WOO Website Privacy and Cookies Notice

About this notice

This Privacy and Cookies Notice explains how Planet Woo Limited (“WOO”, “us”, “we”, “our”) collects and uses your personal data when you use and interact with us including: our websites at woo.itv.com and planetwoo.co (the “Websites”) our research studies/surveys our social media pages our adverts shown on ITV and/or other third party platforms or channels.

We keep our Privacy and Cookies Notice under regular review. This version was last updated on the date stated above. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. The Websites are not intended for anyone under the age of 18 years old and we do not knowingly collect data relating to children.

Our responsibility as a data controller

We are the controller of personal data collected while you access the Website, with other sites we may provide from time to time (including any interactions with us on our social media pages).

If you have any questions about this Privacy and Cookies Notice, including any requests to exercise your legal rights as a data subject, please contact us using the details set out below.

Our contact details

Full name of legal entity: Planet Woo Limited Email address: myprivacy@itv.com Postal address: Planet Woo Limited, ITV White City, 201 Wood Lane, London, United Kingdom, W12 7RU

What this notice doesn’t cover

This Privacy and Cookies Notice does not cover companies, services or applications that we don’t own or control, or people that we don’t employ or manage. The Websites may include links to third-party websites (including social media platforms), plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites or how they handle your personal information on those websites. When you leave our Websites or choose to login to certain parts of our Websites using third party accounts, we encourage you to read the privacy notice of those websites you visit and the third party accounts you use.

The next sections of this Privacy and Cookies Notice relate to our privacy practices.

What information do we collect?

We may collect the following information in the provision of the Websites to you:

  • your email address if you provide it to us
  • if you have used your social media account details to facilitate logins, then we may receive information related to your social media profile (to the extent it is public) or your social media handle;
  • if you have interacted with our social media pages, we will also be able to see your social media profile (to the extent it is public) or your social media handle and your interactions with us; ;
  • your consent choices;
  • your responses if you complete our surveys, questionnaires or participate in a research panel;
  • your registration details including your first name and last name, password (securely encrypted) and account details;
  • your IP address or Mac address;
  • search and browsing history on the Websites; and
  • where you connect or access the Websites while logged into your Google or Github Account, the details of these accounts.

How will we use your information?

We will only process your personal information where we have legal grounds to do so.

Types of dataPurposeConsentLegitimate interestPerformance of a ContractLegal/ regulatory obligations
Email address1. to send you our newsletter, updates and marketing materials. You may withdraw your consent at any time by clicking the unsubscribe link in the footer of our emails. 2. to enter you into and run our competitions or prize draws
Registration details: first name, last name, password, account details or third party login detailsto allow you to login to the Marketplace, place and track orders, view your order history
Data collected from cookies including your IP address and information about how you use/ move around our websitewe use your information in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Purchase details: name, telephone number, email address, delivery address, billing address, payment details, what you have purchased, any feedback and complaints you may have about your purchase/ purchase experienceif you have made a purchase through Marketplace shop - so we can, as an intermediary, assist in processing and fulfilling your order by us sending your information to our Marketplace Vendors; processing any returns and refund requests
Competition/ prize draw information: name and/or email address (as applicable) and your responses/ your entryto ensure you have fulfilled competition or prize draw entry requirements, to administer the competition or prize draw and fulfil the prize
Responses to our surveys, questionnaires or collected in our research panelsto conduct research/ surveys so we can gather views or understand habits/ preferences on specific topics. Where our questionnaires/ surveys ask you about special category data e.g. data which is more sensitive such as sex life, ethnic background etc, we will rely on consent for the collection and processing of that data
Complaints/ feedback handling: details of your complaint including your name and/or email address (as applicable) and the nature of your complaintso we can share your complaints/feedback with relevant vendors/ partners
Information we have collected about youmay be requested under a court order or we may be required to share this with law enforcement authorities - read more in the section below.

