The TOW The Organic Way Store Limited is the data controller for the personal data collected when you use the App (also known as the ‘Site’) www.organicwaystore.com and any other associated App.

We collect personal data from you when you provide it to us directly and through your use of the Site. This information may include:

• Information you provide to us when you use our Site (e.g. your name, contact details, gender, product reviews, and any information which you add to your account profile);

• Transaction and billing information, if you make any purchases from us or using our Site (e.g. credit/debit card details and delivery information);

• Records of your interactions with us (e.g. if you contact our customer service team, interact with us on social media);

• Information you provide us when you enter a competition or participate in a survey;

• Information collected automatically, using cookies and other tracking technologies (e.g. which pages you viewed and whether you clicked on a link in

one of our email updates). We may also collect information about the device you use to access our Site; and

• Other information necessary to provide the Site, for example we may access your location if you give us your consent.

If you also shop in one of our stores, we may combine information you give us in-store (e.g. if you make a purchase or join our mailing list in-store) with the information above.

Depending on how you use our Site, your interactions with us, and the permissions you give us, the purposes for which we use your personal data include:

• To fulfil your order and maintain your online account.

• To manage and respond to any queries or complaints to our customer service team.

• To personalise the Site to you and show you content we think you will be most interested in, based on your account information, your purchase history and your browsing activity.

• To improve and maintain the Site, and monitor its usage.

• For market research, e.g. we may contact you for feedback about our products.

• To send you marketing messages and show you targeted advertising, where we have your consent or are otherwise permitted to do so.

• For security purposes, to investigate fraud and where necessary to protect ourselves and third parties.

• To comply with our legal and regulatory obligations.

We rely on the following legal basis, under data protection law, to process your personal data:

• Because the processing is necessary to perform a contract with you or take steps prior to entering into a contract with you (e.g. where you have made a purchase with us, we use your personal data to process the payment and fulfil your order).

• Because we have obtained your consent (e.g. where you contact us with a query, where you add optional information to your account profile, or if you consent to receive marketing from us).

• Because it is in our legitimate interests as an e-commerce provider to maintain and promote our services. We are always seeking to understand more about our customers in order to offer the best products and customer experience. We use information about you to tailor your view of the Site, to make it more interesting and relevant in respect of the products and offers on view.

Our Site may allow you the option of adding additional information to your account profile, such as information about your body type, skin type, hair type, hair condition, training regime, performance goals, height and weight. We treat this information with particular sensitivity, as we understand it can reveal information about your health or ethnicity, for example. You do not have to provide this information to us, and can delete it or update it at any time.

We love to communicate with our customers and so, depending on your marketing preferences, we may use your personal data to send you marketing messages by email, phone or post. Some of these messages may be tailored to you, based on your previous browsing or purchase activity, and other information we hold about you.

If you no longer want to receive marketing communications from us (or would like to opt back in), you can change your preferences at any time by:

• Contacting us at customercare@organicwaystore.com

• Clicking on the ‘unsubscribe’ link in any email

• Updating your settings in your account.

If you unsubscribe from marketing, please note we may still contact you with service messages from time to time (e.g. order and delivery confirmations, and information about your legal rights). You may also see ads for our Site on third party websites, including on social media. These ads may be tailored to you using cookies (which track your web activity, so enable us to serve ads to customers who have visited our Site). Where you see an ad on social media, this may because we have engaged the social network to show ads to our customers, or users who match the demographic profile of our customers. In some cases, this may involve sharing your email address with the social network. If you no longer want to see tailored ads you can change your cookie and privacy settings on your browser and these third party websites.

We share customers’ personal data with third parties in the following circumstances:

• With other companies in our group of companies, as necessary to operate the Site.

• With our suppliers and service providers working for us, e.g. payment processors and delivery companies.

• With our professional and legal advisors.

• With third parties engaged in fraud prevention and detection.

• With law enforcement or other governmental authorities, e.g. to report a fraud or in response to a lawful request.

• In the event that we sell any business assets, the personal data of our customers may be disclosed to a potential buyer. In this event, we will make reasonable attempts to ensure the buyer will be bound by the terms of this Privacy Policy.

• Otherwise where we have your consent or are otherwise legally permitted to do so.

This Site ensures that data is encrypted when leaving the Site. This process involves the converting of information or data into a code to prevent unauthorised access. This Site follows this process and employs secure methods to ensure the protection of all credit and debit card transactions.

Methods such as SSL are utilised to protect customer data when in transit to and from this Site over a secure communications channel. Whilst we do everything within our power to ensure that personal data is protected at all times from our Site, we cannot guarantee the security and integrity of the information that has been transmitted to our Site.

Our Site is not intended for, and should not be used by, children under the age of 16 under any circumstances. We do not knowingly collect personal data from children under 16. Users of the website declare themselves to be adult according to their applicable legislation. Minors may only use this Site with the assistance of a parent or guardian. Should we find that we have collected personal information from anyone under the age of 16 without parental consent, we will delete it immediately.

We are always here to answer any questions you may have regarding your privacy. Please contact us at customerservice@organicwaystore.com