Policies

You are here because you want to learn more about what we do with your personal information and who controls that information. Within this policy we hope to give you a clear understanding of how your data is handled and what options you have as a valued customer.

How do we collect your data?
Whether you open a membership in store or online, or using one of our subsidiary companies, we only ask for the information that is relevant to help us build an account with you.

Our websites are not intended for children under the age of 13 and we do not knowingly capture their data without parental consent.

This is applicable to the following in the UK Region:

• KidX In Store
• KidX Online

To help us provide superior service, KidX may share your information within the CeX Group. The CeX Group includes KidX, our franchisees, our subsidiaries and our affiliates who will take steps to safeguard it in accordance with KidX privacy policy. This also includes data analysis projects where we look to review our business direction and keep KidX competitive.

At times we may be required by law or litigation to disclose your personal information. We may also disclose information about you if we determine that for national security, law enforcement, or other issues of public importance, disclosure is necessary.

Our stores use CCTV to record images for the protection of staff and customers and the prevention and detection of crime. Our CCTV can also be used for staff training where relevant.

For online transactions to ensure that your credit, debit or charge card is not being used without your consent, we will validate name, address and other personal information supplied by you during the order process against appropriate third party databases. By accepting these terms and conditions you consent to such checks being made. All information provided by you will be treated securely and strictly in accordance with the Data Protection Act 2018 and other Data Protection laws applicable at the time.

Who is our Data Controller?
KidX are the data controller that looks after your data.

Do we share your information?
We will not share any of your data without your consent. Please see below exceptions to this rule:

• We will, from time to time use external auditors or services to try and continuously improve our systems and the integrity of your data.
• In relation to our online service we provide your contact details to third party groups that will contact you in relation to the quality of the service we provide.
• To work alongside Law enforcement for their investigations.
• We will share your data with relevant parties such as Royal Mail in order to fulfil our obligations with you to complete any purchases.
• We may, at times, share your data within the CeX company group.
• If you have consented to be contacted by Designer Exchange in relation to current or future marketing promotions, your contact details will be passed to our third party marketing partners (Klaviyo) for them to facilitate these communications

Cookies
As is standard practice on many corporate websites, the KidX website uses "cookies" and other technologies to collect information. The cookies policy can be found here

Device Permissions for Personal Data Access.
This Application requests certain permissions from users that allow it to access the user's device data as described below.

By default, these permissions must be granted by the user before the respective information can be accessed. Once the permission has been given, it can be revoked by the User at any time. In order to revoke these permissions, Users may refer to the device settings or contact the owner for support at the contact details provided in the present document.

The exact procedure for controlling app permissions may be dependent on the user's device and software.

Please note that the revoking of such permissions might impact the proper functioning of this Application.

If user grants any of the permissions listed below, these respective Personal Data may be processed (i.e accessed to, modified or removed) by this application.

Approximate location permission (non-continuous)

Used for accessing the User's approximate device location. This Application may collect, use, and share User location Data in order to provide location-based services. The geographic location of the User is determined in a manner that isn't continuous. This means that it is impossible for this Application to derive the approximate position of the User on a continuous basis.

• - Camera permission
• - Used for scanning the product barcode
• - Microphone permission
• - Used for in app voice search
• - Precise location permission (non-continuous)

Used for accessing the User's precise device location. This Application may collect, use, and share User location Data in order to provide location-based services. The geographic location of the User is determined in a manner that isn't continuous. This means that it is impossible for this Application to derive the exact position of the User on a continuous basis.

Third Party
KidX do not broker or pass or sell any information of their customers to any external agency.

However, KidX may from time to time include links to third-party websites, plug-ins and applications. Please be advised that we do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the sites privacy policy.

Marketing
When you sign up to our online memberships we give you the opportunity to opt into our SMS/Email communication to keep you up to date with news and competitions. Of course, you have the option at any time to change these preferences by going online into your account and we will honour your choices.

If you have a store account then please pop in to your local branch and we can make the necessary changes to reflect your preference.

What rights do you have?
Subject Access Request
You have the right to request Access to your data (Subject Access Request), free of charge in the first instance but a fee may be requested for continual requests of this service. You can complete a request to exercise this right by contacting us at privacy@webuy.com with as much information as possible (See below) to assist us in making the link to your account.

• Your Full name
• Which membership you wish to review: CeX, Designer Exchange, or KidX
• Membership numbers of the account.
• Email address
• Home Address

You can of course alternatively send your request via the address below if you choose to do so.

Please note:

• This information will be used to assist us making an accurate match to your account(s). We may attempt to contact you to retrieve more information to start our investigation.
• If we choose not to action your request you will be contacted with an explanation for our reasons.
• Your information will be provided in a file format that should be compatible for all devices. Alternatively if you wish to receive your information via hard copy (Post) then please state in the email request.
• Please allow 30 days from when we have received complete information to start an investigation for us to send your results.
• If you are under the age of 16 then you may include your guardian as the approver to request your data.

Your Right to Erasure (Right to be Forgotten)
We obviously don't want to lose you as a member at KidX. But in conjunction with GDPR you do have a right to remove yourself from our databases. You can complete a request to exercise this right by contacting us at privacy@webuy.com with as much information as possible (See below) to assist us in making the link to your account.

• Your Full name
• Which membership you wish to erase: CeX, Designer Exchange, or KidX
• Membership numbers of the account.
• Email address
• Home Address

You can of course alternatively send your request via the address listed in the 'Contact information' below, if you choose to do so.

Please note:

• This information will be used to assist us making an accurate match to your account(s). We may attempt to contact you to retrieve more information to start our investigation.
• If we choose not to action your request you will be contacted with an explanation for our reasons.
• Please allow 30 days from when we have received complete information to start an investigation for us to action your request.
• If you are under the age of 16 then you may include your guardian as the approver to remove your information.

Your right to ask us to stop using your personal information or have it corrected
We can also offer a service to cancel accounts if you feel there has been misuse. You can perform this action yourself through your online account or alternatively by contacting us at privacy@webuy.com with your enquiry. We try to keep up with your current circumstances where your personal information changes. If you have an online account with us you can go ahead and do this yourself. For store accounts then please pop into store with proof of the change. We will from time to time ask in stores if your details are up to date when you transact

How long will my information be retained for?
We will only keep hold of your data for as long as it is required by KidX to continue both a relationship with yourself and to fall in line with Legal requirements which include but not limited to Law Enforcement partnerships and 24 month warranties.

International Data Transfer
As an international organisation we use database operators outside of the UK and EU. The same level of protection applies to the way they handle your information as they would do within the UK and EU. If you wish to query this further then please do so by contacting us at privacy@webuy.com.

Contact information
KidX have put into place a Data Protection team to deal with your enquiries on a daily basis. If you have any questions then please get in contact with us either by email privacy@webuy.com or alternatively you can contact us via post:

• Compliance Manager/Data Controller
• CeX Ltd
• 21 Greycaine Road
• Watford
• WD24 7GP
• United Kingdom

We aim to respond to all queries within 30 days of receiving a complete query.

We want to be your first contact option in relation to anything you are unhappy about in relation to your query, but you have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you continue to be dissatisfied with our service. (www.ico.org.uk/concerns)

This policy can be updated from time to time to fall in line with changes that are required. By reading this policy you agree to continue your relationship with KidX. If you wish to withdraw consent then please see the 'What rights do I have' section for your options.