Privacy

Hamley’s Privacy Policy

Hamleys of London Limited are committed to protecting and respecting your privacy. We're giving you this information as part of our initiative to comply with recent legislation, and to make sure we're honest and clear about your privacy when using our website. This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting www.Hamleys.com you are accepting and consenting to the practices described in this policy.

1. Controller of Personal Data

For the purpose of the Data Protection Act 2018 and the General Data Protection Regulation 2016/679 (the Acts), the data controller is: Hamleys of London Limited 4th Floor Suite A, Greencoat House, Francis Street, London, England, SW1P 1DH

2. Lawful Processing

The lawful bases for processing are set out in Article 6 of the GDPR. At least one of these must apply whenever personal data is to be processed:

a. Consent: You have given Hamleys clear consent for your personal data to be processed for a specific purpose.
b. Contract: the processing is necessary for a contract you have with Hamleys or you have asked us to take specific steps before entering into a contract.
c. Legal obligation: the processing is necessary for Hamleys to comply with the law (not including contractual obligations).
d. Vital interests: the processing is necessary to protect someone's life.
e. Public task: the processing is necessary for Hamleys to perform a task that is in the public interest or for its official functions, and the task or function has a clear basis in law.
f. Legitimate interests: the processing is necessary for Hamleys legitimate interests, or the legitimate interests of a third party, unless there is a good reason to protect the individual's personal data that overrides those legitimate interests.

3. Your rights

You have the following rights regarding our use of your personal data as per applicable laws/ regulations:

• You can access any of your data held by us.
• You can correct any inaccurate data we hold.
• You can ask us to erase any of your data held by us.
• You can restrict for processing of your personal data we hold.
• You can object to our processing any of your personal data.
• You can ask that your data be copied or transferred to a third party.
• You can exercise your right to prevent such processing by checking certain boxes in the Preference Centre, and even where you have consented to our processing of your personal data,
• You can withdraw your consent at any time by emailing privacy@hamleys.co.uk.

4. Personal data we may collect from you

We may collect and process your Personal data when you visit our site and when you use our site to make a purchase. We collect your personal data in order to provide and continually improve our products and related services. Here are types of Personal data we collect:

• Automatic Information When you visit and use our website, you consent to our obtaining and processing the following information about you:
• Location data and online identifiers, including details of your visit to our site and the resources you access; Information about your computer, including your IP address, operating system, and browser.
• Cookies, and other information about your general internet usage.

This information is used for system administration and to ensure your experience is fully optimised. It is statistical, aggregated information and does not identify any specific individual. We may provide reports making use of this information to our advertisers.

You may refuse to accept cookies from our site by activating the relevant settings in your browser. However, as certain parts of our site require the use of cookies, if you enable this setting you will be unable to access certain areas of our site or to make purchases through it.

Please note that our advertisers may also use cookies over which they have their own security controls.

• Information You give us:
  • In providing us with information through our website, you also consent to our processing this data and using it for the purposes specified by you. This may include:
    • Information you provide by filling in forms on our site www.hamleys.com, including information you provide when registering an account (name, email Id and other details) with us, subscribing to any of our services, posting material, contacting us, entering a competition and/or promotional and/or Event booking and marketing purposes.
    • When you contact our Customer Call Centre via phone, we may retain a recording of your call details.
    • When you write to us, we may retain a copy of your correspondence and contact details.
    • When you avail our Gift card services for your friends or other person (e-mail addresses of your friends and other people) When you make a purchase through our site, we must necessarily obtain and process the following data in order to fulfil your order with us:
    • Your name, address, billing information, email ID and phone number.
    • A record of your transactions with us and your purchase history.
    • Recipient details (name and email id) for gift cards
    • Additionally, we can use your data to improve your experience or complete an order you have placed with us.

5. Purpose for which we collect your Personal Data

We process your personal data to operate, provide, and improve the Hamleys Products and related Services that we offer our customers. These purposes include:

• Purchase and delivery of products and related services. We use your personal data to take and handle orders, deliver products and related services, process payments, and communicate with you about. orders, products, and promotional offers. This helps us to carry out our obligations arising from any contracts entered between you and us.
• Provide, troubleshoot, and improve Hamleys Services. We use your personal data to provide functionality, analyse performance, fix errors, and improve usability and effectiveness of the Hamleys Services. We also ensure that content from our site is presented in the most effective manner for you and for your computer.
• Recommendations and personalisation. We use your personal data to recommend features, products, and services that might be of interest to you, identify your preferences, and personalise your experience with Hamleys Services. This also allows you to participate in interactive features of our service, when you choose to do so.
• Comply with legal obligations. In certain cases, we collect and use your personal data to comply with the law/ regulation.
• Communicate with you. We use your personal data to communicate with you in relation to Hamleys Services via different channels (e.g., by phone, email) and notify you about changes to our service.
• Advertising. We use your personal data to display interest-based ads for features, products, and services that might be of interest to you. To learn more, please read our Interest-Based Ads notice.
• Fraud prevention. We process personal data to prevent and detect fraud and abuse in order to protect the security of our customers.
• Purposes for which we seek your consent. We may also ask for your consent to process your personal data for a specific purpose that we communicate to you. When you consent to our processing your personal data for a specified purpose, you may withdraw your consent at any time, and we will stop processing your data for that purpose.

