Privacy Policy
1. GENERAL
Peaches and the boy protects your personal privacy and takes measures to ensure that your personal data is protected when using our services. Below is our policy regarding integrity ("Integrity Policy") that determines how NP KIDS STORES, VAT 10371802Z, 12A Ayias Fylaxeos, 3025, Limassol, Cyprus, mydata@peachesandtheboy.com ("Peaches and the boy/we") is using, processing and protects your personal data. The Integrity Policy is applicable when Peaches and the boy is providing services and products related to purchase, service matters and other contact with Peaches and the boy.
Parts of the Integrity Policy also applies to the processing of personal data for persons who consents to customized marketing services ("Subscriber").
​
2. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
Peaches and the boy is the data controller and has the following contact information:
Via mail: Peaches and the boy / NP KIDS STORES LTD, 12A, AYIAS FYLAXEOS, LIMASSOL, 3025, CYPRUS
Phone: +35725377799
Email: mydata@peachesandtheboy.com
Peaches and the boy intends to process all personal data in a legal, open and fair manner in accordance with applicable law (including the European Union General Data Protection Regulation 2016/679 of 27 April 2016).
​
3. WHEN DO WE PROCESS YOUR PERSONAL DATA?
As a customer at Peaches and the boy, we process your personal data when you make a purchase on Peaches and the boy’s website, use Peaches and the boy's support, visit Peaches and the boy’s website or otherwise contact Peaches and the boy. The purposes of Peaches and the boy’s processing of personal data are specified in section 5.
As a Subscriber at Peaches and the boy we process personal data about you. All personal data is specified in section 4.
4. WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?
​
​
Purpose
Legal basis
Types of personal data
Type of processing
Automated decision-making
Storage period
Obligations in connection to order/purchase
Performance of contract
Processing of personal data is required for Peaches and the boy’s fulfilment of obligations in connection with order/purchase. The absence of personal data means that Peaches and the boy cannot fulfil its obligations and may be forced to refuse the purchase.
Name
​
Social security number or national ID
​
Address
​
​
Phone number
​
Payment history
​
Payment details
​
Credit data
​
Information regarding purchase
Delivery (including contact in connection to the delivery)
​
Identification
​
Handling of payments (including any obtaining of credit data and analysis of payment solutions)
​
Handling of complaints and warranty matters.
No
Performance of purchase agreement (including delivery and payment) and 36 months thereafter for the purpose of handling any complaints and warranty matters
Fulfil Peaches and the boy's legal obligations
Statutory requirement
Processing of personal data is required by law. The absence of personal data means that Peaches and the boy cannot fulfil its obligations and may be forced to refuse the purchase.
Name
​
Social security number or national ID
​
Address
​
​
Phone number
​
Payment history
​
Payment details
​
Credit data
​
Information regarding purchase
Handling necessary to fulfil Peaches and the boy's legal obligations by law, judgment or public authority decision (such as the Accounting Act and Product Liability Rules and Product Safety)
No
In accordance with the statutory requirement
Segmented marketing of Peaches and the boy’s goods via email, phone or SMS / MMS
Legitimate interest
The processing is necessary to satisfy Peaches and the boy's legitimate interest in certain marketing.
Name
​
Age
​
Sex
​
Address
​
​
Phone number
​
Payment history
​
Payment details
​
Purchase history
​
Purchase and user generated data
​
Sending newsletters with information and offers
​
Simplify the use of Peaches and the boy services (e.g. by saving favourites and thus facilitating future purchases or reminding you of items forgotten in the digital shopping cart)
​
Personal communication based on your behaviour through Peaches and the boy media
No
Performance of purchase agreement (including delivery and payment) and 36 months thereafter for the purpose of giving more offers from Peaches and the boy.
Customised offers as well as targeted communication via mail, email, phone or SMS / MMS
Consent
Processing takes place after obtaining consent for certain customised marketing.
Name
​
Age
​
Sex
​
Address
​
​
Phone number
​
Payment history
​
Payment details
​
Purchase history
​
Purchase and user generated data
​
Specified customer choices regarding communication channels.
Personalised marketing (e.g. relevant product recommendations, presentation of specific benefits and offers, and other similar actions)
​
Analysis of your personal data is done at the individual level. The analysis is the basis for Peaches and the boy's communication with you and the offers, benefits and information sent to you
No
Until the consent is revoked
Manage customer service issues
​
Legitimate interest
The processing is necessary to meet your and Peaches and the boy's legitimate interest in customer service.
Name
​
Address
​
​
Phone number
​
Payment history
​
Payment details
​
Purchase history
​
Correspondence
​
Any defects / complaints
​
​
Communication and response of any questions to our customer service
Identification and investigation of possible complaints and support cases
No
Until the matter is closed
Implementation and handling of competitions and / or events
Consent
Processing takes place after obtaining consent for processing personal data for handling competitions and / or events.
