Privacy policy

COOKIES
Our website uses cookies to distinguish you from other users of our website and to track your visits. They help us provide you with the best experience when you browse and improve our website. They also help us and our advertising network create advertisements that are relevant to you and your interests.
You can set your browser to refuse all or some browser cookies, or to alert you when a website sets or accesses cookies. If you disable or reject cookies, please be aware that some parts of our website may not be accessible or function properly.


For more information on the cookies we and our third-party providers use and why we use them, please see our Cookie Policy.

online advertising
We use online advertising to keep you up to date with our news and to help you find our products. Like many companies, we may target Nasty Gal banners and advertisements to you based on your contact, technical, usage and profile data when you use other websites and applications. We do this using various digital marketing networks and ad exchanges, as well as a range of advertising technologies such as web beacons, pixels, ad tags, cookies and mobile identifiers, and certain services provided by certain websites and social networks, such as Facebook's custom audience service.

Our use of analytics and targeting tools
We use a range of analytical and targeted advertising tools to show you relevant website content on our website and online advertising on other websites and applications (as described above), to provide you with relevant content in marketing communications (where applicable) ) and measure the effectiveness of the ad served. For example, we use tools such as Google Analytics to analyze Google interest-based advertising data and/or third-party audience data (such as age, marital status, life events, gender and interests) to target and improve our marketing campaigns, marketing strategies and website content. We may also use tools provided by other third parties, such as Facebook, Adroll, Rakuten Marketing, Dash Hudson, Responsys, Criteo and Bing, to perform similar tasks using your contact, technical, usage and profile data.


In order to opt out of targeted advertising, you will need to disable "cookies" in your browser settings (see Cookie Policy for details) or opt out of the relevant third party advertising settings. For example, you can opt out of Google Display Advertising Features using its Ads Settings. As an additional privacy measure, you can also opt out of the browser add-on using Google Analytics.


The Digital Advertising Alliance (which includes companies like Google, Responsys, and Facebook) offers a tool called WebChoices that quickly scans your computer or mobile device to find out which participating companies have enabled tailored ads for your browser, and adjust Your browser's corresponding browser preferences.
If you would like to know more about the data these third parties collect or use, please contact us.

Links to other websites and third parties
Our website may contain links to the websites or social media platforms of our partner networks, advertisers and affiliates. If you click on links to these sites, please be aware that these sites have their own privacy policies and we are not responsible or liable for those policies. Please review these policies before you submit any personal data to their website.

How we share your data
We may disclose and share your personal data with the following parties:
• Where you agree to us doing this. For example, if you agree to receive marketing materials from third parties, or about products and services of third parties (including co-branded or co-promotional), we may pass your data to the relevant third party for the purpose of sending you such marketing communications;
• Other companies within the boohoo Group that fulfill orders and provide HR, finance, IT, facilities, customer service, legal, travel and health and safety support functions.
• To business partners, suppliers, subcontractors and other third parties, we use our business operations for the purposes listed in the table above in the "How we use your data" section, such as:
- third party service providers engaged by us to provide IT systems and software and to host our website;
- Third party payment processing services (including Worldpay, Adyen, Paypal, and in some regions Klarna, Clearpay, Zip and Laybuy) to process payments you make to us. If you use Clearpay, such payments will be subject to additional terms between you and Clearpay, which are available at Clearpay. For more information on how Clearpay handles your personal data, please see their Privacy Policy, available here. If you make payments using Klarna, such payments will be subject to additional terms between you and Klarna, more information about Klarna can be found here, see here. For more information on how Klarna handles your personal data, please see their Privacy Policy, available here. If you pay using Laybuy, such payment will be subject to additional terms between you and Laybuy, more information on Laybuy can be found here, see here. For more information on how Laybuy will handle your personal data, please see their Privacy Policy, available here. If you use Zip, such payments will be subject to additional terms between you and Zip, available here. For more information on how Zip handles your personal data, please see their Privacy Policy, available here Nasty Gal does not store your payment information. Your payment details will be provided to the payment processing services of your choice, which must comply with applicable regulations and data protection laws. For details on how they process your personal data, please refer to the relevant provider's privacy policy. These third-party payment providers process your data as data controllers; such payments will be subject to additional terms between you and Zip, available here. For more information on how Zip handles your personal data, please see their Privacy Policy, available here Nasty Gal does not store your payment information. Your payment details will be provided to the payment processing services of your choice, which must comply with applicable regulations and data protection laws. For details on how they process your personal data, please refer to the relevant provider's privacy policy. These third-party payment providers process your data as data controllers; such payments will be subject to additional terms between you and Zip, available here. For more information on how Zip handles your personal data, please see their Privacy Policy, available here Nasty Gal does not store your payment information. Your payment details will be provided to the payment processing services of your choice, which must comply with applicable regulations and data protection laws. For details on how they process your personal data, please refer to the relevant provider's privacy policy. These third-party payment providers process your data as data controllers; your payment details will be provided to the payment processing services of your choice, which must comply with applicable regulations and data protection laws. For details on how they process your personal data, please refer to the relevant provider's privacy policy. These third-party payment providers process your data as data controllers; your payment details will be provided to the payment processing services of your choice, which must comply with applicable regulations and data protection laws. For details on how they process your personal data, please refer to the relevant provider's privacy policy. These third-party payment providers process your data as data controllers;
- a third-party service provider we engage to deliver your order and manage any returns;
- third-party service providers we engage to send email and postal mail on our behalf, including in connection with incomplete orders or discarded baskets or marketing communications, to provide data cleaning services and to provide marketing and advertising services;
- Third party service providers we engage to deliver and process your eGift Card orders and eGift Card payments (including Jigsaw Business Solutions Ltd and Stripe Payments UK Ltd)
- Analytics and search engine providers who assist us in improving and optimizing our website;
- Affiliate networks from which you visit our website;
• To any third party to whom we may choose to sell, transfer or merge parts of our business or assets. Alternatively, we may seek to acquire other businesses or merge with them. If our business changes, the new owner may use your personal data in the same way as set out in this Privacy Notice.
• To protect our customers, other companies and websites within the boohoo Group from fraud and theft, we may share your personal data with Ravelin and/or Risk Guardian and/or other fraud prevention and analytics service providers for the purposes of Fraud Prevention checks on our behalf. If personal data is provided to Ravelin, Ravelin will also use this personal data to improve its services and machine learning to improve its automated processing. A copy of Ravelin's Privacy Statement can be found at: https://www.ravelin.com/privacy-policy-new, which explains how Ravelin will use your personal data for these purposes;  We may further share for Personal data required for identity checks and personal data we obtain through identity checks (including data relating to your age, name and location), together with account information, with other companies within the boohoo group and third party organisations (including law enforcement agencies) ) are involved in fraud prevention and detection and credit risk reduction. Please note that other companies within the boohoo group and these third parties may keep records of the information we provide to them for this purpose;
• if we are obligated to disclose or share your personal data to comply with any legal obligation; or
• Our professional advisors, including lawyers, bankers, auditors and insurers who provide advisory, banking, legal, insurance and accounting services.

