Privacy and Cookie Policy
We respect your concerns about privacy and value the relationship we have with you. This Privacy Policy describes the types of personal data we collect about our customers, how we use this information, with whom we share it, and the rights of our customers regarding our use of this information. We also describe the measures we take to protect the security of the information, how long we retain it and how our customers can contact us about our privacy practices and how to exercise their rights. This site is not intended for children and we do not knowingly collect data relating to children.
For the purposes of applicable data protection laws, the data controller is Mountain Valley Springs UK Private Limited, a company registered in England and Wales with company number 12526851 and having its registered office at Fifth Floor, One New Change, London EC4M9AF. Click on one of the links below to jump to the listed section:
Information We Collect and How We Collect It
Legal Basis for Our Use of the Information
Information We Collect by Automated Means
Internal Cookies Essential for the Site to Work
Third Party Web Analytics Cookies
Third Party Targeted Advertising Cookies
Third Party Cookies Intended to Improve the Interactivity of the Site
Information We Collect and How We Collect It
We may obtain personal data about you from various sources. We collect this information when you provide it at one of our stores, on our website, via our social media pages, when you download one of our mobile applications (either via Apple iOS or Android) onto your mobile device or at one of our events. Our products are available for sale at certain third party retailers. Unless otherwise indicated at the time that you provide your personal data, any personal data collected by these retailers is not provided to us. This Privacy Policy does not address any data collection by our retail partners. When you visit this site, our social media pages or use services or features of one of our mobile applications, we also collect certain information about your device or usage by automated means, including using technologies such as cookies, web server logs and web beacons.
Information You Provide to Us
You may provide personal data to us in a number of ways, such as when you participate in an offer or promotion, when you make a purchase on our site or in our stores or when you subscribe to our loyalty programs, via our social media pages or through one of our mobile applications. The types of personal data you provide to us may include:
- Contact information (such as name, postal address, email address and mobile or other phone number)
- Age or date of birth
- Gender
- Username and password, nickname/screen name
- Payment information (such as your payment card number, expiration date, and card security code)
- Shipping and billing information (such as delivery address, and billing address)
- Purchase history
- Product preferences
- Your skin type / skin condition
- Your hair type
- Your physical characteristics and your skincare concerns
- Contact information for friends, family or other people you would like us to send a message to on your behalf (please ensure that you only submit contact information of individuals with whom you have a personal or family relationship and who have consented to receive messages from you or us)
- Information or content you provide (such as photographs, videos, reviews, articles, questions, survey responses and comments)
- Information provided to us through social media networks or one of our mobile applications when you visit our social media pages or use one of our mobile applications (such as your name, profile picture, likes, location, friend list and other information described on the social media network or application sign-up page, or your geo-location details when using one of our mobile applications)
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
If you fail to provide personal data
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
How We Use the Information
We will use the information you provide to:
- Send you promotional materials or other communications if you so elect
- Provide the products or services you (or your company) have requested and operate features on our site
- Process your payment card transactions and/or gift card transactions
- Create and manage your online account, including access to your online and in-store purchase history
- Create a profile about you based on the information you provided to us in order to tailor our advertisements to your interests, find your appropriate skin or hair care routine and manage the effectiveness of our marketing efforts
- Assist with product selection and replenishment
- Chat with you or respond to your inquiries
- Post your product reviews
- Tailor ads displayed to you on our site and elsewhere to your interests and history with us
- Communicate with you about, and administer your participation in, special events, contests, sweepstakes, loyalty programs, surveys and other offers
- Operate and communicate with you about our social network pages or mobile applications
- Operate, evaluate and improve our business (including developing new products and services; enhancing and improving our services; managing our communications; analysing our products; performing data analytics and performing accounting, auditing and other internal functions)
- Comply with applicable legal requirements, relevant industry standards and our policies
We also may use the information in other ways for which we provide specific notice at the time of collection. The information collected is necessary for the purposes set forth above. Without this information, you may not be able to take advantage of some of our products or services.
Legal Basis for Our Use of the Information
We will use the information you provide for the above purposes if:
- it is necessary to perform a contract to which you are party (e.g., to process your payment and deliver the products you have ordered); or
- we have obtained your consent; or if
- we have a legitimate interest in doing so (including a legitimate interest in performing marketing activities, research activities, data analytics, internal administration functions, processing and enforcing legal claims and conducting our business in compliance with all applicable laws, relevant industry standards and our policies).
Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Information We Collect by Automated Means
When you visit this site, view or click on our online advertisements (including our advertisements on third party websites), visit our social media pages or download and use one of our mobile applications (if applicable), we also collect certain information about your usage or device by automated means or by using technologies such as cookies, web server logs or web beacons. For example, if you use one of our mobile applications, we may collect your IP address, your unique device identifier (or other device identifier) and/or geo-location data in order to offer you certain features or functionalities within that mobile application. As set forth in more detail below, we may also collect information about your usage and browsing habits using various web-based technologies.
For your convenience, our mobile applications (if applicable) may also include functionality that allows you to remain logged-in to the application so that you do not have to re-enter a password each time you want to access the application. IF YOU CHOOSE TO REMAIN LOGGED-IN, YOU SHOULD BE AWARE THAT ANYONE WITH ACCESS TO YOUR MOBILE DEVICE WILL BE ABLE TO ACCESS AND MAKE CHANGES TO YOUR MOBILE ACCOUNT AND MAY BE ABLE TO MAKE PURCHASES THROUGH YOUR ACCOUNT. For that reason, if you choose to remain logged-in to the application on your mobile device, we strongly recommend you enable the Passcode Lock security feature on your mobile device to protect against unauthorized access to and use of your mobile device and your account in the application.
Please note that we you visit our retail stores and/or attend our event(s), we may collect your video surveillance footage which can be used to directly or indirectly identify you.
Technologies We Use
Cookies are small text files that websites send to your computer or other Internet-connected device to uniquely identify your browser or to store information or settings in your browser.
The following types of cookies are set on this site.
INTERNAL COOKIES ESSENTIAL FOR THE SITE TO WORK
We use first-party cookies to help the site work in the best possible manner. You can opt out of receiving these cookies and disable them by adjusting your browser settings. Please note, however, that without these cookies, your user experience may be impacted.
In conjunction with obtaining information through cookies, our web servers may log details such as your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone in which your device is located. The web server logs also may record information such as the address of the web page that linked you to our site and the IP address of the device you use to connect to the Internet.
To control which web servers collect this information, we may place tags on our web pages called “web beacons.” These are computer instructions that link web pages to particular web servers and their cookies.
THIRD PARTY WEB ANALYTICS COOKIES
You may deactivate the ability of these analytics services to analyse your browsing activities on this site. To learn more about web analytics service, and to exercise your choice with respect to their collection of information on this site:
- To disable Google Analytics, please download the browser add-on for the deactivation of Google Analytics provided by Google at http://tools.google.com/dlpage/gaoptout?hl=en. To learn more about privacy and Google Analytics please consult the Google Analytics overview provided by Google at: https://marketingplatform.google.com/about/analytics/;
- We may implement certain Google Analytics Advertising Features (including Remarketing with Google Analytics; Google Display Network Impression Reporting or Google Analytics Demographics and Interest Reporting). You can opt-out of the Google Analytics Advertising Features through Google Ad settings or by visiting https://tools.google.com/dlpage/gaoptout/. We will use the data provided by these features as described under “How We Use the Information We Collect”.
THIRD PARTY TARGETED ADVERTISING COOKIES
We may also contract with third-party advertising networks that collect IP addresses and other information through the use of cookies, web server logs and web beacons on our websites and emails; on third-party websites and emails and on our advertising placed on third-party websites. They use this information to create a profile about you and provide advertisements about products and services tailored to your interests (including for companies not affiliated with us). You may see these advertisements on our websites and other websites. This process also helps us manage and track the effectiveness of our marketing efforts. When you first visit our site, a cookie banner will inform you of the use of these marketing technologies. They will only be used if you accept them or if you continue using this site. You may change your cookie settings at any time by clicking on the cookie control tool below or by clicking here and following the opt-out instructions of these advertising networks.
To learn more about interest-based advertising, visit the Digital Advertising Alliance at www.aboutads.info/choices or the Network Advertising Initiative at www.networkadvertising.org/choices.
THIRD PARTY COOKIES INTENDED TO IMPROVE THE INTERACTIVITY OF THE SITE
This site may also support certain third party services, including social sharing buttons for Facebook, Twitter, Pinterest and Instagram, tweet lists (Twitter) and videos posted on the site (YouTube). These features use third party cookies that are directly set on your device by these services. When you first visit our site, a cookie banner will inform you of the use of these cookies. They will only be used if you accept them or if you continue using this site. You may change your cookie settings at any time to accept or refuse these cookies by clicking on the cookie control tool below.
