Privacy Policy

1. This privacy policy sets out LUCY’s current policies and practices with regard to personal data collected by LUCY through its website www.franks.com.mt, which is an online shopping portal (hereinafter referred to as the “Site”) implemented by Franks Stores Ltd (hereinafter “Franks”). We are registered in Malta under company registration number C15364. Our registered address is No.4, JMA Building, Level 2, Industry Street, Qormi, Malta. Our VAT registration number is MT1149-0819.
2. This Privacy Policy is in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679) and the Data Protection Act (Cap 586 of the laws of Malta) on the processing of personal data and the protection of privacy in the electronic communications sector.
3. The term “personal data” refers to personally identifiable information about you, such as your first and last name, birth date, age, gender, e-mail address, delivery and billing address, phone number, signature (when collecting online purchases), voice (when calling Customer Service), Paypal details, historic purchase information, user ID and any other information that is identified with you personally.
4. LUCY is continually improving and adding new functionality and features to its Site and improving and adding to our existing products, services, and programs. Because of these ongoing changes, changes in the law, and the changing nature of technology, LUCY’s data practices will change from time to time. If and when our data practices change, LUCY notify any such changes by posting them on the Site. Please check this Site regularly for any changes. This policy was last updated on the 26th of June, 2019.
5. LUCY is not responsible for the content or privacy policies of other third party websites linked to the Site.
6. By using this Site or providing LUCY with your Personal Data through the Site, you will be bound by the current Privacy Policy.

 

Personal Data Collected

7. LUCY collects and processes your personal information (“Personal Data”) when you use the Site. Without limitation, personal data includes the personal information you submit when you sign up to or browse the Site, contact Customer Service and/or make purchases through it. If you do not supply us with your personal data, we will not be able to fulfill our services to you (e.g. supply the products you wish to purchase online from the Site).
8. LUCY also logs IP addresses, or the location of your computer on the Internet for internal security purposes of the Site and such data will not be shared or disclosed to third parties except as provided for in Clause 15 below.
9. When you visit the Site, a cookie may be sent to you. A cookie is a small piece of data sent from a website and stored in a user’s web browser while the user is browsing the website. Every time the user loads the website, the browser sends the cookie back to the server to notify the website of the user’s previous activity. Your browser sends these cookies back to the website every time you visit the site again, so it can recognise you and can customise what you see on the screen according to your registered preferences. Certain cookies are essential for the functioning of the website, thus disabling them may hinder the full functioning of the Site. Please do refer to our Cookies Policy for further details.

 

Use of Personal Data Collected

10. LUCY uses the personal data information you provide for the following purposes:

1. The personal data you provide LUCY to register as a user of the Site will be processed in order to identify you as a user of the LUCY Site and provide access to the different services and functions that are available to you as a registered user.
2. When effecting a purchase, such data will be used for the development, facilitation and performance of the purchase and sale contract between both parties of the products you have purchased from the Site and related administrative and legal purposes. Such data may also be used to be able to contact you via email / telephone call / SMS to inform you about the status of your order and other messages related to the services, including the security updates of the Site.
3. In case you provide LUCY with third party information, you will be responsible for having informed and obtained their consent for this information to be provided for the purposes explained herein. If you have purchase a product or gift card for such third party, the information of such third party will only be used for managing the delivery or verification of the receipt of the goods and attending to any query or request which you or the third party may have.
4. In case you wish to make any queries through the contact form available on the Site, your personal data and contact details may be used by LUCY in order to respond to your queries.

11. You hereby guarantee that the personal data provided are true and accurate and undertake to notify us of any change or alteration of them. Any loss of damage to the Site or the LUCY, or to any third party through the provision of erroneous, inexact or incomplete information on the registration form, will be exclusively the responsibility of the user.
12. You may also subscribe to our newsletter or other e-mail alerts from LUCY or its affiliates, which enable you to receive current news about FraLUCYnks and its business. For all such services, you may “opt-out” of, or unsubscribe from any such messages either upon subscription, from the newsletter email itself or by contacting Customer Service.

 

Requirements and Criteria for Processing

13. LUCY ensures that:

1. personal data is processed fairly and lawfully;
2. personal data is always processed in accordance with good practice;
3. personal data is only collected for specific, explicitly stated and legitimate purposes;
4. personal data is not processed for any purpose that is incompatible with that for which the information is collected. [The processing of personal data for historical, statistical or scientific purposes shall not be regarded as incompatible with the purposes for which the information was collected];
5. personal data that is processed is adequate and relevant in relation to the purposes of the processing;
6. no more personal data is processed than is necessary having regard to the purposes of the processing;
7. personal data that is processed is correct and, if necessary, up to date;
8. all reasonable measures are taken to complete, correct, block or erase data to the extent that such data is incomplete or incorrect, having regard to the purposes for which they are processed;
9. personal data is not kept for a period longer than is necessary, having regard to the purposes for which they are processed.

