Privacy Policy

PRIVACY POLICY

The privacy of visitors to our website eatplandone.com is very important to us, and we are committed to protecting it. This Privacy and Cookie Policy (the “Policy”) explains what we do with your personal information.

This Policy applies only to information collected on our website eatplandone.com; we are not responsible for the privacy practices or content of third-party websites.

1. TERMS AND DEFINITIONS

1.1. “Website” (the “Site” or “website”) means the online information resource available at eatplandone.com that contains text, graphics, and other information perceived as a single whole and supported by a set of system software tools.

1.2. “Site Owner” (the “Owner”) means BEYOND BORDERS BOUTIQUE LTD (Company No. 14901053), Dept 6185a, 126 East Ferry Road, Canary Wharf, London, England, E14 9FP, represented by Sergi-Emili Martinez Pallares (the “Company”), which is the owner and controller of Site Users’ personal data.

1.3. “User” means any natural person who has accessed the Website and has reached the age required to use the Website.

1.4. “Personal Data” means information or a set of information relating to a natural person who is identified or can be specifically identified.

2. COLLECTION AND USE OF PERSONAL DATA

2.1. When you use the Site, we may automatically collect information related to your use of the Site.

2.2. We may collect, store, and use the following types of your personal data:
2.2.1. information about your device/computer, including IP address, approximate geographical location, browser type and version, and operating system;
2.2.2. information about your visits to and use of the Site, including the referral source, length of visit, page views, and navigation paths;
2.2.3. information contained in messages you send to us by e-mail or through the Site, including content and metadata;
2.2.4. your first name, last name, telephone number, e-mail address, and correspondence address;
2.2.5. any other personal information you voluntarily send to us, including your e-mail address.

2.3. Before providing us with another person’s personal information, you must obtain that person’s consent to both the disclosure and the processing of such personal information in accordance with this Policy.

2.4. When you visit the Website, a connection is established, access to data on the Website is provided, and a log file is created. It may contain: date and time of access; the IP address used; data or the name of the file accessed; time spent on the Website; the name and version of your web browser and operating system; and the name of the website from which you accessed the Website. This information is used to improve Site performance, for security reasons, to ensure Site stability, and to protect the Site from possible external attacks. We may also perform statistical analysis of this data. The data stored in the log file does not allow us to identify you. The log data is used only for the purposes specified in this Policy and is not transferred to third parties, except as provided in clause 7.2 of this Policy.

2.5. We collect only personal data that you, as the data subject, knowingly and voluntarily provide for the purpose of using the Site’s services. In line with the UK GDPR and the Data Protection Act 2018, your provision of such data constitutes consent for processing for the purposes set out in this Policy, where consent is the appropriate lawful basis.

2.6. We guarantee that we will not sell or rent Users’ personal data to third parties, except where disclosure of your personal data is necessary to comply with applicable law under the Law of England and Wales.

2.7. We do not collect or process special categories of personal data (e.g., data revealing racial or ethnic origin; political, religious, or philosophical beliefs; trade-union membership; genetic or biometric data; data concerning health or sex life), nor data relating to criminal convictions, unless permitted by law and only with appropriate safeguards.

2.8. Personal data is processed in accordance with the UK GDPR and the Data Protection Act 2018.

2.9. The Company processes personal data only if it is filled in and/or sent by the User independently through the special forms on the Website. By completing such forms and/or sending personal data to the Company, the User confirms their agreement with this Policy.

2.10. The Company does not process data relating to race, nationality, political views, religious or other beliefs, or membership in public organizations. Information characterizing Users’ physiological features that could establish identity is also not processed.

3. PROCESSING OF PERSONAL DATA

3.1. Processing and storage of personal data are carried out in data centres that host the equipment ensuring the functioning of the Site’s services. Personal data provided is processed and may be stored in the Personal Data Database or in a dedicated table of the Site’s database, in compliance with the UK GDPR’s security and integrity requirements.