Targeted Advertising. We may also use third-party platforms, including platforms operated by social networks, such as Google, Facebook and Pinterest, to show you interest-based ads. We may convert your email address, telephone number or other information into a unique value which can be matched by those third parties with a user on their platform or with other data they may have collected from you. This matching allows interest-based ads to be delivered on those platforms. To opt-out of these ads, you must change your preferences by clicking on the cookie control tool above and unselect the “targeting” setting. These platforms may have their own privacy notices or policies, which we strongly suggest you review.
You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
Forest Essentials Cookies
Category: Essential for operation of the website
Standard cookies:
Cookie Name |
Cookies Description |
FORM_KEY |
Stores randomly generated key used to prevent forged requests. |
PHPSESSID |
Your session ID on the server. |
GUEST-VIEW |
Allows guests to view and edit their orders. |
PERSISTENT_SHOPPING_CART |
A link to information about your cart and viewing history, if you have asked for this. |
STF |
Information on products you have emailed to friends. |
STORE |
The store view or language you have selected. |
USER_ALLOWED_SAVE_COOKIE |
Indicates whether a customer allowed to use cookies. |
MAGE-CACHE-SESSID |
Facilitates caching of content on the browser to make pages load faster. |
MAGE-CACHE-STORAGE |
Facilitates caching of content on the browser to make pages load faster. |
MAGE-CACHE-STORAGE-SECTION-INVALIDATION |
Facilitates caching of content on the browser to make pages load faster. |
MAGE-CACHE-TIMEOUT |
Facilitates caching of content on the browser to make pages load faster. |
PRIVATE_CONTENT_VERSION |
Facilitates caching of content on the browser to make pages load faster. |
X-MAGENTO-VARY |
Facilitates caching of content on the server to make pages load faster. |
MAGE-TRANSLATION-FILE-VERSION |
Facilitates translation of content to other languages. |
MAGE-TRANSLATION-STORAGE |
Facilitates translation of content to other languages. |
EXTERNAL_NO_CACHE |
A flag that, indicates whether caching is on or off. |
FRONTEND |
Your session ID on the server. |
LOGIN_REDIRECT |
Preserves the destination page the customer was loading before being directed to log in. |
MAGE-MESSAGES |
Tracks error messages and other notifications that are shown to the user, such as the cookie consent message, and various error messages. The message is deleted from the cookie after it is shown to the shopper. |
SECTION_DATA_IDS |
Stores customer-specific information related to shopper-initiated actions such as display wish list, checkout information, etc. |
RECENTLY_COMPARED_PRODUCT |
Stores product IDs of recently compared products. |
RECENTLY_COMPARED_PRODUCT_PREVIOUS |
Stores product IDs of previously compared products for easy navigation. |
RECENTLY_VIEWED_PRODUCT |
Stores product IDs of recently viewed products for easy navigation. |
RECENTLY_VIEWED_PRODUCT_PREVIOUS |
Stores product IDs of recently previously viewed products for easy navigation. |
PRODUCT_DATA_STORAGE |
Stores configuration for product data related to Recently Viewed / Compared Products. |
Additional Cookies to improve the user experience:
Cookie Name |
Cookie Description |
CART |
The association with your shopping cart. |
CATEGORY_INFO |
Allows pages to be displayed more quickly. |
COMPARE |
The items that you have in the Compare Products list. |
CUSTOMER |
An encrypted version of your customer id. |
CUSTOMER_AUTH |
An indicator if you are signed into the store. |
CUSTOMER_INFO |
An encrypted version of the customer group you belong to. |
CUSTOMER_SEGMENT_IDS |
Stores your Customer Segment ID |
LAST_CATEGORY |
The last category you visited. |
LAST_PRODUCT |
The last product you looked at. |
NEWMESSAGE |
Indicates whether a new message has been received. |
NO_CACHE |
Indicates whether it is allowed to use cache. |
VIEWED_PRODUCT_IDS |
The products that you recently looked at. |
WISHLIST |
An encrypted list of products added to your wish list. |
WISHLIST_CNT |
The number of items in your wish list. |
UTM_SOURCE |
Stores the value of marketing campaign source passed through utm_source query parameter |
UTM_MEDIUM |
Stores the value of marketing campaign medium passed through utm_medium query parameter |
UTM_CAMPAIGN |
Stores the value of marketing campaign name passed through utm_campaign query parameter |
UTM_REFERRER |
Stores the value of the referrer website from which the user came to Forest Essentials website. |
Google Analytics Cookies - Non-Exempt
Cookie Name |
Cookie Description |
__UTMA |
Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __utma cookies exists. The cookie is updated every time data is sent to Google Analytics. |
__UTMT |
Used to throttle request rate. |
__UTMB |
Used to determine new sessions/visits. The cookie is created when the javascript library executes and no existing __utmb cookies exists. The cookie is updated every time data is sent to Google Analytics. |
_UTMZ |
Stores the traffic source or campaign that explains how the user reached your site. The cookie is created when the javascript library executes and is updated every time data is sent to Google Analytics. |
__UTMV |
Used to store visitor-level custom variable data. This cookie is created when a developer uses the _setCustomVar method with a visitor level custom variable. This cookie was also used for the deprecated _setVar method. The cookie is updated every time data is sent to Google Analytics. |
