Privacy Policy

We are C. & J. Clark International Limited and a collection of global subsidiaries and affiliate companies, including various entities across certain EU territories, that collectively are referred to as Clarks. C. & J. Clark International Limited are the “data controller” of your personal information that is collected when you interact with our website. C. & J. Clark International Limited is registered in England and Wales (company number 00141015) with a registered office at 40 High Street, Street, Somerset, BA16 0EQ. We are registered with the Information Commissioners Office in the UK with reference number Z5755995.

In this privacy policy (“Policy”), when we mention “Clarks”, “we”, “us” or “our”, we are referring to all of Clarks’ global subsidiaries and affiliate companies. The term “personal data” as used herein is the same as “personal information” as defined in various applicable data privacy laws.

Our commitment is to provide you with exceptional products and services “For the World Ahead”. We value and respect your privacy and strive to comply with all applicable data privacy laws and regulations in the various regions in which we do business globally. This Policy provides you information about what and how we collect your personal data, plus how we use, share, and/or otherwise process your personal data in accordance with applicable law. Like the Clarks business, this Policy is global in scope and intends to meet the requirements of all applicable data privacy laws to which Clarks is subject. As of the date of this Policy, this Policy specifically serves as notice to residents of the UK and Europe.

This Policy applies to (i) your in-store interactions with Clarks at our retail and outlet store locations owned or controlled by Clarks (excluding locations operated by third party licensed or franchise partners) (each a “Store”), and (ii) your online interactions with Clarks websites that are owned or controlled by Clarks. The Clarks family of websites covered by this Policy includes:

Depending on the purpose for which we process your data from time to time, as explained in the following chart, we rely on specific legal bases such as consent, contract, and legitimate interest in certain cases. The types of personal data we process will generally include, depending on each case, the following:

• Your identity data (e.g., your name, surname, preferred language, and contact details).
• Transaction information (e.g., details provided in purchases, bookings, orders, returns, etc.).
• Connection and browsing data.

When we request your personal data to grant you access to a particular functionality or service of the Platform, certain fields may be marked as compulsory. This information is necessary for us to provide the service or grant access to the functionality in question. Please note that if you choose not to provide such data, you may be unable to enjoy those services or functionalities.

• Details To respond to requests or inquiries made through Corporate Contacts and Customer Contacts channels.

We will only process the personal data that are strictly necessary to manage or resolve your request or application.

• Usability and quality analysis to enhance our services.

If you access our Platform, please be aware that we will process your browsing data for analytical and statistical purposes. This helps us understand how users interact with our Platform and allows us to make improvements based on user suggestions.

In order to register an account with Clarks you must be over 16 years of age to provide us with your Personal Data (to write to us for information and/or subscribe to our newsletter and/or consent to the transmission of commercial communications and/or allow us to use your personal data for marketing purposes).

If we become aware that a minor under the age of 16 (or a minor of a different age established by the law of the country or state of residence of the Data Subject) has provided his or her personal data through the Site without the verifiable consent of a parent or legal guardian, we will deactivate the minor's account and take all reasonable measures to delete his or her personal data.

If a user believes that we are in possession of personal data of a person under the age of 16, he or she may report this to us by writing to [email protected].

Clarks will retain personal data for the time strictly necessary to provide users with the requested services or to fulfil legal or tax obligations for the minimum period prescribed by law.

In order to establish the retention period for personal data collected and stored through the Website with the User's consent, Clarks will consider multiple factors to ensure that personal data is not stored for a period longer than is strictly necessary for the purposes for which it was collected or for compliance with legal obligations. These criteria also include:

• the purpose for which the Website retains personal data;
• legal, tax, and regulatory obligations;
• the type of ongoing relationship with the Data Subject user or customer (how often the user accesses their personal account on the Website, whether the user maintains active consent to receive commercial communications, how often they browse and/or make purchases on the Website, etc.);
• any specific requests from the Data Subject regarding the erasure of personal data.

Therefore, Clarks shall retain:

• personal data collected and processed in relation to the Data Subject's personal account for a maximum period of 2 years from the date of the last interaction between the Data Subject and the Website or other contact (email, customer service) with Clarks;
• the detailed data of each online purchase is stored for a period of up to 10 years from its last registration.

Clarks undertakes to implement procedures that ensure the timely and secure erasure or anonymization of your personal data from the moment it is no longer necessary or the grounds for its lawful retention cease to exist.

Exclusively within the scope of the processing activities carried out for one or more of the purposes described above, Clarks may share or transmit some of your personal data to the following categories of Third Parties:

• Clarks Group’s companies when they assist us in providing products to the user;
• Entities that assist us in fulfilling your order (e.g., payment service providers, warehouse operators, and delivery companies);
• Marketing service providers and advertising partners;
• Customer service providers to offer assistance before, during, and after your purchase;
• IT support service providers, including companies that perform data analysis and/or send communications to our customers and/or develop our website and app;
• Professional consultants (legal, accounting, etc.);
• Credit reference agencies, law enforcement agencies, and fraud prevention agencies, to help combat fraud and other illegal activities;
• Professionals or companies that manage websites and/or social media pages;
• Third-party hosting providers for event companies and companies that assist in administering competitions and promotions.

Please be informed that if any part of our business is outsourced, sold, or merged, where permitted by law, we will share your personal data with the new entity so that we can continue to sell and provide support for our products. The new entity may use your personal data in the same manner as described in this Privacy Policy. We will, of course, inform you of such changes and provide you with the opportunity to opt out of sharing your personal data with the new entity.

We will never provide your personal data to third parties who do not perform necessary services on our behalf or to whom we are not permitted or required by law to provide data.

Name, address, phone number, email, masked credit card information, gender, birth date, purchase history, cookies, including your device detail and IP and MAC address.

We are committed to protecting your personal data to the highest global standards. In order to process your personal data for the purposes set out in this Privacy Policy, we may transfer your personal data to third parties and other companies in Clarks Group located outside the EEA or the UK. Occasionally, we may manage/process your personal data and provide you with additional services/support from countries other than the one in which you reside. We may transfer your personal data to other countries that have an adequacy status with the UK and/or within a country of the European Union or the European Economic Area (“EU/EEA”).

In the event that there is a business need to transfer your personal data to a country that does not have an adequacy status with the UK or the European Union, we will ensure that appropriate transfer mechanisms are implemented as required by the UK GDPR and/or the EU GDPR.

Our Sites may contain links to other third-party websites or resources, which are not controlled by Clarks. Clarks is not responsible for any non-affiliated websites, whether linked or otherwise. Such websites may have their own privacy policies and terms and conditions which will govern your access and use of their site.

Data Subjects have specific rights regarding the protection and correct processing of their personal data, as detailed in the legislation of the country in which they reside. For residents of at least the UK and EU/EEA, your rights are as follows:

• Right to Access: You can request information about the personal data we hold on you at any time.
• Right to Portability: If we process your personal data through automated means based on your consent or an agreement, you have the right to receive a copy of your data in a commonly used format.
• Right to Rectification: You can request correction of your personal data if it is inaccurate or incomplete.
• Right to Erasure: You have the right to request the erasure of your personal data under certain conditions. However, please note that this right is not absolute and does not apply if we have an ongoing matter with Customer Service, if you have an open order or unsettled balance, or if we are legally required to retain your data for bookkeeping related to a transaction. (Also known as “Right to be Forgotten” or “Delete My Data”).If you choose to exercise this right, please be aware that all account information and associated orders will be permanently lost. Before proceeding, you must confirm that there are no outstanding purchases or orders pending.
• Right to Restriction: You can request the restriction of processing of your personal data under specific circumstances, such as when you contest the accuracy of your data, the processing is unlawful, or the data is no longer needed by us but required by you for legal claims.
• Right to Withdraw Consent: You have the right to withdraw your consent for processing of your personal data at any time. This does not affect processing that has already occurred based on your prior consent. If you receive marketing communications from us on social media or web browsers, you should manage this directly with your platform provider.
• Right to Object to Processing: You have the right to object to processing of your personal data that is based on our legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.

