| Purpose/Activity | Type of data | Lawful basis for processing including basis of legitimate interest |
| Register your account on our Websites and Apps, to manage and administer your account, to facilitate purchases you make including, where applicable, providing special discounts and managing online loyalty programs | Identity and Contact Data
Account Data
Transaction Data
Communication Data | • Performance of a contract with you |
| Provide and deliver the products and services, including delivery of products and electronic receipts | Identity and Contact Data
Account Data
Communication Data
Transaction Data | • Performance of a contract with you |
| Process transactions | Identity and Contact Data
Account Data
Communication Data
Transaction Data | • Performance of a contract with you |
| Respond to your communications regarding our products and services, send you service updates, confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages, responding to your enquiries, requests or complaints | Identity and Contact Data
Account Data
Transaction Data
Communication Data
Uploaded Content
Website Usage Data | • Performance of a contract with you
• Otherwise, as necessary for our legitimate interests (to operate, provide and improve our business; to communicate with you) – where our communications are not necessary to perform or enter into a contract with you |
| Reviewing communications with you, including for customer support and quality assurance and training purposes, and related recordkeeping | Identity and Contact Data
Account Data
Transaction Data
Communications Data
Uploaded Content Data
Website Usage Data | • Necessary for our legitimate interests (to operate, provide and improve our business; to communicate with you) – where our communications are not necessary to perform or enter into a contract with you |
| Contact current and prospective customers (including Website visitors) about our products and services, promotions, competitions and events we think may be of interest, including our newsletter and other promotional mailers and electronic communications | Account Data
Website Usage Data
Marketing Data
Communication Data
Social media/External Account Data
Uploaded Content Data | • Consent (where required under applicable law)
• Otherwise legitimate interests (to operate, provide and improve our business; to communicate with you) |
| Keep our business, including our Websites and Apps, employees, customers, vendors, and visitors secure and address threats to your safety or the safety of others; to detect and prevent fraud (online and in office).For example, online we may use malware and spyware monitoring tools to detect suspicious activity and algorithms to detect unauthorised access. | Identity and Contact Data
Account Data
Transaction Data
Device Data
Website Usage Data
Communication Data
Location Data | • Necessary for our and our third parties' legitimate interests (to operate and provide our business, including our Websites and Apps; to detect or prevent illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers, vendors, and visitors) |
| Manage compliance with our terms of service and related internal reporting | Identity and Contact Data
Account Data
Communication Data
Transaction Data
Uploaded Content Data
Social media/External Account Data | • Performance of a contract with you
• Otherwise, as necessary for our legitimate interests (to operate, provide and improve our business, including our Websites and Apps; to detect or prevent illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers, vendors, and visitors
• Legal obligations |
| To administer and maintain our Website and our IT systems (including monitoring, troubleshooting, data analysis, testing, system maintenance, repair and support, reporting and hosting of data) | Identity and Contact Data
Account Data
Device Data
Website Usage Data | • Legitimate interests (to operate, provide and improve our business, including our Website; to detect or prevent Illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure) |
| Manage our use of tracking technologies such as cookies (including enabling you to manage your cookie preferences) and analyse collected data to learn about our Website, to improve our Website and to develop new products and services. This includes website analytics, identifying browsing / purchasing trends and patterns and evaluating this information on an aggregated, group(s) basis | Account Data
Device Data
Website Usage Data
Social media/External Location Data
Account Data
Marketing and Communications Data | • Consent (where required under applicable law – see cookie consent tool on our website)
• Otherwise (for strictly necessary cookies) legitimate interests to operate, provide and improve our business, including our Website, to improve our Website or use the insights to improve or develop marketing activities and promote our products and services |
| Analyze data including metrics related to consumer transactions and behavior (online and offline), to assess trends and the effectiveness of our advertising and marketing campaigns, to help us understand your needs and provide you with better service and offers, to drive customer engagement, promote our brand, and inform other business decisions by understanding consumer behavior | Account Data
Transaction Data
Device Data
Website Usage Data
Social media/External Account Data
Communication Data
Marketing Data | • Consent (where required under applicable law)
• Otherwise legitimate interests (to operate, provide and improve our business, including our Websites and Apps, to improve our Websites and Apps or use the insights to improve or develop marketing activities and promote our products and services |
| Personalise and customise your experience, including to provide local or otherwise targeted content and information for customers, and to tailor the content and advertising served on our Website | Account Data
Marketing Data
Website Usage Data
Device Data
Social media/External Account Data | • Consent (where consent is required under applicable law)
• Otherwise legitimate interests (to operate, provide and improve our business, including our Websites and Apps, to use the insights to improve or develop marketing activities and promote our products and services |
| Personalise, target, and deliver advertising for our products and services on third party websites, apps, and other online services (including to identify audiences and individuals like you to better tailor our marketing campaigns and communications), and measure the effectiveness of our campaigns and adjust our methods | Account Data
Marketing Data
Website Usage Data
Social media/External Account Data
Contact Device Data | • Consent (where consent is required under applicable law
• Otherwise legitimate interests (to improve our business, to promote our products and services and to use the insights to improve or develop our marketing activities) |
| Analyse social media performance metrics to evaluate and execute social media campaigns, including to interact with our current and prospective customers on various social media channels to promote our products, run contests and promotions, answer questions and otherwise drive and monitor customer engagement and satisfaction | Account Data
Marketing Data
Social media/External Account Data
Communication Data
Uploaded Content Data
Website Usage Data
Device Data | • Otherwise legitimate interests (to improve our business, to promote our products and services and to use the insights to improve or develop marketing activities |
| Recruitment | Job Applicant Data | • Legal obligation
• Legitimate interests |
| Comply with legal and regulatory obligations to which we are subject, including our obligations to respond to your requests under data protection law | Identity and Contact Data
Account Data
Transaction Data
Website Usage Data
Communication Data
Uploaded Content Data | • Legal obligation |
| Protect our legal rights (including where necessary, to share information with law enforcement and others), for example to defend claims against us and to conduct litigation to defend our interests | Identity and Contact Data
Account Data
Transaction Data
Website Usage Data
Communication Data | • Legitimate interests to protect our business interests |
