Aqara UK Shop Privacy Policy

Registration Information

The following information is collected during registration, and can be amended at any time from the account section of the website or prior to checkout:

• Your name and title
• Your username
• Your company name (optional)
• Your contact information, including:
• account email address
• billing email address
• billing telephone number
• Your geographic information (shipping and billing addresses)
• The following device information about the computer, tablet or smartphone used to register your account or log in:
• IP Address
• Last login date
• User Agent String

Your Registration Information is used to:

• Create your Aqara UK Store account / log in, which can be logged into again in future to make additional purchases.
• Your device information is used to:
• prevent spam and DDOS attempts by monitoring for a large amount of content (such as user accounts, orders, reviews or comments) created by the same device.
• attempt to determine if someone other than yourself has gained unauthorised access to your account.
• determine if your account is inactive if we decide to close any accounts (see "How long is this data retained?" column for Registration Information for more information);
• Allow us to contact you regarding any issues with your account, such as:
• password reset instructions;
• confirmation that your account has been created.
• Your Registration Information will be used solely for the above purposes, with the following exceptions, it will be used to:
• Allow us to contact you regarding any issues with your order (only if you order or attempt to order from us, see Order Details section for more information)
• To inform you of new products, offers and other promotions via email (only when opted into marketing communications)

Your Registration Information is stored on our website database indefinitely (in order to allow customers to order again with as little delay and hassle as possible) or until such a time that you ask us to remove your account. If you request removal of your Registration Information, it will be retained for up to seven additional days (after it is removed from our live / primary data source) in our regular backups. See the Backed up Data section for more information.

If at any time we choose to systematically delete Registration Information, customers will be contacted beforehand in good time if they meet our criteria for removal. We will provide customers with facilities to keep their account in our system if they so wish.

Notices will be posted on our website informing customers of the time of removal, as well as the criteria we used to determine which accounts will be removed (last order date, last login, etc.).

• Consent: By creating a Aqara UK Store account, you have given clear consent for us to process your personal data for a specific purpose.
• Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests.

• If you opt-in to marketing communications, your Registration Information will be passed onto our email marketing provider, SharpSpring (as detailed in the Marketing Data section). SharpSpring is operated by SharpSpring, Inc.
• When attempting to pay for your goods, your Registration Information - in addition to your Order Details (see below for details) - are passed onto our Payment Provider Stripe, Inc. For more information about Stripe handles your information, see their Privacy Policy.

Cart Contents

When adding products to your cart while logged in, the following details are stored in our database and associated with your Registration Information:

• Items in cart
• Quantity of items in cart
• Prices to be paid for items, delivery and VAT
• The shipping and payment methods chosen
• Any information added to text fields on customisable products.
• Any information added to the optional "Order notes" field.

If you do not log into or sign up for an account when adding products to the cart, this information is not linked to any personally identifiable information.

This data is stored indefinitely for your convenience.

However, if at any time you would like this data to be removed, you can remove the items from your cart or contact us for assistance. If you remove items from your cart, they will be retained for up to seven additional days (after they are removed from our live / primary data source) in our regular backups. See the Backed up Data section for more information.

These details will never be passed onto a third party unless:

• you proceed to the checkout to attempt to complete your order (see Order Details section below); or
• are required to do so by law (see Introduction section).

Cart contents will be encrypted and transferred to another server operated by our backup provider on a regular basis, as outlined in the Backed up Data section.

Order Details

When you complete the checkout process, the following information is stored in our database, assigned an Order Number, and associated with your Registration Information:

• Items purchased
• Quantity of items purchased
• Prices paid for items, delivery and VAT
• The shipping and payment methods chosen
• Any information added to text fields on customisable products.
• Any information added to the optional "Order notes" field.
• Unique payment identifier
• Payment provider identifier

The above information is also stored in our database as a failed order if your payment is not successful.

In addition to the above information, the following device information about the computer, tablet or smartphone used to make your order:

• IP Address
• User Agent String

If you do not log into or sign up for an account when adding products to the cart, this information is not linked to any personally identifiable information.

