SSENSE Privacy Policy

 SSENSE Privacy Policies

Global Privacy Policy

Privacy Policy applicable to the Website, phone calls and surveys

Last updated: June 1, 2023

1. About this Policy

1.1 This Privacy Policy (“Policy”) explains how we (as defined below) collect, use, and disclose any information that, alone or in combination with other information, identifies you (“Personal Information”) when you (“you” and “your”) use our website ssense.com (the “Website”), when you call us, answer our surveys, or otherwise interact with us.

1.2 This Policy also sets out the rights that you have in relation to the Personal Information that we have  about you and how you can exercise them.

1.3 SSENSE treats the protection of your privacy seriously. This is why we have developed this Policy, which describes the standards that SSENSE applies to protect Personal Information.

1.4 For the purposes of this Policy, SSENSE (“SSENSE”, “us”, “we”, or “our”) headquartered at 333 Chabanel Street W #900, Montreal QC H2N 2E7, Canada, acts as the accountable entity (“data controller”) for the Personal Information that is collected via the Website. As a data controller, SSENSE is responsible for ensuring that the collection, use, and disclosure of Personal Information complies with applicable privacy laws.

1.5 Please take the time to read this Policy carefully. If you have any questions or comments, please contact us by phone [phone] or via email at [e-mail].

2. What Personal Information does SSENSE collect and why?

2.1 The types of Personal Information that we may collect about you, and the reasons why we process it, include:

Types of Personal Data we collect	Purposes for which we process your Personal Data	Legal basis on which we rely to process your Personal Data
Contact details (Name, Surname, Phone number, Email address)  Email Preferences (Language Preferences, Region/Country) Customer ID Order History Shipping address Billing address  User account details (login, password)	Contract management Enabling you to create your user account Managing your user account and personal preferences Processing and shipping your orders Enabling you to access your order history with us at all times Providing you with customer service as may be required Loyalty program	Contractual necessity: to provide you with our services.
Contact details (Name, Surname, Phone number, Email address) Customer ID Order History, Order Number Shipping address IP Address  Financial information (Cardholder Name, Card Expiration Date, Card number, CVV or CID)	Documenting transactions you made on our website	To protect SSENSE's proprietary and legal rights.
Contact details (Name, Surname, Phone number,  Email address) Email preferences (Language Preferences, Region/Country) Shopping preferences Customer ID	Marketing  Providing you with exclusive email updates, promotions, and notifications including information about our products or services, sales/products, loyalty programs, shopping cart reminders	Your opt-in consent
Contact details (Name, Surname, Phone number, Email address) Email preferences (Language Preferences, Region/Country) Shopping preferences Customer ID Order Number	Conducting customer feedback and satisfaction surveys	To maintain quality standards and ensure customer satisfaction.
Contact details (Name, Surname, Phone number, Email address) Your inquiry and your inquiry history Customer ID Type of request  Messages Order number Billing/Shipping Address	Customer relationship follow-up Processing and responding to any inquiry that you may address to us After-sales service Handling customer requests and inquiries	Contractual necessity: to provide you with and improve our services.
Contact details (Name, Surname, Email address) Order History Financial information (last 4 digits of your credit card number, AVS code) User account details (login, password) Customer ID Shipping address/Billing address	Prevention of fraud	Legal obligation
Contact details (Name, Surname, Email address) User Account details (login, password)	Improvement of customer experience and management or resolving technical issues on the Website	To offer, maintain and improve our Website.
IP address User account details (Name, Surname, Shipping Address, email, login, password) Shopping preferences Session browsing data and conversion behaviour Customer ID  Order History Email preferences	Data analytics, statistics and audience measurement Provide brand, category or product level personalised recommendation to logged in members	To benchmark and evaluate the performance of our Website.
Session browsing data  Search history Order history  Customer ID  Google ID	Display advertisements about our services to users of Google	To offer our services to (i) consumers and (ii) prospects who are users of Google and who share similar characteristics as our customers registered on Google.
User account details (Name, Surname)  Shopping preferences  City, State, Zip code and country Phone number (this data is used for matching audiences only)	Display advertisements about our services to users of Meta	To offer our services  to (i) consumers and (ii) prospects who are users of Meta and who share similar characteristics as our customers registered on Meta
User account details (Name, Surname, Shipping and Billing addresses, Email address) Order History Financial information (last 4 digits of your credit card number and name of the cardholder)	Management of the data subjects requests rights  Enabling you to exercise your rights regarding your personal data.	Legal obligation

2.2 Please note that the information you provide on our Website may be necessary for contractual purposes and for us to comply with our legal obligations. Without such information, we may not be able to process your order or to answer your queries.

2.3 We may also collect certain information automatically from your device. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our Website, including the pages accessed and links clicked.

2.4 Collecting this information enables us to better understand the visitors who come to our Website, where they come from, and what content on our Website is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website to our visitors.

2.5 Some of this information may be collected using cookies and similar tracking technology, as explained further in our Cookie Notice which is available here.

3. Who does SSENSE share your Personal Information with?

3.1 We may disclose your Personal Information to the following categories of recipients:

(a) to our group companies for purposes consistent with this Policy, and in particular, so that they may contact you regarding products and services that may be of interest to you where you have given your consent. We take precautions to allow access to Personal Information only to those staff members who have a legitimate business need for access and with a contractual prohibition of using the Personal Information for any other purpose. Our group companies include: Atallah Group Inc., Atallah Group Limited, Atallah Hong Kong Limited, Atallah Group US Inc., GAI Services PTY Limited, Atallah International Inc.

(b) to our third party vendors, services providers and partners who provide data processing services to us, or who otherwise process Personal Information for purposes that are described in this Policy or notified to you when we collect your Personal Information. This may include disclosures to third party vendors and other service providers we use in connection with the services they provide to us, including to support us in areas such as IT platform management or support services, infrastructure and application services, marketing, data analytics. Our third party vendors, service providers and partners include, without being limited to: Zendesk, Klarna, Avalara, SAP, KIBO, StellaConnect, Loqate, Chatdesk, Clearsale, HostedPCI, First Data (Payeezy/IPG), Paypal, Stripe, , Pazien, Google, Facebook, Bing, Commission Junction, Partnerize, Rakuten, Braze, Mandrill, SendGrid, SurveyMonkey, AWS, Talon.One, Worldpay, which privacy policy is available here.