6. Job Applicants

• We process personal data relating to those who apply for job vacancies with us or who send speculative job applications to us. We do this for employment purposes, to assist us in the selection of candidates for employment, and to assist in the running of the business. The personal data may include identifiers such as name, date of birth, personal characteristics such as gender, qualifications and previous employment history.
• We will not share any identifiable information about you with third parties without your consent unless the law allows or requires us to do so. The personal data provided during an application process will be retained for a period of at least 12 months or, if required by law, for as long as is required.
• This privacy notice does not form part of an employment offer or contract between us. If we make an employment offer to you, we will provide further information about our handling of your personal information in an employment context separately.

7. Where we process and transfer personal data

The data that we collect from you will be processed at environment hosted within EU/UK. It may also be processed by organisations operating in the EEA that Hamleys has instructed.

Information about our customers is an important part of our business and we are not in the business of selling our customers' personal information to others. If Personal Data is transferred outside the UK, EEA or an Adequacy rated country Hamleys ensure that the third-party processor adheres to the EUGDPR and UK Data Protection legislation and the transfer of data is contractually endorsed under a Data Processing Agreement, standard model clauses or Binding Corporate Rules.

Purpose of Transfer of Personal Data can include but are not limited to transactions involving third-party payment gateways and service providers including order fulfilment and delivery.

By submitting your personal data, you agree to this transfer, storing or processing.

8. How we secure your Information

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

• We maintain physical, electronic, and procedural measures in connection with the collection, storage and disclosure of Customer personal data for its protection. It is expressly stated that the Company shall not be responsible for any breach of security or for any action of any third parties that receive Users’ personal data or events that are beyond the reasonable control of the Company including, acts of government, computer hacking, unauthorized access to computer data and storage device, computer crashes, breach of security and encryption, etc.
• Any payment transactions will be encrypted [using SSL technology]. Unfortunately, the transmission of information via the internet is not completely secure. We will use reasonable endeavors to protect your personal data, but we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.
• Our security measures may require that we may ask you to verify your identity before we disclose personal information to you.
• Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
• It is important for you to protect against unauthorized access to your password and to your computers, devices, and applications. We recommend using a unique password for your Hamleys account that is not utilized for other online accounts. Be sure to securely sign off when you finish using a shared computer.

9. How long we store your personal data

We store your personal data in accordance with our data retention policy. This policy is reviewed and updated internally to ensure we do not store your data for longer than is necessary. We also review how and where we store any data to ensure that we meet our obligation to store data securely.

In addition, some of the data we hold may be subject to certain legal and regulatory obligations, which provide a minimum retention period for different types of data. The retention period varies depending on the data we hold.

10. Disclosure of your personal data

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006. We may disclose your personal information to third parties:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If Hamleys of London Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use, our terms and conditions of sale and other agreements; or to protect the rights, property, or safety of Hamleys of London Limited, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

11. Third Party Websites

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. In case of completion of payment via online medium, we would redirect you to secure payment gateway services of third-party.

12. How customers may Opt-out

If you are an existing customer, we may use your data to contact you about similar products or services by text or email, unless you tell us otherwise. You may opt-out of these messages by:

• Opting out of marketing communications at the time of purchase.
• Clicking the 'unsubscribe' link (and following the unsubscribe process) contained in any of our marketing communications.
• Unsubscribing to marketing communications via ‘My account’ if you are a registered customer.
• If customer wish to withdraw their consent, then customer can contact us on below Emailing privacy@hamleys.co.uk.

13. Complaints

If you wish to make a complaint regarding our use of your personal data, please email privacy@hamleys.co.uk. If you are unhappy with the way in which we have handled your complaint, you may escalate your complaint to the Information Commissioner's Office (ICO) by visiting www.ico.org.uk/concerns/ or contacting them by post or telephone:

Information Commissioner's Office
Wycliffe House
Water Lane Wilmslow
Cheshire SK9 5AF

Tel: 0303 123 1113 (local rate)

Hamleys' ICO registration number is Z6094151.

14. Changes to our privacy policy

The Privacy Policy was last updated in 29th July 2024.

15. Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to privacy@hamleys.co.uk.