If you participate in our surveys, questionnaires or research panels, we may anonymise your responses so we can carry out meaningful analysis across the research group. This means, we won’t be able to tell what responses you provided and we won’t be able to reverse engineer or link any response back to you. In these instances, we do not need to rely on legal grounds set out above. Any reports/ analysis generated may be shared with third parties including our brand partners/ clients/ vendors on Marketplace and/ otherwise made publicly available.

In what circumstances do we share your information?

We may share your personal data with third parties in some circumstances. This will only take place in accordance with the applicable law and for the purposes set out below:

  • To our outsourced service providers or suppliers to facilitate the provision of our services to our users, e.g., we use Mailchimp’s services to send you our newsletter and updates, Vendo services for our eCommerce storefront and Software-as-a-Service eCommerce backend cloud-based platform, and SweepWidget to help us with our competitions or prize draws and social marketing campaigns, we also use third party platforms to help us collect our survey responses;
  • If you have purchased an item from our Marketplace, we will share your data with the Marketplace Seller responsible for shipping that order. We also use Automizely Pte. Ltd. as a returns service, so if you need to return your order, your information will be shared with Aftership so they can facilitate the return.
  • To another legal entity, on a temporary or permanent basis, for the purposes of a joint venture, collaboration, financing, sale, merger, reorganisation, change of legal form, dissolution or similar event;
  • To the police, regulatory bodies or legal advisers in connection with any alleged criminal offence, unlawful activity or suspected breach of the Website Terms and Conditions, a breach of other terms and conditions, or otherwise where required by law, or where we suspect harm or potential harm to others. We will cooperate with any law enforcement authorities or court order requesting or directing us to disclose the identity or location of or any other information about anyone breaching any relevant terms and conditions or otherwise for the prevention or detection of crime or the apprehension or prosecution of offenders;
  • With other companies in our corporate group, e.g., ITV Consumer Limited and ITV Broadcasting Limited, for the purposes described in this Privacy and Cookies Notice. These companies may also process your personal data as data controllers as necessary for the purposes described in this Privacy and Cookies Notice; and/or to any other third party where you have provided your consent.

Our marketing activities

We provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We may use your personal information to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this “marketing”).

You will receive marketing communications from us if you have requested to join our marketing list by giving us your email address, or if you have purchased goods or services via our Websites and you have not opted out of receiving our marketing. You can unsubscribe from our marketing emails at any time by following the unsubscribe link in the footer of our emails or by contacting us via the details listed in this Privacy and Cookies Notice. Where you opt out of receiving our marketing messages, this will not apply to personal data provided to us as a result of a purchase, registration to our platform, product/service experience or other transactions.

If you make a purchase from our Marketplace, your personal information will be passed to Marketplace Seller to fulfil your order (as described above), however this information will not be used for marketing purposes by the Marketplace Sellers unless you have provided your consent to them separately.

Social Media and other platform services

Where we promote our products and/or services on ITV platforms or other third party platforms, ITV and other third parties may share certain data with us so that we can show you our ads on social media platforms.

To understand more about how ITV shares personal data, provides custom audience or lookalike audiences where we promote our products and/or services on ITV channels please refer to ITV’s privacy policy at: https://www.itv.com/terms/articles/itv-privacy

We may work with third party advertisers and platforms (such as Facebook and Google) to advertise our products and services to new or relevant audiences, or to exclude an audience from a marketing campaign if we know they are already loyal customers or the campaign is not likely to be of interest to them.

For our users, we do this by providing a protected or hashed ID (for example, taking your registered email address which is then 'hashed' which means it is converted into a string of numbers and/or letters (to help make it more secure) to match the personal information we hold about you with the data the third party may also have because you are a user of their platform or you are in their customer database in order to show you (or exclude you from) the marketing or promotion. This is subject to your permissions with the third party advertiser or the relevant third party platform. You should read and understand the third party's privacy notice and check your privacy settings or controls.