Your data and countries outside of Europe
The personal data we collect from you may be transferred and stored in destinations outside the European Economic Area (“EEA”) using lawfully provided mechanisms for the lawful transfer of data across borders. It may also be handled by employees working for us or one of our suppliers outside the EEA. Among other things, such employees may be involved in fulfilling your orders, processing your payment details and providing support services. We will take all necessary steps to ensure that your data is handled securely and in accordance with this Privacy Statement.
Whenever we transfer personal data outside the EEA, we will ensure that appropriate safeguards are in place as required by law to provide a similar level of protection. This may include the use of specific contractual clauses approved by the European Commission to provide personal data with the same protections as in Europe. For more information on these, please visit: http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX:32010D0087
If you would like more information about the countries we may transfer to, please contact us about personal data and the specific mechanisms we use when transferring your personal data outside the EEA.

you
Your rights You have a number of rights under data privacy laws. In some cases, this includes the right to:
• Request access to your personal data
• Request correction of your personal data
• Request deletion of your personal data
• Request restriction of processing of your personal data
• Request to transfer your personal data
• Object to the processing of your personal data
• Request human intervention for automated decision making

Brief details of these rights are described below. If you wish to exercise any of these rights, please email us at bigudinho@163.com requesting access to your

personal data
You have the right to obtain a copy of the personal data we hold about you and certain personal data in relation to our processing of your data.

Request correction of your personal data
If your personal data is inaccurate or incomplete, you have the right to have it corrected. You can update your personal data at any time by logging into your account and updating your details directly or by emailing bigudinho@163.com to request deletion of your personal data

data
This enables you to request Nasty Gal to delete your personal data where we have no good reason to continue processing it. Please note, however, that due to specific legal reasons, we may not always be able to honor your removal request, and if applicable, we will notify you when you request it.

Request restriction of processing of your personal data
You have the right to ask Nasty Gal to suspend the processing of your personal data in certain circumstances, for example if you want us to determine the accuracy of the data, or if you object to our use of your data but we need to verify that we have overriding legitimate grounds to come use it. Where processing is restricted, we may retain sufficient information about you to ensure future compliance with the restriction.

Request to transfer your personal data
You have the right to obtain a digital copy of your personal data or to request the transfer of your personal data to another company. Please note that this right only applies to automated data that you originally consented to our use or that we use to contract with you.

Object to the processing of your personal data
You have the right to object to the processing of your personal data where we believe we have a legitimate interest in processing your personal data (as described above). You also have the right to object to our processing of your personal data for direct marketing purposes. In certain circumstances, we may demonstrate that we have compelling legitimate grounds for processing your data, which override your rights and freedoms.

Request human intervention for automated decision-making and analysis
You have the right to request human intervention when we perform automated decisions in the processing of your personal information. This form of processing is permitted if appropriate safeguards are in place or with your express consent as part of our contract with you.
we will doForce to respond to all legitimate requests within one month. Sometimes, if your request is particularly complex or you have made many requests, it may take us more than a month. In this case, we will notify you and keep you informed. We may need to request specific information from you to help us confirm your identity and ensure your rights to exercise any of the above rights. This is a security measure to ensure that personal data is not disclosed to anyone who is not authorized to receive it.

right to lodge a complaint
If you have any concerns or complaints about the way we handle your data, please send an email directly to bigudinho@163.com. You also have the right to lodge a complaint with the ICO (the UK's data protection supervisory authority). However, we would like the opportunity to address your concerns before you approach an ICO, so please contact us first.

Privacy Statement
Changes We may change this Privacy Statement from time to time. If there are any material changes, we will post an update on our website, app or notify you by email.

How to contact
We welcome feedback and are happy to answer any questions you may have about your data.
bigudinho@163.com

This Privacy Statement was last updated on September 21, 2021 (NG UK and EU Version 1.13)