When you purchase a product or service online or in store or create an account with us, we collect personal information about you to let you know about our latest products, services or offers.
We may do this by post, email, text message, online, by using social media or by sending you push notifications through our apps.
We’ll only use your personal information to send you marketing messages if we have a legal right to do so. That could be either with your explicit consent or where there is ‘legitimate interest’, like when we have a business or commercial reason to use your information. We’ll always provide you with the opportunity to opt out of marketing when we first collect your contact details and in every subsequent message.
We may ask you to confirm or update your choices, if you purchase any new products or services with us in future. We’ll also ask you to do this if there are changes in the law, regulation, or the structure of our business.
The personal information we have about you is made up of what you tell us, and the data we collect when you use our services, or from third parties we work with, like Experian PLC.
We also gather statistics about email opening and clicks, using industry standard technologies to help us monitor and improve our e-newsletters.
We won’t send unsolicited one-to-one (direct) marketing email and/or SMS communications unless they comply with the rules of General Data Protection Regulations and Privacy Electronic CR and related guidance.
Specifically, our promise to you is that:
- We’ll always ask you to actively opt-in to receiving direct marketing messages. That is unless we’re contacting you about our own similar products during the course of a sale, and we offered you the opportunity opt-out when you gave us your details.
- Our store and contact centre colleagues will always inform you about any further use of your contact details for direct marketing when you make a purchase.
- We’ll offer you a choice of how you would like to receive marketing from us, including email or text.
- We’ll make sure that the products or services we are marketing are the same or similar to the ones you originally consented to receive marketing for.
- We’ll ask for your consent to pass details to third parties for marketing. And we’ll name those individual companies when we request your consent.
- We’ll record when and how we obtained your marketing consent, and exactly what it covers.
- We’ll make sure the language we use when you consent is ‘clear and easy to understand, and that it’s clearly distinguishable from any other matters, including other Terms & Conditions.
- We won’t use confusing language in our marketing statements, including the use of double negatives, technical or legal jargon and confusing terminology or inconsistent language.
- For telephone and postal marketing communications, we’ll screen your name and contact details against the Telephone & Mail Preference Service.
- We’ll always offer you the option to opt out of direct marketing at the point when we capture your contact details and in every subsequent communication, by either replying to the communication or by clicking the unsubscribe link).
- We’ll make sure we promptly opt you out of all of our marketing activities on your request. We’ll make sure there is always a simple, easy-to-access and a free of charge way for you to withdraw your consent.
- We’ll operate and maintain an in-house suppression file – listing the names and contact details of customers who have told us they don’t want to receive commercial communications through all or particular means of communication.
- We’ll rely on the legitimate interests of the business (as an alternative to explicit consent) when we undertake postal marketing, when we conduct live outbound phone sales or when we’re contacting our business customers. We’ll include information in our telephone scripts and in all postal marketing on how to opt out of receiving such marketing.
- We’ll screen data to remove files of deceased people so that they are not used for marketing.
- We will not send you any direct marketing if you haven’t been in touch with us or purchased from us in the past three years.
- We have procedures for dealing with inaccuracies and complaints.
- We’ll cooperate fully with any investigation by the Information Commissioners Office (ICO) in relation to our direct marketing activities.
Bought in lists
We’ll only use bought-in lists for texts, emails or recorded calls where we have proof of opt-in consent which specifically names us.
- We’ll only use the information on the lists for marketing purposes.
- We’ll delete any irrelevant or excessive personal information.
- We’ll screen the names on bought-in lists against our own list of customers who say they don’t want our calls.
- We’ll carry out small sampling exercises to assess the reliability of the data on the lists.
- When marketing by post, email or fax, we’ll include our company name, address and telephone number in the content.
- We’ll always tell customers where we obtained their details.
- We’ll provide you with a privacy notice, where it is practical to do so.
- We’ll undertake adequate due diligence when we first select data suppliers and in our ongoing work with them in order to make sure it has received and used personal data fairly.
- We’ll make sure that adequate contractual terms are in place requiring data suppliers to make sure personal data was obtained and provided fairly and in accordance with the requirements of GDPR.
- We’ll take all necessary steps to satisfy ourselves that the data has been properly sourced, permissioned and cleaned. We’ll make sure that sufficient due diligence is undertaken and contractual arrangements are in place with suppliers of personal data.