This Privacy Notice is provided by Mizzen General Trading LLC (a limited liability company incorporated under the laws of the United Arab Emirates, with commercial license number 787513 and registered office at P.O. Box 2123) (hereinafter referred to as “Mizzen”, “we”, “us” or “our”), in its role as Aesop’s distributor in the United Arab Emirates. Aesop offers skin, hair, and body care formulations available for sale both in stores and on the website www.aesop.ae (together the “Aesop Services”). This Privacy Notice applies to personal information that Mizzen collects from or about you to provide the Aesop Services.

This Privacy Notice covers personal information that Mizzen collects and processes in connection with the Aesop Services, including but not limited to, personal information collected to create your customer account. Personal information refers to any data identifying a natural person directly or indirectly, such as, name, an identification number, location data, an online identifier.

We may collect personal information about you from the following sources:

Information we receive from you
We may collect personal information (such as your name, postal and email address, telephone number, date of birth, title, payment information, skin type) that you provide to us when you:
• Visit our website and register an account with us and/or purchase products through our website, social media channels, over the phone or in store.
• Create a customer account when visiting one of our Aesop retail stores or counters.
• Take part in our promotions, competitions, and surveys.
• Attend a Mizzen event; and
• Correspond with us across any of our channels (e.g., messaging platforms such as, text message, WhatsApp, social media, and email).
• Request Value Added Tax (VAT) refund. We may request valid proof of identification from you (e.g., passport copy, resident’s visa or permit, national ID card).
Information we collect about you
When you visit our website, we may use cookies and other technologies to automatically collect the following information:
• technical information, including your IP address, your login information, browser type and version, details of any website which has referred you to our website, device identifier, location and time zone setting, browser plug-in types and versions, operating system and platform, page response times, and download errors.
• information about your visit, including the websites you visit before and after our website and products you viewed or searched for.
• length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouseovers) and methods used to browse away from the page.
For more information on our use of cookies and similar technologies, please refer to the section on cookies below.
We may collect personal information from other sources when applicable, including through publicly available information as well as the use of the CCTV cameras in our stores.

Why we process your information	How we use your information for this purpose	Based on the following justification
To provide you with Aesop Services that you have requested from us.	We may process your personal information (such as your name, contact details) to provide Aesop Services that you have requested (e.g., where you have purchased a product or service from us, like a hand cream or a facial treatment).	It is necessary for us to process your personal information in this way to perform our statutory and/or contractual obligations to you.
To provide you with information about the Aesop Services.	We process your order history to develop, market, sell or otherwise provide products, services, or information to you.	We process your personal information in this way because it is in our legitimate interests to provide you with the best possible customer experience online and in store.
To process your payments and protect you against fraudulent transactions.	We process your personal information, including your card details to fulfil your purchase orders for the Aesop Services and/or Aesop gift cards.   We also process this information to keep your payment details safe and protect you against fraudulent transactions.	It is in our legitimate interests to process financial information to keep payment transactions secure. Processing this information is also necessary for the performance of our contract with you.
To send marketing communications and event invitations	We may process your personal information, such as name and contact details, to send information about products we think you may be interested in or send invites to Mizzen events.	We process your personal information in this way pursuant to our legitimate interests to improve our relationship with our customers.
To provide Aesop product recommendations.	We may request information about your skin type, known skin allergies, and product preferences to advise on the right Aesop product(s) that meets your skincare needs. We do not maintain records of any skin allergies disclosed to our skincare consultants during your consultation in our stores.	We process your personal information pursuant to our legitimate interests to recommend products and services that meet your skincare needs.
To provide access to your user account and improve your experience on our website.	We process information such as your Aesop.ae account username and password, IP address, information about your purchases, and your other activities on our website to improve our website, including to modify it to your usage, history, and preferences and to troubleshoot problems.	It is in our legitimate interests to ensure we provide you with a seamless experience on our website.
To detect fraudulent or suspicious transactions.	We process the details of your device when you shop on our website to enable us detect fraudulent transactions or suspicious purchasing activity.	It is in our legitimate interests to keep payment transactions secure and prevent fraud on our payment gateways.
To assess the online activities of our website users.	We process information collected by our website automatically and through cookies and other technologies to assess the activities of our users, to measure the interest in and use of our website and communications, and to customise the website and our communications with you. We do this using both individual and aggregated data. Please see the sections titled 'Information we collect about you' and ‘Cookies’ for more detail.	It is in our legitimate interests to process personal information using cookies and similar technologies to provide a seamless experience on the website.
To understand and analyze our sales, your needs, and preferences.	We may use your information such as, your geographical location to conduct focused market research based on trends and common factors so that we develop, enhance, market, and provide products and services to meet customer needs.	It is in our legitimate interests to process personal information to develop, enhance, market, and provide products and services to you.
To manage your customer account.	We process your information to maintain, update, and service your account with us.   This processing also allows us to conduct internal administrative activities and planning.	It is in our legitimate interests to provide a seamless experience and improve our relationship with our customers.
To process exchanges or returns.	We may use your personal information to process exchanges or returns based on your request.	It is necessary for us to process your personal information in this way to fulfil our contractual obligations to you and to comply with applicable law.
To respond to requests or complaints.	We will need to process your name and contact details to respond to your requests or complaints.	It is necessary for us to process your personal information based on our legitimate interest to ensure swift resolution of complaints and provide seamless experience to our customers.
To process VAT refunds	We need to collect a copy of your government-issued identification (e.g., passport copy) to process your request for VAT refund.	We process this information to comply with applicable law.