Third parties based outside the UK and/or EEA

As mentioned above, we occasionally use trusty third parties to help us deliver our Websites and related services and we want to reassure you that these third parties are only allowed to access the information they need to do their job. They’re not allowed to use it for any other purpose. Some of these third parties are located, or have servers that are located, outside the UK and/or the European Economic Area (EEA).

Where we share your information with such third parties, we take all steps reasonably necessary to ensure your information is treated securely and in accordance with this Privacy and Cookies Notice. However, we are aware that some countries do not offer an equivalent level of protection to personal information as in the UK the EEA.

In these cases, we will only transfer your personal information outside of the UK or the EEA if:

  • the European Commission and/or UK government have determined that an adequate level of protection for personal information is in place in the country to which we transfer your data;
  • Standard Contractual Clauses (SCCs) as adopted by the EU or an International Data Transfer Agreement (IDTA) or SCCs Addendum as adopted by the UK government are in place governing the transfer (you can view the standard clauses here); or
  • other appropriate safeguards have been put in place.

The next section of this Privacy and Cookies Notice relates to cookies and we use them.

What are cookies?

Cookies are small files of letters and numbers which are stored in the memory of your computer or other device (e.g. mobile or tablet). Cookies are created when you visit a website or other service that uses cookies (such as our Websites). Cookies are commonly used to enable various functionalities of website to work, to help the user’s browsing experience, and provide more information about the user’s experience and interests. This information is generally used to make content, services and advertising available, more relevant and useful during future visits.

Do our Websites use cookies?

Strictly necessary cookies. These are cookies that are required for the operation of our Websites. They include, for example, cookies that, if available, may enable you to log into secure areas of our Websites, use a shopping cart or make use of e-billing services. Analytical or performance cookies. These may allow us to recognise and count the number of visitors and to see how visitors move around our Websites when they are using it. This helps us to improve the way our Websites works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies. These may be used to recognise you when you return to our Websites, which will mean that we can personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Targeting cookies. These cookies record your visits to websites, the pages you have visited and the links you have followed. We may use this information to make our Websites and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose. You can find more information about the individual cookies we use and the purposes for which we use them in the table below:

Cookie NamePurposeMore information
accept-cookiesFunctional cookie to enable us to store the choice made by the user to either accept cookies or not, stored for 365 daysFunctional
woo-hide-newsletter-wallFunctional cookie to enable us to see the choice by the user to not see the newsletter sign-up form overlay, stored for each sessionFunctional
woo-hide-newsletter-modalFunctional cookie to enable us to see the choice by the user to not see the newsletter sign-up form post, stored for 2 daysFunctional
woo-unsubscribedFunctional cookie to enable us to store information on whether the user has already successfully subscribed to our newsletter, stored for 365 daysFunctional
order-tokenrequired to operate shop functionality related to your order and basketNecessary
recently-viewedSaves your previously viewed products for display on other pagesFunctional
_vendo_sessionAllows the shop platform to maintain a link to previous pages and actions performed by the userFunctional

Please note that the following third parties may also use cookies, over which we have no control. These named third parties may include, for example, advertising networks and providers of external services like web traffic analysis services. Examples include, but are not limited to:

Embedded content

  • Soundcloud, for listening to streamed music content (privacy policy).
  • YouTube, for watching streamed video content (privacy policy).
  • TikTok, for tracking content embedded from TikTok (privacy policy).
  • Spotify, for listening to streamed music content (privacy policy).
  • Mixcloud, for listening to streamed music content (privacy policy).
  • Apple Music, for listening to streamed music content (privacy policy).

Retargetting/Marketing

  • Google, including Google Services and Google Analytics, which allows us to track the use of the Websites, prepare reports on user activity and share them with other - Google services (privacy policy; opt-out).
  • Facebook, for online advertising and remarketing service for us (privacy policy).
  • Mailchimp, for our email marketing service (privacy policy).
  • Vendo, for our eCommerce storefront and Software-as-a-Service eCommerce backend cloud-based platform (privacy policy).
  • Twitter, for online advertising and remarketing services (privacy policy).
  • SweepWidget, for social media logins/campaigns and competitions or prize draws.