(c) to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;

(d) to our auditors, advisors, legal representatives and similar agents in connection with the advisory services they provide to us for legitimate business purposes and under contractual prohibition of using the Personal Information for any other purpose;

(e) to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Information only for the purposes disclosed in this Notice;

(f) to any other person if you have provided your prior consent to the disclosure.

4. How we protect your privacy

4.1 We will handle Personal Information in accordance with the following principles:

(a) Accountability: An organization is responsible for personal information under its control and shall designate an individual or individuals who are accountable for the organization's compliance with the following principles. 

(b) Identifying Purposes: The purposes for which personal information is collected shall be identified by the organization at or before the time the information is collected. 

(c) Consent: The knowledge and consent of the individual are required for the collection, use, or disclosure of personal information, except when inappropriate.

(d) Limiting Collection: The collection of personal information shall be limited to that which is necessary for the purposes identified by the organization. Information shall be collected by fair and lawful means.

(e) Limiting Use, Disclosure and Retention: Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained only as long as necessary for the fulfilment of those purposes.

(f) Accuracy: Personal information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.

(g) Safeguards: Personal information shall be protected by security safeguards appropriate to the sensitivity of the information. 

(h) Openness: An organization shall make readily available to individuals specific information about its policies and practices relating to the management of personal information.

(i) Individual Access: Upon request, an individual shall be informed of the existence, use, and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.

(j) Challenging Compliance: An individual shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals accountable for the organization's compliance.

5. Data storage, retention and deletion

5.1 The Personal Information we collect from you is stored in our servers located in the United States.

5.2 We retain Personal Information for as long as necessary to fulfil our contractual and legal obligations (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

5.3 When  it is no longer necessary to retain your Personal Information, we will either delete or anonymise it or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

6. Transfers of Personal Information

6.1 Your Personal Information may be transferred to, and processed in, countries/province other than the country/province in which you are resident. These countries/provinces may have privacy  laws that are different to the laws applicable in your place of residence.

6.2 Specifically, our Website servers are located in the United States, and our group companies and third party service providers and partners operate around the world. This means that when we collect your Personal Information we may process it in any of these countries.

6.3 However, we have taken appropriate safeguards to require that your Personal Information will remain protected in accordance with this Policy.We only transfer or make your Personal Information available to other entities of the SSENSE group or to our third party services providers in third countries/provinces where such transfer is necessary for the performance of a contract between you and SSENSE or the implementation of pre-contractual measures.

7. Profiling

7.1 In some instances, we may use your Personal Information in order to better understand your preferences and to provide customized products or services to you. Where applicable, we will inform you of the technology used for collecting/using you profiling, locating, identifying information and provide a way for you to activate them. However, we do not make any decisions based solely on automated processing of such data, which either produce legal effects that concern you or similarly significantly affect you.

8. Minors

8.1 The services we provide on this Website are not intended for individuals below the age of 16. If you are under 16, please do not use or register on this Website.

9. Your privacy rights

9.1 You have the following privacy rights:

(a) If you wish to request access, correction, update or deletion of your Personal Information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below. Please note that requests are subject to certain limitations, for example, we may retain Personal Information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.

(c) If we have collected and processed your Personal Information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.

(d) You have the right to opt-out of marketing communications we send you at any time. You may unsubscribe from our newsletters or marketing notifications at any time by selecting the unsubscribe option in the "Email Preferences" section of your account, or by clicking the unsubscribe link at the bottom of every newsletter email. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details provided below.

(e) If you have a complaint or concern about how we are processing your Personal Information then we will endeavour to address such concern(s). If you feel we have not sufficiently addressed your complaint or concern, you have the right to complain to a privacy authority about our collection and use of your Personal Information. For more information, please contact your local privacy authority. 

9.2 We respond to all requests we receive from individuals wishing to exercise their privacy rights in accordance with applicable privacy laws.

10. Linking to other websites

10.1 The Website may contain hyperlinks to websites owned and operated by third parties. These websites have their own privacy policies and we urge you to review them. They will govern the use of Personal Information you submit whilst visiting these websites. 

10.2 We do not accept any responsibility or liability for the privacy practices of such third party websites and your use of such websites is at your own risk.

11. Updates to this Policy

11.1 We may update this Policy from time to time in response to changing legal, technical or business developments. When we update our Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Policy changes if and where this is required by applicable privacy laws.

11.2 You can see when this Policy was last updated by checking the “last updated” date displayed at the top of this Policy.

12. How to contact us

12.1 If you wish to exercise your data protection rights, you can do so at any time by using this SSENSE Data Request Form (please click here for the form in English, here for the form in French, here for the form in Japanese, here for the form in Korean and here for the form in Chinese).

12.2 If you have any questions or concerns about this Policy or the way we process your Personal Data, please contact us via email at [e-mail]. 

12.3 If you wish to contact our Data Protection Officer, you may do so via email at [e-mail]. 

Cookie Notice

Last updated: February 16, 2023

1. About this Notice

1.1 This Cookie Notice ("Notice") explains how SSENSE (“SSENSE”, "we", "us", and "ours") use cookies and similar technologies to recognise you when you visit our website at www.ssense.com ("Website") or use our mobile application ("App"). It explains what these technologies are and why we use them, as well as your rights to control our use of them.

1.2 Please take the time to read this Notice carefully. If you have any questions or comments, please contact us by phone [phone] or via email at [e-mail]. 

2. What are cookies?

2.1 Cookies are small data files that are placed on your computer or mobile device when you visit a website or use a mobile application.  Cookies are widely used by website or mobile application owners in order to make their websites or mobile applications work, or to work more efficiently, as well as to provide reporting information.  

2.2 Cookies have many different features, such as allowing you to navigate between pages efficiently, remembering your preferences, and generally improving the user experience. They can also help ensure that the advertisements you see online are more relevant to you and your interests.

2.3 Cookies set by the websites or app owners (in this case, SSENSE) are called "first party cookies".  Cookies set by parties other than the website or app owner are called "third party cookies".  Third party cookies enable third party features or functionality to be provided on or through the website or mobile application (e.g. like advertising, interactive content and analytics).  The parties that set these third party cookies can recognise your computer or mobile device both when it visits the website or uses the mobile application in question and also when it visits certain other websites.  

