United Kingdom Data Protection Notice

Effective date: March 1, 2024

Orvis Inc. UK Limited (“Orvis”, “we”, “us”, “our”) is committed to compliance with the United Kingdom’s General Data Protection Regulation (“GDPR”) in relation to the collection, retention, use, and other processing of personal data from the United Kingdom (“UK”). This Data Protection Notice (“Notice”) applies to personal data we process about you, including personal data that we may obtain when you visit orvis.co.uk (the “Site”).

Personal Data Collection

In our role as a data controller, Orvis may obtain personal data from multiple sources, including information provided directly to us by individuals through our Site.

We collect the following types of personal data:

• Contact Data. You may provide your contact details, such as name, address, telephone number, email address, or other similar information, which we may use to provide services to you. For example, we may contact you after you provide us personal data when placing an order, returning an item, or making an exchange.

• Device Information. Orvis may obtain information about devices that access the Site, including the type of device, its operating system, device settings, and unique device identifier.

• Authentication Data. We may collect a username, password, password hint(s), and other similar authentication information to verify the identity of registered users.

• Job Application Information. If you apply for a job listed on our Careers Page, we or our vendor may collect your name, email address, physical address, phone number, and curriculum vitae.

• Payment Information. If you purchase products from us, we may collect personal data related to your payment such as name, debit or credit card details, and billing address.

• CCTV Recordings. If you visit our store, we may collect images of you captured by our in-store security cameras.

• Other Information. This type of information may include emails and other communications that you send us (such as customer support inquiries), responses to surveys or polls, or information you submit using our chat feature. We may also retain information about your purchase history, including items that you have saved or are interested in purchasing.

Your provision of personal data may be required in order for us to provide certain products and services. In some instances, if you choose not to provide your personal data, we may not be able to process your request for certain products and services.

Personal Data Processing

We may process personal data to:

• Process and track your order;
• Provide the services you request;
• Contact you about the status of an order;
• Send you catalogues or promotional offers we believe will be of interest to you;
• Send you the Orvis email newsletter;
• Identify your product and service preferences;
• Customise our communications to you;
• Advertise products and services and improve the effectiveness of our advertising;
• Provide information concerning product recalls or products you have purchased;
• Improve our merchandise selective and customer service;
• Administer a sweepstakes or similar promotion and identify or publicise the winner(s) in accordance with the rules for that promotion; or
• For our internal purposes, such as for security purposes.

These processing activities are carried out pursuant to the following legal bases:

• The processing is necessary for us to provide you with services you request, including pursuant to a contract we have with you.
• We have a legal obligation to process your personal data, such as to comply with applicable law and other government regulations or to comply with a court order or binding law enforcement request.
• We have a legitimate interest in using your personal data. For example, we have a legitimate interest in collecting certain information about Site visitors to help ensure the security of our Site.
• If you have consented to the processing of your personal data. When you consent, you can change your mind at any time and withdraw your consent.
• To protect your vital interests, or those of others.

Disclosure of Personal Data

We may disclose your personal data to affiliates, business partners, vendors (e.g., payment processors, shipping companies, sweepstakes promoters, and website developers), and other parties. 

In the event of a business transaction, such as if we sell or transfer all or a portion of our business or assets (e.g., further to a merger, reorganisation, liquidation, or any other business transaction, including negotiations of such transactions), we reserve the right to disclose information we obtain through the Site.

In addition, we may disclose your personal data if we are required to do so by law or we believe that such action is necessary to:

• Comply with legal process such as a search warrant, subpoena, or court order;
• Protect the company’s rights or property;
• Investigate potential fraud or other security risks;
• Protect against misuse or unauthorised use of the Site; and/or
• Respond to emergencies, such as when we believe someone's physical safety is at risk.

Personal Data Transfers

Certain personal data may be transferred to Orvis in the United States for processing. Please be aware that the data protection laws and regulations that apply to your personal data in other countries may differ from the laws in United Kingdom. Orvis will use appropriate legal mechanisms and other safeguards to protect your personal data. For example, Orvis may ask for consent to transfer personal data to the United States, or carry out such transfers in accordance with approved international data transfer agreements.

For further information about how your personal data may be transferred out of United Kingdom, please contact us at customerservice@orvis.co.uk.

Data Retention

We will store your personal data for no longer than is necessary for the performance of our obligations or to achieve the purposes for which the information was collected, or as may be permitted under applicable law. To determine the appropriate retention period, we will consider the amount, nature, and sensitivity of the data; the potential risk of harm from unauthorised use or disclosure of the data; the purposes for which we process the data and whether we can achieve those purposes through other means; and the applicable legal requirements. Unless otherwise required by applicable law, at the end of the retention period we will securely delete personal data from our systems and records or take appropriate steps to properly anonymise it.

