This is Guangdong Galanz Enterprises Co., Ltd’s (“we”, “us”, “our”) privacy policy for our website, www.galanz.com/uk(the “Website”).

We respect your privacy and we are committed to protecting your personal information (sometimes referred to as personal data) in accordance with applicable data protection laws. This policy explains who we are, why and how we process your personal information (also referred to as your personal data), your rightsin relation to your personal information, and how to contact us.

GUANGDONG GALANZ ENTERPRISES CO., LTDtrading as “Galanz” (Galanz, we, us and our)are a company incorporated under the laws of the People’s Republic of China. Our registered company social security number is 91440606749153199X, and our registered office is at No.25, South Ronggui Avenue, Shunde District, Foshan City, 528305, Guangdong, China. We are the controller in relation to the personal data processed in accordance with this policy.Our contact details are set out at the end of this policy.

We have appointed a data protection representative in the UK to represent us in dealing with our data protection obligations within the UK. Our UK data protection representative is GALANZ (UK) LIMITED which is a private limited company registered in England and Wales with its registered address at 5 New Street Square, London, United Kingdom, EC4A 3TW and company number:10876269. Our UK representative’s contact details are also set out at the end of this policy.

This policysets out:

• Important information
• Information we collect about you
• How we use your information
• Our promotional updates and communications
• Cookies
• Who we give your information to
• Where we store your information
• How we protect your information
• How long we keep your information
• Your rights
• Changes to this policy
• Contact us

Please read the following carefully to understand our policies and practices regarding your personal data and how we will handle it.

What is personal data?

The term “personal data” means information that specifically identifies an individual (such as a name, address, telephone number, mobile number, email address, or other account number), and also information about that individual’s location or activities, such as information about their use of the Service, login preferences, IP addresses or mobile device identifiers, from which an individual can be identified.

Personal information does not include “aggregated” or “de-identified” or “anonymised” information, which is data we collect about the use of the Service or about a group or category of products, services or users, or other data from which individual identities or other personal information has been removed so that the individual concerned cannot be identified directly or indirectly. Such data helps us understand trends and our users’ needs so that we can better consider new features or otherwise tailor our Service. This policy in no way restricts or limits our collection and use of such information.

Data Protection Manager

We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact the Data Privacy Manager using the details set out at the end of this Privacy Policy.

Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third-party links

While using our Website you may be presented with links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or practices. We encourage you to read the privacy policy of every website you visit so you are fully aware how your personal data is being used.

Personal data of children

We do not knowingly collect or solicit personal data from anyone under the age of 18.

If you are under 18 years of age, please do not provide us with any personal information. If you believe that anyone under the age of 18 may have already provided us personal data, please contact us at the details set out at the end of this Privacy Policy.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Information you provide to us voluntarily:

If you are our customer or a user of the Website (including customers who have product warranties) that have contacted us via the Website, the information we collect may include:

• first and last name
• telephone number
• email address
• full postal address
• information about the product(s) that you have purchased including, but not limited to, the date and location of purchase.

Information we collect automatically:

We may collect some technical information about you automatically in the course of you browsing and using the Website. This may include for example:

• Internet Protocol (IP) address
• Your browser type,browser version, plug-ins and settings
• Broad geographic location (e.g. country or city-level location) based on your IP address
• Log data (time and period) whilst on our Website
• Website items and behaviours
• Device information and identifiers, analytics and advertising IDs (through cookies and technical identifiers which are stored on your device)
• We use Google Analytics to assess certain site metrics, including how people find, use and navigate our site, as well as for demographics analysis. We may see aggregated statistics and information about visitor’s system setting, language, page view and site use. For more information see our Cookies Policy,Google Ads Settings, Google Opt-Out, and Google’s Privacy Policy.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; “legitimate interest” means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
• Where we need to comply with a legal obligation to which we are subject.

Purposes for which we will use your personal data

We have set out below, in a table format, a description of the ways we may use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal basis we are relying on to process your personal data where more than one ground has been set out in the table below:

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookies Policy[INSERT LINK TO COOKIE POLICY].

We may share your personal data with:

• Appropriate third parties including:

our business partners,and sub-contractors for the performance of any contract we enter into or other dealings we have in the normal course of business with you or the person that you work for; and our auditors, legal advisors and other professional advisors or service providers.

• In relation to information obtained via our Website:

analytics and search engine providers that assist us in the improvement and optimisation of our site and subject to the cookie section of this policy.

Other disclosures we may make

We will disclose your personal information to third parties:

• In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets subject to the terms of this privacy policy.
• If weor substantially all ofour assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of supply terms and other agreements with you or the company you work for; or to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction and to prevent cybercrime.

The data that we process in relation to youwill be stored in the UK. As a data controller we will need to access your personal data, which will involve us accessing it outside of the UK as we are established outside the UK. We have implemented appropriate safeguards to ensure that your data remains stored in the UK at all times.

We will not transfer your data to anyone that is based outside of the UK.If this changes at any point, we will update this Privacy Policy accordingly and notify you of such change.

Please contact us if you want further information on how we handle your data from outside the UK.

All information you provide to us is stored on our secure servers.Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Our Website and this privacy and cookies policy may, from time to time, contain links to external sites. We are not responsible for the privacy policies or the content of such sites.

Typically, we retain the personal data referred to above for as long as you have an ongoing query or unresolved matter with us in order to meet our contractual obligations and, in some cases, for six years after that to identify any issues and resolve any legal proceedings.

We may also retain personal data where otherwise permitted or required by applicable law. We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services.

We may store certain data only for several minutes or several days, such as the technical information referred to above. However, we may continue to retain certain data to the maximum extent permitted by applicable laws.

If you would like us to delete your data, please refer to the “Your rights” section below for further information.

You have the right under certain circumstances:

• to be provided with a copy of or access to your personal data held by us;
• to request the rectification or erasure of your personal data held by us;
• to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example);
• to object to the further processing of your personal data; and
• to request that your personal data be moved to a third party.

Your right to withdraw consent:

Where the processing of your personal information by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us.

How to exercise your rights

You can also exercise the rights listed above at any time by contacting us at team@galanz.uk.com.

You have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

We reserve the right to change the provisions of this Privacy Policy from time to time. We encourage you to periodically review this document for the latest information on our privacy practices.

Any changes we make to our privacy policy in future will be posted on the Websiteand, substantive changes will be notified to you by e-mail where required.

This policy was last updated on20July 2021.

If you have any questions about this Privacy Policy or our privacy practices, please contact our us in the following ways:

Guangdong Galanz Enterprises Co., Ltd

Email:team@galanz.uk.com

Post:FAO: Customer Service – Privacy

No.25, South Ronggui Avenue,

Shunde District, Foshan City,

528305, Guangdong,

China

Galanz (UK) Limited (UK Representative)

Email:team@galanz.uk.com

Post:FAO: Customer Service – Privacy

Galanz (UK) Limited

5 New Street Square

London

EC4A 3TW