3. How long do cookies last?

3.1 Cookies can remain on your computer or mobile device for different periods of time. Some cookies are 'session cookies', which means they only exist when your browser is open and are automatically deleted when you close your browser or quit the app. Other cookies are 'persistent cookies', meaning they survive after your browser or app is closed and can be used by websites or apps to recognize your computer when you re-open your browser or app later. The length of the cookies used on our Website(s) and our App is explained in more detail in the table below.

4. Why do we use cookies?

4.1 When you visit our Website or use our App, we may place the following types of cookies:

Types of cookies	How to refuse
Essential website and app cookies: These cookies are strictly necessary to provide you with services available through our Website or our App and to use some of its features, such as access to secure areas.	Because these cookies are strictly necessary to deliver the Website or our App to you, you cannot refuse them. You can block or delete them by changing your browser settings however, as described below under the heading "How can I control cookies?".
Performance and functionality cookies: These cookies are used to enhance the performance and functionality of our Website or App, but are not essential to their use. However, without these cookies, some functionalities such as getting redirected to your preferred language and country may become unavailable. These cookies may allow you to be identified, located or profiled, and may be used to assess certain characteristics about you, including your interests or behaviour.	We will only place these cookies if you expressly accept them when you first visit our Website or App via our cookie preference banner. Please note that you can withdraw your consent for this type of cookie at any time by re-opening our cookie preference banner, available here. To refuse these cookies, you can also follow the instructions below under the heading "How can I control cookies?" Finally, if you wish to disable cookies set up by a particular supplier, please use the specific unsubscribe link provided in the table below.
Analytics and customisation cookies: These cookies collect information that is used either in aggregate form to help us understand how our Website or App are being used or how effective our marketing campaigns are, or to help us customise our Website or App for you. These cookies may allow you to be identified, located or profiled, and may be used to assess certain characteristics about you, including your interests or behaviour.	We will only place these cookies if you expressly accept them when you first visit our Website or App via our cookie preference banner. Please note that you can withdraw your consent for this type of cookie at any time by re-opening our cookie preference banner, available here. To refuse these cookies, you can also follow the instructions below under the heading "How can I control cookies?" Finally, if you wish to disable cookies set up by a particular supplier, please use the specific unsubscribe link provided in the table below.
User measurement cookies: These cookies allow us to measure the audience on our Website or App or to test different versions in order to optimize choices according to the respective performances of different versions of the Website or App. These cookies also allow us to detect navigation problems or to organize the content displayed on our Website or App.  These cookies may allow you to be identified, located or profiled, and may be used to assess certain characteristics about you, including your interests or behaviour.	We will only place these cookies if you expressly accept them when you first visit our Website or App via our cookie preference banner. Please note that you can withdraw your consent for this type of cookie at any time by re-opening our cookie preference banner, available here. To refuse these cookies, you can follow the instructions below under the heading "How can I control cookies?" or use the specific unsubscribe link provided in the table below.

5. What about other tracking technologies, like web beacons?

5.1 Cookies are not the only way to recognise or track visitors to a website.  We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs").  These are tiny graphics files that contain a unique identifier that enable us to recognise when someone has visited our Website(s) or opened an e-mail that we have sent them.  This allows us, for example, to monitor the traffic patterns of users from one page within our Website to another, to deliver or communicate with cookies, to understand whether you have come to our Website from an online advertisement displayed on a third-party website, to improve site performance, and to measure the success of e-mail marketing campaigns.  In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will impair their functioning.

6. How can I control cookies?

6.1 You have the right to decide whether to accept or reject specific cookies.  You can exercise your cookie preferences in your browsers settings.

6.2 You can also set or amend your web browser controls or device preferences to accept or refuse some cookies. If you choose to reject cookies, you may still use our Website or App though your access to some functionality and areas of our Website or App may be restricted. As the means by which you can refuse cookies through your web browser controls vary from browser-to-browser, you should visit your browser's help menu for more information.

6.3 In addition, most advertising networks offer you a way to opt out of targeted advertising.  If you would like to find out more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com. 

7. The cookies that were sent in the past

7.1 If you have disabled one or more cookies, we can always use information collected by these cookies before the deactivation. However, we cease to collect information via the opted-out cookie.

8. More information about cookies

8.1 For more information about cookies, including explanation about how cookies are placed on your device, or how to manage and delete them, visit http://www.allaboutcookies.org.

9. Updates to this Notice

9.1 We may update this Notice from time to time in response to changing legal, technical or business developments. When we update our Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.  

9.2 You can see when this Notice was last updated by checking the “last updated” date displayed at the top of this Notice.  

Recruitment Privacy Notice

Last updated: June 1, 2023

1. About this Notice

1.1 This Recruitment Privacy Notice ("Notice") explains how SSENSE ("SSENSE", "we" and "our") collects, uses, and discloses any information that, alone or in combination with other information, in relation to individuals ("Personal Information") who apply for a job on our website ("Applicants", "you" and "your").

1.2 This Notice also sets out the rights that you have in relation to the Personal Information that we have about you and how you can exercise them.

1.3 SSENSE treats the protection of your privacy seriously. This is why we have developed this Notice, which describes the standards that SSENSE applies to protect Personal Information.

1.4 For the purposes of this Notice, SSENSE headquartered at 333 Chabanel Street W #900, Montreal QC, H2N 2G1, Canada, is the data controller for the Applicant's Personal Information. As a data controller, SSENSE is responsible for ensuring that the processing of Personal Information complies with applicable privacy laws. 

1.5 Please take the time to read this Notice carefully. If you have any questions or comments, please contact us by phone at [phone] or via email at [e-mail].