You can exercise one of your rights by writing to the following email address [email protected] or clicking here:(https://onetrust.com/)

We will process all data subject’s requests within 30 days of receipt.

Exercise Your Rights
Powered by OneTrust

Please note that where you subsequently object to our processing, or otherwise request that your data is erased, we will be required to retain some of your personal data until we have delivered your ordered goods or performed your requested services, unless you inform us you wish to cancel your order. When exercising any of the rights listed above, we will ask you to verify your identity before proceeding to ensure that your personal data is adequately protected from unauthorised use. Likewise, if you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.

If we need more time to handle your request, we will inform you in writing of the reason why an extension of the deadline is necessary. Our response will be reasoned (e.g., when the requirements for fulfilling the erasure request are not met). Processing and responding to the Data Subject is free of charge, but the Clarks reserves the right to charge administrative costs for repeated and/or clearly frivolous and unfounded requests. If we believe that the request justifies charging a fee, we will provide you with a cost estimate for the costs (copying rights) in advance before completing the processing of your request.

Clarks shall only process and respond to verified requests from the user, that is, requests made only:

• Directly by the Data Subject,
• By one of the parents or by a person exercising parental or legal authority over a minor Data Subject, or by another natural person who can demonstrate that they are authorized to act on behalf of the Data Subject

Obligation to notify third parties about the acceptance of the exercised Data Subject’s right

Clarks, once it has accepted and fulfilled a request to exercise one of the Data Subject's rights, undertakes to comply with the obligation to notify the recipients to whom the personal data have been transmitted before about any rectifications or erasures or restrictions of processing carried out, unless this proves impossible or involves a disproportionate effort.

We recognize the importance of your personal data. If you have any comments, questions, or requests regarding this Privacy Policy or our handling of your personal data, you can use this link: (https://onetrust.com/) to exercise all your privacy and data protection rights or click here

Exercise Your Rights
Powered by OneTrust

If you prefer to send us direct requests by mail, you can send a registered post to the following addresses:

Privacy Team, C. & J. Clark International Limited, 40 High Street, Street, Somerset, BA16 0EQ

Or send an e-mail to: [email protected]

If the issue pertains to another matter, please do not hesitate to contact our customer service team who will be happy to assist you.

If you have concerns about how Clarks processes and safeguards your personal data and privacy, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK, or with any other relevant supervisory authority in your country of residence.

• The Supervisory Authority in the United Kingdom is the Information Commissioners Office (ICO), which can be contacted athttps://ico.org.uk https://ico.org.uk
• The Supervisory Authority in Italy is the Italian Data Protection Authority (Garante per la protezione dei dati personali), which can be contacted at https://www.garanteprivacy.it/.
• The Supervisory Authority in France is the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés - CNIL), which can be contacted at https://www.cnil.fr/en.
• The Supervisory Authority in Germany is the German Data Protection Authority (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit - BfDI), which can be contacted at https://www.bfdi.bund.de/.
• The Supervisory Authority in the Netherlands is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens - AP), which can be contacted at https://www.autoriteitpersoonsgegevens.nl/en.
• The Supervisory Authority in Spain is the Spanish Data Protection Authority (Agencia Española de Protección de Datos - AEPD), which can be contacted at https://www.aepd.es/.

We take the security of your personal data very seriously and have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised manner, altered or disclosed. Furthermore, we limit access to your personal data to those persons and third parties (employees, collaborators, professional consultants or suppliers) who have a need to know. They will process your personal data on the basis of our instructions and have undertaken to operate in the strictest confidence.

We do not allow third-party processors to use your personal data for their own personal purposes or for purposes other than those for which we have authorised them to process it on our behalf in accordance with our instructions.

We have also adopted procedures for managing any suspected data breaches and will notify the user and any competent supervisory authority of any data breaches where there is a legal obligation to do so.