See below further information on how to manage cookies.

Where can I find more information about cookies, and how do I turn cookies off or delete cookies?

Find out more about cookies, including how to disable/enable and delete them, at the following website www.aboutcookies.org. You can also follow the tips below to help deactivate advertising cookies:

Find out more about cookies, including how to disable/enable and delete them, at the following website www.aboutcookies.org. You can also follow the tips below to help deactivate advertising cookies:

Update your browser settings. Your browser may include control settings that allow you to manage the use of cookies by the websites that you visit. Check your browser for any features available that enable you to see and delete cookies stored on your device and to block cookies from all or selected sites. Find out more by checking the settings of your browser and for your ease of reference, here are some helpful materials from some of the popular web browsing providers: Mozilla Firefox; Apple Safari; Google Chrome; Microsoft Edge.

Update your mobile device settings. Your mobile device may provide browser settings which allow you to make choices about which cookies are used. This is usually the case for devices which support installing apps such as iOS and Android devices. iOS and Android devices also include additional device settings that control whether advertising partners can use information about your app activity for advertising purposes. On iOS, you can search for a setting called “Limit Ad Tracking”, available on recent versions of the iOS operating system. On Android, you can search for a setting called “Opt out of Ads Personalization”, available on recent versions of the Android operating system.

Access third-party opt-outs. Leading online advertising industry groups offer tools to limit how cookies are used for advertising purposes by participating third parties. More information is available here: Network Advertising Initiative; the Digital Advertising Alliance; and for users in the EU, the European Interactive Digital Advertising Alliance. Google also provides web users with the Google Analytics Opt-out Browser Add-on to prevent the collection of data via Google Analytics. Please note that if you block all cookies (including essential cookies) you may not be able to access all or parts of our Websites, or you may experience reduced functionality when accessing certain services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies as soon as you visit our Websites which is why we ask for your consent to this upfront. If you choose not to consent to our cookies, some parts of the Websites may not function properly.

What are your rights?

Any personal information you supply will be treated in accordance with applicable data protection laws, including the Data Protection Act 2018 (the “UK GDPR”) and any other applicable or superseding legislation. We are committed to delivering the rights that individuals are entitled to under the applicable data protection laws. Your rights are:

  • The right to be informed. This Privacy and Cookies Notice informs you about the information we collect and how we use your personal data.
  • The right to request a copy of the personal information we hold about you. To do this, please contact us at myprivacy@itv.com making clear that you are requesting a copy of your personal information and including full details of what you require. You may also be required to submit proof of your identity.
  • The right to object to your personal information being processed. This right includes the absolute right to reject to direct marketing or in other cases, the right to object to our use of data based on our legitimate interests. For the latter of these, we may be necessary for us to continue to process your information if we have a lawful reason to do so, such as when we need to continue to process your information to defend a legal claim or if this information is necessary for the ongoing provision of our products and services which you wish to receive.
  • The right to ask us to rectify your information. You may request that we correct any inaccurate and/or complete any incomplete personal information.
  • The right to ask us to delete your information. You may request that we erase your personal information and we will comply, unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for retaining your personal information if you have bought a product from our Websites and therefore we need this transaction information in order to manage our contractual relationship with you.
  • The right to obtain and reuse your information across other similar services. This is known as data portability and means that in certain circumstances, you may request that we provide your personal information to you in a structured, commonly used and machine-readable format and have it transferred to another provider of the same or similar services to us. Where this right is applicable, we will comply with such transfer as far as it is technically feasible. To submit a request please contact us at myprivacy@itv.com making clear that you are requesting a copy of your personal information and including full details of what you require. You may also be required to submit proof of your identity.
  • The right to restrict processing of personal data. If you have a specific concern for example that we are processing incorrect information about you, you can ask us to stop processing it, which you may want to do before asking us to correct it.

Last updated: 23 Oct 2023