Our website (www.youngplanet.com) and mobile app is provided by Young Planet Enterprises Limited trading as YoungPlanet (we, our or us). We are the controller of personal data obtained via our website and mobile app, meaning we are the organisation legally responsible for deciding how and for what purposes it is used.
We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR). We are also subject to the EU General Data Protection Regulation (EU GDPR) in relation to services we offer to individuals.
Given the nature of our website and mobile app, we do not expect to collect the personal data of anyone under 13 years old. If you are aware that any personal data of anyone under 13 years old has been shared with our website and mobile app please let us know so that we can delete that data.
- What this policy applies to
- Personal data we collect about you
- How your personal data is collected
- How and why we use your personal data
- Who we share your personal data with
- How long your personal data will be kept
- Transferring your personal data out of the UK
- Cookies and other tracking technologies
- Your rights
- Keeping your personal data secure
- How to complain
- How to contact us
Throughout our website and mobile app we may link to other website and mobile apps owned and operated by certain trusted third parties. Those third party website and mobile apps may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to those third party website and mobile apps, please consult their privacy policies as appropriate.
The personal data we collect about you depends on the particular activities carried out through our website and mobile app. We will collect and use the following personal data about you:
- your name, address and contact information, including email address and telephone number;
- location data, if you choose to give this to us. Most mobile devices allow you to control or disable the use of location services by any application on your mobile device in the device “settings” menu;
- details of any information, feedback or other matters you give us by phone, email, post or via social media;
- your account details, such as username and login details;
- your activities on, and use of, our website and mobile app including your use of YoungPlanet including the manage my posts, messages, favourites, saved searches, my details, create account, post an item or the Help sections;
- information about the services we provide to you;
- your contact history, purchase history and saved items;
- information about how you use our website and mobile app and technology systems;
- your responses to surveys, competitions and promotions;
- information you provide during an exchange or other exchange based content that you generate or is connected to your account as a result of an exchange you are involved in.
We collect and use this personal data for the purposes described in the section ‘How and why we use your personal data’ below.
We collect personal data from you:
- directly, when you enter or send us information, such as when you register with us, contact us (including via email), send us feedback, use the services on our website and mobile app including any chat facilities on the website and mobile app, post material to our website and mobile app for the purposes of an exchange and complete customer surveys or participate in competitions via our website and mobile app, and
- indirectly, such as your browsing activity while on our website and mobile app; we will usually collect information indirectly using the technologies explain in the section on ‘Cookies and other tracking technologies’ below
We may supplement the personal data we collect with information from third parties and add it to your account information including but not limited to demographic information that is publicly available, additional contact information, credit check information, and information from credit bureaus, as allowed by applicable national laws.
We may allow you to share information with social media sites or use social media sites to create your account or to connect your account with the respective social media site. Those social media sites may give us automatic access to certain personal information retained by them about you (e.g., content viewed by you, content liked by you, and information about the advertisements you have been shown or may have clicked on, etc.). You can control the personal information you allow us to have access to through the privacy settings on the applicable social media site and the permissions you give us when you grant us access to your personal information retained by the respective social media site about you. By associating an account managed by a social media site with your account and authorising us to have access to this information, you agree that we may collect, use and retain the information provided by these social media sites in accordance with this Privacy Notice.
If you give us personal data about someone else, you must do so only with their explicit and prior consent. You have to inform them how we collect, use, disclose, and retain their personal information according to this Privacy Notice.
Under data protection law, we can only use your personal data if we have a proper reason, e.g.:
- where you have given consent
- to comply with our legal and regulatory obligations
- for the performance of a contract with you or to take steps at your request before entering into a contract, or
- for our legitimate interests or those of a third party
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting us (see ‘How to contact us’ below).
The table attached explains what we use your personal data for and why.
See ‘Who we share your personal data with’ for further information on the steps we will take to protect your personal data where we need to share it with others.
We may use your personal data to send you updates (by email, text message, telephone, post or push notification) about our services, including exclusive offers, promotions or new services.
We have a legitimate interest in using your personal data for marketing purposes (see above ‘How and why we use your personal data’). This means we do not usually need your consent to send you marketing information. However, where consent is needed, we will ask for this separately and clearly.
You have the right to opt out of receiving marketing communications at any time by:
- contacting us at firstname.lastname@example.org;
- using the ‘unsubscribe’ link in emails, or
- updating your marketing preferences via your account.
We may ask you to confirm or update your marketing preferences if you ask us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.
We will always treat your personal data with the utmost respect and never share it with other organisations outside the YoungPlanet group for marketing purposes.
For more information on your right to object at any time to your personal data being used for marketing purposes, see ‘Your rights’ below.
