5. MANAGEMENT OF PERSONAL DATA BY NOTSHY
Who do we share your personal data with?
Your data is primarily used by NOTSHY.
However, NOTSHY may share your data with external recipients or its partners to ensure the proper functioning of the Site, the management of your transactions and payment security, the dispatch and delivery of your products, the organisation of customer service, the hosting, administration and management of your data, the distribution of emails, and the management of the brand and product promotions via our advertising service providers.
If necessary, your data may also be transferred to third parties in the context of complying with a legal obligation.
We work with specialist service providers for the hosting of our data, payment processing, logistics and the sending of our marketing communications (including Klaviyo). These service providers act solely on our instructions and are subject to confidentiality and security obligations.
We select the recipients of your data based on their competence in terms of data security and confidentiality.
Is the data collected sent outside the country?
For the purpose of improving our site and services, your data may be collected outside the European area by our suppliers or service providers.
How long is your personal data retained?
Your personal data, excluding banking data which is collected and processed by our payment service providers, is retained for 3 years from the date of your last interaction with NOTSHY (last purchase, last contact — email, chat, social media — with customer service, last opening of our newsletter, or the date your customer profile was created).
However, deleted data may be retained in archive with strictly limited access for the purposes of legal, accounting and tax obligations, or to enable the management of any complaints and warranty requests within the applicable limitation periods.
Following this, the data will be irreversibly anonymised.