Privacy Notice & Cookies

As with all shopping websites, we collect personal information from you when you shop online at Bodenusa.com or Boden.co.uk. It is important to note that Boden collects various types of personal information about you both online and offline, as described in this privacy notice.

We use this information to make your shopping experience as easy and enjoyable as possible. We need it to process your order, inform you of any delays or problems and occasionally to send you special offers and promotions.

  • INFORMATION COLLECTION, PURPOSE, AND SHARING

    We collect information when you register online or update your account, log-in, place an order, communicate online with our customer service representatives, opt-in to receive our emails, request a catalog, participate in a sweepstakes, contest, promotion or survey, or join our social networking sites. This information may include, but is not limited to, your contact information (for example, your name, email address, billing and shipping addresses and phone number). If you create an online account, you also have the option of providing your product preferences and demographic information.

    If you have entered a competition with one of our friends or partners, and have said that you wouldn’t mind hearing from us, they may have sent us your details so that we can get in touch with you.

    The information we collect or have collected within the past twelve months, and may sell and/or disclose or have sold and/or disclosed in the past twelve months is detailed in the buttons below. Please click on a button for further information about the purpose of collection and whether we sell/disclose this data:

    Your name:

    Purpose: So we know what to call you, to process orders to you, and for fraud prevention and detection.

    Sell / sold: We do occasionally sell names and addresses (but never email addresses) to companies whose products we think may interest you, unless you have told us not to. If you do not wish to receive such offers, please contact us via any of the methods in the ‘Contact Us’ section, quoting your account number, which can be found above your address on you latest catalogue.

    Disclose / disclosed: With agents (including credit reference agencies, credit card clearing agencies (PaymentTech (the payment arm of JO Morgan Chase) in USA), and delivery companies). In all instances, we provide them with only the information they need to perform their function.

    To outside research companies whom we may ask to contact you directly for your opinions on our products and services (in which case, we provide them with only the information they need to perform their function).

    We use reputable third-party service providers who perform services on our behalf. Sometimes these service providers need information about our customers in order to do their jobs, such as fulfill orders and promotions, maintain and manage our customer database and report on customer behavior and/or preferences. Where these service providers have access to your information, we require them to maintain your information in the strictest confidence and we do not permit them to use it in any way other than to help us provide you with better service.

    Email address:

    Purpose: So we can email your order confirmations, delivery delays, offers etc. You can unsubscribe here at any time. Please allow 5 business days for your request to be updated across all our systems.

    Sell / sold: N/A

    Disclose / disclosed: To outside research companies whom we may ask to contact you directly for your opinions on our products and services (in which case we provide them with only the information they need to perform their function).

    Shipping address:

    Purpose: An obvious one – so we can ship your goods to you. In addition, we use this to process orders to you, and for fraud prevention and detection.

    Sell / sold: We do occasionally sell names and addresses (but never email addresses) to companies whose products we think may interest you, unless you have told us not to. If you do not wish to receive such offers please contact us via any of the methods in the ‘Contact Us’ section, quoting your account number, which can be found above your address on you latest catalogue.

    Disclose / disclosed: To outside research companies whom we may ask to contact you directly for your opinions on our products and services (in which case, we provide them with only the information they need to perform their function).

    We use reputable third-party service providers who perform services on our behalf. Sometimes these service providers need information about our customers in order to do their jobs, such as fulfill orders and promotions, maintain and manage our customer database and report on customer behavior and/or preferences. Where these service providers have access to your information, we require them to maintain your information in the strictest confidence and we do not permit them to use it in any way other than to help us provide you with better service.

    Telephone number:

    Purpose: We’ll only call if we have a delivery problem.

    Sell / sold: N/A

    Disclose / disclosed: N/A

    Credit card details:

    Purpose: We only ask for these when you place an order. You may choose to save your card details to speed up the checkout process. If you wish to remove your card details at a later date, you can do so by deleting your saved card from account preferences on the website. We will securely store your payment card information for 1 year, to allow us to process refunds in accordance with our Refund Policy.

    Sell / sold: N/A

    Disclose / disclosed: With agents (including credit reference agencies and credit card clearing agencies (PaymentTech (the payment arm of JO Morgan Chase) in USA). In all instances, we provide them with only the information they need to perform their function.

    Mobile number:

    Purpose: So we can text you with details about your orders or where we have a question.

    Sell / sold: N/A

    Disclose / disclosed: With delivery companies / couriers in order to deliver your purchases to you.