We routinely share personal data with:
- third parties we use to help deliver our services to you; and
- other third parties we use to help us run our business, e.g. marketing agencies or website and mobile app hosts and website and mobile app analytics providers.
We only allow those organisations to handle your personal data if we are satisfied they take appropriate measures to protect your personal data. We also impose contractual obligations on them to ensure they can only use your personal data to provide services to us and to you.
We or the third parties mentioned above may occasionally also need to share personal data with:
- external auditors, e.g. in relation to the audit of our accounts, in which case the recipient of the information will be bound by confidentiality obligations;
- professional advisors (such as lawyers and other advisors), in which case the recipient of the information will be bound by confidentiality obligations;
- law enforcement agencies, courts, tribunals and regulatory bodies to comply with our legal and regulatory obligations;
- other parties in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency—usually, information will be anonymised but this may not always be possible, however, the recipient of the information will be bound by confidentiality obligations.
Other users may have access to the information you share on YoungPlanet including feedback, ratings and associated comments and any information you chose to share in your profile or your collections. Your User ID is displayed throughout YoungPlanet and is available to the public. It is connected to all of your YoungPlanet activity. Notices sent to other users about suspicious activity and notice violations on our sites refer to User IDs and specific items. So if you associate your name with your User ID, the people to whom you have revealed your name will be able to personally identify your YoungPlanet activities. We allow only limited access to other users' contact, shipping and financial information as necessary to facilitate your transactions and collect payments. However, when users are involved in a transaction, they have access to each other's name, User ID, email address and other contact and shipping information.
If you would like more information about who we share our data with and why, please contact us (see ‘How to contact us’ below).
When you are in a transaction with another user we may provide you with the personal information of the other user (such as his/her name, account ID) to complete the transaction. We encourage you to inform the other user about your privacy practices and respect his/her privacy. In all cases, you must give the other user a chance to remove himself/herself from your database and give him/her a chance to review what information you have collected about them.
We will not keep your personal data for longer than we need it for the purpose for which it is used. Different retention periods apply for different types of personal data. Further details on this are available on request from email@example.com
If you stop using your account we will delete or anonymise your account data after seven years.
Following the end of the of the relevant retention period, we will delete or anonymise your personal data.
Other countries outside the UK have differing data protection laws, some of which may provide lower levels of protection of privacy.
It is sometimes necessary for us to share your personal data to countries outside the UK and EEA. In those cases we will comply with applicable UK and EEA laws designed to ensure the privacy of your personal data.
For example we may transfer your personal data to our service providers located outside the UK.
We will also ensure all protections required by applicable UK laws are in place before transferring personal data to any organisation or body (or its subordinate bodies) governed by public international law or set up by, or on the basis of, an agreement between two or more countries (international organisations).
Under data protection laws, we can only transfer your personal data to a country outside the UK where:
- in the case of transfers subject to UK data protection law, the UK government has decided the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy regulation’) further to Article 45 of the UK GDPR.
- there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you, or
- a specific exception applies under relevant data protection law
Where we transfer your personal data outside the UK we do so on the basis of an adequacy regulation or (where such is not available) legally-approved standard data protection clauses recognised or issued further to Article 46(2) of the UK GDPR. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time we will not transfer your personal data outside the UK unless we can do so on the basis of an alternative mechanism or exception provided by UK data protection law.
For further information about such transfers and the safeguards we employ please contact us (see ‘How to contact us’ below).
Other countries outside the UK have differing data protection laws, some of which may provide lower levels of protection of privacy.
You generally have the following rights, which you can usually exercise free of charge:
For further information on each of those rights, including the circumstances in which they do and do not apply, please contact us (see ‘How to contact us’ below). You may also find it helpful to refer to the guidance from the UK’s Information Commissioner on your rights under the UK GDPR.
If you would like to exercise any of those rights, please complete a request form—available on our website and mobile app or email, call or write to us—see below: ‘How to contact us’. When contacting us please:
- provide enough information to identify yourself (e.g. your full name, address and user name)] and any additional identity information we may reasonably request from you, and
- let us know which right(s) you want to exercise and the information to which your request relates
We have appropriate security measures to prevent personal data from being accidentally lost or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
Please contact us if you have any queries or concerns about our use of your information (see below ‘How to contact us’). We hope we will be able to resolve any issues you may have.
You also have the right to lodge a complaint with the Information Commissioner in the UK.
The UK’s Information Commissioner may be contacted at https://ico.org.uk/make-a-complaint or by telephone: 0303 123 1113.
Our contact details are shown below:
YoungPlanet Lydmore House, St Anns Fort, Kings Lynn, Norfolk PE30 2EU