The Order Details we collect at checkout are used in combination with your Registration Information in order to:

• ensure your items reach you in a timely fashion;
• provide you with updates on the progress of your order, such as:
• if your order has been successfully taken;
• when your order has been dispatched;
• when your order has / will arrive (if this information is available for the shipping method chosen during checkout); and
• send you a copy of your invoice, tracking information, and any other important documents;
• allow us to contact you regarding any issues with your order, such as:
• if payment was not successful;
• if a product ordered is not available due stock shortages, discontinuation, or other issues with inventory;
• any recalls, updates to instructions or any other information that affects the safe operation of the products you have ordered.

The device information collected while checking out is used to:

• prevent spam and DDOS attempts by monitoring for a large amount of content (such as user accounts, orders, reviews or comments) created by the same device.
• attempt to determine if someone other than yourself has gained unauthorised access to your account.
• combat and investigate potential fraud

In order to comply with the Companies Act 2006, EasyGates Ltd keeps accounting records for 6 years from the end of the last company financial year they relate to, or longer if:

• they show a transaction that covers more than one of the company’s accounting periods; or
• we are otherwise required to by HMRC (for example for compliance check purposes).

• Consent: By completing the checkout process, you have given clear consent for us to process your personal data for a specific purpose.
• Contract: processing this data is necessary to fulfil our contractual obligations to you.
• Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests.

• When attempting to pay for your goods, your Order Details - in addition to your Registration Information (see above for details) - are passed onto our Payment Provider WooPayments (operated by WooCommerce Ireland Ltd. (Irish Company registration number 683074) and Automattic Inc.) and their partner Stripe, Inc. For more information about these companies handle your information, see Stripe’s Privacy Policy and Automattic’s Privacy Policy.
• As well as paying by card via WooPayments / Stripe, the following mobile payment gateways are offered:
• Apple Pay - See Apple Pay & Privacy for more information. Operated by Apple Inc.
• Apple transmits your payment information from your device to Stripe’s servers in an encrypted format so it can be read only by Stripe for the purposes of taking payment. As per the above page, "Apple Transmits but Does Not Store Your Payment Information" and "Apple does not retain any of this information in a form that personally identifies you".
• For cards with certain enhanced fraud prevention, the device you are paying with will "evaluate information about your Apple ID, device and location if you have enabled Location Services for Wallet" to create "on-device fraud prevention assessments" that help determine if a payment is fraudulent. The result of the assessment - but not the original data that was assessed - will be shared with Apple and may be passed on to your card issuer.
• "If you have Location Services turned on, the location of your device at the time you use it to make purchases in shops may be sent anonymously to Apple and will be used to help Apple Pay improve the accuracy of business names in the Wallet card transaction history, and may be retained in aggregate to improve Apple Maps, Apple Pay and Wallet"
• Apple may anonymously collect info about your use of Apple Pay, such as how long it takes you to make a transaction - in order to improve their service.
• Google Pay - See How Google Pay helps keep your data private and Google Payments Privacy Notice for more information. Operated by Alphabet Inc. and either Google LLC or Google Payment Ireland Limited depending on your location. When paying with Google, they may collect certain information, including but not limited to:
• Location info - depending on your settings, this "may also be used for app functionality such as providing location details in your receipts"
• Transaction details - including "date, time and amount of the transaction, the merchant’s location and description, a description provided by the seller of the goods or services purchased, any photo that you choose to associate with the transaction, the names and email addresses of the seller and buyer (or sender and recipient), the type of payment method used, your description of the reason for the transaction and the offer associated with the transaction, if any".
• If you opt-in to marketing communications during checkout, your Registration Information and Order Details will be passed onto our email marketing provider, SharpSpring (as detailed in the Marketing Data section). SharpSpring is operated by SharpSpring, Inc.

Enquiry Details

When completing on of our contact forms, your Enquiry Details will be passed on to our CRM provider SharpSpring. The email will then be passed on to our internal technical or sales support teams.

