Privacy Policy

Get-A-Bear Privacy Policy

Extent: This Privacy Policy applies to websites operated by or on behalf of Get-A-Bear and its Affiliates worldwide. Your privacy is important to us, and so is being transparent about how we collect, use and share information about you. This policy is intended to help you understand the following

What information we collect about you
How we use the information we collect
How we share the information we collect
How we store and secure the information we collect
How to access and control your information
How we transfer the information we collect internationally
Other important privacy information

This privacy policy covers the information we collect about you when you use our products or services, or otherwise interact with us unless a different policy is displayed.

We refer to all our products together with our websites as “Services” in this policy.

This policy also explains your rights about how the information we hold on you is used. Your rights include how you can object to certain uses of information about you and how you can access and update certain information about you.

IF YOU DO NOT AGREE WITH THIS POLICY, DO NOT ACCESS OR USE OUR SERVICES OR INTERACT WITH ANY OTHER ASPECT OF OUR BUSINESS.

Except for the Get-A-Bear “Beornish Language” which is intended for all ages, the Get-A-Bear websites, including but not limited to the “Shop” website, are not intended for children under 16 years of age and are for adults only. Get-A-Bear does not sell products for purchase by children. We sell children’s products for purchase by adults. If you are under 18, you may use our websites only with the involvement of a parent or guardian (except for the Get-A-Bear “Beornish Language” which can be used by people of all ages).

WHAT INFORMATION WE COLLECT ON YOU?

OVERVIEW

We collect information about you when:

You provide it to us.
Automatically when you use the Services.
Data is provided to us by third parties.

The information we collect includes account and contact information, device and connection information, Service information and logs.

INFORMATION YOU PROVIDE TO US

We collect information about you when you input it into the Services or otherwise provide it directly to us.

Account and Profile Information:

We collect information about you when you do one or more of the following on our online store:

Register for an account
Modify your account
Make a purchase through the Services

The personal information we collect is the following:

Name
Email
Billing Address
Delivery Address
Telephone Number
Payment Details
Date Of Birth

If you do not wish to supply the above information, then you will have limited access to our Services.

Content you provide through our websites

We collect any content you submit to the websites owned and operated by us. The personal information we collect on these websites are:

Name
Email Address

Information you provide through our support channels

The Services also include our customer support, where you can submit information about a problem you experience with a Service. When you engage with our support website and/or team you will be asked to provide contact information, a summary of the problem and any other documentation.

The contact information we ask you to provide is one or more of the following:

Email Address
Name
Username

If you do not provide an email address, our support team will not be able to resolve your problem.

Information you provide outside our Services

Information you provide to us is not always done via our Services but via third-party services, e.g. social media. The information we receive this way is one or more of the following:

Name
Email
Address

For example, when we are running a Facebook competition for some physical merchandise, if you win, we will ask you to contact us via Facebook to provide contact details.

INFORMATION WE COLLECT AUTOMATICALLY WHEN YOU USE THE SERVICES

We collect information about you when you use our Services, including browsing our websites and taking certain actions within the Services.

Your use of the Services

The information we collect automatically when you use our Services are:

How you interact with the Services.
Events you trigger during the use of our Services.

For example, when you log into Get-A-Bear forums we will record that you have logged into the forum.

We also automatically keep track of your Internet Protocol (IP) Address when you interact with our Services in one or more of the following ways:

Creating and/or modifying your account
Interacting with our website

Device and Connection Information

We collect information about your computer, phone, tablet or other devices you use to access the Services, which is anonymised and aggregated. The device information includes:

Operating system
Browser type
URLs or referring/exit pages
Device identifiers

How much of the information we can collect depends on the settings and/or plugins on your device.

Cookies and Other Tracking Technologies

Get-A-Bear and our third-party partners, such as our advertising and analytics partners, use cookies and other tracking technologies (e.g. web beacons, device identifiers and pixels) to provide functionality and to recognise you across different Services and devices.

HOW WE USE THE INFORMATION WE COLLECT

How we use the information we collect depends, in part, on the Services you use, how you use them and any preferences you have communicated to us. These uses include providing, securing and improving the Services, communicating with you about the Services, support for the Services, and with your consent, additional marketing about the Services.

