1.     Introduction

This Privacy Notice is issued by Mizzen Horizon for Wholesale & Retail Trading Company W.LL ("Mizzen"), a Kuwait-based limited liability company (license no. 471284), with its registered office at Dar Al Awadi, IO Centers, 2nd floor, office 5412, Ahmad Al Jaber Street, Sharq, Kuwait. Mizzen operates this website and Aesop stores in Kuwait, offering Aesop’s skin, hair, and body care products online at aesop.com.kw and in-store (“Aesop Services”). This Privacy Notice is governed by the laws of Kuwait.

 

This Privacy Notice explains how Mizzen collects and uses personal information for Aesop Services. Personal information means any data that can directly or indirectly identify an individual, like name, ID number, location, or online identifiers.

 

2.     What information do we collect?

Information we receive from you when you:

·   visit our website, create an account, or purchase products online, by phone, in-store, or via social media.

·   set up a customer account at an Aesop store or counter.

·   participate in promotions, competitions, or surveys.

·   attend a Mizzen event.

·   contact us through text, WhatsApp, social media, or email.

 

Other information we collect

·   Information about your visit to our website may be collected through cookies and similar technologies as further described in the cookies section of this Privacy Notice.

·   We may also collect publicly available information to the extent permitted by law.

 

3.     How do we use your personal information?

We process your personal information, such as name, contact information, order history, payment details, online identifier, device information, data collected through cookies, and geographic location for the following purposes:

·   To deliver Aesop Services, including managing orders, exchanges or returns.

·   To recommend suitable Aesop products and services.

·   To complete transactions relating to Aesop Services and prevent fraud.

·   To send marketing communications and event invitations.

·   To enhance our website’s functionality and improve user experience.

·   To identify suspicious transactions or unusual purchasing activity.

·   To manage access to user accounts and personalize your experience on our website.

·   To conduct market research and to develop, market, and supply products and services that meet customer expectations.

·   To conduct internal administrative activities, including managing your account with us.

·   To respond to requests or complaints.

·   To ensure safety and security within our premises.

·   To establish, exercise, and defend legal claims.

 

4.     Who do we share your personal information with?

·   Mizzen’s affiliates and group companies: Mizzen may share your personal information with its affiliates and group companies to conduct the activities described in this Privacy Notice.

·   Our service providers: we engage third-party companies to help deliver Aesop Services. We may share your personal information with service providers such as IT, website, and infrastructure support providers, marketing agencies, banks and payment processors, logistics partners, and legal or external advisers. These service providers may access your data only as needed for their contracted services and are contractually obligated to implement appropriate measures to keep the data secure.

·   L’Oréal Groupe: we may share your personal information with L’Oréal Groupe, the owner of Aesop, to provide Aesop Services and for other purposes described in this Privacy Notice.

·   Third parties permitted by law: we may share your personal information with third parties if required by law or regulation (such as, police, regulators, government agencies, judicial bodies). We may also disclose personal information when legally allowed and necessary to protect our rights, enforce contracts, ensure national security or law enforcement, or safeguard your or the public’s rights.

·   Third parties connected with business transfers: we may share your data with third parties if our business goes through a reorganization, merger, acquisition, or asset transfer, provided these parties comply with this Privacy Notice.

Our website may contain links to third-party websites with separate privacy policies. Please review their policies before sharing your data, as we do not control those websites.

 

5.     Where do we transfer your personal information?

We may transfer, store, and process personal information in the United Arab Emirates and the Kingdom of Saudi Arabia where Mizzen’s affiliates and group companies are located for the purposes described in this Privacy Notice. When we transfer personal data outside Kuwait, we take necessary steps to protect the personal information in line with this Privacy Notice and applicable data protection laws. For details on our transfer mechanisms, please contact us as described in ‘Section - How can you contact us?’

 

6.     What are your rights?

·   Right to Access: you have the right to confirm if we process your personal information, request a copy of it, and obtain details about how and why it is processed (as outlined in this Privacy Notice). To protect your privacy, we may conduct identity verification before disclosing any information.  

·   Right to Rectification: you may request that we update any incomplete or inaccurate personal information.

·   Right to Erasure: you have the right to request the deletion of your personal information. We may be unable to comply if there is a legal obligation to retain the data or if it is needed to exercise or defend legal claims.

·   Right to Restrict Processing: you can request a temporary restriction on processing your personal information if you dispute its accuracy, if it was processed unlawfully but you prefer restriction to deletion, or if you need the data to exercise or defend legal claims even though we no longer require it.

·   Right to Data Portability: you can request your personal information from us in a structured electronic format.

·   Right to Object: you have the right to object to our processing of your personal information where we rely on legitimate interests as the lawful basis. We will accept your objection unless there are overriding legal grounds or ongoing legal claims that warrant continued processing.  

·   Right to Withdraw Consent: you may withdraw your consent to our processing of your personal information at any time. If you withdraw your consent to our use of your personal information, we may no longer be able to provide you with Aesop Services or contact you in the future.

·   Right to Register a Complaint with a Data Protection Authority: you may file a complaint with your local data protection authority if you believe we have not complied with data protection law. However, we would appreciate the opportunity to address your concerns first.

You can make a request to exercise any of these rights by sending an email to [email protected].

7.     Do we use CCTV?

We use CCTV in our stores for your security and to prevent crime. Your image may be recorded during your visit. For more information, please contact us through the details provided below.