Your personal information is intended for Mizzen but may be shared with third parties in certain circumstances:

Mizzen’s group of companies:

We may share your personal information with Mizzen’s affiliates and subsidiaries to register your account with us, deliver the Aesop Services, provide you with customer support, process your payments, understand your preferences, send you information about products that may be of interest to you, and conduct the other activities described in this Privacy Notice.

Our service providers:

We use other companies, contractors, and service providers to perform services on our behalf or to assist us with the provision of the Aesop Services to you. We may share personal information with the following categories of service providers:

• infrastructure and IT service providers, including for email archiving, mailing, website hosting, payment/billing, booking/appointment systems, IT support desk, and cloud-based services.
• marketing, advertising, and communications agencies.
• logistics or last mile delivery companies.
• Legal advisers, external auditors, and advisers.

While providing such services, these service providers may have access to your personal information. However, we will only provide our service providers with personal information which is necessary for them to perform their services, and we require them not to use your information for any other purpose. We will use our best efforts to ensure that all our service providers keep your personal information secure.

Aesop product manufacturers:

 We may share and transfer your personal information with and to Aesop UK Ltd in their role as the offshore manufacturer of Aesop products.

Third parties permitted by law:

In certain circumstances, we may be required to disclose or share your personal information to comply with a legal or regulatory obligation (for example, we may be required to disclose personal information to the police, regulators, government agencies, or to judicial or administrative authorities).

We may also disclose your personal information to third parties where disclosure is both legally permissible and necessary to protect or defend our rights, matters of national security, law enforcement, to enforce our contracts, or protect your rights or those of the public.

Third parties connected with business transfers:

We may transfer your personal information to third parties relating to a reorganization, restructuring, merger, acquisition, or transfer of assets, provided that the receiving party agrees to treat your personal information in a manner consistent with this Privacy Notice.

We do not sell your personal information to third parties.

Please note our website may, from time to time, contain links to and from third-party websites of our partners or affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy notices and that we have no control over how they may use your personal information. You should check the privacy notices of third-party websites before you submit any personal information to them.