To conduct business with you
To improve your experience with us
To scan your bear into our Get-A-Bear Island
To make an online purchase
To create a wish list
To process, fulfill, and follow up on online purchases
To create and maintain accounts
To handle guest service requests
To send friends and families emails and e-cards on your behalf
To send surveys
To help you submit a product review.
To help you receive email, direct mail, or SMS text messages
To help you register for promotions, loyalty programs and competitions
To suggest products and services which may be of interest to you;
To prevent or address service or technical problems
To respond to customer support matters
To follow the instructions of a customer who submitted personal information;
To prevent damage or harm to us, our services, or any person or property; or
If we believe that disclosure is required by law (including to meet national security or law enforcement requirements), or in response to a lawful request by public authorities.

We process Personal Information submitted by customers for the purpose of providing the above-referenced services (collectively, the “Services”) to customers. To fulfill these purposes, we may access Personal Information to provide the Services, to prevent or address service or technical problems, to respond to customer support matters, to follow the instructions of a customer who submitted the Personal Information, or in response to contractual requirements with our customers and service providers.

With respect to Personal Information covered by Privacy Shield, Get-A-Bear certifies that it collects Personal Information solely to the extent such Personal Information is relevant in providing the Services. For our record keeping purposes, we may retain certain Personal Information that you submit in conjunction with commercial transactions; however, we will retain such Personal Information only so long as it serves the purpose of providing the Services.

Your Choices and Access to Your Personal Information

Our email, website, and other interactive programs allow you to choose to receive or to stop receiving communications from us.

You have the right to access, amend, or delete any Personal Information we hold about you, be removed from Get-A-Bear programs you enrolled in, stop receiving E-Mail and other communications, and prevent any further use of your Personal Information by Get-A-Bear, by contacting us. We will respond to reasonable requests in an appropriate timeframe as determined by the respective authority. We will respond to requests within one month.

Get-A-Bear will also contact individuals whose Personal Information is within the scope of the Privacy Shield Principles to obtain prior affirmative express consent if sensitive (referred to as special categories of personal data under the GDPR) Personal Information (i.e., Personal Information specifying medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data or Personal Information specifying the sex life or sexual orientation of the individual) is to be collected or disclosed to a third party, or if such sensitive Personal Information is to be used for a purpose other than those for which it was originally collected or subsequently authorised by such individual. We will treat as sensitive any Personal Information received from a third party where the third party identifies and treats it as sensitive.

Children’s Privacy

Get-A-Bear is committed to protecting children’s privacy on the Internet. No one under age 16 may provide any Personal Information to or on the websites. Get-A-Bear does not knowingly collect Personal Information from children under 16. If you are under 16, do not use or provide any information on our websites, make any purchases through our websites, use any of the interactive or public comment features of our websites or provide any information about yourself or others to us, including your/others name, address, telephone number, email address, or any screen name or user name you/others may use. If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from a child under 16, please contact us at privacy@getabear.com

What Personal Information is collected online from children under 16 and how is it used?

Get-A-Bear does not knowingly collect, use, or disclose Personal Information (including online contact information) of children under the age of 16. We may collect information about visits to our websites without a user actively submitting such information.

Is my child’s Personal Information required for participation in online activities?

No.

Is my child’s Personal Information required for specific services?

Yes. Personal Information is required to create a certificates online and to have a customised dossier with parental consent.

Is my child’s Personal Information shared with unrelated third parties?

No.

Suppliers and supplier personnel Information

What we collect:

First and Last Names
E-Mail address
Telephone numbers
Payment details
Identification
Company Name

We may use your information for the following purposes, based on the following legal grounds

If it is necessary for the performance of our contract or for the purposes of entering into a contract:

For the purpose of negotiating and entering into contractual agreements with you, in the course of receiving services from you, for the purposes of making payments to you.

If it is in our legitimate business interests to do so:

For internal record keeping for administration purposes, for the purpose of communications in relation to establishing a working relationship.

Compliance with a legal obligation:

In order to prevent fraud or money laundering or to comply with any other legal or regulatory requirements.