__UTMC |
Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit. |
_GA |
Used to distinguish users. |
_GID |
Used to distinguish users. |
_GAT |
Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_<property-id>. |
AMP_TOKEN |
Contains a token that can be used to retrieve a Client ID from AMP Client ID service. Other possible values indicate opt-out, inflight request or an error retrieving a Client ID from AMP Client ID service. |
_GAC_<PROPERTY-ID> |
Contains campaign related information for the user. If you have linked your Google Analytics and Google Ads accounts, Google Ads website conversion tags will read this cookie unless you opt-out. |
Cloudflare Cookies - Exempt
Cookie Name |
Cookie Description |
__CFDUID |
The __cfduid cookie is used to identify individual clients behind a shared IP address and apply security settings on a perclient basis. For example, if the visitor is in a coffee shop where there are a bunch of infected machines, but the specific visitor's machine is trusted (e.g. because they've completed a challenge within your Challenge Passage period), the cookie allows us to identify that client and not challenge them again. It does not correspond to any user ID in your web application, and does not store any personally identifiable information. |
Amazon Webservices Cookies - Exempt
Cookie Name |
Cookie Description |
AWSELB |
These cookies enable us to allocate server traffic to make the user experience as smooth as possible. A so-called load balancer is used to determine which server currently has the best availability. The information generated cannot identify you as an individual. |
AWSALBCORS |
With CORS (cross-origin resource sharing) requests, some browsers require SameSite=None; Secure to enable stickiness. In this case, Elastic Load Balancing generates a second stickiness cookie, AWSALBCORS, which includes the same information as the original stickiness cookie plus this SameSite attribute. Clients receive both cookies. |
Wigzo Cookies - Non-Exempt
Cookie Name |
Cookie Description |
WIGZO_DAILYACTIVE |
Used to check the frequency of user’s visit on the website. |
WIGZO_LEARNER_ID |
Used to distinguish users. |
IS_MAPPED |
Used to check if the users details are mapped into the system. |
Adyen Cookies - Exempt
Cookie Name |
Cookie Description |
GDPR |
This cookie is used to keep track of your consent to cookies. |
LASTUPDATEDGDPR |
This cookie is used to keep track of your consent to cookies. |
Adyen Cookies - Non-Exempt
Cookie Name |
Cookie Description |
_CFDUID |
This cookie is used to identify individual clients behind a shared IP-address. |
Except for essential cookies, all cookies will expire after 28 days.
Information We Share
We do not rent lists, sell or otherwise disclose personal data we collect about you, except as described here. We may share your personal data with:
- Our affiliates for the purposes described in this Privacy Policy.
- Service providers who perform services on our behalf based on our instructions. We do not authorize these service providers to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements. Examples of these service providers include entities that process credit card payments, fulfil orders, and provide web-hosting and marketing services.
- Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
- HM Revenue & Customs, regulators and other authorities who require reporting of processing activities in certain circumstances.
- Other third parties with your consent.
We also reserve the right to transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets. Should such a sale or transfer occur, the transferee may only use personal data you have provided to us in a manner that is consistent with our Privacy Policy. Following such a sale or transfer, you may contact the entity to which we transferred your personal data with any inquiries concerning the processing of that information.
Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
Promotional offers from us
We may use your personal data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving that marketing.
Third-party marketing
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
Opting out
You can ask us or third parties to stop sending you marketing messages at any time, please see the “Your Rights and Choices” Section below.
Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product or service purchase, product or service experience or other transactions.
Text Messaging
If you so elect, you may provide your mobile phone number in order to receive text message alerts containing product and event information, cosmetics tips or promotions (“Text Messages”). We do not charge a fee for you to receive Text Messages from us, however, your mobile service provider may charge you for sending and/or receiving text messages and air-time, as well as any other standard applicable rates charged by your mobile service provider. If you do elect to receive them and later decide that you would no longer like to receive these Text Messages, see the “Your Rights and Choices” Section below .
Text Messages are distributed via third party mobile network providers and, therefore, we cannot control certain factors relating to message delivery or guarantee availability or performance of this service, including liability for transmission delays or message failures. To receive help with Text Messages, you can call 08081966934.