    Cookies:

    Purpose: We currently use the services of companies to help manage and optimize our internet business and communications. These companies help us to measure the effectiveness of our advertising and better understand how visitors use our sites. To do this, cookies are placed on computer browsers and web beacons are placed on our websites on our behalf. Further information about cookies is provided in our Cookies Policy.

    Sell / sold: Further information about cookies is provided in our Cookies Policy.

    Disclose / disclosed: Further information about cookies is provided in our Cookies Policy.

    Back to top

  • PROTECTING YOUR INFORMATION

    We use the latest secure server technology to ensure this information is protected to the highest standards. Any personal information you provide to us is securely stored on secure servers.

    We use encryption to safeguard your personal information and only accept orders from web browsers that permit communication through Transport Layer Security (TLS) technology - this means you cannot inadvertently place an order through an unsecured connection. This encryption makes it virtually impossible for unauthorised parties to read any information that you send us. The encryption technique we use is the highest standard available for e-commerce and certified by GlobalSign.

    Back to top

  • RIGHTS OF CALIFORNIA RESIDENTS

    Under California law, customers of Bodenusa.com who are residents of California have certain rights regarding their personal information. This section describes the rights of California residents under the California Consumer Privacy Act (CCPA) and how to exercise them.

    Your rights

    You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and verify your request, we will disclose to you:

    • The categories of personal information we collected about you.
    • The categories of sources from which the personal information is collected.
    • The specific pieces of personal information we collected about you.
    • Our business or commercial purpose for collecting or selling any personal information.
    • The purposes for which the information we collected will be used.
    • The categories of third parties with whom we share personal information.
    • If we sold or disclosed your personal information for a business purpose; and, if so, any categories of personal information that were sold or disclosed, and the categories of any third parties to whom personal information was sold or disclosed.

    You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

    We may deny your deletion request if retaining the information is necessary for us or our service providers to:

    • Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our agreement with you.
    • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
    • Debug products to identify and repair errors that impair existing intended functionality.
    • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
    • Comply with the California Electronic Communications Privacy Act.
    • Enable internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
    • Comply with a legal obligation.
    • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

    To make such a request, please contact us via any of the methods listed in the ‘Contact Us’ section.

    Verifiable Requests

    Only you or a person that you authorize to act on your behalf may make a verifiable consumer request related to your personal information. However, you may also make a verifiable consumer request on behalf of your minor (under 16) child.

    In order to respond to your requests, we must perform some verification. For example, this would be necessary in order for us to respond to any requests for to disclose or delete your data. Our verification methods will differ depending on the following circumstances:

    Password-protected accounts – if you have a password-protected account with us, we will use password authentication to verify you. If your request is for deletion of personal information, we will need to re-verify you before we delete your information.

    Non-password-protected accounts – we need to use either a two-tier or a three-tier verification process (which will depend on what type of request you are making). We will ask for you to confirm two or three pieces of information that we have on our records about you, for example:

    • Your address
    • Your zip code
    • Your most recent purchase
    • Your email address

    We will never ask for the following information from you:

    • Social security number
    • Driver’s license number
    • State identification number
    • Medical and health information
    • Financial account number
    • Account passwords
    • Security questions and answers

    Frequency

    You may make a verifiable consumer request up to two times within a twelve-month period, without charge. Unfortunately, we cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

    Response Timelines

    We try to respond to a verifiable consumer request within 45 days of its receipt.  If we require more time, we will inform you of the reason and extension time period (up to 90 days). If you have an account with us, we will deliver our response to that account. If you do not have an account with us, we will deliver our response by mail or electronically, at your option. Any disclosures we provide will only cover the twelve-month period preceding receipt. The response we provide will also explain any reasons we cannot comply with a request, if applicable. 

    Opting-Out of Sale of Personal Information

    If you wish to opt–out of the sale of personal information, please use one of the methods in the 'Contact Us' section. If exercised, the decision to opt–out will be valid for 12 months, at which time we may request that you authorize the sale of personal information again.

    Discrimination

    We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

    • Deny you goods or services.
    • Charge you different prices or rates for goods or services, including through discounts or other benefits, or imposing penalties.
    • Provide you a different level or quality of goods or services.
    • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

    Back to top

  • PRIVACY OF YOUNG CHILDREN

    Boden is concerned about the privacy of young children and we do not knowingly collect any personal information from a child under 16. We do not sell products for purchase by children and all children's products we sell are for purchase by adults only. We require customers to verify that they are 18 or over before we can process an order, and customers must verify that they are 18 or over before speaking to our Customer Service team.

    Back to top

  • RECRUITMENT AND ONBOARDING PRIVACY NOTICE

    Introduction

    We are thrilled that you’d like to join our team. As part of our recruitment and onboarding processes, we process personal data about all job applicants. We will always be transparent with you about how we are using your data and we are committed to complying with our data protection obligations.