2. What Personal Information does SSENSE collect and why?

2.1 The types of Personal Information that we may collect about you, and the reasons why we process it, include: 

Types of Personal Information	Why we collect it		Legal basis			Retention period
Name Surname  E-mail address Home address Phone number  Curriculum Vitae Information about whether you are legally authorized to work in Canada/US/E-U City, State, Country Education details Work History	To enable you to contact us or enable us to respond and provide feedback in the context of recruitment;  To evaluate and select job applicants including for example setting up and conducting interviews;  To evaluate and assess the results thereto and as is otherwise needed in the recruitment process including the final recruitment;  To communicate with you  during the recruitment process.  To put in place necessary arrangements for future employment		Contractual necessity to carry out recruitment, manage the hiring process, and improve our hiring process.			Two (2) years following our last contact with you
Bank account details	To reimburse any expenses incurred by you during the recruitment process (e.g. traveling).		Contractual necessity to facilitate the recruitment process for all Applicants and your legitimate interest to obtain reimbursement for any expenses incurred during recruitment process			For the time needed to process the reimbursement and then this data is deleted

2.2 We may collect information regarding your gender, racial or ethnic origin and sexual orientation in order to ensure that our candidates are representative of the population, to the extent permitted by applicable laws. We may also have knowledge of some sensitive data (e.g. religion) if you voluntarily provide it to us in your CV.  

2.3 If we ask you to provide any other Personal Information not described above, then the Personal Information we will ask you to provide, and the reasons why we ask you to provide it, will be made clear to you at the point we collect that Personal Information.

3. Who does SSENSE share your Personal Information with?

3.1 We may disclose your Personal Information to the following categories of recipients:

1. to our group companies for purposes consistent with this Notice. We take precautions to allow access to your Personal Information only to those of our employees who have a legitimate business need for access and with a contractual prohibition of using the Personal Information for any other purpose. Our group companies include:  Atallah Group Inc., Atallah Group Limited, Atallah Hong Kong Limited, Atallah Group US Inc., GAI Services PTY Limited, Atallah International Inc., Atallah Group EU SRL.
2. to our third party vendors, services providers and partners who provide data processing services to us, or who otherwise process Personal Information for purposes that are described in this Notice or notified to you when we collect your Personal Information. This may include disclosures to third party vendors and other service providers we use in connection with the services they provide to us, including to support us in areas such as managing résumé/CV information, IT platform management or support services, infrastructure and application services, data analytics. Our third party vendors, services providers and partners include:  Sterling Backcheck, PwC, SmartRecruiters. 
3. to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
4. to our auditors, advisors, legal representatives and similar agents in connection with the advisory services they provide to us for legitimate business purposes and under contractual prohibition of using the Personal Information for any other purpose; 
5. to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Information only for the purposes disclosed in this Notice;
6. to any other person if you have provided your prior consent to the disclosure.

4. How we protect your privacy 

4.1 We will handle Personal Information in accordance with the following principles:

(a) Accountability: An organization is responsible for personal information under its control and shall designate an individual or individuals who are accountable for the organization's compliance with the following principles. 

(b) Identifying Purposes: The purposes for which personal information is collected shall be identified by the organization at or before the time the information is collected. 

(c) Consent: The knowledge and consent of the individual are required for the collection, use, or disclosure of personal information, except when inappropriate.

(d) Limiting Collection: The collection of personal information shall be limited to that which is necessary for the purposes identified by the organization. Information shall be collected by fair and lawful means.

(e) Limiting Use, Disclosure and Retention: Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained only as long as necessary for the fulfilment of those purposes.

(f) Accuracy: Personal information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.

(g) Safeguards: Personal information shall be protected by security safeguards appropriate to the sensitivity of the information. 

(h) Openness: An organization shall make readily available to individuals specific information about its policies and practices relating to the management of personal information.

(i) Individual Access: Upon request, an individual shall be informed of the existence, use, and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.

(j) Challenging Compliance: An individual shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals accountable for the organization's compliance.

5. Data storage, retention and deletion

5.1 The Personal Information we collect from you is stored in our servers located in the United States. 

5.2 We retain Personal Information for as long as necessary to fulfil our contractual and legal obligations (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).  

5.3 When it is no longer necessary to retain your Personal Information, we will either delete or anonymise it or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

5.4 If you are not retained following the recruitment process, SSENSE will keep your application form on file for future job openings no longer than two years. If you are successful and offered a job at SSENSE, your Personal Information will be used to complete your hiring process by our HR department. 

5.5 For more details about the periods of retention of your Personal Information, please refer to the table above.

6. Transfers of Personal Information

6.1 Your Personal Information may be transferred to, and processed in, countries/provinces other than the country/province in which you are a resident. These countries/provinces may have privacy laws that are different to the laws applicable in your place of residence.

6.2 Specifically, our Website servers are located in the United States, and our group companies and third party service providers and partners operate around the world.  This means that when we collect your Personal Information we may process it in any of these countries.

6.3 However, we have taken appropriate safeguards to require that your Personal Information will remain protected in accordance with this Policy. We only transfer or make your Personal Information available to other entities of the SSENSE group or to our third party services providers in third countries/provinces where such transfer is necessary for the performance of a contract between you and SSENSE or the implementation of pre-contractual measures.

7. Your privacy rights

7.1 You have the following privacy rights:

1. If you wish to request access, correction, update or deletion of your Personal Information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below. Please note that requests are subject to certain limitations, for example, we may retain Personal Information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.
2. If we have collected and process your Personal Information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.

4. If you have a complaint or concern about how we are processing your Personal Information then we will endeavour to address such concern(s). If you feel we have not sufficiently addressed your complaint or concern, you have the right to complain to a privacy authority about our collection and use of your Personal Information.  For more information, please contact your local privacy authority. 7.2 We respond to all requests we receive from individuals wishing to exercise their privacy rights in accordance with applicable privacy laws.

8. Updates to this Notice

8.1 We may update this Notice from time to time in response to changing legal, technical or business developments. When we update our Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.  We will obtain your consent to any material Notice changes if and where this is required by applicable privacy  laws. 

8.2 You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Notice.  

9. How to contact us

9.1 If you wish to exercise your data protection rights, you can do so at any time by using this SSENSE Data Request Form (please click here for the form in English, here for the form in French, here for the form in Japanese, here for the form in Korean and here for the form in Chinese).

9.2 If you have any questions or concerns about this Policy or the way we process your Personal Data, please contact us via email at [e-mail]. 

