INTRODUCTION

This privacy policy explains the information and type of personal data we may collect about you when you visit our website or contact us via email or telephone. It also explains how we’ll store, manage and keep your data safe.

We understand this is a LOT of information, but we want our clients to be completely informed about their rights, and how Baja Baby uses their data.

* This notice will be regularly updated, so please refer back to this page.*

CONSENT

We can collect and utilize your date with your consent. Examples of consent are:

• When you tick the box at checkout that states ‘Keep me up to date on news and exclusive offers’
• When you enter your email address in exchange for a free Baja Baby product
• When you enter your email to enter a Baja Baby raffle
• When you contact us through our ‘Contact’ page
• When you place an order

CLIENT & SALE OBLIGATION

When you place an order, we need to collect your personal data so we can fulfil our obligation to you and complete the sale. An example of this type of data collection is:

• When you place an online order for Baja Baby products and you fill out your shipping address, we pass that information to shipping carriers who then use it to complete the sale process.

LEGAL OBLIGATION

Should the law require us to, your information may be given to authorities in the event of fraudulent or criminal activities which affect Baja Baby.

LEGITIMATE INTEREST

We may use your data for situations directly pertaining to Baja Baby’s legitimate interests. Examples of legitimate interests are:

• We may use your shopping history to send you relevant personalized offers.
• We may combine a collection of shopping history of Baja Baby customers so we can identify trends. We do this to track sales performance of products and estimate the success of future products.
• We may use your physical address to send you promotional direct mail.

PERSONAL DATA COLLECTION

We collect your data when:

• You visit our website, and use your account to buy products and services, or redeem Baja Baby Bling.
• You make an online purchase and check out as a guest (in which case we only collect transaction-based data).
• You create a Baja Baby account.
• You purchase a Baja Baby product by phone but don’t have (or don’t use) an account.
• You engage with us on social media.
• You create a Baja Baby VIP account.
• You contact us by any means with questions, comments or complaints.
• When you ask us email you information for general company information or about a specific Baja Baby product.
• You enter Baja Baby raffles or competitions.
• You complete any Baja Baby surveys we may send you.
• You comment on or review Baja Baby products.
• You fill in any forms. For example, the Baja Baby Contact Form.
• You’ve given a third party permission to share information about you with us.

WHAT SORT OF PERSONAL DATA DO WE COLLECT?

If you have a Baja Baby VIP account, we will collect your name, billing & delivery address(es), orders information, email and telephone number.

We may collect details of your purchase/communications with us through our website, email or by telephone. Examples of this would be:

• Our customer service team may collect notes from communications from you regarding complaints, suggestions and comments you make.
• We retain details of online purchases you make, products you have viewed or added to cart and discount coupon redemptions.
• We collect details about when, how and for how long you visited our website.

Where applicable, we may request supporting identification documentation to be provided to us via fax or scan (eg. your passport or driver’s license), should Shopify request additional authentication.

We collect details of your shopping preferences. For example:

• When you redeem discount coupons and the value of each coupon.

• Details of your visits to our website, and which site you came from to ours.
• Information gathered by the use of cookies in your web browser.
• Personal details which help us to recommend relevant products.

We’ll only ask for and use your personal data collected for recommending items of interest and to customize your Baja Baby shopping experience. It’s always your choice whether you share such details with us.

• Payment card information.
• Your comments and product reviews.
• To deliver the best possible web experience, we collect technical information about your internet connection and browser as well as the country and IP address where your computer is located, the web pages viewed during your visit, the advertisements you clicked on, and any search terms you entered.
• Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.

YOUR PERSONAL DATA

We want to give you the best possible customer experience. One way to do that is to combine the data we have about you so we can get a full idea of your preferences and buying choices.

We use this data to offer you promotions and brand-related content that are most likely of interest to you. In the case of loyalty members, we may also periodically notify you regarding any change of membership details, or regarding VIP-only bonuses.

If you choose not to share your personal data with us, or unsubscribe from email marketing communications, we will not be able to inform you about company news and promotions. For example, if you’ve asked us to let you know when an item comes back into stock, we may not be able to do that if you’ve withdrawn your general consent to hear from us.

HOW & WHY WE USE YOUR PERSONAL DATA:

• To process an order that you made on our website. If your personal data is not collected at checkout, we can’t process your order and fulfill with our legal obligations.

For example, your details may need to be passed to a third party to supply or deliver the product or service that you ordered, and we may keep your details for a reasonable period afterwards in order to fulfill any contractual obligations such as refunds, guarantees and so on.

• To have the ability to reply to your questions, comments, suggestions, refund requests and complaints. Having access to your data enables us to respond quickly and accurately. We may keep a record of this data for any future communication with us and to demonstrate how we communicated with you throughout the process. We do so because of our contractual obligations to you, our legal obligations and our legitimate interests, which are to provide you with the best service possible and to understand how we can improve our service based on your personal experience with our company.
• To protect Baja Baby and your account with us from fraud and other illegal activities. This includes using your personal data to maintain, update and safeguard your Baja Baby account, where applicable. We’ll also monitor your browsing activity to identify and resolve problems and protect the integrity of our website. We do all of this as part of our legitimate interest.