​
Name
​
Social security number or national ID
​
Address
​
​
Phone
​
Information
regarding competition entries
​
Information regarding event evaluations
Contact before and after competitions or events where you participated (e.g. notifications, questions or evaluations)
​
Identification
Selection of winners
Provision of possible winnings
No
Meanwhile the competition / event and stages in connection thereto are in progress
Evaluation, development and improvement of Peaches and the boy’s services, products and systems
​
Legitimate interest
The processing is necessary to satisfy your and Peaches and the boy's legitimate interest in the evaluation, development and improvement of Peaches and the boy’s services, products and systems.
Age
​
Sex
​
City
Correspondence / feedback about Peaches and the boy's products
​
Purchase and user generated data
​
Technical data (e.g. language setting, IP address, browser settings, operating system, screen resolution and platform)
​
Information about your integration with Peaches and the boy
Adaptation of services
​
Development of information for improving commodity and logistics flows (e.g. forecasting of purchases, inventories and deliveries)
​
Development of information regarding development and improvement of Peaches and the boy's product range
​
Development of information for the development and improvement of Peaches and the boy’s resource efficiency
​
Development of information for planning of establishments
​
Offer the opportunity to influence product range
​
Development of information for the improvement and development of IT systems
​
Personal data analyses are made through segmentation of customers and made on an aggregated level using unidentified or pseudonymised data
No
36 months from collection
Prevent, avoid and investigate crimes against Peaches and the boy as well as prevent abuse of Peaches and the boy services
Statutory requirements and legitimate interest
​
1) The processing of personal data subject to statutory requirements.
​
2) The processing is necessary to satisfy your and Peaches and the boy's legitimate interest in preventing, avoiding and investigating crimes as well as preventing abuse of Peaches and the boy services.
Social security number or national ID
​
Video recordings from camera surveillance
​
Purchase and user generated data
​
Technical data (e.g. language setting, IP address, browser settings, operating system, screen resolution and platform)
Information about your integration with Peaches and the boy
Prevent and investigate possible fraud / legal offense
Prevent harassment, junk email, phishing, or other actions prohibited by law or Peaches and the boy’s terms
Protection and improvement of IT environment
No
36 months from collection
Administration of customer profile
​
Legitimate interest
The processing is necessary to satisfy your and Peaches and the boy's legitimate interest in managing your customer profile and facilitating you to use your rights to modify, delete, limit your stored personal data and data portability.
Name
​
Social security number or national ID
​
Address
​
​
Phone
​
Payment history
​
Payment details
​
Purchase history
​
Purchase information
​
Username and password
​
Settings regarding your profile and your personal choices
​
Enable login
​
Ensure identity
​
Allow you to change, delete and restrict the storage of personal data
Ensure correct and updated personal data
​
Offer access to purchase and payment history
​
Managing your customer choices
No
36 months from collection
When Peaches and the boy processes personal data based on a balance of interest, we have assessed that our interest in processing personal data outweighs the privacy violation that the processing may imply, partly because the processing is limited and that the data subject can contact Peaches and the boy and at any time have its data deleted. Peaches and the boy never processes sensitive personal data based on a balance of interest and does not perform automated decision making without your consent.
When Peaches and the boy processes personal information with the consent of you, your consent must be voluntary, specific, informed and imply unambiguous consent to be considered as legal basis. If you have given your consent to Peaches and the boy, you are entitled to withdraw it at any time.
​
5. PROFILING
For Subscribers, Peaches and the boy may process personal data through profiling. Such profiling is done with your consent. You can revoke your consent at any time.
Profiling means that we analyse information about how you use our website, what products, services and offers you have shown interest in, information about your purchases, which of our newsletters you have interacted with, if you have signed up for any of our events and information about your account. We do this to provide you with offers we think is suitable for you and to invite you to events we think you are interested in.
You are entitled to object to such profiling at any time. Any objection may be emailed to mydata@peachesandtheboy.com. Upon receiving your notification, Peaches and the boy will stop processing your personal data for this purpose.
​
6. ACCESS TO STORED PERSONAL DATA
Peaches and the boy may disclose personal data to other companies that are part of the same group as Peaches and the boy, as well as to partners to fulfil our commitments and the purposes mentioned above. Our partners are: Panagora, Daniel Jernström, QlickView, Element Logic, PerfectIT, Unifaun, Posti, PostNord, Budbee, UPS, Shipwallet, Hörby Bruk, Captech, Leggodt, Pragma, NSH Nordic, Zendesk, Xcally, Relation Desk, Netigate, PayPal, Qliro, Nets/DIBS, Trustly, Klarna, Customer Value, Rule, Preglife, Google, Forward3D, Lifeler, Nosto, TradeDoubler, Criteo, Facebook, Hojtar, Sitegainer, Disqus, Yandex, vk.com, Sogou, Baidu, Microsoft, Naver, Affiliate Window, CrazyEgg, Datafeedwatch, Wordpress, Relex, Redeal och Veinteractive.