About Cookies

Cookies and Other Tracking Technologies

We use cookies and similar tools (collectively, “cookies”) for the purposes described below.

Operational Cookies: We use cookies to provide our services, for example:

Recognising you when you sign-in to use our services.
Displaying features, products, and services which might be of interest to you, including ads on our services if they are for products and services available on Get-A-Bear.
Keeping track of items stored in your shopping basket.
Preventing fraudulent activity.
Improving security.
Keeping track of your preferences such as currency and language.

We also use cookies to understand how customers use our services so we can make improvements. For example, we use cookies to conduct research and diagnostics to improve Get-A-Bears content, products, and services, and to measure and understand the performance of our services.

Advertising Cookies: We also use cookies to serve certain types of ads, including for products and services not available on Get-A-Bear and for certain ads relevant to your interests.

Approved third parties may also set cookies when you interact with Get-A-Bear services. Third parties include search engines, providers of measurement and analytics services, social media networks, and advertising companies. Third parties use cookies in the process of delivering ad content, including ads relevant to your interests, to measure the effectiveness of their ads, and to perform services on behalf of Get-A-Bear.

You can manage cookies by visiting our Cookie Preferences page. We will apply your cookie preferences to the Get-A-Bear service and the browser on which you made your choice and on any other browser where you are signed in. If you are not signed in, we may need to ask you for your choice again.

Alternatively, the settings on your browser will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, how to disable and remove cookies, and when cookies will expire.

Operational cookies allow you to take advantage of some of Get-A-Bear essential features. If you block or otherwise reject operational cookies through your browser settings some features and services may not work. For example, you will not be able to add items to your shopping basket, proceed to checkout, or use any Get-A-Bear services that require you to sign in also but not including the Beornish Translator or Interactive Map. You may also need to manually adjust some of your preferences every time you visit one of our services.

United Kingdom

As the company operates in the UK your Personal Information is protected in the United Kingdom by the Data Protection Act 1998 (the “Act”) up until 24 May 2018 and by the GDPR from 25 May, 2018. Under the Act and the GDPR we will only process your Personal Information in a lawful, fair and transparent manner and your Personal Information will only be collected for specified and legitimate purposes. We will secure your Personal Information to prevent unauthorised access by third parties.

Retention of Personal Information

Different types of Personal Information may need to be retained for different periods of time depending on the purposes for which the data is processed and the legal and regulatory retention requirements in relation to certain categories of data. In determining the appropriate retention period consideration is given to the following factors:

- - the purposes for which the Personal Information is processed;
  - the legal basis for processing that Personal Information;
  - legal requirements for retention (particularly employment and health and safety law); and
  - regulatory requirements.

In particular, except where otherwise required by applicable law or a request to delete or erase Personal Information, Get-A-Bear retains certain specific categories of Personal Information in accordance with the periods set out in the Data Retention Schedule to this Policy.

In addition, Get-A-Bear may retain anonymised Personal Information (data that is no longer in a form identifying or making identifiable the individual to which the Personal Information originally related).

Personal Info Retention Schedule

Guest Info – includes but not limited to: Names, Addresses, Transaction Information, Payment details, E-mail Addresses, Telephone Numbers, Purchasing history, IP address, Device ID. Retention Period in absence of a deletion request other request from a data subject or legal requirement 6 years.

Supplier Data – includes but not limited to: Names, Addresses, Transaction Information, Payment details, E-mail Addresses, Telephone Numbers. Retention Period in absence of a deletion request other request from a data subject or legal requirement 6 years after services have been provided.

Supplier Contracts – includes but not limited to: Contracts for supplier services, Related sub-contracts. 12 + 1 years after services have ceased

Insurance Data – includes but not limited to: Personal Information involving insurance claims, Insurance policies, Insurance related correspondence, outcomes and notices. 12 + 1 years

Health and Safety – includes but not limited to: Assessments, Policy Statements, Records of consultations with safety representatives

Changes to This Privacy Policy

We may amend this Privacy Policy at any time. If we make any changes in the way we collect, use, and/or share your Personal Information, we will notify you by sending you an email at the last email address that you provided us, or by prominently posting notice of the changes on the web sites covered by this Privacy Policy.