PRIVACY POLICY

This Privacy Policy provides users of this site (www.deeroutfit.com) with the fullest and clearest information on processing their personal information through the Site under the General Data Protection Regulation (GDPR) and the UK data protection act. In accordance with legal requirements, this privacy statement also states:

 the nature of the personal information dealt with;

• the purposes and methods for handling personal information;
• the identity and contact information of the person or persons in charge of the data;
• any third parties participating in processing activities;
• the period during which personal information is retained;
• the safeguards put in place to protect personal information;
• the security measures in place to safeguard personal information;
• the user's privacy rights;

 This Privacy Policy applies to the Site only and does not affect any website or platform to which the Site may be linked. Users under the age of 16 are not permitted to give consent to the handling of personal information without the permission of their parents.

 CONTROLLER

In accordance with the GDPR, the controller is the subject who, alone or in conjunction with others, determines the purposes and means of processing personal information. The data controller in charge of the Site's activity is:

DEER OUTFITTERS, QATAR ALRAYYAN ZONE 53 STREET 949 BUL4, ALRAYYAN , Qatar

 PERSONAL INFORMATION. PURPOSES OF PROCESSING.

"Personal Information" means any information about users which identifies them personally, alone or in combination with other information.

Personal information is collected automatically by the Site or received via multiple sources: forms, chat, e-mail, apps, devices, social media, and other means.

The Site handles personal information in a variety of formats for the following purposes:

• Browsing data: The Site collects non-sensitive browsing data by automatic means in order to enable and improve user navigation (e.g., IP address, date/time of the visit and its length, any referring URL, the pages visited on the Site, the device used, and other information). The processing of this information allows users to access and benefit fully from the Website. Furthermore, browsing data can be used to verify that the Site is functioning properly. Sometimes navigation data are anonymized for statistical purposes. Navigation data are unlikely to identify the data subject. However, by their very nature, navigation data can enable the identification of users if they are associated with other information. The navigation information described above is retained only temporarily in accordance with applicable law.
• Orders: At checkout, the Site requires users to provide personal information in order to execute their purchase orders and comply with contractual obligations (e.g., name and surname, e-mail address, mobile phone number, delivery address, etc.). Such personal information is also essential for Customer Service to assist customers with enquiries and for any related necessity, before or after the sale (for instance, with respect to the order delivery status or on product returns). Personal information related to orders will be retained for as long as necessary to fulfill applicable contractual and tax, customs, and financial obligations. The Site may also verify the payment instruments used by customers to purchase on the Site (e.g. credit or debit card, etc.) for the main purpose of preventing fraudulent activities or pursuant to the applicable anti-money-laundering laws. As payment verification is entirely performed by third parties responsible for processing payments, controllers do not process or store customer financial information. Failure to provide the required personal information to the cashier will prevent users from filling an order on the Website. On the basis of its legitimate interest in enhancing its relationship with customers, the Site will send to the latter e-mail communications with product suggestions, discounts, requests for feedback, or other updates. Customers are always free to unsubscribe from such email communications (for instance, by clicking on the “unsubscribe link” at the bottom of each email).
• Site registration: When users opt to register a personal Site account, they are asked to submit personal information (e.g., date of birth, gender, etc.). The Site clearly indicates which personal information is mandatory (or not) to set up a Site account. Users must submit personal information that is true and accurate at the moment of registration and is invited to maintain their personal information up-to-date (if any modification occurs) by logging into their personal account to make all relevant changes. Users who choose to enable or log in to their Site account via social media should be aware that when they connect their Site account to a social media account, the Site collects certain personal information the User has already provided to that social media (for example, the email address and public profile on Facebook). The Controllers do not oversee or control such social media services or the user’s profiles on these services and do not establish privacy settings or rules for how personal information on those services will be used. Users are strongly encouraged to read all relevant social media services policies and information to learn more about how they handle personal information.
• Newsletter and marketing communications: On the Site, users can choose to receive newsletters and marketing communications. The Site always collects the explicit, free, and unambiguous consent of users prior to submitting newsletters and marketing communications to these users or, more in general, before undertaking electronic marketing initiatives dedicated to them. Users can still easily withdraw their consent to receive newsletters and business communications by:

- Through their account settings;

- By clicking on the ‘unsubscribe’ link in any of such emails;

- By contacting our Customer service.

• Profiling: Under the explicit user’s consent, newsletter and marketing communications may be tailored to the user “profile”, based on the personal information the Site collects or receives about the concerned user. With respect to the customers of the Site, it is in the Site’s legitimate interest to process personal information to offer more interesting products, to improve the Site, and to personalize the products offered on the Site. The main objective of profiling is to offer products, services, and initiatives more adapted to the tastes, shopping habits, and interests of users and clients. Personal information may be also used for remarketing, retargeting, or profiling purposes, including via third parties (e.g., social networks, etc.). Neither the Site nor the Controllers will ever carry out any profiling activities relating to children.

