PRIVACY POLICY

This Privacy Notice sets out details about the way we process personal data that we collect from you and others and how we may use your information.

We are By Rotation Limited with company number 11916152 and registered address of 3 Chandos Street, London, England, W1G 9DH. We are a digital peer to peer marketplace for mid to up market fashion rentals. This privacy policy explains how we process the personal data we collect from you on our app and website. If you have any questions about this privacy policy, including any requests relating to your legal rights, please contact us at help@byrotation.com.

HOW DO WE USE YOUR PERSONAL DATA?

When you create an account. When you create an account with us, we will collect information including your name, email address, contact details, delivery address, password, bank details, payment details (which we will not store) and ID so we can verify your identity. We collect these details to fulfil our contractual obligations to you. We may also collect your Instagram handle, location, photo and bio information if you choose to provide to us with this information based on our legitimate interest of creating engaging profiles to encourage greater interaction between peers.

When you lend, rent or buy an item. When you lend, rent or buy an item, we will collect your order information to fulfil our contractual obligations.

When you leave a peer review. When you leave a peer review, we will collect your review which is linked to your account. We collect this information based on our legitimate interest of providing peer to peer feedback.

When you provide a story or testimonial. When you provide us with a story or testimonial to publish on our app or website we will collect your name, story or testimonial, photo and social media handle. We will only publish your personal data with your consent.

When you purchase a gift card. When you purchase a gift card, we will collect your name, the recipient's name, your email address and payment details (which we will not store) to fulfil our contractual obligations to you. When we anonymise your personal data. In some circumstances we may carefully anonymise your personal data so that it can no longer be associated with you, and we may use this anonymised information indefinitely without notifying you. We rely on our legitimate interest to improve and commercialise our business to create this anonymised data.

When you contact us. When you contact us with general queries, we will usually collect your name, contact details and information relating to your query, because it is in our legitimate interest to make sure we can properly respond to your query. When you receive news updates. When we send you our news updates because you have opted-in to receive them, we rely on your consent to contact you. If you have not opted-in and we send you our news updates, we do this because of our legitimate interest to promote our business. You can unsubscribe from our updates at any time by clicking the unsubscribe link at the bottom of any of our emails or by emailing help@byrotation.com.

When you attend one of our events or any third party events. When you attend one of our events (whether in person or online), we will usually collect your name and email address. We collect this information because it is in our legitimate interest to know who is attending our events. Where you provide us with your personal data at a third party event where we are also in attendance, we will process this under our legitimate interest to promote our business and follow up on your expression of interest in our community.

When you connect with us on social media. When you connect with us on social media including on Twitter, Instagram, Facebook and LinkedIn we will collect your social media handle, name and email address under our legitimate interest to engage with you. Technical information when you use our website or app. When you consent, we collect information about how you use our website or app. We use this information to improve our website and app and to better understand how people use them. More detail on the information we collect and how we do this is set out in our cookie policy. To continue to provide our services to you in the event our business is sold. In order to ensure we can continue to provide our services to you by a prospective buyer, we may process your personal data where we have a legitimate interest to do so. If you object to our use of your personal data in this way, the buyer of our business may not be able to provide services to you.

WHO DO WE SHARE YOUR DATA WITH?

We may share your personal data with third parties such as:

  • our business partners, suppliers and subcontractors;
  • our professional advisors including our lawyers, banks, auditors or insurers;
  • law enforcement, government and regulatory agencies or other third parties as required by applicable law or regulation;
  • event organisers (please note we do not sell your data for marketing purposes);
  • prospective buyers of our business.
  • WHERE IS MY DATA STORED?

    We store your personal data in the UK. If we need to transfer your personal data outside of the UK and the EU, for example to one of our suppliers, we will ensure such transfer complies with applicable data protection law. Please contact us if you would like to learn more.

    HOW LONG DO WE KEEP YOUR DATA FOR?

    We will only retain your personal data for as long as we need it to fulfil the purposes for which we collected it. We may be required to keep your data for longer to comply with our legal, accounting or regulatory requirements.

    WHAT ARE MY RIGHTS UNDER DATA PROTECTION LAW?

    You have various other rights under applicable data protection laws, including the right to:

  • access your personal data (also known as a “subject access request”);
  • correct incomplete or inaccurate information we hold about you;
  • ask us to erase the personal data we hold about you;
  • ask us to restrict our handling of your personal data;
  • ask us to transfer your personal data to a third party;
  • object to how we are using your personal data; and
  • withdraw your consent to us handling your personal data.
  • Please keep in mind that data protection law is complicated, and these rights will not always be available to you all of the time. You also have the right to lodge a complaint with us or the Information Commissioner’s Office, the supervisory authority for data protection issues in England and Wales. If you are based outside of England and Wales, you can find your relevant supervisory authority here. If you have any questions about when these rights will apply to you, please do get in touch with us at help@byrotation.com.