Cookies and Other Tracking Technologies

On the Site, we use various tools and technologies—such as cookies, web beacons, or pixels—in accordance with applicable law and requirements. “Cookies” are small data files stored by your web browser on your computer. Cookies may allow a website to recognise a user’s device, record user preferences, track the pages a user clicks on while visiting the website, and identify the website visited immediately beforehand. We use these types of technologies for various purposes, including to:

• Recognise new or past Site visitors;
• Store your password if you are registered on the Site;
• Improve the Site and to better understand your visits;
• Integrate with third-party social media websites;
• Serve you interest-based or targeted advertising; and
• Observe your behaviours and browsing activities over time across multiple websites or other platforms.

Most web browsers accept cookies by default, but you may be able to adjust your browser settings to remove or reject cookies. Please note that blocking cookies may affect the availability and functionality of this Site and other websites. Also, disabling cookies may invalidate opt outs that use cookies to recognise devices that have opted out. We may combine certain automatically collected information with other information we obtain about you, which may include data we obtain from third parties. 

Some cookies are required for certain uses of the Site. For example, if you choose to register an account for our Site, we will use cookies to facilitate your registration and remember your preferences.

We may use third-party technology and vendors such as, Google and Facebook, in connection with your activity on the Site to help us understand and analyse how visitors use the Site and to serve ads on our behalf across the Internet. These technology companies and advertisers may use, store, or access cookies and other tracking technologies to collect or receive information from the Site, and elsewhere on the internet.

You may be able to opt out of certain interest-based advertising using the settings on your browser or mobile device. In addition, the following services or organisations offer tools that you can use to limit or opt out of interest-based advertising:

• For more information on how Google Analytics uses data it collects, visit google.com/policies/privacy/partners/. To opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout. To adjust your Google advertising settings, visit: adssettings.google.com.  
• To learn more about Criteo’s privacy practices, including how to disable Criteo’s services, you may visit www.criteo.com/privacy.
• To change your privacy and advertising settings with Facebook, login to your Facebook account and navigate to your account settings.
• To opt out of interest-based advertising from companies that participate in the Digital Advertising Alliance or Network Advertising Initiative opt-out programs, please visit youradchoices.com/control and optout.networkadvertising.org.

Your opt-out choice may apply only to the browser or device you are using when you opt out, so you should opt out on each of your browsers and devices if you want to disable interest-based advertising for those browsers and devices. If you opt out, you will still receive ads, but they may not be as relevant to you and your interests. Please note that we do not control how third parties manage their opt-out processes.

Rights and Choices

UK data subjects have the right to access personal data maintained about them and to impose certain limits on the use and disclosure of such personal data. Subject to certain conditions, you may ask Orvis to take the following actions in relation to your personal data that we maintain:

• Provide you with information about our processing of your personal data and give you access to your personal data;
• Update or correct inaccuracies in your personal data;
• Delete your personal data;
• Transfer a machine-readable copy of your personal data to you or a third party of your choice;
• Restrict the processing of your personal data;
• Object to our processing of your personal data for direct marketing purposes; and/or
• Object to reliance on our legitimate interests as the basis for processing of your personal data.

You can submit these requests by email to customerservice@orvis.co.uk or our postal address provided below. We may request specific information from you to help us confirm your identity prior to processing your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

We will provide UK data subjects with appropriate opportunities to opt out of our disclosure of their personal data as required by law and will request opt-in consent prior to using personal data for a purpose other than the purpose for which it was originally collected. Learn more information about your choices concerning opting out of online behavioural advertising.

You also have the right to lodge a complaint with a supervisory authority. Learn more about how to contact your supervisory authority in the United Kingdom.

Changes to this Notice

Orvis reserves the right to modify this Notice at any time. Changes will be effective immediately upon posting of the revised Notice, as indicated by the “Effective Date” at the top of this page. In accordance with applicable law, we will seek your consent to material changes in how we process your personal data. We encourage you to periodically review this page for the latest information on our privacy practices.

Contact Information

You may contact Orvis regarding this Notice and our data protection practices by emailing customerservice@orvis.co.uk. You also may write to the following address:

The Orvis Inc. UK Limited
Attn: Customer Services
Unit 4
Parnell Court
East Portway Industrial Estate
Andover
SP10 3LX