Privacy Notice

This Privacy Notice is provided by Mizzen General Trading LLC (a limited liability company incorporated under the laws of the United Arab Emirates, with commercial license number 787513 and registered office at P.O. Box 2123) (hereinafter referred to as “Mizzen”, “we”, “us” or “our”), in its role as Aesop’s distributor in the United Arab Emirates. Aesop offers skin, hair, and body care formulations available for sale both in stores and on the website www.aesop.ae (together the “Aesop Services”). This Privacy Notice applies to personal information that Mizzen collects from or about you to provide the Aesop Services.

This Privacy Notice covers personal information that Mizzen collects and processes in connection with the Aesop Services, including but not limited to, personal information collected to create your customer account. Personal information refers to any data identifying a natural person directly or indirectly, such as, name, identification number, location data, an online identifier.

We may collect personal information about you from the following sources:

a. Information we receive from you

We may collect personal information (such as your name, delivery address, postal and email address, telephone number, date of birth, title, payment information, skin type) that you provide to us when you:

• Visit our website and register an account with us.
• Purchase products through our website, social media channels, over the phone or in store.
• Create a customer account when visiting one of our Aesop retail stores or counters.
• Take part in our promotions, competitions, and surveys.
• Attend a Mizzen or Aesop event.
• Correspond with us across any of our channels (e.g., messaging platforms such as, text message, WhatsApp, social media, and email).
• Request Value Added Tax (VAT) refund. We may request valid proof of identification from you (e.g., passport copy, resident’s visa or permit, national ID card).

b. Information we collect about you

When you visit our website, we may use cookies and other technologies to automatically collect the following information:

• Technical information, including your IP address, your login information, browser type and version, details of any website which has referred you to our website, device identifier, location and time zone setting, browser plug-in types and versions, operating system and platform, page response times, and download errors.
• Information about your visit, including the websites you visit before and after our website and products you viewed or searched for.
• Length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouseovers) and methods used to browse away from the page.

For more information on our use of cookies and similar technologies, please refer to the section on cookies below.

We may collect personal information from other sources when applicable, including through publicly available information as well as the use of the CCTV cameras in our stores.

Your personal information is intended for Mizzen but may be shared with third parties in certain circumstances:

Mizzen’s affiliates and group companies:

We may share your personal information with Mizzen’s affiliates and group companies to register your account with us, deliver the Aesop Services, provide you with customer support, process your payments, understand your preferences, send you information about products that may be of interest to you, and conduct the other activities described in this Privacy Notice.

Our service providers:

We use other companies, contractors, and service providers to perform services on our behalf or to assist us with the provision of the Aesop Services to you. We may share personal information with the following categories of service providers:

• Infrastructure and IT service providers, including for email archiving, mailing, website hosting, payment/billing, booking/appointment systems, IT support desk, and cloud-based services.
• Marketing, advertising, and communications agencies.
• Logistics or last mile delivery companies.
• Legal advisers, external auditors, and advisers.

While providing such services, these service providers may have access to your personal information. However, we will only provide our service providers with personal information which is necessary for them to perform their services, and we require them not to use your information for any other purpose. We will use our best efforts to ensure that all our service providers keep your personal information secure.

L’Oréal Groupe:

We may share your personal information with L’Oréal Groupe, the owner of Aesop, to provide Aesop Services and for other purposes described in this Privacy Notice.

Third parties permitted by law:

In certain circumstances, we may be required to disclose or share your personal information to comply with a legal or regulatory obligation (for example, we may be required to disclose personal information to the police, regulators, government agencies, or to judicial or administrative authorities).

We may also disclose your personal information to third parties where disclosure is both legally permissible and necessary to protect or defend our rights, matters of national security, law enforcement, to enforce our contracts, or protect your rights or those of the public.

Third parties connected with business transfers:

We may transfer your personal information to third parties relating to a reorganization, restructuring, merger, acquisition, or transfer of assets, provided that the receiving party agrees to treat your personal information in a manner consistent with this Privacy Notice. We do not sell your personal information to third parties.

Please note our website may, from time to time, contain links to and from third-party websites of our partners or affiliates. If you visit any of these websites, please note that these websites have their own privacy notices and that we have no control over how they may use your personal information. You should check the privacy notices of third-party websites before you submit any personal information to them.

Personal information we collect may be transferred to, stored, and processed in the United Arab Emirates, Kingdom of Saudi Arabia, Kuwait, and Qatar where Mizzen, its affiliate companies are located or maintain facilities. We may also transfer personal information to L’Oréal Groupe in any of the countries where they operate. We carry out such transfers for the purposes described in this Notice. Where we transfer personal data outside the United Arab Emirates, we take all steps that are reasonably necessary to ensure that your personal information is treated securely and in accordance with this Privacy Notice and applicable data protection laws, including, where relevant, entering standard contractual/data protection clauses (or equivalent measures). If you would like more information on transfer mechanisms, please contact us using the details provided in Section - ‘How can you contact us?

You have the following rights available to you in respect of the personal information we hold about you:

• Right to Access: You have the right to obtain confirmation as to whether we process your personal information, request a copy of your personal information being processed by us, and obtain certain other information about how and why we process your personal information (like the information provided in this Privacy Notice). For your own security and to comply with applicable data protection law, we may require you to prove your identity before providing the requested information. We may not be able to fully comply with your request if it will negatively impact the rights of others or if it involves disclosing personal information that identifies another individual.
• Right to Rectification: You have the right to have incomplete or inaccurate personal information that we process about you rectified.
• Right to Erasure: You have the right to request the deletion of your personal information. We may be unable to comply if there is a legal obligation to retain the data or if it is needed to exercise or defend legal claims.
• Right to Restrict Processing: You can request a temporary restriction on processing your personal information if you dispute its accuracy, if it was processed unlawfully but you prefer restriction to deletion, or if you need the data to exercise or defend legal claims even though we no longer require it.
• Right to Data Portability: You have the right to obtain personal information we hold about you, in a structured electronic format, and to transmit that data to another data controller, where this is (a) personal information which you have provided to us, (b) if we are processing that data based on your consent or to perform a contract with you, (c) the processing is carried out by automated means.
• Right to Object: Where the legal justification for processing your personal information is our legitimate interest, you have the right to object to such processing. We will abide by your request unless we have compelling legitimate grounds for the processing which overrides your interests and rights, or if we need to continue to process your personal information for the establishment, exercise, or defense of a legal claim.
• Right to Withdraw Consent: If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out from marketing messages that you receive from us. Please note that if you withdraw your consent to our collection, use, or disclosure of your personal information at any time (subject to contractual and legal restrictions and reasonable notice), we may be unable to provide you the Aesop Services or contact you in the future.
• Right to Lodge a Complaint with a Data Protection Authority: You have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. We would however appreciate the chance to deal with your concerns before you approach any local data protection authority so, please contact us the first instance.

You can make a request to exercise any of these rights in relation to your personal information by sending the request to [email protected].

We will generally provide you with access to your personal information if practicable and will take reasonable steps to amend any of your personal information which is inaccurate or out of date.

Please note that where CCTV is in operation in our stores, you may be captured in recorded CCTV footage (image and video). All CCTV footage is captured purely for your security and for the prevention and detection of crime. If you would like to know more about this, please contact us using the details provided below.

The security of your personal information is an important concern to us. We provide the utmost care in secure transmission of your personal information from your computer and other electronic devices to our servers. We use industry security standards to safeguard the confidentiality of your information and to make sure that your personal information is secure with us.
We have implemented and maintain appropriate technical and organizational security measures, policies, and procedures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind a secure network. All payment transactions are encrypted.
Examples of measures we take include:
• Imposing confidentiality obligations on our staff and service providers.
• Restriction of access to your personal information to employees and third parties strictly on a need-to-know basis, such as to respond to your enquiry or request.
• Using secure communication channels for transmitting personal information; and
• Employing adequate administrative and technical controls to secure personal information.

We will only retain your personal information for as long as necessary for the purpose for which that data was collected and to the extent permitted by applicable laws. However, we may retain some information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If your web browser is set up to accept cookies, a cookie will be stored on your hard drive when you visit this website. Cookies allow us to collect information about your computer or device, which may include your IP address (a number assigned to your computer/device when you register with an Internet Service Provider), type of browser, operating system, domain name, and the details of any website which has linked you to our website. Our website uses cookies to track and collect information about which parts of our website and newsletter (including links to other websites) you visited.

Cookies also allow us recognize your computer/device while you are on our website, and to send you to the country of origin and language you selected on your first visit to this website. This information is used to maintain the quality of our service and to provide tracking and statistics regarding the use of our website.

The types of cookies we use include:

• Strictly necessary cookies: these are required for the operation of our website, such as cookies that enable you to log into your account or make purchases, or cookies that enable us comply with applicable law (for example, to keep your information safe). We would not be able to operate our website without using strictly necessary cookies.
• Performance cookies recognize and count the number of users on our website and help us see how users move around our website. These cookies do not collect information that identifies a user. Any information collected by these cookies is anonymous. We only use such information to improve our website. This information helps us to find out how well the website works and highlights where it can be improved.
• Functionality cookies are used to recognize you when you return to our website and assist us to personalize your content and website experience by remembering your preferences. These cookies are also used to provide services you have asked for (such as watching a video). You can block these cookies using your browser settings (please see instructions below).
• Targeting cookies are used to record your visit to our website, the pages you have visited, and the links you have followed. These cookies are used to advertise relevant products to you on other websites, based on the products and categories you looked at on our website.

Third Party Cookies

We allow select third-party suppliers to set cookies on our website to enhance customer experience and provide additional functionality. We use the following third-party cookies:

• Google AdWords:

This website utilizes the online advertising program “Google AdWords”, and the associated conversion tracking cookie is set on the user’s browser. The information collected by the conversion cookies is used to provide aggregate conversion statistics to Google AdWords clients who have opted-in for conversion tracking. They are not used to acquire personal information. If you do not want to allow these cookies on your device, you can deactivate the Google conversion-tracking cookie through your user settings on your internet browser.

We also use Google AdWords remarketing codes to log when users view specific pages or take specific actions on a website. This allows us to provide targeted advertising in the future. If you do not wish to receive this type of advertising from us, you can opt out using the DoubleClick opt-out page (http://www.google.com/settings/ads) or the Network Advertising Initiative opt-out page (http://www.networkadvertising.org/managing/opt_out.asp).

If you would rather not have any of this information stored on your computer/device, you can configure your browser so it does not accept cookies. However, if you disable cookies, you may not be able to access all parts of this website, including the purchase section. For more information and to learn how to disable cookies, please visit www.allaboutcookies.org or www.youronlinechoices.com.

• Meta Pixel:

Meta Pixel is an analytical tool that allows us to measure user activity on our website. It is a piece of code that helps identify Facebook and Instagram users and see how they interacted with the content on our website (such as, page views, product views, adding to cart/wish list, starting checkout, purchases). Meta Pixel helps us measure the effectiveness of our advertising and campaigns. For more information and to opt-out of analytics using Meta Pixel, you may change your ad preferences (including your activity off Meta technologies) in your Meta accounts centre accessible through this link https://accountscenter.facebook.com/info_and_permissions.

• TikTok Pixel:

TikTok Pixel is a piece of code that captures users’ action on our website, including events such as adding to cart or placing an order. This provides us with insights on how users are engaging with our website and to measure the effectiveness of our advertising and campaigns. For more information and instructions on how to opt-out of analytics using TikTok Pixel, please follow this link https://www.tiktok.com/privacy/ads-and-your-data/en.

• Snapchat Pixel:

The Snap Pixel is a tool that helps advertisers measure results, optimize audience targeting, and build audiences for their ad campaigns. The Snap Pixel is a piece of code that is either installed on a website or integrated with an e-commerce store that tracks a variety of actions such as page views, add-to-cart actions, purchases, and sign-ups. For more information and instructions on how to opt-out of analytics, please visit https://values.snap.com/privacy/ads-privacy?lang=en-GB.

We will never knowingly collect personal information from individuals under the age of eighteen (18) without first obtaining verifiable parental consent. If you are under the age of 18, you should not provide information to us. If we become aware that a person under 18 has provided personal information to us without verifiable parental consent, we will take all reasonable measures to delete such information from our databases.

If there are any questions or concerns regarding this Privacy Notice, please contact us at [email protected].

This Privacy Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this Notice, the English version shall prevail.
We reserve the right to change our Privacy Notice from time to time. To obtain a copy of the latest version at any time, please visit this website.