, protecting our business, investigating claims, resolving disputes, securing our services and establishing, exercising or defending legal rights.

We may process technical and website-usage information for the operation, security and improvement of our website on the basis of our legitimate interests, consent or an applicable legal exception, depending on the technology involved.

Where information is required to complete an order, failure to provide it may mean that we cannot process or deliver your order.

MARKETING EMAILS

We may send marketing emails about YŪ SEI where permitted by the UK GDPR and PECR.

Where required, we will obtain your consent. In circumstances where the PECR “soft opt-in” applies, we may send marketing about our own similar products or services provided the applicable requirements have been satisfied.

You can unsubscribe from marketing at any time using the unsubscribe facility contained in our marketing emails.

We may retain limited information showing that you have unsubscribed so that we can continue to respect your preference.

Service communications concerning an order, account, return or other transaction are not marketing communications and may still be sent when necessary.

COOKIES

Our website uses cookies and similar technologies.

Where consent is required under PECR, non-essential technologies will not be used until the necessary consent has been obtained.

Further information about the technologies we use and the choices available to you is provided in our Cookie Policy and cookie-preference controls.

WHO WE SHARE INFORMATION WITH

Where necessary, we may share personal information with Shopify; payment providers; delivery and fulfilment providers; website, hosting, IT and security providers; customer-service and email providers; analytics or advertising providers where applicable and lawfully enabled; professional advisers such as accountants, insurers and lawyers; and public authorities or law-enforcement bodies where disclosure is required or permitted by law.

We only disclose information where reasonably necessary for the purposes described in this policy or where otherwise permitted or required by law.

Shopify may also process certain personal information for purposes for which Shopify acts as an independent controller. Where it does so, Shopify's own privacy information applies.

INTERNATIONAL TRANSFERS

Shopify and some of our other service providers may process personal information outside the United Kingdom.

Where YŪ SEI is responsible for a restricted international transfer, we will use a transfer mechanism permitted by the UK GDPR, such as UK adequacy regulations or appropriate contractual safeguards.

HOW LONG WE KEEP INFORMATION

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, regulatory and dispute-resolution requirements.

Order, transaction and accounting records will generally be retained for up to six years where required for legal or accounting purposes.

Customer-account information may be retained while your account remains active, although transaction or legal records may need to be retained after an account is closed.

Information concerning returns, refunds, delivery disputes, damage or suspected fraud may be retained for as long as reasonably necessary to investigate the matter and protect or exercise legal rights.

Marketing information is retained while you remain subscribed, with limited suppression information retained where necessary after you unsubscribe.

PRODUCT SAFETY AND HEALTH INFORMATION

Because YŪ SEI sells a food product, you may occasionally provide information concerning an illness, allergic reaction, sensitivity or other health issue when making a product-safety complaint.

Health information is special category personal data under the UK GDPR.

We do not routinely request health information. Where you provide it and it is necessary for us to investigate a product-safety matter, we will process only the information reasonably required and only where both an appropriate UK GDPR lawful basis and an applicable Article 9 condition are available.

This may include processing necessary to establish, exercise or defend legal claims.

FRAUD PREVENTION

We may compare information supplied in connection with a delivery, return or refund claim against relevant delivery photographs, tracking records, location information, parcel information, transaction records and other available evidence.

Shopify, payment providers and security providers may also use automated fraud-prevention systems.

YŪ SEI does not currently make decisions based solely on automated processing which have legal or similarly significant effects on customers.

YOUR RIGHTS UNDER THE UK GDPR

Subject to the circumstances and applicable legal exceptions, you may have the right to access your personal information, correct inaccurate information, request erasure, restrict processing, receive certain information in a portable format and object to certain processing.

Where processing is based on consent, you may withdraw your consent at any time.

Where we process information on the basis of legitimate interests, you may have the right to object.

You have the right to object at any time to the use of your personal information for direct marketing.

These rights are not absolute, and in some circumstances we may lawfully retain or continue processing information despite a request.

To exercise your rights, contact hello@yusei.co.uk. We may need to verify your identity before responding.

COMPLAINTS

If you have concerns about how we use your personal information, please contact us first at hello@yusei.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data-protection regulator.

CHANGES TO THIS POLICY

We may update this Privacy Policy where our services, data-processing activities or legal obligations change.

The latest version will be published on our website with an updated revision date.

CONTACT

For privacy questions, complaints or requests to exercise your data-protection rights:

YU SEI LTD
45 Albemarle Street
Mayfair
London W1S 4JL
United Kingdom

Email: hello@yusei.co.uk