Privacy Policy

INTRODUCTION uniformdisplay.com is a site property of Uniform Display, with registered office at Exhibit Exhibit Limited, First Floor, 17-19 Foley Street, London, W1W 6DW, and operated by Uniform Display, with registered office at Exhibit Exhibit Limited, First Floor, 17-19 Foley Street, London, W1W 6DW. Uniform Display ("We") are strongly committed to protecting and respecting your privacy. Exhibit Exhibit Limited is the trading name of Uniform Display.

PRIVACY POLICY This Privacy Policy provides users of uniformdisplay.com (the “Site”) with the fullest possible details on the processing by the Site of their personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable legislation on the protection of personal data. In accordance with the applicable legislation, this Privacy Policy also provides details on:

• The nature of the personal data processed (as defined below)
• The purposes and means of the processing of personal data
• The identity and contact details of the controllers
• The contact details of the Data Protection Officer (DPO)
• Any third parties involved in the processing operations
• The period the personal data will be stored
• A brief description of the security measures adopted to protect personal data
• The existence of the data subject’s right to request from the controller access to and rectification or erasure of his/her personal data, right to limit the processing of the data concerning him/her or to oppose their processing, and the right to the portability of user data.

This Privacy Policy applies to the Site only and does not concern any website or platform to which the Site may link. Users under the age of 14 (fourteen) are unable to give consent to the processing of personal data without the authorisation of the holder of parental responsibility.

CONTROLLER Pursuant to the GDPR, the controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where two or more controllers jointly determine the purposes and means of processing, they are joint controllers. The joint controllers relating to the activities of the site are:

• Uniform Display, Exhibit Exhibit Limited, First Floor, 17-19 Foley Street, London, W1W 6DW; contact: [email protected]
• Uniform Display, Exhibit Exhibit Limited, First Floor, 17-19 Foley Street, London, W1W 6DW; contact details: [email protected] (the “Joint Controllers”).

A Data Protection Officer has been designated to ensure that personal data is processed in accordance with the GDPR. The Data Protection Officer may be contacted for any request at the following email address: [email protected]. Regarding the processing of personal data relating to marketing and profiling activities, Uniform Display will act as the sole controller, while Uniform Display will carry out data processing activities as the processor on behalf of Uniform Display.

PERSONAL DATA: PURPOSE OF THE PROCESSING The term “personal data” means any information relating to users of the Site, including data that identify them personally, alone or in combination with other information. Personal data are collected automatically through the Site or received through multiple sources: forms, chats, emails, apps, devices, social media, and other means. The Joint Controllers process personal data in connection with the following activities:

MANAGING SITE BROWSING The Joint Controllers collect browsing data (which, according to the GDPR, do not fall under the special categories of data) using automatic means to enable and improve the user’s browsing of the Site (e.g., IP address, date/time of the visit and relative duration, any referring URLs, pages visited on the Site, device used, and other information). The processing of such personal data allows users to access the Site and make full use of its features and services. Browsing data may also be used to ensure the Site is functioning properly. From time to time, browsing data is processed anonymously for statistical purposes. Browsing data is unlikely to allow identification of the relevant data subject. However, by their very nature, browsing data may allow identification of data subjects if associated with other information. The browsing data described above are stored only temporarily in accordance with applicable regulations. The legal basis for the processing of personal data in this case is the legitimate interest of the controller.

MANAGING ORDERS At the time of verification, the Site will ask users to provide personal data for the essential purpose of ensuring the management of orders and complying with existing contractual obligations with users (the data processed include, but are not limited to, first name, last name, email address, delivery address). These personal data are also necessary to allow customer service to assist customers with any requests or questions before or after the sale (e.g., concerning the delivery status of the order or returns of products). Personal data relating to orders are kept for as long as necessary to fulfil contractual obligations and any accounting and tax obligations. The Joint Controllers may also verify that payment instruments used by customers for purchases on the Site (e.g., credit or debit cards, etc.) are valid, mainly to prevent fraud or to fulfil statutory anti-money laundering obligations. Since this activity is delegated to duly authorised third parties, the Joint Controllers do not process or store financial information relating to customers and payment instruments. Failure to transmit/provide the personal data requested at checkout will prevent users from completing an order on the Site. The legal basis for the processing of personal data in this case is Article 6(1)(b) of the GDPR (performance of a contract to which the data subject is party). Based on their legitimate interest (Article 6(1)(f) of the GDPR) in improving customer relations, the Joint Controllers will send customers who have made purchases on the Site email communications containing product suggestions, discounts, requests for feedback, or other updates. Customers are free to object to any further email communication at any time (e.g., by clicking on the “unsubscribe” link at the foot of each email).

