Privacy Policy

Introduction and Consent

The privacy of your personal information is a priority for Citizen Spritz Ltd. This Privacy Policy explains how we collect, use, disclose and handle any personal information we collect from you, and how to contact us if you wish to access or correct your personal information, or complain about a breach of your privacy.

We collect, use and are responsible for certain personal information about you. When we do so we are regulated under the General Data Protection Regulation which applies across the European Union (including in the United Kingdom) and we are responsible as ‘controller’ of that personal information for the purposes of those laws.

By using our website or submitting personal information to us you are agreeing to the terms of this Privacy Policy. This Privacy Policy may be amended from time to time if our practices change. Please do not use the website or submit any personal information if you do not agree with its terms. You may find links to other websites not operated by Citizen Spritz but which are accessible through our websites. This Privacy Policy does not apply to such websites and you should consult the privacy policy of any other website you enter.

What kinds of personal information do we collect and how?

When you interact with Citizen Spritz including by purchasing products, subscribing to our loyalty program, creating an account online, in store, over the phone, via email, or via social media, we may collect and hold personal information about you. Personal information means information or pieces of information that could allow you to be personally identified. This enables us to identify you and provide you with information about Citizen Spritz’s products and services and allows us to facilitate any purchases or other enquiries. This information may include your name, address, phone number, screen name, email address, credit card information, shopping habits, preferences and health information.

We may also collect your personal information about you indirectly from third parties where you have agreed with them that your information may be disclosed to us, and with whom we have business relationships.

When information is collected	What information we ask for	How and why we use your information
When you register with us	Email address Address Phone number Date of birth	We ask for this: — to create and manage your account with us — To assist with shipping/delivery — To communicate with you about your account If opting in for further communication: — To ensure we don’t communicate with subscribers who are underage — To send you birthday discount coupons — To send you communications about our goods, services, promotions via email, text or direct mail out. Your information will be stored in two platforms that are integrated via APIs therefore no manual handling of data takes place. Your account information will be store in a Big commerce website backend and if you choose to subscribe your information will also be pushed across to dotdigital (our email send provider platform) We rely on our contract with you and our legitimate interest in providing goods and services in the manner that we believe you expect as the lawful basis for collecting and using your personal information. We will keep this information until: — you close your account with us — we close your account
When you subscribe with us	Email address	Obtained via email subscription opt in forms across the Citizen Spritz website Used to send communications We rely on our agreement with you and our legitimate interest in providing promotional communications about our goods and services in the manner that we believe you expect as the lawful basis for collecting and using your personal information. Stored in dotdigital email send provider platform. We will keep your information until: — you unsubscribe from us — we unsubscribe you Your details will remain on dotdigital and marked as suppressed to ensure you will no longer receive communication.
When you order with us	Email address Address Phone number Credit card information	Obtained via Citizen Spritz website checkout form Used to fulfil orders and send transactional communications We rely on our contract with you and our legitimate interest in providing goods and services in the manner that we believe you expect as the lawful basis for collecting and using your personal information. Stored in bigcommerce website backend. Order details are then passed via API or manually exported and imported to the external 3PL warehouse system (Brandlink / My Brand platform) for packing and fulfilment and sent onto shipping providers for delivery. Credit card information will be hashed in the backend of BigCommerce and not accessible to any staff/users and credit card information will not be passed onto warehouse or shipping providers. We will keep your information until you request order history deletion from us
When you enquire with us	Email address Address Company names Phone number	Obtained via Citizen Spritz: Contact us page Trade enquiries page Shipping & Returns page Used to address customer service enquiries We rely on our contract with you and our legitimate interest in providing goods and services in the manner that we believe you expect as the lawful basis for collecting and using your personal information. Your enquiry goes straight to the customer service email account inbox that is managed by Citizen Spritz customer service team. Pending upon the nature of your enquiry your information will be forwarded to relevant internal and external parties in order to answer your questions. Enquiries will not be marketed to unless user has chosen to opt in for marketing communications. We will keep your information within our inbox until you request deletion by us.
When you chat with us	Name Email address Date of birth Company names Phone number Preferences	Obtained via facebook messenger chat bot or Zendesk live chat functionality Used to address customer service enquiries and for further promotional communications We rely on our agreement with you and our legitimate interest in providing goods and services in the manner that we believe you expect as the lawful basis for collecting and using your personal information. Enquiries/chat history are stored within the messenger chat bot and pushed via API to Dotdigital should you choose to opt in via email/sms. When engaging with the messenger chat bot you agree with the messenger chat bot policy https://www.facebook.com/policy.php that we adhere to set by facebook. We will keep your information within the messenger chat and dotdigital until you request deletion/unsubscribes by us or you unsubscribe from our communications manually.

