1. Who We are
2. Personal Information Processed about You
3. When We collect your information
4. Our purposes and lawful basis for the processing of your information
5. How your personal information is shared
6. How long We store your personal information
7. Automated decision-making and profiling
8. Where Your Personal Information is Processed
9. Your data protection rights and choice
10. Information Security
11. Important information
12. Contact Us
1. Who We are
The data controller of the personal information collected and processed when you visit the website www.ismash.com (hereinafter the ‘Service’) is iSmash (UK) Trading Limited (hereinafter “iSmash”, “We”, “Us” or “Our”) with offices at Holborn Gate, 330 High Holborn, WC1V 7PP, London, England.
When you use this Service, your personal information is processed as set forth below. Personal information means information relating to an identified or identifiable individual.
This privacy notice (hereinafter “Notice”) applies only with respect to personal information collected when you use the Service and does not reflect the data handling practices of other services, websites, or applications.
2. Personal Information Processed about You
The following information is collected and processed about you when you use the Service:
- Identity: name, first name and title
- Contact details: postal address, telephone number, email address
- Financial information (for example for the booking repair and service you purchase on the website): bank account, payment card details, payment information
- Information about your device: make, model, serial number, IMEI, Unique Device Identifier, mobile network and passcode. Device passcode is collected for functionality testing before and after repairs. Passcodes are used solely for testing and deleted post-repair
- Technical information: Internet Protocol (IP) address, browser type and version, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website
- Statistical data: information about your interests, preferences. We collect aggregated data about your usage of the website
- Records of any correspondence related to specific matters, and
- Feedback provided by you about the Service including order made by you, interests and preferences
You may choose whether or not to share this information with us. If you choose not to provide it and it is a required by law or as part of the Service, you may be unable to access or utilise certain aspect of the Service.
3. When We collect your information
When you book a repair
We collect personal information from you when you book a device repair through the Service. We ask you to provide information about yourself and your device (such as manufacturer, model, purchase date, and IMEI number).
When you Make a Purchase
We collect personal information from you when you make a purchase on the Service for example when you buy a refurbished device. To make a purchase through the Service, We ask individuals to provide Us with their full name, contact details (this includes shipping address, telephone number, email address), banking information (for example – bank name, sort code, account number), and communication preferences.
When you communicate with Us or contact Us for Customer Support
When you contact Our customer support team through the Contact Us Form, We will collect information that you provide to Us in your communications (such as the query or issue that you have raised and information relating to your device). We will collect information relating to your existing claim (such as claim number) if you are communicating with Us about a claim. We will also collect your responses to surveys about Our products and services and the Service, if you choose to participate.
When you access the Service
We collect information about devices used to access Our Service and functionalities of the Service. This includes IP address, operating system and version, browser used and version, language preferences, time zone, screen settings and site visited before arriving on Our Website. Additionally, We use cookies and similar technologies such as web beacons to collect information about how you use and navigate Our Service (for example, the pages that you view and links that you clicked). We use cookies to help Us recognize you, improve your experience, increase security, and measure use and effectiveness of Our services. Cookies that are not strictly necessary will be collected with your consent. For more information about the cookies We utilize on the Service, please view Our Cookie Notice.
4. Our purposes and lawful basis for the processing of your information
The personal information is processed for the purposes and legal bases set forth below
The performance of the contract to provide you with the services and/or product you have purchased, this includes the following data processing operations:
- Book an appointment in of Our stores
- Purchase a device
- receive a payment from you, and
- communicate with you.
Where necessary to pursue the Controller’s legitimate interests, in particular for the following purposes of processing:
- Answer your questions and address Service-related and/or product issues you may have.
- For purposes of statistical analysis, customer surveys for internal administrative functions, customer relationship management and evaluation of the quality of the Service.
- Monitor and improve products and customer experience and manage internal procedures in accordance with industry standards.
- Risk evaluation and management (including operational risk), debt recovery, fraud and payment default prevention.
- To improve the safety, security, and performance of the Service.
Compliance with a legal obligation for the following purposes of processing:
- Prevention of fraud; and
- Prevention of money laundering and terrorist financing and implementation of sanctions checks.
