Disclosures of your personal data and categories of recipients

We disclose personal data to the parties set out below. We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Categories of Recipients	Purpose of the disclosure	Location of recipient
We share your personal data within our group of companies where they act as processors and joint controllers, to the extent systems, resources and operations are shared.	This is to provide you with the best service and perform contractual obligations to you, send you information about our products and services we think you’ll be interested in hearing about, or to comply with our regulatory requirements.	Our group companies have offices in the UK, USA and the Netherlands.
Government bodies, such as regulators, law enforcement authorities, competition authorities, and tax authorities, acting as processor or joint controller	To check your identity, protect against fraud, keep to laws (including tax laws, anti-money laundering laws, data protection or cyber security laws or any other laws), and confirm that you’re eligible to use our products and services.	These bodies may include HMRC (the UK Tax Authority), the FCA (the UK financial authority), the ICO (the UK data regulator) and equivalent bodies in other jurisdictions.
Professional advisors acting as processor or joint controller including lawyers, bankers, auditors and insurers.	To enable us to obtain consultancy, banking, legal, insurance, payroll management and accounting services.	The entities are located in the UK, the EEA and the USA,
Social media channels.	We use social media for marketing purposes, and therefore we might share your personal data (limited to only your name, email address) to check if you also hold an account with them; to send your our adverts, where we think that one of our new products or services might interest you; to send our adverts to people who have a similar profile to you.	The social media entities are global. The recipients can be located in the UK, the USA, and the EEA.
Where you ask us to share your personal data with a third party.	For example, you might authorise third parties to act on your behalf (such as a courier or delivery service provider).	The entity would be located wherever you had sourced them.
Third parties to whom we might sell, transfer or merge parts of our business or our assets. Alternatively, we might seek to acquire other businesses or merge with them.	As part of any financial, commercial or legal due diligence investigations and implementation of any such acquisition, sale or merger
IT service providers, acting as processors	email; cloud computing; web hosting; system administration; hosting; network services; software developers; source code management; infrastructure management and collaboration.	These providers are based in the UK, EEA, USA and globally.
Software application providers, acting as processors. who provide software that we use to deliver our products and services and conduct our business, such as, operations, contract management and electronic document information storage, accounting systems, managing our marketing database, internal document storage systems.	To fulfil contracts with you, manage our transactions, business management and record keeping and comply with legal and regulatory obligations.	These entities are located in the USA, UK and EU.
Mailing service providers, acting as processors who ship our products to you.	To enable products to be delivered to you.	These are based globally as best suits the location of the recipient.
Third-party payment providers.	They offer services such as ‘buy now pay later’ finance. In order to offer you these payment methods, we might in the checkout pass your personal data in the form of contact and order details to them, in order to assess whether you qualify for their payment methods and to tailor those payment methods for you.	We currently work with Klarna, check Klarna’s own privacy notice.
Analytics providers, and “cookies”, acting as processors.	They offer services such as surveys and statistical analysis. track and analyse our website users to understand how visitors interact with our site.	These entities are located in the USA and the UK.