9.3 If you wish to contact our Data Protection Officer, you may do so via email at [e-mail]. 

Mobile App Privacy Policy

Last updated: June 1,  2023

1. About this Policy

1.1 At SSENSE (“SSENSE”, “us”, “we”, or “our”), we respect your privacy and we want to be transparent about the types of Personal Information (as defined below) we collect about you and how we use it. This Mobile App Privacy Policy (hereafter the “Policy”), explains how we collect, use and share any information gathered about you (“Personal Information”) through your use of the SSENSE App (the “App”) and aims to inform you about the rights and freedoms that you can exercise with regard to our use of your Personal Information. This Policy also describes the measures we implement to protect your Personal Information.

1.2 This App is managed by SSENSE, headquartered at 333 Chabanel Street W #900, Montreal QC H2N 2G1, Canada, who is the data controller for all Personal Information that is collected via this App. For more information about this App, please see the “About Us” or “Terms and Conditions” section of our App.

1.3 If you do not want SSENSE to process any of your Personal Information through this App, as set out in this Policy, you should not install and use the App. Please note that some services can only be provided via the App and therefore, the subscription to those services implies the use of the App.

2. Quick links

2.1 We recommend that you read this Notice in full to ensure you are fully informed. However, if you only want to access a particular section of this Notice, then you can click on the relevant link below to jump to that section.

What personal information does SSENSE collect and why?

Who does SSENSE share your personal information with?

How we protect your privacy

Data storage, retention and deletion

Transfers of Personal Information 

Profiling

Minors

Your privacy  rights

External links

Updates to this privacy policy

How to contact us 

3. What personal information does SSENSE collect and why?

3.1 When you use the App, we may collect the following types of Personal Information about you, which we will process for the purposes described below:

Types of Personal Data we collect	Purposes for which we process your Personal Data	Legal basis on which we rely to process your Personal Data
Contact details (Name, Surname, Phone number, Email address)  Email Preferences (Language Preferences, Region/Country) Customer ID Order History Shipping address Billing address  User account details (login, password)	Contract management Enabling you to create your user account Managing your user account and personal preferences Processing and shipping your orders Enabling you to access your order history with us at all times Providing you with customer service as may be required Loyalty program	Contractual necessity
Contact details (Name, Surname, Phone number, Email address) Customer ID Order History, Order Number Shipping address IP Address  Financial information (Cardholder Name, Card Expiration Date, Card number, CVV or CID)	Documenting transactions you made on our website	Our legitimate interest in order to protect SSENSE's business and legal rights
Contact details (Name, Surname, Phone number,  Email address) Email preferences (Language Preferences, Region/Country) Shopping preferences Customer ID	Marketing  Providing you with exclusive email updates, promotions, and notifications including information about our products or services, sales/products, loyalty programs, shopping cart reminders	Your opt-in consent
Contact details (Name, Surname, Phone number, Email address) Email preferences (Language Preferences, Region/Country) Shopping preferences Customer ID Order Number	Conducting customer feedback and satisfaction surveys	Our legitimate interest to measure the satisfaction of our customers.
Contact details (Name, Surname, Phone number, Email address) Your inquiry and your inquiry history Customer ID Type of request  Messages Order number Billing/Shipping Address	Customer relationship follow-up Processing and responding to any inquiry that you may address to us After-sales service Handling customer requests and inquiries	Contractual necessity
Contact details (Name, Surname, Email address) Order History Financial information (last 4 digits of your credit card number, AVS code) User account details (login, password) Customer ID Shipping address/Billing address	Prevention of fraud	Legal obligation
Contact details (Name, Surname, Email address) User Account details (login, password)	Improvement of customer experience and management or resolving technical issues on the Website	Our legitimate interest  to offer, maintain and improve our Website
IP address User account details (Name, Surname, Shipping Address, email, login, password) Shopping preferences Session browsing data and conversion behaviour Customer ID  Order History Email preferences	Data analytics, statistics and audience measurement Provide brand, category or product level personalised recommendation to logged in members	Our legitimate interests in order to understand how our website is being used and to help us customise and measure the audience on our website
Session browsing data  Search history Order history  Customer ID  Google ID	Display advertisements about our services to users of Google	Your opt-in consent
User account details (Name, Surname)  Shopping preferences  City, State, Zip code and country Phone number (this data is used for matching audiences only)	Display advertisements about our services to users of Meta	Your opt-in consent
User account details (Name, Surname, Shipping and Billing addresses, Email address) Order History Financial information (last 4 digits of your credit card number and name of the cardholder)	Management of the data subjects requests rights  Enabling you to exercise your rights regarding your personal data.	Legal obligation

3.2 Please note that the information you provide via our App may be necessary for contractual purposes and for us to comply with our legal obligations. Without such information, we may not be able to process your order or to answer your queries.

3.3 We may also collect certain information automatically from your device. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers (e.g., IMEI number), operating system version, the dates on which you access and use the App, user behaviour (such as your interactions with the App), broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our Website, including the pages accessed and links clicked.

Collecting this information enables us to better understand the visitors who use our App, where they come from, and what content on our App is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our App to our visitors.

Some of this information may be collected using cookies and similar tracking technology, as explained further in our Cookie Notice which is available here.

3.4 Location-based data

If you authorise us to access the location data on your device, we will use this information to send you location-based information and to deliver services at your request.

Also, if you no longer wish to receive push notifications for location-based services you can disable this service by changing your phone settings, or by altering the settings in the App by unchecking the relevant box in the “Settings” section of the App.

On Apple devices, simply go to: Settings → Notifications → SSENSE → uncheck “Allow Notifications”.

4. Who does SSENSE share your Personal Information with?

4.1 We may disclose your Personal Information to the following categories of recipients:

(a) to our group companies for purposes consistent with this Policy, and in particular, so that they may contact you regarding products and services that may be of interest to you where you have given your consent. We take precautions to allow access to Personal Information only to those staff members who have a legitimate business need for access and with a contractual prohibition of using the Personal Information for any other purpose. A list of all our group companies is available here: Our group companies include: Atallah Group Inc., Atallah Group Limited, Atallah Hong Kong Limited, Atallah Group US Inc., GAI Services PTY Limited, Atallah International Inc.

