privacy Notice
privacy Notice
(1) Introduction to this Privacy Notice
(2) Personal data we process
(3) How we use your personal data (our purposes) and our legal basis for processing
(4) Cookies
(5) Who we disclose your personal data to
(6) International data transfers
(7) Your data protection rights
(8) Automated decision-making
(9) Security of Your Personal Data
(10) Retention of Personal Data
(11) Minors
(12) Third Party Sites and Services
(13) How to contact us and your data controller
(14) Updates to this Privacy Notice
(1) Introduction to this Privacy Notice
(a) We at Hi Shop Platform ("Hi Shop Platform", "we" or "us") take your privacy seriously. This Privacy Notice explains who we are, how we collect, share and use personal data about you, and how you can exercise your privacy rights.
(b) Hi Shop("Hi Shop Platform" or, the "Platform") is a business to consumer (or "B2C") platform which connects and facilitates sales and purchases between business sellers (or "Sellers") and consumer buyers (or "Buyers"). This Privacy Notice sets out the ways in which we process personal data about you, Sellers, Buyers and any other users or visitors of Hi Shop Platform. It applies to personal data we collect about you via the Hi Shop Platform website and Platform (including through the use of the Platform via your mobile device) operated by Hi Shop Platform.
(2) Personal data we process
(a) The personal data we collect either directly or indirectly from you will depend on how you interact with us and with Platform. We collect personal data about you from the following different sources:
(1) Directly from you. We collect personal data such as your name and contact information directly from you when you voluntarily choose to provide us with this information.
(2) Indirectly. We collect personal data about you indirectly, including through automated means. Some of the information we collect indirectly is captured using cookies and other tracking technologies, as explained further in the Cookies section below.
(3) Third parties.We also collect information about you from third-party sources such as our service providers that provide marketing, data, and financial related services, as well as
(i) Social media platforms if you choose to register for a Platform account via a social media account. Exactly what information we receive will depend on your privacy settings with the applicable platform, but would typically include basic public profile information such as your social media user name, nickname or username, your social media profile picture, country, company name (if applicable);
(ii) Third parties that are engaged by us to provide verification services, such as conducting suitable money laundering, fraud and “Know Your Customer” checks on Buyers and Sellers. This includes your name, email address, company details, and contact information.
We will only collect personal data from third parties where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us.
(b) The table below describes the personal data we collect from and about you depending on the Service of Platform's functionality used, some of which we combine in our systems.
Personal data Description
Source
Identity Verification Data such as your name, identity number, title, ID (such as passport), username and password, email address, telephone number. If you are a Seller, we may also collect your company name, address, date of incorporation, and other business-related information (e.g. company registration number, business license, tax information, shareholder and director information).
Directly from you
Account Data, such as your name, title, country of residence, date of birth, gender, username and password, email address, telephone number, your social media accounts, your account settings.
Directly from you
Third parties
Transaction Data, such as your credit card details, bank account details, transaction statements, your billing address, your delivery address or the delivery address of the intended recipient of your order, payments and orders to and from you, and other details of products that you have supplied to or purchased through the Platform.
Directly from you
Third parties
Automatic collection
Social media/External Account Data, such as social media handle and log in details where you choose to log in to Platform using your social media account or when you otherwise interact with us via an external service or application, such as Facebook or Google.
Third parties
Automatic collection
Communications Data, such as your feedback and other communications with us (including when you interact with our outsourced customer service agents offline), competition entries, chat, email or call history on the Platform or with third party service providers, posts any comments on the content you have uploaded on the Platform or when you post any comments on other users’ content uploaded to the Platform.
Directly from you
Third parties
Automatic collection
Marketing and Advertising Data, such as your interests based on Platform usage and purchases, survey responses, promotions you enter, preferences in receiving marketing materials from us, communication preferences, your preferences for particular products or services, your subscription details.
Directly from you
Third parties
Automatic collection
Device Data, that we collect using Cookies and similar technologies such as device type, unique device identification numbers or other identifiers, advertising identifiers.
Automatic collection
Platform Usage Data, such as activity and App interactions information that we capture using Cookies and similar technologies (see section 4 below, including, page views and searches, information that content had been viewed, watched or downloaded, purchase history (for Buyers), and other functional information for platform performance (e.g. application version information, diagnostics, and crash logs).
Automatic collection
Location Data, (collected using IP address, WiFi access points and GPS) from which we can identify your general geographic location, e.g., country or city-level location, and other technical information that associates your location to your use of the Platform to use it for the delivery / pick-up status of orders or to provide you with the information about deals near your location.
