PRIVACY POLICY

LEGAL BASIS FOR USING DATA

We are required to set out the legal basis for our processing of your personal data.

We collect and use customers’ personal data:

1.as necessary to perform our contract with you:

for the purposes of complying with our duties and exercising our rights under a contract for the sale of goods or services to a customer;

2.as necessary for the pursuit of our legitimate interests,including:

selling and supplying goods and services to our customers;

promoting, marketing and advertising our products and services;

sending promotional communications which are relevant and tailored to individual customers (including administering loyalty schemes);

to identify and contact competition winners;

understanding our customers’ behaviour, activities, preferences, and needs;

improving existing products and services and developing new products and services;

protecting customers, employees and other individuals and maintaining their safety, health and welfare;

good governance, accounting and managing and auditing our operations and complying with our legal and regulatory obligations;

preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies;

handling customer contacts, queries, complaints or disputes;

protecting our company, its employees and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to us;

handling any legal claims or regulatory enforcement actions taken against us; and

fulfilling our duties to our customers, colleagues, shareholders and other stakeholders;

3.as necessary for complying with our legal obligations including:

where you exercise your rights under data protection laws

for compliance with legal and regulatory requirements;

to establish or defend legal rights;

4.based on your consent for example in relation to sending direct marketing communications via email or text message.

You have the right to withdraw consent at any time. Where consent is the only legal basis for processing, we will cease to process data after consent is withdrawn.