 

14. Personal data may be processed only if:

1. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; or
2. processing is necessary for compliance with a legal obligation to which LUCY is subject; or
3. processing is necessary in order to protect the vital interests of the data subject.
4. processing is necessary for the performance of an activity that is carried out in the public interest or in the exercise of official authority vested in LUCY or in a third party to whom the data is disclosed; or
5. processing is necessary for a purpose that concerns a legitimate interest of LUCY or of such a third party to whom personal data is provided, except where such interest is overridden by the interest to protect the fundamental rights and freedoms of the data subject and in particular the right to privacy.

 

Disclosure of Your Personal Data

15. LUCY may disclose such personal data only if we are required and permitted to do so by law, in accordance with the Data Protection Act, or we believe, in good faith, that such action is necessary to:

1. comply with the law or with legal process,
2. protect and defend our rights and property,
3. protect against misuse of unauthorised use of the Site and its content; or
4. protect the personal safety or property of our users or the public.

 

16. In order to fulfil our services in regard to any of your purchases or requests, LUCY may need to disclose or transfer some of the information provided by you to third parties contracted for the delivery of the goods purchased by you. You are hereby informed that by registering and providing us with information via the Site, you are expressly authorizing LUCY to disclose and/or transfer such data to such companies and for the purpose of executing your purchases or requests.
17. Where strictly necessary, we may also disclose this information to third party processors, financial institutions or other third party service providers who help with our business operations (e.g. technological services suppliers, financial transaction management, logistics services, etc.) or as necessary to process your purchases. By providing information in this Site or otherwise to LUCY, you expressly authorise us to disclose and process your information as described.

Sharing of Personal Data

18. LUCY may share the information collected, in aggregate form, with advertisers and other partners. We will not release personal information about you as an individual to third parties, except under the circumstances described above in compliance with legal process. Upon request, we will provide you with all of your personal information associated with your UserID and information will only be sent to the email address you provided us with when registering your details.
19. In compliance with the provisions of the Data Protection Act, personal data may not be processed for purposes concerning direct marketing, if the data subject notifies the data controller that s/he opposes such processing. The data controller shall appropriately inform the data subject of his right to oppose such processing at no cost.
20. While no method of data transmission is guaranteed against unlawful third party interception or other misuse, LUCY uses commercially reasonable efforts to ensure protection of your data including industry-standard encryption and offline security methods in our physical facilities.

 

Rectification, Deletion, etc.

21. LUCY shall, at the request of the data subject, immediately rectify, block or erase such personal data that has not been processed in accordance with the Data Protection Act or with regulations made thereunder.
22. LUCY shall notify any third party to whom the data has been disclosed about the measures undertaken as aforesaid. Provided that no such notification need be provided if it is shown to be impossible or it will involve a disproportionate effort.
23. Should you wish to exercise your rights for access, rectification, erasure and/or objection in regard to the personal data collected in your regard, you may send us an email on info@franks.com.mt. We may request that you provide us with an identification document in order to ensure maximum security and confidentiality.

 

Data Subject Access Policy

24. LUCY will provide information in response to any reasonable data subject access request. Franks will ensure that the data is kept in an accessible form to facilitate access by the data subject.
25. At the data subject’s request, LUCY shall provide to the data subject, without excessive delay and without expense, written information as to whether and which personal data concerning the data subject was processed, shared or disclosed. Provided that a request by the data as aforesaid shall only be made by the data subject at reasonable intervals.
26. Should you wish to exercise your rights for access in regard to the personal data collected in your regard, you may send us an email on info@franks.com.mt. We may request that you provide us with an identification document in order to ensure maximum security and confidentiality.
27. If such data is processed LUCY shall provide to the data subject written information in an intelligible form about:

1. actual information about the data subject which is processed;
2. where this information has been collected;
3. the purpose of the processing;
4. to which recipients or categories of recipients the information is disclosed; and
5. knowledge of the logic involved in any automatic processing of data concerning the data subject.

 

Questions About Our Privacy Policy

28. If you have any questions about this privacy policy or concerns about the way LUCY processes your personal data, please contact us on info@franks.com.mt.