1. KEY TERMS

1.1 In this Privacy Policy:

1. “we”, “us”, “our” or “The Body Shop” means The Body Shop International Limited, a company registered in England and Wales (company no 15859787);
2. “Group” means collectively The Body Shop, The Body Shop’s owner, their affiliates and subsidiaries;
3. “you”, “your” or “customer” means any individual who visits our Website or retail stores or counters;
4. “personal information” means information that is about you and other individuals you may tell us about and which identifies you or those individuals; and
5. references to our “Website” means the website at www.thebodyshop.com, other websites which are operated by us and our branded mobile applications made available via third-party platforms.

2. INTRODUCTION

2.1 This Privacy Policy sets out the basis on which we collect and use personal information collected from or provided by you when you:

1. visit our Website;
2. visit our retail stores or counters, including if you register for an account with us in-store;
3. correspond with us across any of our channels, including via email, live chat, social media and text message;
4. submit a review regarding our products either in person or on our Website; and/or
5. sign up to our direct marketing campaigns, free prize draws and competitions.

2.2 This Privacy Policy tells you about your privacy rights and how the law protects you. This Privacy Policy describes:

1. who is responsible for the personal information that we collect about you;
2. the personal information we collect about you;
3. how we will use it;
4. who we may disclose it to; and
5. your rights and choices in relation to your personal information.

This is to make sure you have a full picture of how we collect and use your personal information. This Privacy Policy may be supplemented by other notices and privacy policies and is not intended to override them.

2.3 You have the right to object to our use of your personal information in certain circumstances. A summary of your right to object (along with other rights under data protection law) and the details of who to contact if you want to exercise them can be found at paragraphs 13 and 14 below.

3. OUR APPROACH TO CHILDREN’S PRIVACY

3.1 We are sometimes given information about children while dealing with customer complaints and concerns regarding children. The information in the relevant parts of this Privacy Policy applies to children as well as adults.

3.2 Our Website is not intended or designed for anyone under the age of 16 and we do not knowingly collect personal information relating to individuals who are under this age. If you learn that an individual under the age of 16 has registered for email newsletters, or otherwise provided their personal information to The Body Shop, please let us know using the contact information provided in paragraph 14 below. If we become aware that an underage user has provided personal information without parental permission, we will take such action as we deem appropriate. Such action may include terminating the relevant account and deleting all personal information provided by that user to the extent feasible and as soon as practicable. Depending on the country in which you are based, we may use personal information to carry out age verification checks and enforce any such age restrictions.

4. THIRD PARTY LINKS

4.1 The Website may include links to third party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share personal information about you. We do not control these third party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

5. WHO IS RESPONSIBLE FOR THE PERSONAL INFORMATION THAT WE COLLECT?

5.1 We are the data controller for the purpose of data protection law in respect of your personal information collected and used in connection with your use of the Website or instore sales.

5.2 The Body Shop franchisees or other authorised retailers or distributors (collectively “Authorised Sellers“) are independently owned and operated businesses that are licensed by The Body Shop or one of its Group to operate retail stores or e-commerce platforms under The Body Shop brand (franchisees) or to sell or distribute The Body Shop products (Authorised Sellers). These Authorised Sellers are separate legal entities that collect, use, or disclose personal information in accordance with their own privacy policies as separate data controllers. This Privacy Policy does not apply to the processing of personal information by Authorised Sellers.

6. WHAT PERSONAL INFORMATION DO WE HOLD ABOUT YOU?

6.1 We collect and use personal information about you in the course of you using the Website and visiting our stores. The personal information we hold includes:

(a) Information that you provide to us / we collect from you, which may include the following: