Who we are
We capture information about you in order to improve your experience with our website and online store. To help us give you more of what you love, we capture information about you in order to improve your experience with the various Tum-2-Mom online platforms.
What personal data we collect and why we collect it?
We may collect the following information about you:
- your name, age/date of birth, gender and other relevant demographic information;
- your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and email address;
- your social media handles;
- purchases and orders made by you;
- your online browsing activities on any of our websites including which items you store in your shopping cart;
- information about the device you use to browse our websites including the IP address and device type;
- your communication and marketing preferences;
- your interests, preferences, feedback, competition and survey responses;
- your location;
- your correspondence and communications with us; and
- other publicly available personal data, including any which you have shared via a public platform (such as Instagram, YouTube, Twitter or public Facebook page).
Some personal data is collected directly, for example when you set up an online account on our website or send an email to our Customer Support team.
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
Other personal data is collected indirectly, for example when you browse our websites or undertake online shopping activity.
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources. We may anonymise and aggregate personal data for insight and research but this will not identify anyone.
HOW WE USE YOUR DATA
Tum-2-Mom (and trusted partners acting on our behalf) use your personal data:
- to provide goods and services to you;
- to make a tailored website available to you;
- to manage any account(s) you hold with us;
- to verify your identity;
- for crime and fraud prevention, detection and related purposes;
- with your agreement, to contact you about promotional offers, events, products and services which we think may interest you;
- to show you promotional communications through online media as you browse the web;
- for analysis, insight and research purposes – to better understand your needs and ensure we are giving you what you want;
- to identify and contact competition winners;
- to enable us to manage customer service interactions with you; and
- where we have a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).
To ensure you are kept up to date with the Tum-2-Mom experience, we use personal data for marketing purposes and may send you postal mail, texts and/or emails to update you on the latest offers and events. We may also show you online media communications through external social media platforms such as Facebook, Instagram, Pinterest, YouTube and external digital advertisers such as Google.
You have the right to opt out of receiving promotional communications at any time, by:
- informing us that you wish to change your marketing preferences by contacting our customer support team firstname.lastname@example.org;
- making use of the simple “unsubscribe” link in emails or
- the “STOP” number for texts.
Personalisation and Automated Decision Making
If you visit any of our websites, you may receive personalised banner advertisements whilst browsing websites of other companies. Any banner advertisements you see will relate to your browsing activity on our website from your computer or other devices.
We may collect data directly from you, as well as analysing your browsing and purchasing activity online and your responses to marketing communications. The results of this analysis, together with other demographic data, allow us to ensure that we contact you with information on products, services, events and offers that are tailored and relevant to you. To do so, we use software and other technology for automated decision making. We may do this to decide what marketing communications are suitable for you and this activity is based on our legitimate interests to develop and improve our products and services.
Also to provide more personalised services and experiences, we may review data held by external social media platform providers about you, for example, details on your Twitter or Facebook profiles that you have chosen to make publicly accessible such as your name, date of birth. Some of our services enable you to sign-in via external social media platform providers such as Facebook. If you choose to sign-in via a third party app, you will be presented with a dialog box which will ask your permission to allow us to access your personal information (e.g. your full name, date of birth, email address and any other information you have made accessible).
We aim to update you about products and services which are of interest and relevance to you as an individual. To help us do this, we process data by profiling and segmenting, identifying what our customers like and ensuring messages we send them are relevant based on their demographics, interests, purchase behaviour, online web browsing activity and engagement with previous communications. We may also use your data to exclude you from communications which we feel are irrelevant to you. For example, we may exclude someone from resends of marketing emails when we know that person has already opened the original email sent.
Another example of how we may tailor our communications with you is that we may group individuals with similar interests using this data so we can send them product news or promotional offers that are relevant to that shared interest.
You have the right to opt out of any automated processing, including profiling, at any time by:
- informing us that you wish to opt out of automated processing by contacting our customer support team at email@example.com
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
SHARING DATA WITH THIRD PARTIES
Our service providers and suppliers
In order to make certain services available to you and to help us better understand your preferences, we have partnered with certain trusted third parties including logistics and marketing service providers. We may need to share your personal information with some of our service partners. We only allow our service providers to handle your personal information when they have confirmed that they apply appropriate data protection and security controls. We also impose contractual obligations on service providers relating to data protection and security, which mean they can only use your information to provide services to us and to you, and for no other purposes. We may provide outside companies with aggregated and anonymised information and analytics about our customers but that would never identify you and we will never sell or rent your personal information to other organisations for any purposes.
To help you understand which partners we share data with, here are the types of companies with whom we share data in order to provide and promote our goods and services:
External Service Provider
Reason for sharing your data
- Companies that help us provide our goods to you including providers of ecommerce platforms and payment, logistics, delivery, courier and returns management services.
- We have help from outside organisations in order to ensure we can provide our products and services to you.
- Making sure that the courier knows where to deliver your order.
- Organising competitions and new product reviews to assess how relevant our products are to you.
- Companies that help us provide a better shopping experience tailored to you including providers of intelligence tools and social media platforms, providers of website hosting, marketing and advertising services and organisers of discount and loyalty schemes.
