This privacy policy sets out how Bmita Ltd (Govella Trade mark) uses and protects any information that you give Bmita Ltd when you use this website.

Bmita is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

Bmita may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 1 January 2024 and has been updated on 01/01/2025.

​

Data protection principles

​

Bmita Ltd (Govella Trade mark) is committed to processing data by its responsibilities under the GDPR. 

Govella prioritises customer privacy and acknowledges the importance of protecting the information collected about them. Govella implements measures to ensure that personal data is processed securely and remains trustworthy.

The Privacy Policy explains how Govella collects, stores, uses, and discloses the data and information when accessing Govella’s website and making purchases. Additionally, Govella utilises information from customers and interactions with third parties to ensure a high level of quality in its products and services.

​

1. Who controls customers' data?

Govella is the data controller, which means it decides how the data is processed and for what purposes. As the data controller, it has legal responsibility for handling the information. If customers have any questions about how the data is processed or if customers want to exercise its rights, please contact Govella.

​

2. How Govella Process Data

Our practices are guided by strict ethical standards and legal requirements, and we are dedicated to protecting the privacy of all customers and website guests. For this reason, how we collect and store information, including personal data, depends on how our website and related services are used. We do not collect sensitive personal data about our customers. 

Below, you’ll find an overview of the different ways Govella may process the data.

​

Data Collection Through Your Interactions with Us

To enhance, secure, and improve your experience on our website, email, and advertising services, we use various technologies that may automatically collect personal data, either directly by us or by third parties acting on our behalf. At the moment, no third parties are in partnership with Govella.

These technologies, such as cookies and server communications, allow us to gather data in a streamlined way. While providing personal data for these purposes is not a contractual requirement, opting out of these technologies may limit some features on the Govella website, potentially affecting your browsing experience.

When customers visit the website, the data may be processed for marketing and personalization purposes through web analytics, which could include A/B testing, analysis of product browsing, traffic sources, internal searches, device usage, and retargeting via cookies and similar tracking tools. 

​

Use of Retargeting Technologies

We utilise retargeting technologies to display personalised ads to visitors who have previously shown interest in our products or brand through interactions on our website. These technologies analyse prior activity on our site to create a unique advertising profile, enabling us to deliver tailored ads across the internet. Our advertising partners may also display ads on our behalf across other websites. These partners may collect data about your visits not only to our site but also to other websites affiliated with the same advertising networks. At the moment, no third parties are in partnership with Govella

Social Media Partners

Our website may connect with various social networks that you use. For instance, customers can choose “social media login” as an authentication method for your Govella account. By using this login method, customers agree that we may receive the account details from the social network provider, enabling access to Govella accounts. If customers prefer not to share this data, they can create an account directly with its personal email, in which case no data from the social network will be shared with us.

We may also work with social networks to collect data about you to evaluate ad and campaign effectiveness, build targeted advertising audiences, improve ad reach, and deliver personalised content. Data collection occurs through pixel or similar technology and may include details such as your web browser type, online identifiers like IP address, and your interactions on our website (e.g., making a purchase, browsing products, or signing up for newsletters or SMS updates). Please refer to the list below to understand how each social network partner processes personal data.

​

Behavioural Web Data

When customers browse our website, their browser sends data to our server. If customers have enabled cookies and web analytics, this data helps us to enhance our services and improve the experience on our site and applications. This data is automatically gathered through third parties working on our behalf.

Behavioural web data may include details on customers' browsing behaviour, such as how each navigates our website, the date and time of the visit, and the referring site. It may also capture system preferences and device information, like each customer's browser type and IP address.

If cookies are not enabled, we will only collect the IP address and information on the browser customers are using.

​

Geolocation Data

When using this service, the map provider may access information about customers' location, such as GPS signals from a mobile device or other location-based data. This can manage location-sharing preferences in the device or browser settings.

Additionally, we may use an approximation of customers' location to understand geographic segments within our customer base. This occurs when opening an email from Govella, at which point the customer's IP address is matched with general latitude and longitude data. Note that this does not involve GPS tracking or ongoing location monitoring.

​

My Govella

To simplify the creation of My Govella account and eliminate the need to re-enter your information, we can use the data customers provided during a guest online order. This allows each customer to set the password after the order process.

If customers choose not to create a password at that time, customers purchase information will be stored for 30 days. 

​

Direct Marketing

With customers' consent, we may reach out directly using the contact information provided (such as through mail, email, text messages, phone calls, QR codes, or other electronic means) for marketing and advertising purposes. This includes sending newsletters, SMS, personalised offers, and conducting market analysis.

Receiving marketing communications from Govella is optional and not a requirement for our services. If customers prefer not to receive these messages, they will not get newsletter emails or SMS alerts, although will still receive service-related emails regarding My Govella account.

Our processing of the data for direct marketing is based on customers consent as per GDPR Article 6 (1)(a). Customers can withdraw the consent at any time, but this will not affect the legality of any processing conducted before the withdrawal.