 SHARING AND TRANSFER OF PERSONAL INFORMATION

The Controllers may transfer the personal information of customers to primary third-party suppliers, acting as “data processors” (the “Processors”), for the purpose of performing business operations in order to fulfill their contractual obligations.

 Controllers will use their best efforts to ensure that all processors apply their industry best practices to protect personal information and that they will not use personal information for any other purposes than those agreed with the Controllers, for example, Managers can share personal information with the following categories of Subcontractors:

• Couriers and postal operators;
• Fulfillments centers and warehouses;
• Advertising, digital, marketing, and social media agencies;
• IT service providers;
• Customer care service providers;

 In such cases, the sharing of personal information with the Subcontractors is necessary so that the Controllers can fulfill their contractual obligations and also improve the Website's products and services. Users can request an up-to-date list of Processors involved in the processing of personal information relevant to the Site's activities by contacting GDPR@deeroutfit.com.

 Data Controllers must always reserve the right to disclose personal information about users in compliance with the law (e.g., responding to requests from law enforcement) and, where applicable, to protect the rights of the Data Controller or its affiliates or third parties. Moreover, personal information may be disclosed to other companies within the same corporate group of each of the Controllers, or to third parties in the event of a corporate restructuring process, in full compliance with the applicable law. In all other cases, the sharing of personal information will be conditional on the preliminary and explicit consent of the user, unless the processing is authorized under another legal basis. The Controllers will not transfer any personal information outside the European Economic Area (EEA), unless the user has explicitly authorized such transfer or the transfer of personal information outside the EEA is allowed by the GDPR on another legal basis.

 PROCESSING METHODS AND SECURITY MEASURES

The personal information of users is processed by the Controllers using computers, automated and electronic tools, and, in limited cases, by documentary means. As per the GDPR, specific security measures have been implemented to prevent data loss, illicit or inappropriate use, and unauthorized access. Only authorized employees of the Controllers, and authorized employees of the third-party suppliers, acting as Processors on behalf of the Controllers, have access to personal information related to the Site activities. Data processing agreements are in place with the Processors to ensure that they always meet the level of security required by the GDPR while processing personal information related to the Site activities. While the Site adopts primary security measures to prevent the loss, destruction, or dissemination of personal information. At the same time, it cannot exclude the security risks which naturally arise when data is transmitted online. The user accepts the inherent risks of providing personal information over the internet and will not hold the Site responsible for any breach of security unless this breach is due to the Site’s negligence or willful default.

 RETENTION OF PERSONAL INFORMATION

The Controllers will store personal data as long as necessary to provide users and customers with the required services or to fulfill legal, customs, or tax obligations or for the minimum duration prescribed by law. In order to determine the appropriate retention period for personal information stored by the Site under user consent, the Controllers will take into account multiple factors to ensure that personal information is not stored for longer than the necessary or appropriate period. These criteria also include:

• The purpose for which the Site holds personal information;
• Legal, tax, and regulatory obligations in relation to that personal information;
• The type of ongoing relationship with the concerned user or customer (how often the user logs into their Site account, whether users continue to receive marketing communications, how regularly they browse or buy on the Site, etc.);
• Any specific user request in relation to the deletion of personal information;
• Legitimate business interests;

The Site will promptly delete or anonymize personal information that is no longer needed or retained according to the law.

 CONNECTION TO THIRD-PARTY WEBSITES OR PLATFORMS

The Site may include banners, advertisements, and other links to third-party websites or platforms. The Controllers cannot control or be held responsible for the conduct of such third-party websites or platforms with respect to privacy law. Users are encouraged to read their privacy policies to see how they collect and deal with personal information.

THE RIGHTS OF USERS

Users have the right to receive confirmation that they have personal information about them. In this case, under the GDPR, users have the following rights as well:• Be informed about the collection and use of their personal information;

• access their personal information at no cost;
• Have inaccurate personal information rectified, or completed (when it is incomplete);
• Have personal information erased (“the right to be forgotten”);
• Under specific conditions, obtain the restriction or suppression of their personal information;
• Obtain and reuse their personal information for their own purpose across different services when processing is based on a contract or on consent, and the processing is carried out by automatic means (“the right to data portability”);
• Under specific conditions, to object to the processing of their personal information;
• the right to complain to the relevant supervisory authority about the collection and processing of personal information;
• The right to withdraw consent to the processing of personal information at any time.

Users can contact the Site for any inquiry and to exercise their privacy rights at the following email address: GDPR@deeroutfit.com

 CHANGES TO THIS PRIVACY POLICY

Any future amendments to this Privacy Policy will be posted on the Site and, if applicable, notified to users by email. Users are encouraged to regularly read this Privacy Policy to verify any updates or modifications.