(b) to our third party vendors, services providers and partners who provide data processing services to us, or who otherwise process Personal Information for purposes that are described in this Policy or notified to you when we collect your Personal Information. This may include disclosures to third party vendors and other service providers we use in connection with the services they provide to us, including to support us in areas such as IT platform management or support services, infrastructure and application services, marketing, data analytics. Our third party vendors, service providers and partners include Clearsale, HostedPCI, First Data (Payeezy/IPG), Paypal, Stripe, Paysafe (Netbanx), Pazien, Google, Facebook, Bing, Commission Junction, Partnerize, Rakuten, Brazep, Mandrill, SendGrid, SurveyMonkey, Firebase, Apple, AWS, Talon.One, Worldpay (which privacy policy is here);

I to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;

(d) to our auditors, advisors, legal representatives and similar agents in connection with the advisory services they provide to us for legitimate business purposes and under contractual prohibition of using the Personal Information for any other purpos(e) to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Information only for the purposes disclosed in this Notice;

(f) to any other person if you have provided your prior consent to the disclosure.

5. How we protect your privacy

5.1 We will process Personal Information in accordance with the following principles:

(a) Accountability: An organization is responsible for personal information under its control and shall designate an individual or individuals who are accountable for the organi’ation's compliance with the following principles. 

(b) Identifying Purposes: The purposes for which personal information is collected shall be identified by the organization at or before the time the information is collecI. 

(c) Consent: The knowledge and consent of the individual are required for the collection, use, or disclosure of personal information, except when inappropriate.

(d) Limiting Collection: The collection of personal information shall be limited to that which is necessary for the purposes identified by the organization. Information shall be collected by fair and lawful mIs.

(e) Limiting Use, Disclosure and Retention: Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained only as long as necessary for the fulfilment of those purposes.

(f) Accuracy: Personal information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.

(g) Safeguards: Personal information shall be protected by security safeguards appropriate to the sensitivity of the information. 

(h) Openness: An organization shall make readily available to individuals specific information about its policies and practices relating to the management of personal information.

(i) Individual Access: Upon request, an individual shall be informed of the existence, use, and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.

(j) Challenging Compliance: An individual shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals accountable for the organization's compliance.

6. Data storage, retention and deletion

6.1 The Personal Information we collect from you is stored in our servers located in the United States.

6.2 We retain Personal Information for as long as necessary to fulfil our contractual and legal obligations (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

6.3 When it is no longer necessary to retain your Personal Information, we will either delete or anonymise it or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

7. Transfers of Personal Information

7.1 Your Personal Information may be transferred to, and processed in, countries/provinces other than the country/province in which you are resident. These countries/provinces may have privacy laws that are different to the laws applicable in your place of resident.

7.2 Specifically, our servers are located in the United States, and our group companies and third party service providers and partners operate around the world. This means that when we collect your Personal Information we may process it in any of these countries.

7.3 However, we have taken appropriate safeguards to require that your Personal Information will remain protected in accordance with this Policy.We only transfer or make your Personal Information available to other entities of the SSENSE group or to our third party services providers in third countries/provinces where such transfer is necessary for the performance of a contract between you and SSENSE or the implementation of pre-contractual measures.

8. Profiling

8.1 In some instances, we may use your Personal Information in order to better understand your preferences and to provide customized products or services to you. Where applicable, we will inform you of the technology used for collecting/using you profiling, locating, identifying information and provide a way for you to activate them. We do not make any decisions based solely on automated processing of such data, which either produce legal effects that concern you or similarly significantly affect you.

9. Minors

9.1 The services we provide on this App are not intended for individuals below the age of 16. If you are under 16, please do not download this App.

10. Your privacy rights

10.1 You have the following privacy rights:

(a) If you wish to request access, correction, update or deletion of your Personal Information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below. Please note that requests are subject to certain limitations, for example, we may retain Personal Information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.

(b) If we have collected and processed your Personal Information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.

(d) You have the right to opt-out of marketing communications we send you at any time. You may unsubscribe from our newsletters or marketing notifications at any time by selecting the unsubscribe option in the "Email Preferences" section of your account, or by clicking the unsubscribe link at the bottom of every newsletter email. When you use the App, if you accept push notifications, we may send you promotional offers about our products and services via push notifications. If you no longer wish to receive push notifications about promotional offers from SSENSE, you can disable this service by changing your app settings in the device settings.

On Apple devices, simply go to: Settings → Notifications → SSENSE → uncheck “Allow Notifications”.

(e) If you have a complaint or concern about how we are processing your Personal Information then we will endeavour to address such concern(s). If you feel we have not sufficiently addressed your complaint or concern, you have the right to complain to a privacy authority about our collection and use of your Personal Information. For more information, please contact your local privacy authority. 

10.2 You can also request to close your account at any time by contacting us as described below. You should be aware that once the App is uninstalled, you will not be able to use certain functionalities of the App.

10.3 You may exercise any of the rights above at any time by contacting us as described under the “How to contact us” section below. We will respond to your request in accordance with applicable privacy laws.

10.4 We respond to all requests we receive from individuals wishing to exercise their privacy rights in accordance with applicable privacy laws.

11. External links

11.1 If any part of this App provides links to third party websites, such websites do not operate under this Policy. We recommend you examine the privacy notices posted on those websites to understand their procedures for collecting, using and disclosing personal information.

12. Updates to this Policy

12.1 We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable privacy laws.

12.2 You can see when this Privacy Notice was last updated by checking the “last update” date displayed at the top of this Privacy Notice.

13. How to contact us 

13.1 If you wish to exercise your data protection rights, you can do so at any time by using this SSENSE Data Request Form (please click here for the form in English, here for the form in French, here for the form in Japanese, here for the form in Korean and here for the form in Chinese).

13.2 If you have any questions or concerns about this Policy or the way we process your Personal Data, please contact us via email at [e-mail]. 

13.3 If you wish to contact our Data Protection Officer, you may do so via email at [e-mail].

If you live in Korea, the following Addendum for Korean Data Subjects applies to you: 

Last updated: June 1, 2023

This Addendum for Korean Data Subjects explains our practices with respect to Personal Data we process in connection with your relationship with us where you are a Korean data subject.