Automatic collection
Uploaded Content, such as any personal data in photographs/videos or audio recordings that you upload onto our Platform (such as Platform profile pictures) as part of product reviews or when sharing content as part of the socialisation functions on the Platform.
Directly from you
Automatic collection
(3) How we use your personal data (our purposes) and our legal basis for processing
(a) We use the personal data that we collect from and about you only for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your information. Our legal basis for processing the personal data we collect include the following bases, depending on our purpose for collecting your information:
(1) Contract – we require certain personal data to provide and support the Services you purchase or request from us
(2) Consent – in certain circumstances, we may ask for your consent before we will collect, use, or disclose your personal data, in which case you can voluntarily choose to give or deny your consent without negative consequences to you
(3) Legitimate Interests – we may use or disclose your personal data for the legitimate business interests of either Hi Shop Platform or a third party, but only when we’re confident that your privacy rights will remain appropriately protected
(4) Legal Obligation – there may be instances where we must process and retain your information to comply with laws or to fulfil certain legal obligations
(5) Vital Interests – there may be circumstances where we will process your information to protect your vital interests or those of another person or party
(b) If we rely on our (or a third party’s) legitimate interests to collect and use your personal data, these interests will normally be to operate and provide our Platform, communicate with you and respond to your questions, improve our Platform or use the insights to improve or developer market or promote our Platform, or to detect or prevent illegal activities and/or manage the security of our IT infrastructure.
(c) The following table provides more details on our purposes for processing your personal data and the related legal bases.
Purpose
Personal data
Legal basis
Verify your identity to register you on and grant you access to the Platform. If you're a Seller, also to carry out required legal/ regulatory checks.
Identity Verification Data
Account Data
Contract
Legal obligation
Register you on our Platform, manage and administer your account with us and facilitate transactions you make over the Platform
Identity Verification Data
Account Data
Transaction Data
Device Data
Platform Usage Data
Communication Data
Location Data
Contract
Legitimate interests
Communicate with you about the Services, including service updates
Identity Verification Data
Account Data
Platform Usage Data
Communication Data
Location Data
Contract
Legitimate interests
Respond to your inquiries and requests or complaints, including for customer support quality assurance and training purposes, and related recordkeeping
Identity Verification Data
Account Data
Transaction Data
Device Data
Platform Usage Data
Communication Data
Location Data
Contract
Legitimate interests
Keep the Platform and our users secure, prevent fraud, and address threats to your safety or the safety of others. For example, we may use malware and spyware monitoring tools to detect suspicious activity and algorithms to detect unauthorised access.
Identity Verification Data
Account Data
Transaction Data
Device Data
Platform Usage Data
Communication Data
Location Data
Contract
Legitimate interest
Legal obligation
Manage compliance with our Platform terms, or to bring and defend legal claims.
Identity Verification Data
Account Data
Transaction Data
Device Data
Platform Usage Data
Communication Data
Location Data
Contract
Legitimate interests
Maintain, support, and improve our IT systems, including to repair and debug our systems.
Identity Verification Data
Account Data
Device Data
Platform Usage Data
Location Data
Contract
Legitimate interests
Learn about our Platform users (and prospective users) to improve our Platform, and to develop new products and services. This includes identifying usage trends and patterns and evaluating this information on an aggregated, specific group(s), and individual basis
Identity Verification Data
Account Data
Location Data
Device Data
Platform Usage Data
Uploaded Content and Sensory Data
Social media/External Account Data
Contract
Legitimate interests
Consent
Contact current and prospective users of the Platform about services, promotions, competitions and events we think may be of interest to you, including with promotional mailers and electronic communications
Account Data
Platform Usage Data
Marketing Data
Communication Data
Social media/External Account Data
Consent (where required)
Otherwise Legitimate interests
Personalize and customize your Platform experience, including to provide local or otherwise targeted content and information for Buyers and Seller, and tailor the content and advertising that forms part of our Services
Account Data
Marketing Data
Platform Usage Data
Social media/External Account Data
Location Data
Consent (where consent is required under applicable law)
Otherwise Legitimate interests
Personalize, target, and deliver advertising for our Services on third party websites, apps, and other online services (including to identify audiences and individuals like you to better tailor our marketing campaigns and communications), and measure the effectiveness of our campaigns and adjust our methods
Account Data
Marketing Data
Platform Usage Data
Social media/External Account Data
Location Data
Consent (where consent is required under applicable law)
Otherwise Legitimate interests
Administer surveys to collect user perceptions and measure satisfaction
Communication Data
Contract
Legitimate interests
Manage our use of tracking technologies such as cookies, and enable you to manage your cookie preferences
Device Data
Platform Usage Data
Consent (where required)
Otherwise Legitimate interests
Comply with legal and regulatory obligations to which we are subject and to protect our legal rights (for example to defend claims against us and to conduct litigation to defend our interests)
Identity Verification Data
Account Data
Transaction Data
Platform Usage Data
Communication Data
Legal obligation
Legitimate interests
(4) Cookies
We or our authorised service providers use cookies, web beacons, and other similar technologies (collectively, “Cookies”) to collect and use personal data about you, including to serve interest-based advertising. For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie notice.
(5) Who we disclose your personal data to
We may share (or permit the sharing of) your personal data for the above-mentioned purposes with the following categories of recipients:
(1) Other Platform Buyers and/or Sellers where necessary to support Platform purchases and communications made between you. If you are a Buyer, Sellers that you purchase from will also control personal data about you relevant to or connected with your Platform purchases and communications with them. Please refer to Seller Privacy Notices for information about how they will process your personal data;
(2) To our group companies and affiliated companies and/or their designated service providers, who provide data processing services to us (for example, to support the delivery of our Services, provide functionality on, or help to enhance the security of our Platform, or who otherwise process personal data for purposes that are described in this Privacy Notice (including processing services such as software, tools, systems and messaging services for purposes described in this Privacy Notice). Our group companies, to which we transfer your personal data, are based both inside and outside Europe (in Singapore and China);
(3) To our third party services providers and partners engaged by or working with us to assist us in providing services to you, including those who provide data processing services to us and process personal data for purposes that are described in this Privacy Notice. Categories of these third party service providers include:
(a) Marketing and advertising partners, such as Google, Twitter, Facebook and Criteo, so that they may tailor the content and/or serve advertising to you see when visiting our Platform. These partners may combine information they collect on our Platform with data on their platforms and data they collect from other websites or through other sources in order to conduct targeted advertising. The processing activities of these third parties marketing platforms are governed by their own privacy notices;
(b) Our business partners (for example, in order for them to provide you with discounts or offers that may interest Buyers or prospective Buyers) where you have consented to receiving such information from them, if required by applicable data protection laws;
(c) Payment service providers that provide payment processing services. The activities of payment service providers may be governed by their own privacy policies, not this Privacy Notice;
(d) Risk control service providers to assess the security of Buyer and Seller accounts and transaction risks;
(e) Logistics partners for providing delivery services for Buyers and Sellers, including return and exchange of products, and warehousing services for Sellers;
(f) Customs agents for customs clearances purposes, where applicable to support Buyers and Sellers with international sales/purchases;
(g) Cloud computing and other hosting providers for providing hosting services;
(h) Customer service support providers to provide after-sale services or other customer service support.
(4) To our professional advisers, law enforcement agencies, insurers, government and regulatory and other organizations where we believe it is necessary to comply with applicable laws or to exercise, establish or defend our legal rights or protect your vital interests or those of any other person; or as otherwise required or permitted by applicable laws.
(5) To an actual or potential buyer(and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal data only for the purposes disclosed in this Privacy Notice; or
(6) any other person with your consent to the disclosure.
(6) International data transfers
(a) In some cases, your personal data is transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).
(b) We will store your personal data processed through the Platform in our Platform servers located in Germany and Singapore. Our group companies, to which we transfer your personal data, operate in the EU, Singapore and China. Our third party service providers and partners operate in a number of countries, within the EU, Singapore and China. This means that to provide the Services and to operate our Platform, we transfer and permit the transfer of your personal data to any of these countries for any of the purposes set out in this Privacy Notice.
(c) However, we will only permit any international transfer of your personal data (either to our group companies or third party service providers) if it is in compliance with applicable laws.
(d) To ensure that your personal data remains protected in accordance with this Privacy Notice, we rely on appropriate safeguards, such as standard contractual clauses. For the EEA countries these will be the European Commission’s Standard Contractual Clauses for controller to processor and controller to controller transfers. A copy of the relevant standard contractual clauses can be obtained by contacting us using the contact details provided under the section “How to contact us and your data controller” below.