Personal information we collect may be transferred to, stored, and processed in the United Arab Emirates, Kingdom of Saudi Arabia, and the United Kingdom where Mizzen, its affiliate companies, and offshore manufacturer are located or maintain facilities. We carry out such transfers for the purposes described in this Notice. Where we transfer personal data outside the United Arab Emirates or Kingdom of Saudi Arabia, we take all steps that are reasonably necessary to ensure that your personal information is treated securely and in accordance with this Privacy Notice and applicable data protection laws, including, where relevant, entering standard contractual/data protection clauses (or equivalent measures). If you would like more information on transfer mechanisms, please contact us using the details provided in Section - ‘How can you contact us?’.

You have the following rights available to you in respect of the personal information we hold about you:
• Right to Access:
You have the right to obtain confirmation as to whether we process your personal information, request a copy of your personal information being processed by us, and obtain certain other information about how and why we process your personal information (like the information provided in this Privacy Notice). For your own privacy and security, at our discretion or to the extent required by applicable law, we may require you to prove your identity before providing the requested information.
• Right to Rectification:
You have the right to have incomplete or inaccurate personal information that we process about you rectified.
• Right to Erasure:
You have the right to request that we delete personal information that we process about you, except we are not obliged to do so if we need to retain such data to comply with a legal obligation or to establish, exercise or defend legal claims.
• Right to Restrict Processing:
You have the right to restrict our processing of your personal information in the following cases:
- Temporarily for a period when you have contested the accuracy of the personal information.
- Where your personal information has been unlawfully processed and you request restriction of processing instead of erasure.
- We no longer need to process such data for the purpose for which it was collected but the personal information is required by you to establish, exercise, or defend legal claims.
• Right to Data Portability:
You have the right to obtain personal information we hold about you, in a structured electronic format, and to transmit such data to another data controller, where this is (a) personal information which you have provided to us, (b) if we are processing that data based on your consent or to perform a contract with you, (c) the processing is carried out by automated means.
• Right to Object: Where the legal justification for our processing of your personal information is our legitimate interest, you have the right to object to such processing. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise, or defense of a legal claim.
• Right to Withdraw Consent:
If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out from marketing messages that you receive from us.
• Right to Lodge a Complaint with a Data Protection Authority:
You have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. We would however appreciate the chance to deal with your concerns before you approach any local data protection authority so, please contact us the first instance.
You can make a request to exercise any of these rights in relation to your personal information by sending the request to privacy@mizzen.me.
We will generally provide you with access to your personal information if practicable and will take reasonable steps to amend any of your personal information which is inaccurate or out of date.
Please note that where you have withdrawn your consent to our collection, use, and disclosure of your personal information at any time (subject to contractual and legal restrictions and reasonable notice), we may be unable to provide you the Aesop Services you have requested or contact you in the future.

Please note that where CCTV is in operation in our stores, you may be captured on CCTV and your footage and image recorded and stored. All CCTV footage is captured purely for your security and for the prevention and detection of crime. If you would like to know more about this, please contact us using the details provided below.

The security of your personal information is an important concern to us. We provide the utmost care in secure transmission of your personal information from your computer and other electronic devices to our servers. We use industry security standards to safeguard the confidentiality of your information and to make sure that your personal information is secure with us.
We have implemented and maintained appropriate technical and organizational security measures, policies, and procedures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind a secure network. All payment transactions are encrypted. Examples of measures we take include:
• Imposing confidentiality obligations on our staff and service providers.
• Restriction of access to your personal information to employees and third parties strictly on a need-to-know basis, such as to respond to your enquiry or request.
• Using secure communication channels for transmitting personal information; and
• Employing adequate administrative and technical controls to secure personal information.

We will only retain your personal information for as long as necessary for the purpose for which that data was collected and to the extent permitted by applicable laws.
However, we may retain some information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If your web browser is set up to accept cookies, a cookie will be stored on your hard drive when you visit this website. Cookies allow us to collect information about your computer or device, which may include your IP address (a number assigned to your computer/device when you register with an Internet Service Provider), type of browser, operating system, domain name, and the details of any website which has linked you to our website. Our website uses cookies to track and collect information about which parts of our website and newsletter (including links to other websites) you visited.