We may also obtain the date, time and content of your messages in the course of your use of Text Messages. We will use the information we obtain in connection with our Text Messages in accordance with this Privacy Policy.
Push notifications and in-app alerts and updates
When you download one of our mobile applications (if applicable), we may provide you with the option to opt in to receive push notifications from us on your mobile device in connection with that mobile application. These push notifications may include promotional communications regarding our products and services. You may, after downloading the applicable mobile application, opt out of receiving push notifications by adjusting the settings on your mobile device. Opting out of push notifications will not affect other communications you receive from us, such as email communications. You also may receive alerts and updates within our mobile applications regarding our products and services or your accounts with us. To opt out of receiving these alerts and updates, you may uninstall the applicable mobile application from your mobile device.
Your Rights and Choices
You have certain rights and choices in connection with the personal data we collect from you. To update your preferences, ask us to remove your information from our mailing lists or submit a request, please contact us as specified below.
- Email Opt-Out
You can at any time tell us not to send you marketing communications by email by clicking on the unsubscribe link within the marketing emails you receive from us or by contacting us as indicated below. You also may opt out of receiving marketing emails from us by emailing us at service@forestessentials.co.uk .
- Postal Mail Opt-Out
You can ask us to stop sending you marketing communications by postal mail by following the instructions included in a particular promotion. You can also request that we refrain from sending you promotional postal mail by contacting us as indicated below.
- Text Message Opt-Out
On order to stop receiving PROMOTIONAL CONTENT, you can WRITE TO US AT service@forestessentials.co.uk and specifying that you no longer want to receive promotional communication from the brand.
Geo-Location Information
When you use one of our mobile applications, we may ask you for your geo-location. You may choose not to share your geo-location details by adjusting your mobile device’s location services settings. To decline from sharing your geo-location details, follow the instructions on your mobile device on changing the relevant settings; otherwise, please contact your service provider or device manufacturer.
You have the right to:
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
- If you want us to establish the data's accuracy.
- Where our use of the data is unlawful but you do not want us to erase it.
- Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
- You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Withdraw Consent
You may also withdraw any consent you previously provided to us at any time with effect for the future by contacting us as indicated below. This will not affect the lawfulness of our use of your information based on your consent before its withdrawal. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
These rights may be limited in some circumstances under applicable law. We may take reasonable steps to verify your identity before granting access or making corrections. You may exercise these rights by contacting us as indicated below.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You may also lodge a complaint with Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
International Data Transfers
We may transfer the personal data we collect about you to our affiliates and third party service providers located in countries other than the country in which the information was originally collected (including the United States), where necessary to fulfil the purposes described in this Policy, and your personal data may be processed and stored outside of your country of residence. Those countries may not have the same data protection laws as your country of residence and your personal data will be subject to applicable foreign laws. United States laws have not been recognized by the European Commission or UK Government as providing an adequate level of data protection. When we transfer your information to the United States or other countries, we will protect that information in the manner described in this Privacy Policy. We have also implemented appropriate safeguards to ensure such a level of data protection when transferring your personal data, including the conclusion of data transfer agreements incorporating the European Commission’s and UK Government’s Standard Contractual Clauses, or other applicable data transfer mechanisms. You may obtain a copy of these data transfer mechanisms by contacting us as indicated below.
Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
In most cases, we keep the information you provide for the duration of our relationships, plus a reasonable period in order to be able to run regular deletion routines or to take into account the applicable statute of limitation period or if required under mandatory applicable law. If you wish to receive marketing communications, we will keep the information necessary to send you these communications following the end of our customer relationship or following their collection, if you are a prospective customer.
How We Protect Personal Data
We maintain appropriate technical and organizational safeguards to ensure an appropriate level of security of your personal data, in particular to protect your personal data against accidental unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, no security system is perfect and we cannot promise that information about you will remain secure in all circumstances, including the security of your data during transmission to us or the security of data on your mobile device.
Links To Other Websites
Our website may provide links to other websites for your convenience and information. These websites may operate independently from us. Linked sites may have their own privacy notices or policies, which we strongly suggest you review if you visit any linked websites. To the extent any linked websites you visit are not owned or controlled by us, we are not responsible for the sites’ content, any use of the sites, or the privacy practices of the sites.
Updates To Our Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in our privacy practices. We will post a prominent notice on our website to notify you of any significant changes to our Privacy Policy and indicate at the top of the Policy when it was most recently updated.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
How To Contact Us
If you have any questions or comments about this Privacy Policy, or if you would like to exercise your rights, please contact us by email at service@forestessentials.co.uk.