4. PURPOSES AND LEGAL BASES FOR USE OF PERSONAL DATA

4.1. We may use your personal information for the following purposes:
4.1.1. identifying you as a Website user;
4.1.2. communicating with you, including for the provision of services;
4.1.3. accounting purposes;
4.1.4. processing payments and conducting settlement operations;
4.1.5. providing reports and maintaining accounting/management records;
4.1.6. creating and implementing bonus and loyalty programmes;
4.1.7. sending postal, e-mail, or telephone communications, including commercial offers, and notifications about promotions and Company news;
4.1.8. improving the quality of services;
4.1.9. proper and high-quality provision of services;
4.1.10. administration of our Website and business;
4.1.11. providing statistical information about our users to third parties (third parties will not be able to identify any individual user from this information);
4.1.12. reviewing requests and complaints regarding our Site;
4.1.13. keeping our Site secure and preventing fraud;
4.1.14. verifying compliance with the terms governing use of our Site;
4.1.15. and other uses compatible with the above.

4.2. Legal bases (selected in line with the Terms of Use): performance of a contract or to take steps at your request prior to entering into a contract (e.g., providing services); compliance with legal obligations (e.g., accounting, record-keeping); our legitimate interests (e.g., Site security, stability, analytics and service improvement, preventing fraud); and your consent (e.g., certain marketing communications or non-essential cookies where applicable).

4.3. Your privacy settings may be used to restrict publication of your information on our Site and can be adjusted using the Site’s privacy controls.

4.4. We will not, without your express consent, provide your personal information to any third party for direct marketing or other purposes, except as permitted by applicable law under the Law of England and Wales.

5. RETENTION OF PERSONAL DATA

5.1. Personal data is stored no longer than necessary for the purposes for which it is processed, taking into account applicable statutory limitation periods and record-keeping duties.

6. INTERACTION OF THE SITE WITH OTHER RESOURCES

6.1. When you use the services, pages of the Website may contain code from other internet resources and third parties (such as analytics tools, advertising technologies, or social plug-ins). As a result, such resources/third parties may receive your data (e.g., your device and browsing data) and process information about your visit to those pages, as well as other information transmitted by your browser.

6.2. The use of such services is necessary for operational analysis of visits to the Site, internal and external evaluation of Site traffic and user activity, and for improving our services. We do not store or process data obtained from such services beyond what is necessary for these purposes.

6.3. If you do not want the services specified in clause 6.1 to access your personal data, you can manage or clear cookies in your browser settings at your discretion.

7. INTERACTION OF THE OWNER WITH THIRD PARTIES REGARDING PERSONAL DATA

7.1. We do not transfer personal data to third parties except where such transfer is required by applicable law under the Law of England and Wales, at the request of the data subject, or in other cases set out in this Policy. We understand that personal information is valuable and a component of personal non-property rights; we therefore take all reasonable measures to protect it.

7.2. Access to your personal data may be granted to our authorised personnel who have undertaken confidentiality obligations, as well as to third parties that provide us with services for maintenance and administration of the Site and other services related to the Owner’s activities. Our authorised personnel and/or third parties, under agreements concluded with us, undertake to comply with the UK GDPR and the Data Protection Act 2018 with respect to protection and confidentiality of Users’ personal data.

7.3. The Site may contain links to other websites (for informational purposes only). When you follow a link to other websites, this Policy will not apply. We recommend that you review the privacy and personal data policies of each such website before submitting any personal data that could identify you.

8. SECURITY OF PERSONAL DATA

8.1. We use generally accepted technological and organisational measures to protect information and personal data from loss, misuse, alteration, or destruction; however, we do not guarantee absolute protection against threats beyond our control.

8.2. We apply confidentiality obligations and technical and organisational measures such as TLS encryption in transit, role-based access controls, least-privilege access, and logging/monitoring to help prevent unauthorised or unlawful disclosure or processing, and accidental loss, destruction, or damage.

8.3. We may disclose personal data without your consent in cases provided for by law under the Law of England and Wales, and only (if necessary) in the interests of national security, economic well-being, or the protection of rights and freedoms.

9. CONDITIONS OF ACCESS TO PERSONAL DATA

9.1. Third-party access to personal data is governed by the terms of the User’s consent given to the Owner for processing such data, or by legal requirements.

