Welcome to Mondays AG privacy notice.
We respect your privacy and are committed to protecting your personal data. This privacy notice will tell you:
-
how we look after your personal data when you visit our website www.organicmondays.co.uk
-
how we look after your personal data generally; and
-
about your privacy rights and how the law protects you.
We want to make sure you know who we are, how you can contact us, the personal data we process, how we use it, who we share it with, how long we keep it for and the choices you have to exercise your legal rights.
----
OVERVIEW
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.organicmondays.com and/or www.organicmondays.co.uk (the “Site”)
WHO WE ARE
For the purpose of the Data Protection Act 1998 (the Act) and from the 1 August 2021, the EU General Data Protection Regulation 2016/679 (the GDPR), the data controller is Mondays AG (company no. CHE-280.562.292), having its registered office at In der Hinterzelg 2, 8700 Küsnacht Switzerland (“Company/we/us”).
HOW TO CONTACT US
If you have any questions about our services, products or you would like to make a request to exercise any of your legal rights, please contact using the following details: email theteam@organicmondays.com
PERSONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information.”
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information that we collect generally to fulfil your Mondays' orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).
Additionally, we use this Order Information to:
Communicate with you;
Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
|
CATEGORY OF PERSONAL DATA |
PURPOSE FOR PROCESSING |
|
Name and contact details (such as email address, telephone number and delivery address) |
Delivering healthier period products and other Mondays’ purchases to you Sending you service messages by email such as order updates Sending you information by email or post about our new products or services, but only with your permission Showing you Mondays’ adverts on other websites, so you can see our latest products and offers Fraud prevention and detection To register you with a Mondays’ account |
|
Purchase information/history |
Maintaining records of your purchases with us Delivering your purchases to you Sending you service messages by email such as order updates To provide great customer service. Managing product returns Sending you information by email or post about our new products or services, but only with your permission. Fraud prevention and detection To make decisions about which Mondays' adverts are shown to you as you browse the web or apps |
|
Date of birth information |
Fraud prevention and detection To send you occasional treats on your birthday, but only with your permission |
|
Payment information |
Taking payment and giving refunds Fraud prevention and detection |
|
Contact History |
To provide you with better customer service. |
|
Information you provide when entering a competition or prize draw, playing games and completing surveys (including contact details and your actual entry) |
To facilitate your participation in the competition or prize draw Sending you information by email or post about our products or services, but only with your permission |
|
Device information: information about your computer, phone or other device you use to view the website or app such as device type, operating system, hardware version, browser type, unique device identifier, IP address and advertising ID |
Improving our website and set default options for you (such as language and currency) Showing you relevant Mondays' adverts as you browse the web |
|
Log information: information about how you use our website or app such as the types of content you view or engage with, the frequency and duration of your activities, access times, language, your IP address and the pages you visit before or after navigating away from the website |
Fraud prevention and detection Making sure the website or app display and function correctly on your device (e.g. make sure pages load correctly on your device and that the displayed language and currency are correct for the country you are in) Providing us with analytical information about the use of the website or app Making the website or app secure |
|
Device and log information will not be associated with you as a named individual unless you are logged into your account |
Fraud prevention and detection Making decisions about the pages, images and adverts to display to you on Mondays' websites Making decisions about the adverts you see on websites that are not owned by Mondays Associating the different devices you use with each other so that the pages, images and offers you see across devices are consistent. |
We ensure that the collection, processing and use of your personal data is lawful. Therefore, for the purposes listed above, we only use your personal data if one of the following conditions apply:
- You have given us your consent
- We need your personal data for the performance of a contract you enter into with us, such as when you purchase a product through the website or app
- We need to comply with legal obligations
- We need to protect your vital interests
- Your data is necessary for the public interest, or
- We have a legitimate interest in processing the personal data
DO WE SHARE YOUR PERSONAL INFORMATION?
We do not sell any of your personal data to third party companies. We may however need to share your data with third party companies in order to provide you an optimal web experience and recommend relevant products to you. Such as:
Companies that help us get your order to you, such as payment service providers, warehouses operators and delivery companies
Marketing service providers, such as marketing agencies and advertising partners who help us market our business
Credit reference agencies, law enforcement and fraud prevention agencies, so we can help tackle fraud and other unlawful activities
Technology service providers, such as companies that support our IT, help us analyse the data we hold, send communications to our customers and help us develop and host our websites
Companies approved by you
If we ever provide third parties with information and analytics about our customers, we will ensure that all data is aggregated and anonymised and cannot identify you.