Cookies also allow us recognize your computer/device while you are on our website, and to send you to the country of origin and language you selected on your first visit to this website. This information is used to maintain the quality of our service and to provide tracking and statistics regarding the use of our website.

The types of cookies we use include:

• Strictly necessary cookies: these are required for the operation of our website, such as cookies that enable you to log into your account or make purchases, or cookies that enable us comply with applicable law (for example, to keep your information safe). We would not be able to operate our website without using strictly necessary cookies.
• Performance cookies recognize and count the number of users on our website and help us see how users move around our website. These cookies do not collect information that identifies a user. Any information collected by these cookies is anonymous. We only use such information to improve our website. This information helps us to find out how well the website works and highlights where it can be improved.
• Functionality cookies are used to recognize you when you return to our website and assist us to personalize your content and website experience by remembering your preferences. These cookies are also used to provide services you have asked for (such as watching a video). You can block these cookies using your browser settings (please see instructions below).
• Targeting cookies are used to record your visit to our website, the pages you have visited, and the links you have followed. These cookies are used to advertise relevant products to you on other websites, based on the products and categories you looked at on our website. You can block these cookies using your browser settings (please see instructions below).

Third Party Cookies

We also use third party cookies of suppliers who set their own cookies on our website with our permission to improve customer experience and offer additional functionality. We use the following third-party cookies –

• Google AdWords:

This website utilizes the online advertising program “Google AdWords”, and the associated conversion tracking cookie is set on the user’s browser. The information collected by the conversion cookies is used to provide aggregate conversion statistics to Google AdWords clients who have opted-in for conversion tracking. They are not used to acquire personal information. If you do not want to allow these cookies on your device, you can deactivate the Google conversion-tracking cookie through your user settings on your internet browser.

We also use Google AdWords remarketing codes to log when users view specific pages or take specific actions on a website. This allows us to provide targeted advertising in the future. If you do not wish to receive this type of advertising from us, you can opt out using the DoubleClick opt-out page (http://www.google.com/settings/ads) or the Network Advertising Initiative opt-out page (http://www.networkadvertising.org/managing/opt_out.asp).

If you would rather not have any of this information stored on your computer/device, you can configure your browser, so it does not accept cookies. However, if you disable cookies, you may not be able to access all parts of this website, including the purchase section. For more information and to learn how to disable cookies, please visit www.allaboutcookies.org or www.youronlinechoices.com.

• Meta Pixel:

Meta Pixel is an analytical tool that allows us to measure user activity on our website. It is a piece of code that helps identify Facebook and Instagram users and see how they interacted with the content on our website (such as, page views, product views, adding to cart/wish list, starting checkout, purchases). Meta Pixel helps us measure the effectiveness of our advertising and campaigns. For more information and to opt-out of analytics using Meta Pixel, you may change your ad preferences (including your activity off Meta technologies) in your Meta accounts centre accessible through this link https://accountscenter.facebook.com/info_and_permissions.  

• TikTok Pixel:

TikTok Pixel is a piece of code that captures users’ action on our website, including events such as adding to cart or placing an order. This provides us with insights on how users are engaging with our website and to measure the effectiveness of our advertising and campaigns. For more information and instructions on how to opt-out of analytics using TikTok Pixel, please follow this link https://www.tiktok.com/privacy/ads-and-your-data/en.

We will never knowingly collect personal information from individuals under the age of eighteen (18) without first obtaining verifiable parental consent. If you are under the age of 18, you should not provide information to us. If we become aware that a person under 18 has provided personal information to us without verifiable parental consent, we will take all reasonable measures to delete such information from our databases.

This Privacy Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this Notice, the English version shall prevail. We reserve the right to change our Privacy Notice from time to time. To obtain a copy of the latest version at any time, please visit this website.