5. How your personal information is shared
Your personal information is disclosed on a need-to-know basis to the following parties:
- Our group of companies: We share your personal information with Our parent company, Assurant Inc. and affiliates where necessary to respond to your question or enquiry.
- Third party suppliers and partners: We share your personal information to third-party providers and business partners to perform the Service, this includes, insurer, telecommunications service provider, couriers, customer support, customer communications, audit, application or database hosting, device warehouse, repair centers and refurbished centers.
- Public Authorities: if required by law or for the legal protection of Our legitimate interests in compliance with applicable law, your personal information may be disclosed to public authorities.
- Fraud prevention services and databases: if you provide false or inaccurate information to Us, and the possibility of fraud is suspected, your information will be verified.
- Other Categories of Recipients: We may also disclose your personal information, usage information, and other information about you to parties acquiring part or all of our assets, as well as to solicitors and consultants. Also, if any bankruptcy or reorganisation proceeding is brought by or against Us, your personal information may be considered a company asset that may be sold or transferred to third parties.
6. How long We store your personal information
Your personal information will be retained for the period strictly necessary for the full performance of the Service. This means that your personal information will not be retained for more than 6 years after the end of your purchase or repair, to respond to requests, claims for compensation or requests for information. However, your information may be retained for a longer period if this is necessary to comply with applicable law or to protect and exercise Our rights.
Our customer support may retain information for as long as is necessary to provide support-related reporting and trend analysis only, but We generally delete or de-personalise transaction-related data consistent with this Notice.
7. Automated decision-making and profiling
In general, we make no use of automated decision-making or profiling. Where necessary, we will inform you separately about such measures in individual case and you will have the right to have someone to review the decision and obtain an explanation of the decision.
8. Where Your Personal Information is Processed
Your personal information may be transferred to, and processed in, countries where data protection and privacy regulations do not offer the same level of protection as the UK and other parts of the world. Where personal information is transferred outside the UK to a country that is not subject to adequacy decisions, including to the US, it is adequately protected by approved standard contractual clauses, or other approved transfer mechanisms.
To obtain a copy of the relevant transfer mechanism or additional information on such transfers, please address these requests to Us as detailed below.
9. Your data protection rights and choice
You have the following rights regarding your personal information:
- Right to access the personal information We hold about you (Access)
- Right to have your personal information corrected (Rectification)
- Right to have your personal information deleted (Erasure)
- Right to request the restriction of the processing of your personal information (Restriction)
- Right to request the portability of your personal information (Data Portability)
- Right to object the use of your personal information when we base the processing on a contract or on Our legitimate interests (Objection)
- Right to withdraw your consent when we base the processing on your consent (Consent)
If you wish to submit your privacy right request, please click on the following link: www.assurant.com/dataprotection/eu
If you have unresolved privacy concerns, and you are located in the UK, you have the right to complain to the Information Commissioner’s Office.
10. Information Security
iSmash implements the appropriate technical and organisational measures to guarantee a level of security appropriate to the risk, taking into account the state of knowledge, the costs of implementation and the nature, scope and context of the purposes of the processing as well as the risks to the rights and freedoms of natural persons. In particular, safeguards have been implemented to protect your personal information in accordance with industry standards. Dedicated measures are also in place to restrict access to personal information to those individuals who have a valid business purpose to have access to such information.
11. Important information
Minimum age
You must be at least 18 years old to use the Service. Consequently, personal Information about children under the age of 18 are not collected for the Service.
Changes to the Notice
This Notice may be updated from time to time. If material changes to this privacy notice are made, then you will be notified by email or by means of a notice through the Service. Please review changes to this Notice carefully.
12. Contact Us
For general inquiries about the Service, please contact Us by email: customerservice@ismash.com,
by mail at:
iSmash Customer Service
Holborn Gate,
330 High Holborn,
WC1V 7PP,
London,
England
If you have queries or questions about this Notice, please contact us:
- By email: dataprotectionofficer@assurant.com
- By post: iSmash, Holborn Gate, 330 High Holborn, WC1V 7PP, London, England
Effective Date: 9/5/2025