• To process payments and to prevent fraudulent transactions. We do this on the basis of our legitimate business interests. Doing this also helps to protect our customers from fraud.
• With your approval, we use your personal data, preferences and details of your transactions to keep you informed by email, social media, telephone or direct mail about relevant content and products including special offers, discounts or promotions.

You are free to opt out of hearing from us by any of these channels at any time.

• To display the most relevant products to you on our website, we’ll use data we hold about your favorite products. We do so on the basis of your consent for our website to place cookies or similar technology on your device.

For example, we might display items you’ve recently looked at, or offer you recommendations based on your purchase history and other data you’ve shared in the past.

• To connect with you regarding any of our raffles or competitions which you enter, based on your consent given at the time of entering.
• To develop, test and improve the products we offer to you. We’ll do this on the basis of our legitimate business interests.

For example, we may record your browser’s Session ID to help us understand more when you leave us online feedback about an issue you may be having.

• To comply with our legal obligations to share data with law enforcement.

For example, when a court order is submitted to share data with law enforcement agencies or a court of law, we will fully comply.

• To send you survey and feedback requests to help improve our company. These messages may not include any promotional content and do not require prior consent when sent by email. We have a legitimate interest to do so as this helps make our products more relevant to you.

HOW WE PROTECT YOUR PERSONAL DATA

Data security is extremely important to us as we know it is for you. With this in mind we take all the necessary steps to protect your data.

We secure access to all transactional areas of our website using ‘https’ technology.

Access to your personal data is password-protected, and sensitive data such as payment card information) is secured and tokenized to ensure maximum security.

HOW LONG WILL WE KEEP YOUR PERSONAL DATA

Whenever we collect or process your personal data, we’ll keep it for as long as is necessary for the purpose for which it was collected, or until you withdraw your consent of our company having it.

At the end of that retention period, your data will either be deleted completely or anonymized, for example by aggregating it with other data so it can be used in a non-identifiable way for statistical analysis and business planning.

WHO DO WE SHARE YOUR DATA WITH?

We sometimes share your personal data with trusted third parties. Examples of these parties are delivery couriers, for fraud management, to handle complaints and to help us personalize our offers.

Here’s our standard protocol to keep your data safe and protect your privacy:

• We provide only the information the trusted third party needs to perform their specific duty.
• The trusted third party may only use your data for the exact purpose we specify in our agreement with them.
• We work closely with the trusted third party to ensure that your data privacy is constantly respected and protected.
• If we stop using their services, or they cease to work for  Baja Baby, any of your data held by them will either be deleted or rendered anonymous.

Trusted Third Party Examples:

• IT company who supports and maintains our website.
• Operational companies such as third party delivery couriers.
• Email marketing companies who help us manage our electronic communications with you.
• Google/Facebook to show you products that might interest you while you’re browsing the internet. This is based on either your marketing consent or your acceptance of cookies on our websites.

In certain and only very specific circumstances, we may share your data with third parties for their own purposes:

• For fraud management, we may share information about fraudulent or potentially fraudulent activity on our website. This may include sharing data about individuals with law enforcement bodies.
• We may also be required to disclose your personal data to the police or other enforcement, regulatory or Government body, in your country of origin or elsewhere, upon a valid request to do so. These requests are assessed on a case-by-case basis and always take the privacy of our customers into consideration.
• We may, from time to time, expand, reduce or sell our business and this may involve the transfer the whole business to new owners. If this happens, your personal data will, where relevant, be transferred to the new owner or controlling party, under the terms of this Privacy Notice.

 

WHAT ARE YOUR PERSONAL DATA RIGHTS?

You have the right to request:

• Free access to the personal data we hold about you.
• The correction of your personal data when incorrect, out of date or incomplete.
• The deletion of the data we hold about you, in specific circumstances; for example, when you withdraw consent or object, and we have no legitimate overriding interest, or once the purpose for which we hold the data has come to an end.
• A computer file in a common format (CSV or similar) containing the personal data that you have previously provided to us, and the right to have your information transferred to another entity where this is technically possible.
• Restriction of the use of your personal data, in specific circumstances.
• That we stop processing or using your personal data, in specific circumstances; for example, when you have withdrawn consent, or object to its use for personal reasons.
• That we stop using your personal data for direct marketing (either through specific or all channels).
• That we stop any consent-based processing of your personal data after you withdraw that consent.
• You can contact us to request to exercise these rights at any time here.

In certain circumstances it may not be possible for us to comply with your request; for example if your data has to be legally shared with law enforcement or  if we are in the process of completing your order. Rest assured, we will fully disclose the reason why we are not able to do so.

Your Right To Withdraw Consent

Regardless of when you have consented for us to use your personal data, you have the right to change your mind at any time and withdraw that consent.

Where We Rely On Our Legitimate Interest

In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.

Direct Marketing

You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We will always comply with your request.

Checking Your Identity

To protect your confidentiality, we may ask you to verify your identity before proceeding with any request you make under this Privacy Notice.

If you have authorized a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.

 

HOW CAN YOU STOP YOUR PERSONAL DATA BEING USED FOR DIRECT MARKETING?

There are several ways you can stop direct marketing communications from us:

• Click the ‘unsubscribe’ link in any email communication that we send you. We will then stop any further emails from that particular division.
• Visit the ‘My Account’ area and change your preferences.

Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated.

This document was last updated August 2021