PRIVACY POLICY

BSI Merch takes data privacy very seriously and will always act in accordance with the law in the country of our incorporation, the United Kingdom. Our data privacy policy and procedures have been updated to comply with both the General Data Protection Regulation (GDPR) and the Data Protection Directive (DPD) as of April 24th, 2018.

We collect and store the following identifiable data when you place an order: name, e-mail address, telephone number, billing address, shipping address and any email preferences you may have chosen to grant us. We do NOT store credit card numbers or any other payment information.

DATA OWNERSHIP & ROLES UNDER GDPR/CCPA

Where BSI Merch operates as a Licensee in partnership with a Licensor, the following roles apply:

• The Licensor shall be designated as the "controller" under GDPR and "business" under CCPA.

• BSI Merch shall be designated as the "processor" under GDPR and "service provider" under CCPA.

All consumer data procured by BSI Merch in connection with the sale of the Products shall be owned by the Licensor to the greatest extent allowable under current laws and regulations. During and after the Term of any applicable agreement, the Licensor grants BSI Merch a non-exclusive license to utilize the data for re-marketing purposes consistent with applicable laws and privacy policies. However, BSI Merch shall not sell or share this data with third parties or use it for any external commercial purpose without the Licensor's prior written approval.

Additionally, for marketing purposes, the Licensor shall provide:
(i) a hyperlink from all official Group websites and Group Social Media Assets,
(ii) reasonable access to Group Social Media Assets, and
(iii) reasonable access to the Group’s fan database.

DO WE SHARE DATA WITH ANYONE?

We do not share, sell, rent, or trade your information with any third parties without your consent, except as described below:

Your personal data is only shared internally with members or employees of BSI Merch.

Third-party Service Providers working on our behalf: We may pass your information on to our distributors, agents, sub-contractors and other associated organizations for the purpose of them providing services to you on our behalf.

Third-party Product Providers we work in association with: We may work closely with various third-party product and service providers to bring you a range of services designed to meet your extended needs. When you enquire about or purchase one or more of these products or services, the relevant third-party product provider will use your details to provide you with information and carry out their obligations arising from any contracts you have entered into with them. In some cases, our third-party product and service providers will be acting as data processors of your information and, therefore, we advise you to read their Privacy Policy and sign a Data Processing Agreement. These third-party product providers will share your information with us, which we will use in accordance with this Privacy Statement. We will of course only share personal data with third parties if you provide us your consent to do so.

BSI Merch uses Tree-Nation as a partner that plants trees as a result of some qualifying purchases (https://tree-nation.com/). For qualifying purchases you will receive an email from our NGO partner Tree-Nation, dedicated to fighting climate change, including the planting certificate and more information about the reforestation projects that BSI Merch supports.

BSI Merch uses Google, Facebook Ad Manager, and Meta Business Suite as third-party advertising providers to serve advertisements on the Site.

Advertising providers are third parties that display advertisements based on your visits to the Site and other websites you have visited, allowing targeted advertisements to be delivered to you for products and services in which you might be interested.

The Site also uses third-party traffic measurement services to analyze how visitors use the Site. These service providers may use cookies, web beacons, embedded scripts, or other similar mechanisms to automatically collect website usage information. Third-party advertisers may use this website usage information for purposes including but not limited to: delivering advertisements that may interest you, limiting ad repetition, and conducting advertising effectiveness research. We also use IP recognition to determine which country our users are visiting our store from, in order to show customers prices and shipping costs relevant to their location and to pre-complete fields in the checkout for customer convenience. We also use tracking pixels on our stores to gather anonymous non-identifiable data on user browsing behavior. This data is used for analytics (e.g., Google Analytics) and for targeted advertising (e.g., Facebook retargeting ads). We only use tracking pixels if you have expressly agreed to their use on the store.

COOKIES

We use session cookies on our stores to allow customers to place products in their basket; these cookies are essential for the shopping cart functionality. Disabling them will prevent you from completing purchases. Most browsers accept cookies automatically, but you can change your browser settings to refuse or delete them.

OPT-IN TICK BOXES FOR EMAIL INFORMATION

Our website contains "opt-in" boxes on pages where you can provide personal information (name and email address) for receiving marketing emails. We may use third-party email providers (e.g., Mailchimp, Newzapp) to deliver these emails. We do not share such information with any other third parties. If you do not wish to receive such emails, please leave the "opt-in" boxes unticked.

OTHER PRIVACY INFORMATION

In the event of a merger or acquisition of BSI Merch, we may share information related to your order. You will be notified as a customer.

Please note: Clicking external links or banners will transfer you to another website, whose privacy practices may differ. Please consult their privacy policies. This Privacy Policy may change from time to time and updates will be posted here.

DATA SUBJECT ACCESS REQUEST

To request a copy of the data we store about you (name, email address, billing address, shipping address, telephone number, email preferences), email: customerservices@bsimerch.com. Requests must come from the same email used to place the order. We will respond within one month.

RIGHT TO BE FORGOTTEN

To request deletion of your data, email: customerservices@bsimerch.com. Requests must come from the same email used for your order. We cannot delete data until 12 months after the order date, due to financial services regulations.

DATA BREACH & NOTIFICATION

In case of a data breach, we will notify the supervisory authority within 72 hours. If the breach poses high risk to individuals, we will notify affected individuals within the same timeframe.

For any queries or complaints regarding our data protection practices, please contact: customerservices@bsimerch.com. We will respond within five (5) working days.