8.     How do we protect your personal information?

The security of your personal information is an important concern to us. We maintain appropriate technical and organizational security measures, policies, and procedures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. Personal information that you provide to us is stored on our secure servers behind a secure network. All payment transactions are encrypted. Examples of measures we take include:

·     Imposing confidentiality obligations on our staff and service providers.

·     Restriction of access to your personal information to employees and third parties strictly on a need-to-know basis.

·     Using secure communication channels for transmitting personal information; and

·     Employing adequate administrative and technical controls to secure personal information.

 

9.     How long do we keep your personal information?

As we collect personal information for different purposes, there is not a single retention period for all personal information. We will retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required to comply with legal obligations, resolve disputes, or enforce our agreements. For more information on how long we retain your personal information, please contact us using the details provided in this Privacy Notice.

 

10. Cookies

If your browser accepts cookies, we will store one on your device when you visit our website. Cookies help us collect data such as your IP address, browser type, operating system, domain name, and referring websites. We use this information to track which parts of our website and newsletter you visit.

Cookies help identify your device when you visit our website and direct you to the country and language you chose during your initial visit. This data supports service quality and enables tracking and statistical analysis of website usage. We use the following types of cookies:

·     Strictly necessary cookies are essential for the operation of our website. These include cookies that allow users to log into their accounts, facilitate purchases, and ensure compliance with applicable laws (e.g., maintaining website security). We would not be able to operate our website without these cookies.

·     Performance cookies recognize and count the number of users on our website and how users move around our website. We use this information to improve our website. These cookies do not collect information that identifies a user; all information collected by these cookies is anonymous.

·     Functional cookies are used to recognize you when you return to our website and personalize your content and website experience by remembering your preferences. These cookies are also used to provide services you have asked for (such as watching a video).

·     Targeting cookies are used to record your visit to our website, the pages you have visited, and the links you clicked. These cookies are used to advertise relevant products to you on other websites, based on the products and categories you looked at on our website.

Third Party Cookies

We allow select third-party suppliers to set cookies on our website to enhance customer experience and provide additional functionality. We use the following third-party cookies:

·        Google AdWords:

This website utilizes the online advertising program “Google AdWords”, and the associated conversion tracking cookie is set on the user’s browser. The information collected by the conversion cookies is used to provide aggregate conversion statistics to Google AdWords clients who have opted-in for conversion tracking. They are not used to acquire personal information. If you do not want to allow these cookies on your device, you can deactivate the Google conversion-tracking cookie through your user settings on your internet browser.

 

We also use Google AdWords remarketing codes to log when users view specific pages or take specific actions on a website. This allows us to provide targeted advertising in the future. If you do not wish to receive this type of advertising from us, you can opt out using the DoubleClick opt-out page (http://www.google.com/settings/ads) or the Network Advertising Initiative opt-out page (http://www.networkadvertising.org/managing/opt_out.asp).

If you would rather not have any of this information stored on your computer/device, you can configure your browser, so it does not accept cookies. However, if you disable cookies, you may not be able to access all parts of this website, including the purchase section. For more information and to learn how to disable cookies, please visit www.allaboutcookies.org or www.youronlinechoices.com.

·        Meta Pixel:

Meta Pixel is an analytical tool that allows us to measure user activity on our website. It is a piece of code that helps identify Facebook and Instagram users and see how they interacted with the content on our website (such as, page views, product views, adding to cart/wish list, starting checkout, purchases). Meta Pixel helps us measure the effectiveness of our advertising and campaigns. For more information and to opt-out of analytics using Meta Pixel, you may change your ad preferences (including your activity off Meta technologies) in your Meta accounts centre accessible through this link https://accountscenter.facebook.com/info_and_permissions.  

·        TikTok Pixel: 

TikTok Pixel is a piece of code that captures users’ action on our website, including events such as adding to cart or placing an order. This provides us with insights on how users are engaging with our website and to measure the effectiveness of our advertising and campaigns. For more information and instructions on how to opt-out of analytics using TikTok Pixel, please follow this link https://www.tiktok.com/privacy/ads-and-your-data/en. 

·        Snapchat Pixel:

The Snap Pixel is a tool that helps advertisers measure results, optimize audience targeting, and build audiences for their ad campaigns. The Snap Pixel is a piece of code that is either installed on a website or integrated with an e-commerce store that tracks a variety of actions such as page views, add-to-cart actions, purchases, and sign-ups. For more information and instructions on how to opt-out of analytics, please visit https://values.snap.com/privacy/ads-privacy?lang=en-GB.

 

11. How do we deal with children’s privacy?

We will never knowingly collect personal information from individuals under the age of eighteen (18) without obtaining verifiable parental consent. If you are under the age of 18, you should not provide information to us. If we become aware that a person under 18 has provided personal information to us without verifiable parental consent, we will take all reasonable measures to delete such information from our databases.

 

12. How can you contact us?

If there are any questions or concerns regarding this Privacy Notice, please contact us at [email protected].

 

13. Which version of this Privacy Notice applies?

This Privacy Notice is prepared in English and may be translated into other languages. In the event of any inconsistency between the English version and any translated version of this Privacy Notice, the English version shall prevail.

 

We reserve the right to change our Privacy Notice from time to time. To obtain a copy of the latest version at any time, please visit this website.