Contact Form

When completing our contact form, the following information is passed on to our internal technical or sales support teams:

• Name
• Telephone number (optional)
• Email address
• Enquiry type
• Any information inputted into the message field
• The page on which the contact form was filled out
• Whether or not you opted in to Email Marketing

Installer Enquiry Form

When completing our Installer Enquiry Form, the following information is passed on to our internal technical or sales support teams:

• Name
• Preferred contact method(s)
• Email address (if entered)
• Telephone number (if entered)
• Home address
• Home automation product interests
• Any information inputted into the "Extra info" field
• The page on which the Installer Enquiry Form was filled out
• Whether or not you opted in to Email Marketing

If you would like to email us without using the SharpSpring system, please email us directly using one of the email addresses listed on our contact page.

Our policies for email retention differ depending on the purpose of the email message, as well as the content of each particular message. Enquiries sent through this form will be kept at a minimum for as long as an enquiry or support case is still ongoing.

Emails may be archived for a longer period if we believe it necessary to keep the email as a record of fact (i.e. if we believe a dispute over the nature or timing of events may occur).

At most, email communications that do not need to be archived for any legal reasons (such as for accounting and VAT records, or if we believe an email may be relevant to any upcoming legal proceedings) will be kept for no longer than 2 years.

This data is shared with our CRM provider, SharpSpring. SharpSpring is operated by SharpSpring, Inc.

As well as Aqara UK Store’s Privacy Policy, your data will also be subject to SharpSpring’s Privacy Policy.

These details will never be passed onto another third party unless:

• we have your express permission beforehand; or
• are required to do so by law (see Introduction section).

Marketing Data

EasyGates Ltd uses a number of methods to keep previous and potential customers informed about our latest offerings and services.

Email Marketing

EasyGates Ltd maintains several email marketing lists across its various websites.

When you sign up for an email marketing list, we will always make it clear what information is being added to our marketing list.

Aqara UK Store Mailing List

If you opt-in to the Aqara UK Store Mailing List, the following information will be collected and passed on to our email marketing provider SharpSpring:

• Your name
• Your email address
• The following information about your subscription:
• The IP address of the device you used to subscribe
• The time at which you subscribed
• The website or form you signed up on

Depending on how you interact with the Aqara UK Store website, or where you opt in to marketing, the following additional data may be passed on to SharpSpring

• Your Enquiry Details (for example if you opt in while filling in an enquiry form)
• Your Registration Information, Cart Contents and / or Order Details (for example if you opt in while signing up for our store or checking out)

In the future, we may also allow you to select optional "interest categories", which allow you to further narrow down the subjects or products you are interested in.

After you subscribe, SharpSpring may store further information about your interaction with their service, including Device information and Usage data, including but not limited to:

• information about the email client and device you use to open emails
• how you interact with the emails you receive through the SharpSpring service such as which emails opened and whether you clicked any links within the email

You can read more about the data that SharpSpring collects in SharpSpring’s Privacy Policy

We use the Marketing Data you provide to give you regular updates about our latest products, services and offers via email.

The Marketing Data you provide to us for Email Marketing is stored for as long you stay subscribed to our marketing lists.

You can use the following links to opt-in or opt-out of our marketing list

• Subscribe
• Unsubscribe

Consent: If you opt-in to email marketing, you have given clear consent for us to process your personal data for a specific purpose.

This data is shared with our email marketing provider, SharpSpring. SharpSpring is operated by SharpSpring, Inc.

As well as Aqara UK Store’s Privacy Policy, your data will also be subject to SharpSpring’s Privacy Policy.

Affiliate Data

EasyGates Ltd uses affiliate data to determine which of our affiliates direct customers to our site.

Customer Data

Customers can opt-in to sharing with EasyGates Ltd. which of our affiliates referred them to the Aqara UK Store in two ways:

• If you visit a link to our store that contains an affiliate ID and opt-in to storage of affiliates cookies via the cookie consent popup that appears when you first visit our site
• by entering an affiliate code at checkout

If you opt in sharing affiliate data, several cookies will be stored in your browser containing any affiliate IDs that you either entered manually at checkout, or any contained within links that referred you to our store.