We want to make sure that we are always relevant, completely understand you and give you the best customer journey to ensure we can tailor your experience, reach you in the platforms you enjoy using and save you time. Using information about your previous purchases and what you store in your shopping cart to show you, through channels such as social media or emails, product recommendations and let you know when new products release. The optional use of sign in for our website through external site operators such as Facebook, Twitter and Google.
Understanding the device that you use to browse our websites to improve your shopping experience.
Other third parties
We may also share your data with:
- other companies within our group;
- to purchasers, investors, funders and advisers if we sell our business or assets or restructure whether by merger, re-organisation or otherwise;
- our legal and other professional advisers, including our auditors;
- credit reference agencies where necessary for card payments;
- governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so: –
- to comply with our legal obligations and the administration of justice;
- to exercise our legal rights (for example in court cases);
- for the prevention, detection, investigation of crime or prosecution of offenders; and
- for the protection of our employees and customers.
Fraud Prevention agencies.
To help tackle fraud we pass data through fraud prevention tools operated by external companies. Validating your details when you make a purchase on our website.
Legal Basis For Using Data
We are required to set out the legal basis for our processing of your personal data.
We collect and use customers’ personal data as necessary to perform our contract with you:
for the purposes of complying with our duties and exercising our rights under a contract for the sale of goods or services to a customer;
or as necessary for the pursuit of our legitimate interests, including:
- selling and supplying goods and services to our customers;
- promoting, marketing and advertising our products and services;
- sending promotional communications which are relevant and tailored to individual customers (including administering loyalty schemes);
- to identify and contact competition winners;
- understanding our customers’ behaviour, activities, preferences, and needs;
- improving existing products and services and developing new products and services;
- protecting customers, employees and other individuals and maintaining their safety, health and welfare;
- good governance, accounting and managing and auditing our operations and complying with our legal and regulatory obligations;
- preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies;
- handling customer contacts, queries, complaints or disputes;
- protecting our company, its employees and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to us;
- handling any legal claims or regulatory enforcement actions taken against us; and
- fulfilling our duties to our customers, colleagues, shareholders and other stakeholders;
as necessary for complying with our legal obligations including:
- where you exercise your rights under data protection laws for compliance with legal and regulatory requirements;
- to establish or defend legal rights;
- based on your consent for example in relation to sending direct marketing communications via email or text message.
You have the right to withdraw consent at any time. Where consent is the only legal basis for processing, we will cease to process data after consent is withdrawn.
HOW WE PROTECT YOUR DATA
Tum-2-Mom is committed to keeping your personal data safe and secure.
Our security measures include: –
- encryption of data;
- regular cyber security assessments of all service providers who may handle your personal data;
- regular planning to ensure we are ready to respond to cyber security attacks and data security incidents;
- daily penetration testing of systems;
- security controls which protect our IT systems infrastructure and our premises from external attack and unauthorised access;
- internal policies setting out our data security rules for our personnel; and
- regular training for our employees.
WHAT YOU CAN DO TO HELP PROTECT YOUR DATA
You should always be cautious when sharing your personal data. No one from our company will ever ask you to confirm any bank account or credit card details via email. If you receive an email claiming to be from Tum-2-Mom asking you to do so, please ignore it and do not respond.
If you are using a computing device in a public location, we recommend that you always log out and close the website browser when you complete an online session.
In addition, we recommend that you take the following security measures to enhance your online safety: –
- keep your account passwords private because anyone who knows your password may access your account or be compromised if your account is accessed without authority.
- when creating a password, use a difficult word/number combination of at least 8 characters and something that is not easily guessed by hackers such as your name, email address, or other personal data that can be easily obtained.
- Also, frequently change your password. You can do this in your account settings, avoid using the same password for different online accounts.
HOW LONG WE KEEP YOUR DATA
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
In summary, various laws, accounting and regulatory requirements applicable to us require us to retain certain records for specific amounts of time. In relation to your personal data, we will hold this only for so long as we require that personal data for legal or regulatory reasons or for legitimate organisational purposes. We will not keep your data for longer than is necessary for the purposes for which we collect them.
INTERNATIONAL TRANSFERS OF YOUR DATA
To deliver products and services to you, it is sometimes necessary to share your personal information outside of the European Economic Area (the EEA). This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws.
If we transfer your personal information outside the EEA, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to assess the laws and practices of the destination country and relevant service provider and the security measures that are to be taken as regards the data in the overseas location; alternatively, we use standard data protection clauses.
You have the following rights:
- the right to be informed about our processing or your personal data which is the aim of this Notice;
- the right to request access to personal data we hold about you at any time;
- the right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you;
- the right to object to processing of your personal data and/ or to withdraw any consent you have given us and to opt out of any marketing communications that we may send you;
- the right to prevent processing that is likely to cause damage or distress to you or anyone else;
- the certain rights in relation to automated decision making including profiling;
- the right to request that we erase your personal data in certain circumstances (the right to be forgotten) for example when the data are no longer necessary for the purpose for which we collected them;
- the right to have your personal data provided to you by us in a structured, commonly used and machine-readable format and transmitted to another data controller. This is known as the right to data portability.
In summary if you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
If you wish to exercise any of the above rights, you can always contact us by email to firstname.lastname@example.org.