Third parties we work with:
|
THIRD PARTY PROVIDER |
CATEGORIES OF INFORMATION SHARED |
WHY? |
LINK TO PRIVACY POLICY |
|
|
Cookie data - hashed email, browsing data, transaction data. Opted in customer data has also been uploaded into Facebook |
Advertising - retargeting and profiling of data to create insights and lookalikes to serve more relevant advertising on Facebook platforms |
|
|
|
Cookie data |
Retargeting and analytics |
|
|
Shopify |
Contact and purchase data |
Order processing |
|
|
Recharge |
Contact and purchase data |
Subscription order processing |
|
|
Mailchimp |
Contact and purchase data |
Marketing and Newsletters |
|
|
|
|
|
|
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Non UK customers - transferring data outside of the EEA?
In order to process your personal data for the purposes set out in this Privacy Notice, we may transfer your personal data to third parties and other companies in our group that are based outside of the EEA.
Whenever we transfer your personal data out of the EEA, we attach a similar degree of protection to it (as it would receive in the EEA) by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries, territories or sectors within a country that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- The transfer is subject to a legally binding and enforceable commitment on the recipient to protection the personal data (e.g. through the use of European Commission approved standard contractual clauses).
- Where we use service providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US.
- The transfer is made subject to binding corporate rules.
- The transfer is based on a derogation from restrictions on transferring personal data outside of the EEA (such as where you give your consent, the transfer is necessary for the performance of contract with you, or the transfer is necessary for the establishment, exercise or defence of legal claims).
Third parties and social media
We cannot be responsible for the privacy policies and practices of other third party sites (including but not limited to Facebook, YouTube, Twitter), or for advertisers on our site, even if you access them using links from our website and we recommend that you check the policy of each site you visit. If you linked to our Site from a third party site, we cannot be responsible for the privacy policies and practices of the owners or operators of that third party site and we recommend that you check the policy of that third party site and contact its owner or operator if you have any concerns or questions. Unless expressly stated, we are not agents for these third party sites or for any third party advertisers on our Site, nor are we authorised to make representations on their behalf.
DO I CONTROL MY DATA?
Under the General Data Protection Regulation, you have several important rights available to you. In summary, those include rights to:
- Be informed about how your personal information is being used (hopefully this privacy notice explains it all)
- Access the personal information we hold about you
- Request that we transfer elements of your data to another service provider
- Request us to correct any mistakes in your information which we hold
- Request the erasure of personal information concerning you in certain situations
- Receive the personal information concerning you which you have provided to us, in a structured format or to ask us to transfer that information to another service provider
- Stop any direct marketing
- Object to processing of your personal data
- You can ask us to restrict or suspend processing of your personal data under certain circumstances, for example if you want us to restrict processing while the accuracy of personal data is being established
- Right not to be subjected to automated decision-making that significantly affects you, however, we will only use automated decision making in limited circumstances
- Right to withdraw your consent, where processing of your personal data is based on consent, you can remove it at any time
For further information on each of these rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.
If you would like to exercise any of these rights, please:
- Email theteam@organicmondays.com
- Let us have enough information to identify you;
- Let us know the information to which your request relates
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made many requests. In this case, we will notify you and keep you updated.
DO YOU STORE MY PERSONAL DATA
We will hold on to information only as long as is necessary;
- For as long as you have an account with Mondays
- For as long as is needed to provide services to you
- For as long as needed for support-related reporting (if you have spoken to our customer services) or for analytical reporting
Even after you may have closed your account or we are no longer need your information to provide services to you, we may still retain some of your information if needed for legal or regulatory requirements, to resolve disputes, prevent fraud and abuse or if we need to enforce our terms and conditions.
REPRODUCTION OF CONTENT
If you submit Content to Mondays' website, you agree that Mondays may use your Personal Information and such Content as permitted under this Privacy Policy, including reproducing the Content on the Website and in Mondays' marketing and advertising materials.
KEEPING YOUR PERSONAL DATA SAFE
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
HOW DO I UNSUBSCRIBE FROM MARKETING EMAILS?
You can choose to stop receiving marketing messages from us at any time.
This can be done:
- In your account
- Clicking the "Unsubscribe" link in your email
- Contacting us directly (via theteam@organicmondays.com)
We will process the update to your preferences when you tell us about the change. However, please note that it can take a few days for some of our systems to update, so you may receive some marketing messages during this process.
This change to your contact preferences will not stop communications regarding any orders you place, such as order confirmation and shipping emails.
WHAT SHOULD I DO IF I NO LONGER WANT A MONDAYS ACCOUNT?
Contact us directly (via theteam@organicmondays.com) and we will delete/close your account or give you instructions on how to do this yourself.
HOW DO I COMPLAIN?
We hope that we can resolve any query or concern you raise about our use of your information. If you are not happy with how Mondays manages your personal data, you have the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/.
Changes to Privacy notice
This privacy notice was updated 1 November 2020. Any changes to this notice will be updated here.