(7) Your data protection rights
(a) You have the following data protection rights. You can exercise these rights via your ‘My Privacy Centre’ portal after logging on to your account (on desktop) or by contacting us using the contact details provided under the “How to contact us and your data controller” section below.
(1) You may access, correct, update or request deletion of your personal data.
(2) You can object to processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data.
(3) You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the e-marketing we send you, via your in-app settings, via your ‘My Privacy Centre’ portal after logging on to your account (on desktop) or by contacting us using the details below.
(4) If we have collected and process your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
(5) You have the right to complain to a supervisory authority about our collection and use of your personal data. For more information, please contact your local supervisory authority. (Contact details for supervisory authorities in Europe are available here.) Certain supervisory authorities may require that you exhaust our own internal complaints process before looking into your complaint.
(b) We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
(8) Automated decision-making
We do not engage in automated decision-making that will have a significant effect on you (legally or otherwise) using your personal data.
(9) Security of Your Personal Data
(a) To safeguard your personal data from unauthorised access, collection, use, disclosure, processing, copying, modification, disposal, loss, misuse, modification or similar risks during the course of your use of our Platform and/or Services, we implement appropriate administrative, physical and technical measures.
(b) While no method of transmission over the Internet or method of electronic storage is completely secure, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
(c) You are also advised to exercise caution with respect to the sharing of your personal data and your authentication / security details (such as passwords, credit card details, transaction details) outside of our Platform / Services. For registered users of the Platform, some of your information can be viewed and edited through your account, which is protected by a password. It is your responsibility to keep your password secure and confidential. We have instructed our personnel to never ask you for your password. If you share a computer with others, you should not save your log-in information (e.g., user ID and password) on that shared computer. Remember to sign out of your account and close your browser window when you have finished your session.
(10) Retention of Personal Data
(a) We will only retain your personal data for as long as we are either required or permitted to by law or as relevant for the purposes for which it was collected.
(b) When we have no legal obligation or ongoing legitimate business need to process your personal data, we will either delete or anonymise it, or if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store and isolate it from any further processing until deletion is possible. How long your data is kept for will also depend on how you use our Platform (for example if you are logged in as a member) and what the data you provide to us is used for. For example, if you are a registered member, certain data will be retained for a length of time following termination or deletion of your account, in order to comply with applicable laws (for example, if a court order is received about your account, we would retain your account data for longer than the usual retention period when an account is deleted) or in case of disputes. In other instances, the period of retention may be determined according to your activity on the Platform or to comply with a specific arbitration period/resolve a dispute.
(c) We keep all categories of personal data, including transaction records, other customers’ records (including sales and marketing records), vendor / partner /affiliates / sellers - related documents and records, for periods set out in our Personal Data Retention Limitation Policy, in accordance with the applicable laws.
(d) In certain cases, we need to keep your information longer for the legal reasons. Such legal reasons include: (i) complying with applicable law (e.g. to respond to a court order, warrant or a valid legal request), (ii) to resolve requests and complaints, (iii) for litigation or regulatory matters, or (iv) to address issues relating to the safety and integrity of our Platform and users' property and rights. We keep this data in accordance with our Personal Data Retention Limitation Policy.
(11) Minors
Hi Shop Platform is intended for adults and users must be over 18 to use our Platform. Hi Shop Platform does not intend to sell products to minors (as defined by applicable law), nor does it intend to provide any of the Services or the use of the Platform to minors. We do not knowingly collect any personal data relating to minors. If a minor has provided us with personal data without parental or guardian consent, the parent or guardian should contact us (using the contact details provided under section “How to contact us and your data controller” below to remove the information.
(12) Third Party Sites and Services
Please note that our Platform may include links to third party sites and/or services. This Privacy Notice does not apply to the collection and processing of personal data on those third party sites and/or services.
(13) How to contact us and your data controller
(a) If you have any questions or concerns about our use of your personal data, you can contact our data protection officer using the following details: DPofficer@proyectoarise.es.
(b) If you are a registered member of the Platform, and you are from Spain, you are contracting with Hi Shop Platform Seller Centre operated by Arise Operating E-commerce Private Limited and this entity will be a controller of your personal data.
(14) Updates to this Privacy Notice
(a) We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.
(b) You can see when this Privacy Notice was last updated by checking the “Version dated” date displayed below.
Contact Info
- Address: 4 Lindsey St, Barbican, London EC1A 9PLKaleidoscope, United Kingdom
- Email: hishoppro@outlook.com
