Collection and use of your personal data

“Personal Data” means any information (including sensitive personal data) relating to an identifiable individual or household as set out under applicable laws. The personal data we collect about you depends on your interactions with us. We outline below the categories of personal data we process, the sources of that personal data and our purposes in processing the data. We also identify the relevant ‘legal basis’ for our processing. We might process your personal data on more than one legal basis, depending on the specific purpose of the processing.

Personal data you provide to us directly

Category of personal data

Our purposes for processing

Lawful basis

Identity Data includes information such as: name, date of birth, address, email address and telephone number, photo, video or audio data.

We might receive this data when you:

purchase one of our products or use our services;

enter competitions; or

interact with us including by phone, post, email or social media.

We might process this personal data when providing our products and services to you, and administering our relationship with you including:

registering you as a customer, including setting you up as a customer on our website or infrastructure;

processing and delivering your orders or transactions, including managing payments, fees and charges and transferring and receiving products;

registering your ownership of our products or your entrance in a competition and to process your purchases;

providing customer support services to you. We might record and monitor any communications between you and us, including phone calls, to maintain appropriate records, check your instructions, analyse, assess and improve our services, and for training and quality control purposes.

Performance of a contract with you

Legal obligations

Legitimate interest (ensuring our efficiency in providing our services to you, processing payments and refunds and meeting our legal obligations).

Financial Data includes information such as bank account and payment card details.

We might receive this information when:

You purchase a product;

You use our infrastructure; or

we need to process a refund.

We process this data so that you can:

purchase a product or service that you have ordered;

receive any prize awarded;

receive products or services.

Performance of a contract with you;

Legal obligations.

When you purchase one of our products, subscribe to our publications or social media channels or enter a competition and we collect your personal data, you will be asked to indicate your preferences for receiving direct marketing communications from us via email, push notifications, SMS or post. We call this Marketing Data.

Note: you can ask us to stop sending you marketing information by adjusting your marketing choices (the How do you use my personal data for marketing? section below explains how to do this).

We process your personal data:

to make suggestions and recommendations about our products and services;

to help with social interactions through our services and community, or to add extra functions in order to provide a better experience;

to deliver relevant website content and advertisements, inform you of our offers and promotions about charities and products;

to personalise your marketing messages about our products and services so they’re more relevant and interesting to you (where allowed by law). This may include analysing how you use our website, products, services and your transactions with us;

notify you about changes to our terms and conditions, our products or services, or this Notice;

update you about your account;

verify your identity if you contact our customer support or social media teams;

ask you to leave a review, take a survey, or provide feedback;

if you agree, provide you with information about collaborations with our partners or our partners’ promotions or offers which we think you might be interested in;

if you agree, allow our partners and other organisations to provide you with information about their products or services;

measure or understand the effectiveness of our marketing and advertising, and provide relevant advertising to you;

ask your opinion about our website, products or services.

Legitimate interests (to send direct marketing, ensure our direct marketing is relevant to your interests, develop our products and services, and to be efficient about how we meet our legal and contractual duties).

Consent (where we’re legally required to get your consent to send you direct marketing about our products or services, or partners’ promotions or offers, or for you to receive marketing from other organisations).

Personal data we receive when your devices interact with our Digital Services:

Category of personal data

Our purposes for processing

Lawful basis

Technical Data includes information about your device, how it connects to other devices and networks, and how you connect with the device.

This may include the internet protocol (IP) address used to connect your device to the internet, your login information, the browser type and version, the time zone setting, the operating system and platform, the type of device you use, a unique device identifier (for example, your device's IMEI number, the MAC address of the device's wireless network interface, or the mobile phone number used by the device), mobile network information, your mobile operating system and the type of mobile browser you use.

We might collect this data when your devices interact with our website or platform or infrastructure.

We might also receive Technical Data about you if you visit other websites employing our cookies.

We use cookies, pixels, tracking technologies, analytics systems, and other similar technologies, which provide information about your behaviour and shopping preferences, and distinguish you from other users of our website. This helps us to provide you with a good experience when you

browse our website and also allows us to improve our site.

The information collected includes Identity Data, Marketing Data and Profile Data.

Please see our Cookie Notice for further details which can be accessed here.