REGISTERING AN ACCOUNT ON THE SITE When users decide to create and register a personal account on the Site, they are asked to provide personal data (e.g., date of birth, gender, etc.). The Site clearly indicates which personal data are (or are not) required to set up an account on the Site. Users must provide true and accurate personal data at the time of registration and are encouraged to keep their personal data up to date by accessing their personal account to make any necessary changes. Users who choose to activate or access their account on the Site through social media must be aware that when they connect their Site account to a social media account, the Site collects certain personal data the user has already provided to that social media platform (e.g., email address and public profile on Facebook). The Joint Controllers do not monitor or manage these social media services or user profiles on these social media services, nor do the Joint Controllers establish the personal data protection settings or the rules regarding the methods of use of personal data on these social media platforms (Facebook, Twitter, or other). Users are strongly encouraged to read any information published by the managers of these services concerning the protection of personal data to obtain further information on the methods of processing personal data through these channels. The legal basis for the processing of personal data in this case is the data subject’s consent given at the time of registration (Article 6(1)(a) of the GDPR).

NEWSLETTERS AND MARKETING COMMUNICATIONS Site users can opt to receive newsletters and marketing communications. The Joint Controllers collect users’ freely given, express, and unequivocal consent before sending them newsletters and marketing communications or, more generally, before undertaking dedicated marketing initiatives. In these cases, in addition to their email address, users may be asked to provide personal data (e.g., gender, country of residence, etc.) to receive marketing communications and newsletters tailored to their user profile. Users may at any time withdraw their consent to receive newsletters and marketing communications:

• In their account settings
• By clicking on the “unsubscribe” link at the bottom of an email
• By contacting our customer service representatives.

The legal basis for the processing of personal data in this case is the data subject’s consent to the processing of his/her personal data.

PROFILING Based on the user’s express consent, the newsletter and marketing communications may be adapted to the user’s profile, based on the personal data the Joint Controllers collect about the user concerned. As for the customers of the Site, it is in the legitimate interest of the Joint Controllers to process personal data to offer more interesting products, improve the Site, and personalise the products offered on the Site. The main purpose of profiling is to offer products, services, and initiatives that better meet users’ and customers’ tastes, purchasing habits, and interests. Personal data may also be used for remarketing, retargeting, or profiling purposes, including through third parties (e.g., social networks, etc.). Neither the Site nor the Joint Controllers profile minors. The legal basis for the processing of personal data in this case is the data subject’s consent to the processing of his/her personal data (Article 6(1)(a) of the GDPR).

COOKIE POLICY This Cookie Policy explains to users how the Site adopts cookies and, furthermore, provides guidance as to how cookies can be managed. This Cookie Policy should be read together with the Privacy Policy. By continuing to browse or use the Site, users agree to the use of cookies as described in this Cookie Policy.

WHAT COOKIES ARE Cookies are small text strings that the Site sends to the user's device, where information is memorised for various purposes. In particular, cookies allow the Site to recognise users on subsequent visits or enable other websites that recognise those cookies. Cookies are useful because they improve the user experience during ongoing browsing of the Site.

MANAGING COOKIES Users can configure their browser to automatically accept or refuse all cookies, or to receive a notification on the screen of the transmission of each cookie and decide from time to time whether to install them on their device or not. If the user disables cookies, however, the Site may not be able to provide certain services, and the user may not have access to certain functions or sections. Users can also control which categories of cookies are installed, including third-party cookies. For further information on how to do so, users can consult the "Help" section of their browser.