1. Transfer of Personal Data

We outsource the processing of your personal data to the following third-party service providers for the purposes represented below; the service providers are categorized into two sections: 1.1 and 1.2: Both categories of service providers process your personal data for the purposes represented in table below; Service providers in section 1.2 may also use your personal data for evaluating or enhancing their own products and service offerings;

1.1 Outsourcing of the Processing and cross-border storage of Personal Data with Third Parties.

We may outsource the processing of your Personal Data and/or transfer your Personal Data for storing purposes to third parties located outside of Korea.

Recipient (if the recipient is a corporation then the name of the corporation and the contact information of the person in charge of the management of Personal Data)	Items of the Personal Data to be transferred	Countries where the Personal Data is to be transferred and the methods of transfer	Purposes of use of the Personal Data by the recipient	Periods of retention by the recipient
HostedPCI (https://www.hostedpci.com/contact-us/)	First Name, Last Name, Shipping Address, Billing Address, Phone Number, IP Address, Cardholder Name, Cardholder Data	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transfer is real time	Used as a middle-man between SSENSE and payment processors. HostedPCI tokenizes customer credit card information safely in the front-end and then provides SSENSE a token to use for any payment operations.	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Zendesk ([e-mail])	First Name, Last Name, Shipping Address, Phone Number, Email Address, Inquiry Details, Inquiry History, Shopping preferences, Order History	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transfer is real time	Portal for customer inquiry history, and resolve customer inquiries for Personal Shopping	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
SAP ([e-mail])	Shipping Address, Order History	Canada (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data is transferred periodically	To validate customer orders with purchase orders and accounts payables at SSENSE	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
KIBO ([e-mail].)	First Name, Last Name, Shipping Address, Phone Number, Email, Order History, Shopping Preferences	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process	To create and fulfil orders	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
StellaConnect ([e-mail])	First Name, Last Name, Email, Inquiry Details	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process	To share surveys to SSENSE customers after an interaction	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Loqate ([e-mail])	Shipping Address, IP Address	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process	To help customers autofill in correct shipping address	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Chatdesk ([e-mail])	First Name, Last Name, Email, Inquiry Details	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process	To process inbound customer inquiries and emails	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Google Cloud Platform, Google GSuite/Insight, Google Premium Analytics (https://policies.google.com/privacy?hl=en)	app browsing activity, order history, shopping history	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data is transferred real-time and periodically, both)	To provide brand, category or product level recommendations to logged in members	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Braze ([e-mail])	Email, Newsletter Preference	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data is transferred real-time and periodically, both)	To share relevant emails with our customers	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
AWS (https://aws.amazon.com/privacy/) ([e-mail])	All Personal Data subject to our processing	US Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data is transferred in real-time and periodically, both)	To store all personal data processed by SSENSE Is the cloud platform provider for SSENSE	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Regalix ([e-mail])	First Name, Last Name, Email, Inquiry Details	US Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data is transferred in real-time and periodically, both)	To process inbound customer inquiries and emails	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Clearsale ([e-mail])	First Name, Last Name, Billing Address, Email,	US Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process)	To reconcile customer transactions between Fraud insurers and SAP	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
SurveyMonkey (https://help.surveymonkey.com/en/contact/?l=en&form=datarequest)	First Name, Last Name, Gender, Email	US Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process)	To share surveys with our customers	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Talon.One (https://www.talon.one/contact-us)	Email, Order History	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process)	To manage loyalty points for customers	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
SendGrid ([e-mail])	Email	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data is transferred periodically	To automate sharing of emails with customers	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Meta (Facebook) (https://www.facebook.com/privacy/policy?section_id=13-HowToContactMeta)	Email, IP address	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process)	To share relevant ads	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Appsflyer ([e-mail])	First Name, Last Name, Shipping Address, Billing Address, Phone Number, Email, IP Address, Device ID, Login details, order history, shopping preferences, email preferences, language preferences, Location data	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process)	Collected to track user app uninstalls, app referrals, and app traffic data	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Stripe  ([e-mail])	First Name, Last Name, Shipping Address, Billing Address, Phone, Email Address, IP Address, Device ID, Cardholder Name, Expiration Date, Credit/Debit Card Details, Bank account data (payment account number (PAN) or account number, card expiration date, CVC details, bank and/or issuer details), date/ time/ amount of transaction	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process)	Payment processor that facilitates payment operations (pre-authorizations, sales, capturing funds, refunding funds, voiding pre-authorizations) when you purchase through SSENSE App and website To secure, encrypt and vault your transactions and financial information	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Perimeter X  ([e-mail])	IP address, Device ID, Location Data, app browsing activity	US (sub-processors can be located in other countries and process data in accordance with applicable data protection laws) Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process)	To enable cybersecurity protection	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations

WorldPay ([e-mail]) PayPal (/smarthelp/contact-us/privacy)  Fiserv (PayEezy, FirstData) ([e-mail])	First Name, Last Name, Shipping Address, Billing Address, Phone, Email Address, IP Address, Device ID, Cardholder Name, Expiration Date, Credit/Debit Card Details, Bank account data (payment account number (PAN) or account number, card expiration date, CVC details, bank and/or issuer details), date/ time/ amount of transaction	[(WorldPay) US, EU and UK (PayPal) US (Fiserv) US, EU and UK Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process]	This information is only collected and processed when you make a purchase through the SSENSE app and website Payment processor that facilitates payment operations on behalf of SSENSE (pre-authorizations, sales, capturing funds, refunding funds, voiding pre-authorizations) when you purchase through SSENSE app and website To secure, encrypt and vault your transactions and financial information	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
Klarna ([e-mail])		[US, EU, India, New Zealand, Switzerland, Australia Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process]	To offer loan services, buy now pay later alternative to customers.
Riskified ([e-mail])	Name, Billing Address, Shipping Address, Email Address, Phone, IP Address, Last 4 digits of card, Credit Card BIN (Bank Identification Number)	[US Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process]	To prevent fraudulent transactions

If you prefer not to have your personal information transferred abroad, you may withhold your consent for the collection and use of your personal information, as well as its provision and cross-border transfer to third parties. You can exercise this option by requesting us to cease the transfer. However, please be informed that in such case, you may be unable to receive certain goods and services we offer.