If you opt-in to affiliate data and subsequently register for an account or attempt to make an order on our website, the affiliate codes may be saved to our database and associated with your Registration Information.

Affiliate Partner Data

When signing up to our affiliate program, the following data will be collected and stored on your account, in addition to the standard Registration Information:

• The status (pending approval, accepted, rejected or banned) and date of your affiliate registration request
• Any additional fields on our affiliate registration form
• If your application is accepted, the following will be stored:
• Your affiliate ID
• Any orders that have been made with your affiliate ID, and the amount of commission that is earned for these orders
• Your payout details, including PayPal email, pending and completed payouts
• Your commission rate
• Any Aqara UK Store coupons associated with your affiliate ID

We use this affiliate data to record which of our affiliate partners referred you to our site and reward our affiliate partners for referrals to our site.

Customer data (affiliate ID entered) will be initially stored as a cookie in your browser which expires after 24 hours. Visiting the site again with the same affiliate code or a new affiliate code may update the cookie and extend the cookie expiry time to 24 hours after each subsequent visit. If you make an order with an affiliate ID registered, this data will be stored with your Registration Information and kept in accordance with the retention policy for that data.

Affiliate partner data will be stored and associated with your Registration Information for as long you remain a member of our affiliate program and hold an Aqara UK Store account.

In order to comply with the Companies Act 2006, EasyGates Ltd keeps accounting records and commission data linked to orders made on our store for 6 years from the end of the last company financial year they relate to, or longer if:

• they show a transaction that covers more than one of the company’s accounting periods; or
• we are otherwise required to by HMRC (for example for compliance check purposes).

Consent: If you opt-in to sharing affiliate data as a customer or sign up to our affiliate program, you have given clear consent for us to process your personal data for a specific purpose.

• If you make a purchase while opted into sharing affiliate data ID, an extremely limited, anonymised subset of your Order Details will be shared with our affiliate partners in order to measure their commission. No personally identifiable information from your Registration Information, Cart Contents and Order Details that can be linked to you (such as your order number, name, shipping details etc.) will be shared with our affiliates. The data shared will be limited to:
• Items purchased
• Price of items eligible for affiliate commission
• The status of your order, mapped to a commission status that will determine whether the affiliate is eligible for a payout.
• If you opt-in to marketing communications, we may pass on a subset of your Affiliate (Customer) Data (such as the affiliate code you entered on our site when purchasing) to our email marketing provider, SharpSpring (in addition to the other information we send as detailed in the Marketing Data section). SharpSpring is operated by SharpSpring, Inc.

Analytics Data (Performance Cookies)

EasyGates Ltd uses Google Analytics to analyse how visitors use our site. Please see the appropriate subsections below to see details for each service.

If you opt-in to Analytics, a cookie is stored on your computer that contains a unique, anonymised ID. This unique ID is a random collection of letters, numbers and symbols, and does not contain any other personally identifiable information which you may provide to us in another context. The client ID is used to differentiate you from other visitors, as well as determine whether you are a first time or returning visitor.

Google Analytics Data

EasyGates Ltd uses Google Analytics to analyse how visitors use our site.

When Google Analytics is enabled, various details about your computer, browser and visit behaviour are passed on to Google. This information may include, but is not limited to:

• Your IP Address
• An estimate of what browser and operating system you are using to visit our site
• What pages you visit, how long for and how far you scroll down a page
• The location and destination of any outbound links clicked
• Whether or not you filled out a form, and when (no form data will be submitted)

Your IP address is collected by the Google Analytics service purely for the purpose of determining the approximate geographic location of visits. Google does not share your IP address with us, and only provides us with an anonymous, approximated geographic location. EasyGates Ltd employs Google Analytics’ optional IP Anonymization feature. This feature removes the final set of digits from your IP address before transmitting it to Google, in order to provide a more anonymised and less accurate estimation of your location.

The techniques that Google employ do not collect personal information such as your name, email address, postal address, or telephone number.

We will not link, or seek to link, any of the above information with any personally identifiable information we hold about you.

Remarketing Data (Targeting / Advertising Cookies)

EasyGates Ltd. use a number of services to advertise our products and service to customers across the web. Among these are remarketing tools.

If you opt in to remarketing / targeting, these services will place cookies in your browser containing a unique, anonymised ID to help distinguish you from other users. As well as this cookie, we will also share details about how you interact with our site (such as what pages you visit, what products you add to your cart etc.) with our remarketing partners.

This allows us to group customers anonymously into "audiences" depending on their interests or actions and show more relevant adverts to them across the web or on smartphone and tablet apps. For example, we may show you ads containing accessories for products you are interested in or show you ads reminding you of products you’ve left in your cart but not purchased.

Facebook Pixel

As per Facebook’s documentation, if you opt-in to remarketing, the following information will be sent to Facebook:

• HTTP Headers – Anything present in HTTP headers. HTTP Headers are a standard web protocol sent between any browser request and any server on the internet. HTTP Headers include IP addresses, information about the web browser, page location, document, referrer and person using the website.
• Pixel-specific Data – Includes Pixel ID and the Facebook Cookie.
• Button Click Data – Includes any buttons clicked by site visitors, the labels of those buttons and any pages visited as a result of the button clicks.

As well as the standard information collected above, the Facebook pixel allows us to send additional Optional Values. These could include:

• Order value (upon completion of your order)

The information we collect via the Facebook Pixel is used to

• measure the effectiveness of our online advertising;
• serve you with more relevant ads when using Facebook’s services (Facebook, Instagram, Messenger, Oculus etc.) or in other third-party apps that use the Facebook Audience Network;
• help us optimise and improve the way our website works, and ensure our users are able to easily find all the information and services we offer.

SharpSpring Remarketing Data

EasyGates Ltd uses SharpSpring remarketing to analyse how visitors use our site, how effective our ads are, and to deliver relevant ads to our customers.

When analytics are enabled, various details about your computer, browser and visit behaviour are passed on to SharpSpring. This information may include, but is not limited to:

• Your IP Address
• Preferences and settings: time zone, language, and character size.
• Technical information: type of device, operating system name and version, device manufacturer, browser information (type, version), screen resolution.
• Traffic Data: What pages you visit, how long for and when; referrer URL

Your IP address is collected by the SharpSpring service purely for the purpose of determining the approximate geographic location of visits. SharpSpring does not share your IP address with us, and only provides us with an anonymous, approximated geographic location.

SharpSpring Remarketing Data is retained where SharpSpring "have justifiable business need to do so, and/or for as long as it is needed to fulfill the purposes outlined in [their] Privacy Notice, unless a longer retention period is required by law, such as for tax, legal, or accounting purposes."

Please see SharpSpring’s Privacy Policy for more information.

Raw Access Logs

EasyGates Ltd uses various technologies to log traffic across our websites. The majority of this data is anonymous and is not linked to any IP addresses or other personally identifiable information.

However, in addition to this anonymous data, EasyGates Ltd keeps raw access logs. These raw access logs store the following information about visitors each time a page is accessed:

• IP Address
• User Agent String
• What resource was accessed
• What time it was accessed

These raw logs do not contain any other information. The data transferred between your computer and our servers is not logged, only the page accessed.

EasyGates Ltd keeps these raw logs in order to:

• Ensure network and information security.
• Ensure we can resist malicious actions that compromise the security of our systems and data, such as brute force entry, DDOS and DOS attacks.

Any data that contains personally identifiable information will be kept for no longer than one month.

However, if we believe an IP Address or range of IP addresses to be behind malicious actions that threaten the security and upkeep of our systems, they will be kept on file as long as we believe they may cause us harm, in order to prevent repeat behaviour.

Backed up Data

The following personally identifiable data is backed up to a remote server (separate from our webserver) once per week:

• Registration Information
• Cart Contents
• Order Details
• Raw Access Logs

A "snapshot" of the data we store is taken once per week. These snapshots are stored on the remote server for seven days, when they are replaced by the subsequent week’s backup.

Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests.

Contract: processing this data is necessary to fulfil our contractual obligations to you