    This privacy notice explains the type of information we process, why we are processing it and how that processing may affect you.

    What do we mean by ‘personal data’ and ‘processing’?

    • ‘Personal data’ is information relating to you (or from which you may be identified) which is processed by automatic means or which is (or is intended to be) part of a structured manual filing system.  It includes not only facts about you, but also intentions and opinions about you. In this privacy notice, we may also refer to this as ‘your information’ or ‘your personal information.
    • ‘Processing’ means doing anything with personal data.  For example, it includes collecting it, holding it, disclosing it or deleting it.
    • Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sexual orientation, sex life, trade union membership and genetic and biometric data are subject to special protection and considered to be ‘special category personal data’.

    What information do we collect?

    As part of recruitment and onboarding, we may process the following data:

    • your name, address and contact details, including email address and telephone number;
    • details of your qualifications, skills, experience and employment history; including start and end dates with previous employers
    • information about your current remuneration,
    • information about your nationality and entitlement to work in the UK;
    • information about your driving licence and use of a vehicle
    • for regulated roles requiring disclosure barring service checks or AccessNI (Northern Ireland) we will collect information regarding the outcome of those checks and criminal record noted;
    • information about medical or health conditions, including whether or not you have a disability for which the organisation needs to make reasonable adjustments
    • equal opportunities monitoring information including information about your ethnic origin, sexual orientation and religion or belief.
    • date of birth and gender
    • details of your bank account and national insurance number
    • information about your marital status, next of kin, dependants and emergency contacts
    • a copy of your identification document

    Your data might be collected through application forms, CVs, obtained from your passport or other identity documents such as your driving licence or qualifications from forms completed by you during the recruitment and onboarding processes; from correspondence with you; or through interviews and meetings with you.

    We may collect personal data about you from third parties, such as references supplied by former employers, educational establishments or personal referees and information from criminal records checks permitted by law.

     

    How do we store your data?

    Data will be stored in a range of different places, including our HR system (WorkDay) and in other IT systems (including the organisation's email system), and electronic personnel folders.

    Why do we process your personal data?

    We need to process our personal data in order to enter into an employment contract with you and to meet our regulatory and legislative obligations.

    We won’t use your data for any other purpose other than recruitment and onboarding.

    • What’s Boden’s lawful basis for processing your information? Contract – we may need to process your data in order to enter a contract with you.
    • Legal obligation – we may need to process your data in order to comply with our legal obligations, for example, checking that you are entitled to work in the UK.
    • Legitimate interests – we may need to process your personal data in order to manage the recruitment process, assess and confirm your suitability for employment, decide who we should offer a job to, obtaining occupational health advice (where necessary), and making sure our HR administration is as effective as possible (and to make improvements as required). 
    • Consent – if your application is unsuccessful, we will ask you if we may keep your personal data on file in case there are future employment opportunities which may interest you. If you do provide your consent, you are free to withdraw this consent at any time.

    Where we process special categories of personal data (for example, information about ethnic origin, sexual orientation, religious beliefs, health or medical conditions) or data relating to criminal convictions during recruitment and onboarding, we do this to carry out our obligations in relation to employment or with your explicit consent (according to the Data Protection Act, 2018).

    Who do we transfer your data to?

    We may share your data with other companies in order to conduct certain activities during the recruitment and onboarding processes, for example to conduct background checks or to contact your referees. The companies that may receive your information during our recruitment and onboarding processes will not be based outside the European Economic Area (EEA) unless your previous employer is from outside the EEA.

    How do we keep your information secure?

    The security of your data is our priority. We have internal policies, procedures and processes in place to make sure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the performance of their duties. Third parties who process your personal data on our behalf (our ‘data processors’) do so under a written contract and are required to adhere to the same standards that Boden sets for itself.

    How long do we keep your information?

    If your application is successful and you decide to come and join our team (yay!), your personal data collected during the employment and onboarding process will be transferred to your personnel file and will be retained in line with our employee data retention periods (you’ll be able to review these retention periods when you start your employment with us).

    In some cases, your application may be unsuccessful. In these cases, we will hold your information for six months after the end of the recruitment process and then your information will be destroyed.

     

    What happens if you don’t provide your personal information?

    Sadly, we might not be able to consider your application, fulfil our legal obligations, or offer you a position if you don’t provide your information to us during recruitment and onboarding.

    What are your rights?

    You have the following rights in relation to your personal data. You can:

    • access and obtain a copy of your data on request;
    • require the organisation to change incorrect or incomplete data;
    • require the organisation to delete or stop processing your data when the data is no longer necessary for the purposes of processing; and
    • object to the processing of your data in certain circumstances.

