LONDON 1955

Privacy policy

Your privacy is of the highest importance to Goya Black Rose (Beauty Brand Development), and we promise never to release your personal details to any outside company for mailing or marketing purposes.

Data Protection

When you make a purchase from our website, we collect certain personal information from you (for example: your name, email address, payment address and details). All such information is held on secure servers. Goya Black Rose (Beauty Brand Development) complies fully with all applicable Data Protection and consumer legislation, and will treat all your personal information as fully confidential.

Beauty Brand Development is registered as a Data Controller with the ICO. (The Data Protection Act 1998 requires every organisation that processes personal information to register with the Information Commissioner’s Office.)

Consent

By using the Goya Black Rose website and providing us with your personal information, you are accepting the privacy practices described in this policy statement. We may update our Privacy Policy from time to time. Please check back here occasionally. Updates to our Privacy Policy that would affect how we treat your personal information will not apply to information collected before we made the update, unless we first obtain your consent.

In order to serve you most efficiently, reputable third-party banking and distribution institutions handle our credit card transactions and order fulfilment. They receive the information needed to verify and authorise your payment card and to process your order. All such organisations are under strict obligation to keep your personal information private.

Use of personal information

Goya Black Rose will never share your information with third parties, nor will we send you our own newsletter e-mails without your consent. Any newsletter email that you receive from us will also allow you to unsubscribe to further email newsletters if you decide at a later stage that you no longer wish to receive emails with news from Goya Black Rose. If you wish to opt out of receiving our newsletters at any time, see or amend your information visit the pages available under the Your Account menu on our website where you will be able to edit this information. Please note that your online account with Goya Black Rose is password-protected. You cannot access or view your personal information without your password.

When you transact with us online, in addition to the personal information that we collect from you, a temporary 'cookie' is used to connect your browser to our server until the transaction is complete. A 'cookie' is a message given to a web browser by a web server that allows the server to identify and interact more effectively with your computer.

If you opt-in to receiving Newsletters during the Goya Black Rose Site Registration process or at other times when you submit personally identifiable information, the information you provide may be used to send you our newsletters which may contain news of promotions or other communications containing product and event information.

If you have chosen to provide us with your contact information, by e.g. emailing our Customer Service department, registering at the Goya Black Rose Site, or placing an order, we may contact you regarding your customer service requests, service related issues or your order. You will for instance receive an order confirmation when you have placed an order at the Goya Black Rose Site and upon registration you will receive a welcome email to confirm your registration. We may also contact you to respond to product questions or concerns that you may express. These types of communications are necessary to serve you, respond to your concerns and to provide the high level of customer service that we offer our customers.

We implement various security measures in accordance with industry standards to protect the security of your personal information. Your personal information will be stored at our facilities located in the UK. If you share a computer, we recommend that you always sign out (by closing all browser windows) before leaving it unattended. We will continue to source, update and implement new technology in an effort to maintain the security of Goya Black Rose's information system. Goya Black Rose will have no liability for disclosure of information due to errors in transmission or unauthorised acts of third parties. In addition, we may disclose any information, including personally identifiable information, to comply with any applicable law, regulation, legal process or governmental request. We will also release specific information in special cases, such as if there is an attempted breach of security or a physical threat to you or others. We may also retain other companies and individuals to perform functions consistent with our Privacy Policy on our behalf.

Under 18?

You may browse our Site, but you may not provide personal information to Goya Black Rose, register or make a purchase. The site is not designed for minors and we do not knowingly collect information from minors. If a minor has provided us with personally identifiable information, a parent or guardian of that minor may contact us if they would like this information deleted from our records. We will use reasonable efforts to delete the minor's information from our databases. If you are under 18 years of age and have any questions or concerns about this Site, please seek guidance from a parent or responsible adult.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Data Collection

We may collect, use, store and transfer different kinds of personal data about you which are listed below:

  • Order Recipient Data: includes first name, last name and email address, telephone number, delivery address for any person for whom you wish to buy our products
  • Profile Data: includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses
  • Financial Data: includes bank account and payment card details, billing address
  • Transaction Data: includes details about payments to and from you and other details of products you have purchased from us
  • Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website
  • Usage Data: includes information about your use of our website, products including the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time); elements you viewed or words you searched for; page response times; download errors; length of visits; interaction information (such as scrolling, clicks, and mouse-overs)
  • Marketing Data : Includes your preferences in receiving marketing from us
  • Communications Data:includes emails and notes of conversations

Data collection methods

Direct interactions - You may give us your Contact, Profile, Order Recipient, Marketing and Communications Data by submitting information through the website or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

  • create an account on our website;
  • choose to buy our digital or physical products;
  • Request marketing to be sent to you;
  • enter a competition, promotion or survey; or
  • give us feedback.

Automated technologies or interactions -  As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies.

Third parties or publicly available sources - We may receive personal data about you from various third parties as set out below: Technical Data from the following parties: (a) analytics providers such as Google (b) advertising networks such as Google AdSense and the Facebook pixel.

Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as Paypal.

Personal Data Usage

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.

Below are descriptions of how we use your personal data, and which of the legal basis we rely on to do so. We have also identified what our legitimate interests are where appropriate.

We do not sell your data to third parties.

Consent

Where you have specifically opted in, we may use and process your information to contact you from time to time through electronic channels such as email about promotions, events, products, services or information which we think may be of interest to you.

You can withdraw your consent at any time by emailing us or, in relation to any marketing messages you receive, by selecting the unsubscribe option included in those messages.

Legal obligation

We may process your personal information to comply with any legal and/or regulatory requirements.

Contractual performance

We may use and process your personal information where this is necessary to perform a contract such as manage payments.

Vital interest

We may need to process your personal information to contact you if there is an urgent safety or product recall notice and we need to tell you about it.

Legitimate interests

We may use and process your personal information as set out below where it is necessary for us to carry out activities for which it is in our legitimate interests as a business to do so. This includes the below:

  • Process and arrange for delivery of your order including collecting monies owed to us, providing you with customer support services
  • Administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
  • Deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
  • Data analytics to improve our website, products, marketing, customer relationships and experiences
  • send you offers about our latest products where you have chosen not to opt out of receiving these

Data Sharing

We may have to share your personal data with the parties set out below for the purposes set out in the Personal Data Usage section above.

Order fulfilment service providers (acting as data processors on our behalf) as follows:

  • Warehouse service providers based in the UK
  • Warehouse and technology support service providers
  • Postal service provider such as Royal Mail and DPD operating worldwide
  • Payment processing service providers such as Paypal
  • Hosting service providers Email management service providers such as
  • Third party social media plugins such as Facebook and Twitter to connect you with your social network and which can be disabled by adjusting your privacy settings on the relevant social media site. 

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Legal Rights

You also have the right in certain circumstances to:

  • Request access to your personal data (commonly known as a "data subject access request").
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.
  • Request restriction of processing of your personal data.
  • Request the transfer of your personal data to you or to a third party. 

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Contact Goya Black Rose

We have taken great measures to ensure that your visit to www.goyablackrose.com is an excellent one and that your privacy is constantly respected. If you have any enquiries or concerns about our privacy practices please contact us on (+44) 07792 945768 or use the contact form on the website. You can also write to us: Goya Black Rose, Beauty Brand Development, Leytonstone House, Leytonstone, London E11 1GA, United Kingdom.

Made in England

Goya Black Rose is made in England