1.2 Provision of Personal Data to Third Parties

Name of Recipient	Purposes of use by recipient	Items of Personal Data collected by the recipient	Periods of retention by the recipient
WorldPay ([e-mail])	These service providers may also use your data to design, evaluate, improve, operate and administer their own payment products and services	First Name, Last Name, Shipping Address, Billing Address, Phone, Email Address, IP Address, Device ID, Cardholder Name, Expiration Date, Credit/Debit Card Details, Bank account data (payment account number (PAN) or account number, card expiration date, CVC details, bank and/or issuer details), date/ time/ amount of transaction	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
PayPal (/smarthelp/contact-us/privacy)
Fiserv (PayEezy, FirstData) ([e-mail])
Klarna ([e-mail])	To develop and enhance Klarna’s product and service offerings
Riskified ([e-mail])	To develop and enhance Riskified’s product and service offerings	Name, Billing Address, Shipping Address, Email Address, Phone, IP Address, Last 4 digits of card, Credit Card BIN (Bank Identification Number)

1.3 Online Targeted Advertising

SSENSE allows online targeted advertising businesses to collect and process behavioral data as follows.

- Advertising businesses that want to collect and process behavioral data:  Google.

- Method of collecting behavioral data: Automatic collection and transmission when you visit our website or run our App.

- Items of behavioral data collected and processed: user’s web/app visit history, search history, purchase history, Member ID, Google ID.

2. Destruction of Personal Data

The process and method for destroying Personal Data are set forth below.

2.1. Process of destruction

We select the relevant Personal Data to be destroyed and destroy it with the approval of our Data Protection Officer, in accordance with applicable data protection laws and contractual obligations.

2.2. Method of destruction

We destroy Personal Data recorded and stored in the form of electronic files by using a technical method (e.g., low level format) to ensure that the records cannot be reproduced, while Personal Data recorded and stored in the form of paper documents shall be shredded or incinerated.

3. Contact Us

For questions or inquiries related to privacy and data protection, please contact our Data Protection Department using the contact details provided under the “How to contact us” heading above.

4. Amendment of this Policy

• Enforcement Date: June 01, 2023 

Consent Information for app user

1. I Agree to the collection and use of my personal information (required)

The table below shares details on types of personal data collected and purposes of processing by SSENSE

	Types of personal data Collected	Purpose of processing	Retention and usage period
1	UserName, Password, First Name, Last Name, Email Address, Email preferences, Language Preferences	To enable user account creation and management	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
2	First Name, Last Name, Shipping Address, Billing Address, Phone Number, Email, IP Address, Cardholder Name, Expiration Date	Collected for processing your payments only when you make a purchase through the SSENSE app Processed to check if orders are fraudulent or not We do not store payment information such as, credit/debit card numbers and bank account numbers
3	First Name, Last Name, Email Address, Phone Number, Shipping Address, Zip Code	Collected and processed for shipping your products only when you make a purchase through the SSENSE app Processed to check customer's eligibility for loyalty perks Processed to send email notifications when package is received by customer
4	First Name, Last Name, Shipping Address, Billing Address, Phone Number, Email, IP Address, Device ID, Login details, order history, shopping preferences, email preferences, language preferences, Location data	Collected to track user app uninstalls, app referrals, app traffic data and user behaviour
In the process of providing the above mentioned services, we also collect the below information; Consent for the below mentioned items can be changed/managed as described below:
5	IP Address, Device ID, App navigation data, Order History, Shopping Preferences, Language Preferences, Location data	To enable push notifications for Sales, Discounts, New Products, Loyalty Programs, items in cart (Users can consent to receiving push notifications from the SSENSE app, and change/manage their consent using app settings)	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
6	First Name, Last Name, Email address, Device ID, App navigation data, Language preferences	To enable email updates and promotions and to improve relevance of emails sent to our customers; Users can manage the consent to these subscriptions when they create an account with SSENSE, or can unsubscribe from the emails they receive using the 'Unsubscribe' link
You have the right to refuse your consent to the collection and use of your personal information by Groupe Atallah Inc., in which case you will not be able to create an account with SSENSE, purchase SSENSE products or avail membership services

2. I agree to the provision of personal information to Third Parties (Required)

The table below shares details on provision of personal data by SSENSE to third parties

Name of Recipient	Countries where the Personal Information is to be Provided and the date, time, methods of Provision	Purposes of use by recipient	Items of Personal Data provided to the recipient	Periods of retention by the recipient
WorldPay ([e-mail])	US, EU and UK [Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable redata protection laws; Data transferred via real-time process]	This information is only collected and processed when you make a purchase through the SSENSE app and website Payment processor that facilitates payment operations on behalf of SSENSE (pre-authorizations, sales, capturing funds, refunding funds, voiding pre-authorizations) when you purchase through SSENSE app and website To secure, encrypt and vault your transactions and financial information These service providers may also use your data to design, evaluate, improve, operate and administer their own payment products and services	First Name, Last Name, Shipping Address, Billing Address, Phone, Email Address, IP Address, Device ID, Cardholder Name, Expiration Date, Credit/Debit Card Details, Bank account data (payment account number (PAN) or account number, card expiration date, CVC details, bank and/or issuer details), date/ time/ amount of transaction	Time strictly necessary to achieve the purposes for which the personal information has been collected and to comply with applicable laws and regulatory obligations
PayPal (/smarthelp/contact-us/privacy)	US [Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process]
Fiserv (PayEezy, FirstData) ([e-mail])	US, EU and UK [Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process]
Klarna ([e-mail])	US, EU, India, New Zealand, Switzerland, Australia [Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process]	To offer loan services, buy now pay later alternative to customers To develop and enhance Klarna’s product and service offerings
Riskified ([e-mail])	US [Data transmitted via encrypted, secure and compliant systems and network, in accordance with applicable data protection laws; Data transferred via real-time process]	To prevent fraudulent transactions To develop and enhance Riskified’s product and service offerings	Name, Billing Address, Shipping Address, Email Address, Phone, IP Address, Last 4 digits of card, Credit Card BIN (Bank Identification Number)
You have the right to refuse your consent to the provision of your personal information by Groupe Atallah Inc., in which case you will not be able to create an account with SSENSE, purchase SSENSE products or avail membership services

14.1 If you have any questions, concerns or complaints about this Notice or the way we process your personal information, or if you want to exercise your rights as described above, please contact us by phone [phone] or via email at dataprotection @ ssense.com.