The personal data we process for direct marketing may include but is not limited to, customers contact details, general interactions with Govella (such as shopping behaviour and interests online, date of birth, loyalty program participation, product reviews, responses to electronic marketing, online behaviour, subscription to marketing materials, and engagement in campaigns or events). 

For more information about customers rights, including how to withdraw the consent or update the personal information, please see “Your rights” in the section below.

Order Processing and Customer Support

When customers place an order on our website, we may collect and use the personal information to facilitate your order. This includes notifying customers about order status or delivery, addressing any inquiries regarding our products, completing the order, processing card payments, and providing customer service support.

Providing the contact details is essential for us to deliver the services customers are requestiong. Without this information, completing a purchase on the Govella website is not feasible.

​

The processing of the data is vital for fulfilling our contractual obligations to customers or addressing each queries before agreeing, per GDPR Article 6 (1)(b). Additionally, it aligns with Govella’s legitimate interests in delivering customer service and following up on inquiries, as outlined in GDPR Article 6 (1)(f).

The types of personal data that Govella may process in connection with customers order and customer service include:

• First and last name(s)

• Billing address(es)

• Zip code

• Phone number

• Email address

• Credit and debit card details

• Correspondence related to customer service inquiries, questions, and complaints

​
 

Data sharing? 

Govella engages service providers to process customers' data on our behalf. This third-party service may include authentication, hosting and maintenance, data analysis, mail messaging, delivery, payment processing, pay-later options, and address verification. These providers act as data processors and are permitted to handle personal data only to the extent required to fulfil their services. They are contractually obligated to maintain strict confidentiality of this information.

​

Some of our data processors are located outside the EU/EEA, which means we may transfer customers' data to countries outside these regions. If the data is transferred to a third party outside the EU/EEA, we ensure that it is protected in one of the following ways:

• The destination country is recognized as a secure third country, having received an adequacy decision from the European Commission. 

• The third party has agreed to the European Commission’s Standard Contractual Clauses (SCCs) for international data transfers and has implemented the necessary technical and organisational safeguards.

• The third-party holds certification under GDPR Article 40; or

• The third-party follows an approved set of Binding Corporate Rules.

​

We may share customers' data if required to fulfil legal obligations, comply with court orders or directives from legal authorities, enforce our privacy notice and other agreements, or safeguard the rights, property, or safety of Govella, its employees, customers, or others. This may also involve exchanging information with other businesses and organisations for fraud prevention and credit risk reduction.

If we participate in alternative dispute resolution via the online dispute resolution platform, we may disclose customers' data to the European Commission as the platform operator and to any designated dispute resolution provider handling the case.

Please be aware that any information customers publish or share during interactions with Govella—such as personal data included in images, comments, stories, and videos you submit—will become public and may be accessible to site visitors and the public.

​

Your rights

You can easily view and modify your personal information by logging into your account and selecting “My Account” to manage your details.

If customers need to update any information, such as an email or other contact details, or if they wish to delete an account, please visit the “My Profile” or “My Account” pages to make these changes directly or by contacting Govella.

In cases where we have concerns about verifying customers' identity, we may request that each customer provide identification. Please see below some of the customer's rights: 

The Right to Access Your Data

Customers have the right to access certain personal data provided to Govella. To request details on what data we hold and how we process it, including the purposes of processing, please contact the Govella team.

Additionally, customers can view their details by logging into your Govella account. Simply navigate to “My Account” to access your information.

The Right to Modify and/or Delete Your Data

Customers have the right to request the correction, addition, deletion, or restriction of their stored personal data. If customers wish to exercise this right, please contact us. In the event that we are unable to fulfil any request for any reason, we will reach out to customers to explain the situation.

The Right to Limit the Processing of Your Data

In specific situations, customers have the right to request a restriction on the processing of your data. If customers wish to exercise this right, please contact us.

Right to Object to the Processing of Your Data and Unsubscribe

Customers have the right to request that we stop processing the data when it is based on a legitimate interest pursued by Govella, especially for marketing purposes. Customers can exercise this right at any time by contacting us.

Our emails and SMS messages containing newsletters or marketing content include an option to unsubscribe. To withdraw your consent, simply click the unsubscribe link in the email or follow the instructions in the SMS, and we will stop sending marketing communications.

For essential communications, like maintenance notifications or administrative messages, opting out requires deleting the account. To do so, log in, go to “My Account,” and select “Delete Account.” If unable to log in, please contact the Govella team for assistance.

Right to Withdraw Your Consent at Any Time

Customers have the right to withdraw their consent for us to process the data whenever processing is based on customers' consent. Withdrawing consent does not affect the legality of any processing completed before the withdrawal. To withdraw consent, please contact us. 

Changes

Govella regularly reviews our privacy notice to keep it current and compliant with privacy and data protection standards. This notice may be updated periodically to reflect changes in technology and applicable laws. Any updates will be posted on this page, and, where applicable, we may notify each customer via email.

Formal Complaints- Data Protection

For further complaints regarding data protection information, customers are eligible to contact and register a formal complaint with the English Data Protection Authority. 

Last update: 01/01/2025

​

​