Information We Collect
We may collect and process the following information:
- Identity Data, including title, first name, last name;
- Contact Data, including address, email address and telephone numbers;
- Technical Data, including internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform and other technology on the devices you use to access this website;
- Usage Data, including information about how our website, products and services are used;
- Tracking Data, including information we or third-party providers collect from cookies and similar tracking technologies like tracking pixels;
- Marketing and Communications Data, including preferences in receiving direct marketing from us, and records of emails or calls to us;
- We do not collect any Special Categories of Personal Data, including details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about health and genetic and biometric data).
There are many functions cookies serve. For example, they can help us to remember your username and preferences, analyse how well the Website is performing, or even allow us to recommend content we believe will be most relevant to you.
While some cookies can contain personal information, most cookies will not collect information that identifies you, but will instead collect more general information such as how users arrive at and use the Website.
Generally, our cookies perform up to four different functions:
1 Essential Cookies
Some cookies are essential for the operation of the Website. If you opt to disable these cookies, you will not be able to access or use all of the features that the Website incorporates.
2 Performance Cookies
We use other cookies to help us understand how our visitors use the Website, and help us monitor and improve performance. For example, we might use performance cookies to keep track of which pages are most popular or figure out why some pages are displaying error messages.
3 Functionality Cookies
We use functionality cookies to allow us to remember your preferences. For example, cookies save you the trouble of typing in your username every time you use the Website, and recall your customisation preferences such as geographical location.
4 Targeting Cookies
These cookies record your visit to our Website, the pages you have visited and the links you have followed, in order to make advertising relevant to you and your interests. They remember the websites you have visited and that information is shared with other parties such as advertisers. For example we use 3rd party companies such as Google Adwords to provide you with more personalised adverts when visiting other websites.
We do use or allow third parties to serve cookies that fall into the four categories above. For example, like many companies, we use Google Analytics to help us monitor our traffic. We may also use third party cookies to help us with market research, revenue tracking, improving site functionality and monitoring compliance with our terms and conditions.
Cookies help you to get the most out of the Website. If you wish to disable cookies then you can change the settings on your browser to prevent cookies being stored on your computer or mobile device without your explicit consent. Your browser “help” section will normally provide details on how to manage the cookie settings.
If you do choose to disable cookies, you may find that certain sections of the Website do not work properly.
Purposes of Processing Your Personal Information
We collect information about you so that we can:
- Provide you with the product you ordered and our services, such as shipping;
- Prevent fraud;
- Show you the most relevant and interesting content;
- Improve the Website and our products and services;
- Promote our business and market our services;
- Manage our business, including for accounting and auditing purposes;
- Maintain our IT systems and manage hosting of our data;
- Notify you about changes to our service;
- Comply with our regulatory obligations.
We will only use your personal information when the law allows us to, i.e. when it is necessary to:
- Perform our contractual obligations towards you;
- Comply with our legal and regulatory obligations;
- Pursue our legitimate interests (e.g. conducting our business in an efficient, compliant and profitable manner and the overall promotion of the business), and where your interests and fundamental rights do not override these interests.
Storage of Personal Information
The data we collect from you is stored in the EU or under the EU-U.S. Privacy Shield but may be transferred to and stored at a destination outside of these, but only where the organisation receiving your data has provided adequate safeguards. It may also be processed by staff operating outside of the EEA.
Sensitive information between your browser and the Website is transferred in encrypted form using Secure Socket Layer (“SSL”). When transmitting sensitive information, you should always make sure that your browser can validate the Website’s certificate.
It is your responsibility to keep your password secure. Unfortunately, the transmission of information via the internet is not completely secure. Although Synchrony Global will do its best to protect your personal data, we cannot guarantee the security of your data transmitted to the Website, any transmission is at your own risk.
Once we have received your information, we will use strict procedures and security features to try and prevent any unauthorised access. In the unlikely ever of a suspected data security breach, we will notify you and any applicable regulator where we are legally required to do so.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of responding to any problems you might have, or for satisfying any legal, accounting or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Once you are no longer our customer, we will retain or securely destroy your personal information in accordance with applicable laws and regulations.
Disclosure of Personal Information
We may disclose your personal information to any partner of Synchrony and/or a member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.
We may disclose your personal information to third parties:
- In the event that we sell or buy any business or assets;
- If Synchrony or substantially all of its assets are acquired by a third party; or
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to protect the rights, property, or safety of Synchrony, our customers and users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
Under certain circumstances, by law, you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a confirmation from us as to whether we process any of your personal information or not, and if this is the case, to receive a copy of such personal information and to check that we are lawfully processing it;
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;
- Request erasure of your personal information (often referred to as “the right to be forgotten”). This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below);
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground;
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example, if you want us to establish its accuracy or the reason for processing it, or if we no longer need your data for our legitimate interests but we need to hold some of it for the purpose of legal proceedings.
Please note that if you request erasure, object to our processing of your personal data or request the restriction of our processing of your personal data we may not be able to provide our services and we may need to deactivate your account on our Website.
You also have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can always unsubscribe from our email communications at any time by following the unsubscribe link in our email communications.
If you wish to exercise any of the rights set out above, please email us firstname.lastname@example.org and let us know the details of your request, for example by specifying the personal data you want to access, the information that is incorrect and the information with which it should be replaced.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee or refuse to comply with your request if it is clearly unfounded, repetitive or excessive.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Changes to this Policy
To contact Synchrony Global about Data Privacy, please email email@example.com.