We process this data to administer, manage and protect our business, website and infrastructure, including:

troubleshooting;
data analysis;
testing;
research;
statistical and survey purposes;
system maintenance;
support;
reporting;
hosting of data;
making sure that content is presented in the most effective way for you and your device;
helping keep our website and infrastructure safe and secure;
Strictly necessary cookies are required for the operation of our website;
Analytical or performance cookies help us to improve the way our website works;
Functionality cookies recognise you when you return to our website and enables us to personalise our content for you;
Targeting cookies record your visit to our website, the pages you have visited and the links you have followed. We use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose so that they can serve you with relevant advertising on their websites;
Social media cookies enable you to share our content with your friends and networks and may allow us to track you and build up a profile of your interests.

Legitimate interests (provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).
Legal obligation.
Consent (where required by law).
Performance of a contract with you.
Consent.

Our cookies will regularly collect this information in order to stay up to date but only if you have given us permission.

You can change your preferences at the 'Cookie Settings’.

Location Data is information about your location.

Our systems might identify or be able to track your location if location services are enabled on your device or product.

We process this data to determine the location of users of our website to prevent access from locations where we are not licensed to sell our products or services.

We also provide you with location-relevant advertising, products and services.

Legitimate interests (to prevent ineligible parties from purchasing our products or services)
Legal obligation
Performance of a contract with you.
Legitimate interests (to develop and market our products and keep to regulations that apply to us).

Consent (to track you when you have location services switched on.

Usage Data is information on how you have used our website or infrastructure, products and services, including information about your visit, such as the links you’ve clicked on, through and from our website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling and clicks), and methods used to browse away from the page or site or platform.

We process this data to

to create a better website and user experience;
make suggestions and recommendations about our goods and services;
to help with social interactions through our services, or to add extra functions in order to provide a better experience;
deliver relevant website content and advertisements, personalise your marketing messages about our products and services so they’re more relevant and interesting to you (where allowed by law). This may include analysing how you use our products, services and your transactions.

Legitimate interests (to develop our products and services, and to be efficient about how we meet our legal and contractual duties).

Consent (where we’re legally required to get your consent to send you direct marketing about our products or services, or partners’ promotions or offers, or for you to receive marketing from other organisations).

Transaction Data is information such as payments or transfers made or received, accounts interacted with, transaction dates and times, meta data and indexed data, the time taken to make the transfer/payment, currencies, exchange rates, messages sent and received, Technical Data about your device.

For example, when you use our website, our systems might record the device you used.

We process this data in order to:

perform our contract with you and/or the recipient of one of our products;
fulfil orders for our products or services;
comply with our regulatory obligations when administering our business.

Performance of a contract with you.

Our legitimate interests (ensuring the effective and efficient working of our website and systems)

Personal data we receive from third parties

Category of personal data

Our purposes for processing

Lawful basis

Providers of financial or payment services.

We might receive this information about you when you purchase our products or services, from the merchants we use to process payments.

We need this information to receive payment from you and perform our contract with you

Performance of a contract with you

Our legitimate interests in being paid.

Personal data we receive from social media

Category of personal data

Our purposes for processing

Lawful basis

Social Media Data includes your social media ‘handle’ or username, your avatar, your interaction with other users and with us. We will also see the content of any messages you send us, and any engagement on discussions.

Social media includes Telegram, Instagram, WhatsApp, Signal, Slack, Twitter or ‘X’, Facebook, Discord, Slack, Reddit, LinkedIn and others.

We process this data to:

interact with you for marketing purposes;

create a profile about you;

respond to your queries.

Legitimate interests (to send direct marketing, ensure our direct marketing is relevant to your interests, develop our products and services, and to be efficient about how we meet our legal and contractual duties).

Consent (where we’re legally required to get your consent to send you direct marketing about our products or services, or partners’ promotions or offers, or for you to receive marketing from other organisations).

We might also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we might aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Notice.

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we might not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with products or services). In this case, we might have to cancel a product or service you have with us but we will notify you if this is the case at the time.

Marketing

You can ask us to stop sending you marketing communications at any time by logging into our website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links within any marketing communication sent to you or by contacting us using the contact details below.

If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes for example relating to order confirmations, for updates to our Terms and Conditions, or checking that your contact details are correct.