We need to answer this question first at the headline level, before looking at specifics.

At the headline level, we collect two types of information:

• “personally identifiable” information (meaning it can be used to specifically identify you); or
• “non-personally identifiable” information (meaning it relates to you but can’t be used to specifically identify you i.e. anonymous data like your unique DECAAR customer number).

When explaining the specific information we collect about you, we will endeavour to confirm which is “personally identifiable” and which is “non-personally identifiable” on the other.

The easiest way to explain the specific information we collect about you is to look at every different point of interaction you may have with DECAAR, as we collect different information at different points in your user or customer journey with DECAAR.  These interaction points include the following:

• Browsing our site;
• Saving an item;
• Registering on DECAAR;
• Logging into DECAAR once registered;
• Making a purchase from DECAAR (i.e. adding to bag, checking out and completing a purchase);
• Contacting DECAAR Customer Care, either about an order or for any other reason;
• Using DECAAR social media channels;
• Clicking on DECAAR banners, hyperlinks or plugins.

Set out below is an explanation of what information we collect at each of these interaction points, along with confirmation of (a) whether you directly give it to us, or we collect it with your permission, or whether it is collected by our technical systems; and (b) whether it is “personally identifiable”  information or “non-personally identifiable” information:

• Browsing DECAAR: irrespective of whether you are logged in when on DECAAR, we use cookies and code which is embedded in our systems to gather and record certain System Collected Data regarding the visitors to the site, such as:
• the IP address of the computer or the proxy server that you use to access DECAAR – this is personally identifiable information;
• The type of device used to access our Services, your computer operating system details and settings, your type of web browser and your settings for that browser, the name of your ISP, (if you are accessing DECAAR using a mobile device) your mobile device, your mobile operating system, your mobile device identifier provided by your mobile device operating system, and location data (if you have that functionality set up) and other general device or systems information – this is non-personally identifiable information;
• statistical information and log data about number of visits to certain pages on the site (e.g. the home page); the pages you viewed and activities you carried out during your visit; the date and time of your visit; the duration of an individual page view, the paths taken by visitors through the site – this is also non-personally identifiable information.

If you are logged in on DECAAR when browsing, a cookie on your device will also identify you, and record and associate all of this non-personally identifiable usage information and log data with your account.

• Saving items: irrespective of whether you are logged in when on DECAAR, we use cookies and code which is embedded in our systems to gather and record certain Directly Provided Data every time you click the button to save an item on DECAAR.  That Directly Provided Data relates to the identity, size and other product attributes of the item you’ve saved, so that item can then be displayed in your ‘Saved Items’ list until the end of that visit or until you remove it from your ‘Saved Items’ list during that visit.  This is non-personally identifiable information.

If you are logged in on DECAAR or log in during that same visit, the non-personally identifiable information relating to that saved item will be associated with your account, so that it is then displayed in your ‘Saved Items’ list for the next 60 days or until you remove it from your ‘Saved Items’ list (if earlier).

• Registering on DECAAR: In order to place an order with DECAAR, After you create an account and register with us, you can then choose to provide further information about yourself during the registration process (for example, your gender and location). We also provide the option to register for a separate DECAAR Marketplace account, for which you must provide us with at least your name, email address and/or mobile number, and a password.  Any further information you provide to us at this stage will also Directly Provided Data, all of which will be personally identifiable information.

When you create an account and register with us, DECAAR will keep that Directly Provided Data for as long as you are registered with us, so that we can then use it to identify you by your DECAAR profile, to operate all the systems (such as delivery systems) to enable you to place an order to purchase products from DECAAR, and to offer you a personalized, relevant experience on DECAAR.

• Logging into DECAAR:  Once registered, if you wish to log in, you will need to input your email address and password again, which is Directly Provided Data and personally identifiable information.  This will be matched to the up-to-date Directly Provided Data of the same type associated with your account to confirm your identity, and to enable you to place an order to purchase products from DECAAR.
• Purchasing from DECAAR:  To purchase products from DECAAR, you will need to do the following:
• click the relevant button on the site to add the product(s) to your bag – at which point our systems will collect this Directly Provided Data relating to the identity, size and other product attributes of the item(s) you’ve added, so the item(s) can then be displayed in your ‘Bag’ until the end of that visit.  This is non-personally identifiable information;
• be logged in (see above for an explanation of the information required to do that);
• select certain options relating to the delivery of the products you wish to order – our systems will collect this Directly Provided Data relating to your delivery selections in order to be able to fulfil and deliver your products to you by your required delivery method, should you complete your order.  This is non-personally identifiable information;
• input certain details relating to your credit card, or log-in details for certain other payment systems, such as PayPal or Klarna.  This Directly Provided Data will be collected by our systems, so we can take the required payment for the products you wish to purchase, should you complete your order.  These details are personally identifiable information.
• To complete your order, you finally need to click the relevant button to ‘Place Order’.  When we have this Directly Provided Data, we will record the full details of the completed order in our systems for as long as you are registered with us, so we can (a) fulfil and deliver your order, (b) add it to your order history and have a record of your purchases in order to deal with any queries you may have or process any returns you may wish to make, and (c) include it within the financial records of our business transactions.  This is all personally identifiable information provided by you.
• Contacting DECAAR Customer Care:  if you contact our customer care department for any reason (for example when you submit a question using the Ask a Question or Help Form or if you communicate with us on Live Chat), irrespective of which of the available communication channels you use to contact us, we will record the contact and collect all applicable information relating to the contact.  Details of the contact with you will be both Directly Provided Data and personally identifiable information, which we will then:
• keep and use to help us categorise your specific question or contact, respond to it, and, if applicable, investigate, deal with and resolve any issue or incident, and
• keep for so long as you are registered with us so we have a history of all of our communications with you, any issues you may have had with us, and what we did to resolve those issues or incidents, which we can then use to ensure that we deal with any further contacts appropriately.
• Using or interacting with DECAAR social media channels: When you use or interact with any of our social media channels (like Facebook and Twitter), we may collect, record and retain certain System Collected Data and User Authorised Data regarding your activities on those social media channels, such as the frequency of your visits.  For example, if you choose to use the Facebook “like” button to indicate you like any of our pages or apps, or if you tag any of your social media contacts or link to them in any content you post, we will record this information.  This is most like to be non-personally identifiable information but may also include personally identifiable information depending upon your settings with those channels.

Any content you put or add on any of our social media channels will be Directly Provided Data, which may be personally identifiable information depending upon the content.  We will collect, record and use that content and any other information you provide when putting or adding it to any of our social media channels (including any information that you have permitted those social media channels to share with us or that is allowed by your user settings on those sites).

Finally, any additional information about you that you need to provide when you use a particular social media channel or app will be explained in the terms and conditions for that app.

• Clicking on DECAAR emails, banners, hyperlinks or plugins: if you view or click on emails that we have sent you, or on banners, hyperlinks or plugins we have placed on our website or other websites, both the fact that you have done so , as well as the address of the site you were on when you did so, will be Directly Provided Data that we will record. This is all non-personally identifiable information.  We will use this information to track and analyse how successful those emails, banners, hyperlinks or plugins are in engaging with you.We are constantly innovating to improve DECAAR and the Services, which means we may create new ways to collect information from you.  If we do, we’ll tell you about any new information we are collecting through updates to this notice.