Why do we collect the information?

We collect your personal information so we can identify you and interact with you for the purposes described herein

Our legal basis for processing your personal information

When we use your personal information we are required to have a legal basis for doing so. There are various different legal bases on which we may rely, depending on what personal information we process and why.

The legal bases we may rely on include:

consent: where you have given us clear consent for us to process your personal information for a specific purpose
contract: where our use of your personal information is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
legal obligation: where our use of your personal information is necessary for us to comply with the law (not including contractual obligations)
legitimate interests: where our use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information which overrides our legitimate interests)

Sensitive personal information

We may also collect health information from you when reporting an adverse reaction to a product. This information must be collected in order to provide you with a suitable products and services and for our health and safety reporting obligations. We will not process this sensitive personal information without your explicit consent (unless required by any applicable law) and we will not process sensitive personal information by way of any automated process.

Do you have to identify yourself when you interact with Citizen Spritz?

If you wish to remain anonymous when you use the Citizen Spritz website, do not sign in to the website or provide any information which may identify you. Please note however that we are unable to perform a number of our functions without obtaining your identifying information. For example, we may require details about your identity if you register or log into our website, contact us with an enquiry or complaint, request to receive communications from us, participate in our promotions or competitions, require us to deliver products to you and, in some cases, process a payment.

How can you request not to receive direct marketing?

If you do not wish to receive direct marketing communications from us please follow the ‘opt-out’ or ‘unsubscribe’ instruction in that communication or on our website, or otherwise email us at hello@citizenspritz.com and provide your name, e-mail address and postal address and information about the direct marketing communication you no longer wish to receive.

Who do we disclose your personal information to?

We may disclose your personal information:

To third parties who store or process it on our behalf in order to assist us in providing, promoting and marketing as well as developing and improving our products and services. Companies include;
- Facebook Messenger chat bot (messenger chat service)
We may combine personal information we receive about you with other information we hold about you. This includes information received from third parties and publicly available information;
where required by law, or to government and enforcement agencies or individuals appointed by a government responsible for investigating and resolving disputes or complaints concerning Citizen Spritz products or where such disclosure is necessary to protect the safety or security of persons;
as otherwise permitted under applicable laws.

We will not disclose any health information to third parties or use it for any purpose other than as set forth herein.

Do we transfer, process or disclose your personal information overseas?

We may disclose your personal information to third party service providers who provide services to Citizen Spritz including data warehousing, credit card processing and e-commerce services, mailing and logistics services. By disclosing personal information to us, you acknowledge and consent to these potential transfers.

How do we hold your personal information and keep it secure?

We hold your personal information in a combination of electronic and hard copy files. We may store your personal information with third party data storage providers.

We take all reasonable steps to ensure that the personal information we hold is protected from misuse, interference and loss, and unauthorised access, modification or disclosure by the use of various methods, including secure physical and technological storage. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so. Where we provide your personal information to third party service providers, we require them to keep it secure in accordance with relevant data privacy laws and only use or disclose it for the purpose for which it was provided.

Please contact us immediately if you become aware or have reason to believe there has been any unauthorised use of your personal information that we hold.

Your rights and who to contact

Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:

fair processing of information and transparency over how we use your use personal information
access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address
require us to correct any mistakes in your information which we hold
require the erasure of personal information concerning you in certain situations
receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
object at any time to processing of personal information concerning you for direct marketing
object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
object in certain other situations to our continued processing of your personal information
otherwise restrict our processing of your personal information in certain circumstances
claim compensation for damages caused by our breach of any data protection laws

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.

Please contact us via one of the following if you would like to exercise any of the above rights:

Mail: Citizen Spritz, Regency House, Towers Road, Poynton, Cheshire, SK12 1DD, United Kingdom
email: hello@citizenspritz.com

We will ask that you put your request for access in writing and provide us with proof of your identity.

How can you access further information or complain about a breach of your privacy?

If you believe that we have breached your privacy or have any questions in relation to this Privacy Policy, you can contact us via either the mailing address or email listed above.

We will investigate any complaint, and notify you of our decision in relation to the complaint, as soon as practicable after it is received. If we are unable to satisfactorily resolve your concerns about our handling of your personal information, you can contact the ICO at the following: https://ico.org.uk/concerns/ or telephone: 0303 123 1113.

Changes to this website privacy policy

This website privacy policy was published on 21.9.22.

We may change this website privacy policy from time to time, when we do we will inform you via email.