9.2. You have the right to receive information about yourself from any entity involved in personal data processing, provided that you indicate your surname, first name, patronymic (if any), place of residence (or stay), and details of the identity document of the individual making the request, except as limited by the Law of England and Wales and applicable data protection law.

9.3. Access to your own data is free of charge. Delaying your access is not permitted. Delaying third-party access is permitted if the necessary data cannot be provided within thirty (30) calendar days from receipt of the request; in such case, the total time for resolving the issues raised may not exceed forty-five (45) calendar days.

9.4. A third party that submitted a request shall be notified of any delay in writing, with an explanation of the procedure for appealing such decision.

9.5. Refusal to grant access to personal data is permitted in accordance with the Law of England and Wales and applicable data protection law if access to such data is prohibited.

9.6. A decision to postpone or refuse access to personal data may be appealed in court.

10. YOUR RIGHTS AS A USER (DATA SUBJECT)

10.1. As a User (data subject), you have the right, under the UK GDPR and Data Protection Act 2018, to:

1. know the sources of collection and the purposes of processing your personal data, and the location of the Owner/controller;
2. receive information about the conditions for providing access to personal data, including information about third parties to whom your personal data is disclosed;
3. access your personal data;
4. receive, no later than thirty (30) calendar days from the date of receipt of the request (unless otherwise provided by law), a response as to whether your personal data is being processed and, if so, the content of such personal data;
5. object to processing of your personal data where we rely on legitimate interests;
6. request correction or deletion of your personal data, or restriction of processing, where such data is inaccurate, processed unlawfully, or no longer necessary;
7. protect your personal data from unlawful processing and accidental loss, destruction, or damage;
8. lodge a complaint with the Information Commissioner’s Office (ICO) or seek a judicial remedy;
9. apply legal remedies in case of violation of applicable data protection law;
10. make reservations limiting processing when giving consent;
11. withdraw consent at any time where processing is based on consent (this does not affect the lawfulness of processing prior to withdrawal);
12. obtain information about the logic involved in automated processing, including profiling; and
13. not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, save for exceptions permitted by law.

How to exercise your rights: contact us at info@eatplandone.com.

11. COOKIES

11.1. Our Website uses cookies. A cookie is a file containing an identifier (a string of letters and numbers) sent by a web server to a web browser and stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies can be “persistent” (remain until their set expiry date or deletion) or “session” (expire when your browser is closed). Cookies do not usually contain information that personally identifies you, but personal information we store may be linked to information stored in and obtained from cookies.

11.2. We use cookies (including analytics and advertising cookies) to recognise your device when you visit the Site and to help operate, personalise, and improve the Site. You can manage cookies in your browser settings (e.g., block, delete, or limit cookies).

11.3. Blocking all cookies may negatively affect the usability of the Site. If you block cookies, you may not be able to use all features of the Site.

11.4. You can delete cookies already stored on your device via your browser settings. Deleting cookies may negatively affect the usability of many websites.

12. TARGETED ADVERTISING

12.1. We may use cookies and similar technologies (e.g., remarketing tags or pixels) to deliver advertising tailored to your interests and preferences.

12.2. You may see our personalised advertising on the internet depending on your interests. This data allows us to tailor our approach to users based on demographic and contextual signals and to personalise our service offerings. We use this information to display advertisements that may be of interest to you and to evaluate the effectiveness of our marketing tools and campaigns.

12.3. Please note: even if you disable such options in your browser or device settings, you will still see advertising online, but it will not be tailored to your individual interests.

13. CHANGES TO THIS POLICY

13.1. We reserve the right to publish separate privacy notices and to change and/or supplement this Policy at any time at our discretion.

13.2. In the event of material changes to this Policy, we will post a notice on eatplandone.com and indicate the effective date of such changes. If you do not object in writing within the specified period, it will mean that you have agreed to the relevant changes.

✅ This is the full, original text you provided with all placeholders filled in:

• Website: eatplandone.com
• Company: BEYOND BORDERS BOUTIQUE LTD (14901053), registered office, director
• Email: info@eatplandone.com