    None of our employment decisions are based solely on automated decision making or profiling.

    How can you get further information or lodge a complaint?

    If you would like to exercise any of your rights, have questions about this privacy notice, please contact our Data Protection Officer (DPO@boden.co.uk).

    If you have any complaints, you can contact us (see details below) and we’ll do our utmost to get to the bottom of things. If, after contacting our Data Protection Officer you feel your complaint has not been dealt with satisfactorily, you have the right to contact the supervisory authority. The supervisory authority for data protection in the UK is the Information Commissioner’s Office (ICO) which you can contact on 0303 123 1113 or via their website at ico.org.uk.

  • ACCESSING FROM OUTSIDE THE US

    If you are visiting Bodenusa.com from a location outside of the United States, you will be connected through and to servers located within the United States and the United Kingdom. All online orders will be accepted and fully processed in and shipped from the United States or the United Kingdom and all information you provide will be securely maintained on web servers and our internal systems located within the United Kingdom. By providing your information to us, you agree that all personal information will be used in accordance with this privacy notice and pursuant to U.S. law.

    Back to top

  • CONTACT US

    If you have any questions or concerns regarding our privacy notice, your privacy rights, or would like to submit a request please contact us:

    • By email: privacy@bodenusa.com. If your email relates to California Privacy Rights, please write ‘California Privacy Rights’ in the subject line.
    • By phone: 1-866-206-9508 (Toll-Free) (Mon-Fri: 8am - midnight EST; Sat-Sun: 8am - 10pm EST)
    • By mail:
      Boden Customer Relations
      180 Armstrong Road, Pittston 
      PA 18640-9628 
      United States
    • Through our website: Submit your query or request via the webform

    You’ll also find more information about this in our Security FAQs section.

    Back to top

  • COOKIES AND WEB BEACONS

    Cookies are small text files that websites send to your computer. A cookie can be thought of as an Internet user's identification card. They let the website know when the user has returned. This lets the site bring up information relevant to that user, for example your name, past orders, etc.

    Cookies make the interaction between users and websites faster and easier. Without cookies, it would be very difficult for a website to allow a visitor to fill up a shopping basket or to remember the user's preferences or registration details for a future visit. The Boden website uses cookies to allow customers to move from one part of the web site to another and to add items to the shopping basket without having to login repeatedly.

    We also use cookies to track visitors' interest in our products. We may use this to understand what most appeals to our customers so we can make our offers as appropriate as possible. Browsing behaviour is also used to create relevant banner advertising with product recommendations that we believe best relate to the items you viewed on our website. These banners are then served across other websites that you may visit, typically news sites, video sites and blogs. This process is called behavioural advertising and although the adverts are individually tailored to each visitor, all cookie data is anonymised and stored temporarily. Additionally, all banners of this type feature an "i" icon that provides more information from each advertising network and instructions on how to opt out. We also use the browsing behavior data to create personal product recommendations on our website, our marketing emails and in our printed catalogue.

    Due to our website set-up, you may be asked to confirm your choices more than once when you visit us. Please make sure that you express your choices when prompted, so that we have your accurate preferences for all areas of our website. Cookies are not computer programs, and can't read other information saved on your hard drive. They cannot be used to disseminate viruses, or get a user's email address etc. They only contain and transfer to the website as much information as the users themselves have disclosed to that website. It is possible to opt out of cookies via your browser in cookie settings, but if you do this you will not be able to shop from the Boden website as the functions of the website are dependent on cookies. Please note that cookies are computer specific, so if you log on to any site from a different computer, the cookie settings on that computer will apply.

    For further information about managing and disabling cookies on your computer see www.allaboutcookies.org/manage-cookies.

    By using our websites, you consent to our placement of cookies on your computer. You may occasionally get cookies from our business partners or other third parties. We have no access to or control over these cookies.

    Most internet browsers automatically accept cookies, but if you do not wish to have cookies on your system, you can set your browser preferences to refuse them or to alert you when cookies are being sent. In order to disable cookies, please consult your browser's "help" section for instructions.

    Web beacons are small strings of code that are placed in a web page or in an email message. They are sometimes called "clear GIFs" (Graphics Interchange Format) or "pixel tags". Web beacons are most often used in conjunction with cookies to track activity on our websites. When you visit a particular web page, web beacons notify us of your visit. Since web beacons are used in combination with cookies, if you disable cookies, the web beacons will only detect an anonymous website visit. When used in an email, web beacons enable us to know whether you have received the email.