​
Data forwarded to third parties is only used to provide the abovementioned services to you, such as freight forwarders in the field of delivery of goods, media agencies for distribution of marketing and credit reporting or debt collection agencies for credit reporting, identity checks and debt collection.
​
We never transfer your personal data for marketing purposes conducted by third parties outside the Peaches and the boy Group and our partners. We will neither sell your personal data to third parties without your permission. Peaches and the boy may disclose your personal data if it is necessary to comply with applicable laws or government requirements, to safeguard Peaches and the boy's legal interests or to detect, prevent or notice fraud and other security or technical issues.
​
Peaches and the boy always strives to store personal data within the EU/EEA. The data may be transferred and processed in a non-EU/EEA country (third country). Transfers made are made to the United States, for Google Analytics (analysis) and Zendesk (customer service). Any transfer is made in accordance with applicable legislation and persons subject to the transfer will be notified.
​
7. HOW DO WE PROTECT YOUR PERSONAL DATA?
We have taken technical and organizational measures to protect your data from loss, manipulation and unauthorized access. We are continuously adjusting our security measures in accordance with the progress and developments in the technical field. To make card purchases as secure as possible, all data is sent in an encrypted form. This means that the information is transmitted via a secure connection and that your personal data cannot be read by third parties. For card purchases, we collaborate with an authorized payment agent that helps us to instantly check with the bank that the card is valid for purchase. Our payment agent processes your card details in accordance with the international security standard PCI DSS developed by VISA, MasterCard, Diners, American Express and JCB card companies. This means that the security is very high when processing your card details. When you pay by card, we reserve the right to carry out an identity check.
​
Peaches and the boy may allow third parties to use your personal data for marketing purposes upon request by us to promote our products and services, but we will never allow a third party to use your personal information to conduct their own marketing towards you.
​
8. WHAT ARE YOUR RIGHTS?
Peaches and the boy will, at your request or on its own initiative, rectify, delete, disassociate or supplement your personal data if the data is found to be incorrect, incomplete or misleading.
As a data subject, you have the right to request:
1. Access to your personal data. You have the right to have a filing extract or a copy of all personal data Peaches and the boy is processing about you. This right can be used at any time through a written and signed request.
​
2. Rectification of your personal data. You have the right to request that Peaches and the boy will correct incorrect or incomplete processed personal data without unnecessary delay.
​
3. Deletion of your personal data. You are entitled to request that your personal data is deleted if the storage of data no longer is necessary for the purpose for which it was collected. If there is a statutory requirement to store your personal data or if there are other legitimate reasons why Peaches and the boy must store your data, such as unpaid debts, your personal data cannot be erased. We will end all processing of personal data for other purposes than complying with the legislation.
​
4. Restriction of processing. You are entitled to request that your personal data be processed for certain restricted purposes. For example, you may request a restriction when you believe your information is incorrect and you have requested a correction according to the above. While the accuracy of the data is being investigated, its processing will be restricted.
​
If your personal data is stored at Peaches and the boy, you have the right to data portability. That means the right to, under certain conditions, extract and transfer some of your personal data in a structured, widely used and machine-readable format to another personal data controller.
If Peaches and the boy is processing personal data based on a balance of interest, you have the right to object to such processing. In the case of opposition, Peaches and the boy will continue the processing only if there are more compelling interests to do so.
​
You may at any time object to your personal data being processed for direct marketing. Peaches and the boy does not process your personal data for direct marketing purposes if you oppose to such processing. Once we have received your objection, we will cease to process your personal data for such marketing purposes. Any objection is sent to mydata@peachesandtheboy.com. If you have consented to Peaches and the boy storing and using your personal data for marketing purposes, you may revoke such consent at any time. Such recall may be limited to only part of the processing, such as direct marketing. Any recall is sent to mydata@peachesandtheboy.com.
​
As a data subject, you own the right to file any complaints regarding the processing of your personal data to the Swedish Data Protection Authority.
​
9. USE OF COOKIES AND OTHER TRACKING TECHNIQUES
Our website uses cookies and other tracking techniques to enhance your online experience. You will find more information about this in our cookie policy. Peaches and the boy uses, among other things, Google's advertising services. You can read more about Google's collection, sharing, and use of data here.
​
10. POSSIBLE CHANGES OF Peaches and the boy’S INTEGRITY POLICY
Peaches and the boy reserves the right to make changes to this Integrity Policy at any time. If the Integrity Policy materially changes, then Peaches and the boy will, with reasonable notice, communicate this on its website and/or through email to you.
​
11. CONTACT INFORMATION TO THE DATA CONTROLLER
We are protecting our customers' personal data! Do not hesitate to contact us if you have any questions about how we process your personal data, this privacy policy or if you wish to request a filing extract.
Our contact information:
Peaches and the boy / NP KIDS STORES LTD
12A, Ayias Fylaxeos street
Limassol 3025
Cyprus
Phone: +357 25377799
Email: mydata@peacehsandtheboy.com
​