Important information and who we are

Controller

Continue Technologies Limited (company number 13757015) is the so-called controller of your personal data and is therefore responsible for it by law (referred to as "we", "us" or "our" in this privacy notice).

Contact details

If you have any questions about this privacy notice or our privacy practices, or if you wish to exercise your privacy rights, please contact us in the following ways:

Email address: hello@continue.co
Postal address: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.

You have the right to make a complaint at any time to the Information Commissioner's Office (“ICO”), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please do contact us in the first instance so that we can help to address your concerns.

Your duty to tell us about any changes

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third-party links

The Marketplaces may include links to third-party websites, plug-ins and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites, plug-ins or applications and are not responsible for their privacy notices. When you leave the Marketplaces, we encourage you to read the privacy notice of every website you visit.

The personal data we collect about you

Personal data, or personal information, means any data/information about an individual that directly or indirectly identifies them. It does not include data/information where the identity has been removed (i.e., anonymous data).

We may collect, use, store and transfer distinct kinds of personal data about you which we have grouped together as follows:

• Identity Data – first name and last name.
• Contact Data – address, email address and telephone number.
• Transaction Data – details about products and services you have sold or purchased via the RELEVANT Marketplace.
• Technical Data – internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access the Marketplaces.
• Profile Data – details about your purchases including sizes, interests, preferences, feedback, and survey responses.
• Usage Data – information about how you use the relevant Marketplace, including your login data.
• Marketing and Communications Data – your preferences for receiving marketing from us and our third parties and your communication preferences.
• Visual Data – photos of the products you are selling or have purchased using the relevant Marketplace (it is important that such photos do not contain people, especially other people who have not consented to you sharing their photo).
• Observed Data – details of what products users purchase using the relevant Marketplace.

We also collect, use, and share aggregated data. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not, directly or indirectly, reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a Marketplace or using our products and services. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

We do not collect any Special Categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

If you fail to provide personal data

If we need to collect personal data to fulfil a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to agree with you (for example, to provide you with services). In this case, we may have to cancel a service you have with us, but we will notify you if this is the case at the time.

How we collect your personal data

We use different methods to collect personal data from and about you including through:

• Direct interactions. You may give us your personal data, including Identity Data, Contact Data, Profile Data and Visual Data by filling in forms, corresponding with us or using certain features of our Marketplaces. This includes personal data you provide when you:
  • use the Marketplaces;
  • interact/chat with other users of the Marketplaces;
  • buy products and services via the Marketplaces;
  • create an account to sell and/or buy products and services via the Marketplaces;
  • subscribe to our services or publications;
  • request marketing to be sent to you;
  • enter a competition, promotion, or survey; or
  • give us feedback or contact us.
• Automated technologies or interactions. As you interact with the Marketplaces, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookies policy for further details.
• Third parties or publicly available sources. We will collect or receive personal data about you from various third parties and public sources as set out below:
  • Identity, Contact and Transaction Data from the retailer that we operate the relevant Marketplace for.
  • Contact and Transaction Data from providers of technical, payment and delivery services such as Stripe and Shopify.
  • Technical Data from analytics providers such as Google, Hotjar and Hubspot.

How we use your personal data

We will only use your personal data when the law allows us to.

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

• Performance of a contract with you: Where we need to carry out the contract we are about to enter into, or have entered into, with you, or where we need to otherwise provide you with a service, offer, promotion or product that you have requested. This may include where we need to take certain steps, at your request, before we enter into a contract.
• Legitimate interests: Where it is necessary to conduct our business and pursue our legitimate interests, which is generally where we use your personal data in ways you would reasonably expect us to. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). Examples of where using your personal data would be in our legitimate interests include:
  • Preventing, investigating, and detecting crime, fraud, bullying, harassment, discriminatory or other anti-social behaviour and taking action against perpetrators, including working with law enforcement agencies
  • Protecting us, our retailers, Marketplace users and partners, by taking appropriate legal action against third parties who have committed criminal acts, or breach their legal obligations to us.
• Legal obligation: Where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis. For example, keeping record and providing information to tax authorities.
• Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example, if you subscribe to an email newsletter.

Purposes for which we will use your personal data

We have set out below a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Please note that we may process your personal data on more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific lawful basis we are relying on to process your personal data where more than one ground has been set out in the table below.

Direct marketing

We do not use your personal data for sending direct marketing communications from us.

However, we may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.

Third-party marketing

During the registration process to use the relevant Marketplace, we will ask you to consent to us sharing your personal data with the retailer that we operate the relevant Marketplace for. The retailer may use this personal data for its own direct marketing purposes.

Please rest assured that we will always get your express opt-in consent before we share your personal data with any other third party for their own direct marketing purposes.

Opting-out of direct marketing

You can ask us or third parties acting on our behalf to stop sending you direct marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.

Where you opt-out of receiving these direct marketing messages, you will still receive service-related communications that are essential for administrative or customer service purposes, for example, relating to products and services that you have purchased, updates to our terms and conditions, checking that your contact details are correct.

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the relevant Marketplace may become inaccessible or not function properly. For more information about the cookies we use, please see our cookies policy.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Sharing your data with third parties

Do you share my personal data with third parties?

We may share your personal data with the parties set out below for the purposes set out in the table above [Purposes for which we will use your personal data].

• The retailer that we operate the relevant Marketplace for, including via client relationship management or marketing platforms such as Klaviyo, Omnisend and MailChimp.
• External third parties, such as:
  • Service providers acting as processors who provide payment, accounting, marketing, shipping logistics, inventory management, IT and system administration services.
  • Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors, and insurers based in the UK who provide consultancy, banking, legal, insurance and accounting services.
  • Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Transferring your data internationally

Do you transfer my personal data outside of the UK?

We currently have no plans to transfer your personal data outside the UK.

If and whenever we transfer your personal data out of the UK, we will ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
• We may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

Looking after your data

How do you protect my personal data?

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way.

We also limit access to your data to employees and third parties with a business need to know, and we have procedures for handling data breaches.

Keeping your data

How long will you use my personal data for?

We only retain data as long as necessary for business, legal, or regulatory reasons, or for the purposes outlined in this notice.

You can ask us to delete your data in some cases, and we may anonymise data for research and statistics.

Your legal rights

Under certain circumstances, you have rights under data protection laws:

• Access your data
• Request correction
• Request erasure
• Object to processing
• Restrict processing
• Data portability
• Withdraw consent

No fee is required unless your request is unfounded, repetitive, or excessive. We may need to verify your identity, and we aim to respond within one month.