1. Important information and who we are
Poundland Limited is the controller and is responsible for your personal data (referred to as "Poundland", "we", "us" or "our" in this policy). Our company registration number is 02495645 and registered office address is at Poundland CSC, Midland Road, WS1 3TX.
Our full contact details are:
- Full company name Poundland Limited
- Email address: email@example.com
- Telephone: 0333 234 1877
- Postal address: Customer Relations Team, Poundland CSC, Midland Road, Walsall, WS1 3TX, United Kingdom.
2. Who you can complain to if you are unhappy about the use of your personal data
We try to ensure that we deliver the best levels of customer service but if you are not happy please do contact us so that we can investigate your concerns. Please contact us using the customer.Relations@poundland.co.uk email address above.
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), which is the UK regulator for data protection issues in the United Kingdom. You can do this online through the ICO’s website at www.ico.org.uk, by telephone on 0303 123 1113, or by writing to them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
This version was last updated September 2023. It may change and if it does, these changes will be posted on this page and, where appropriate, notified to you.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during our relationship with you.
Third party links
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. Please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any personal data that may be collected through these websites or services, such as Contact and Location Data. We strongly recommend that you check these policies before you submit any personal data to these websites or use these services.
4. The data we collect about you
We may collect, use, store and transfer different kinds of personal data about you. We have set out below what we call this type of data and provide examples of this data in the table below.
Type of Data
|Identity & Contact Data||Details such as your first name, last name, maiden name, email address, delivery address, billing address and telephone numbers date of birth, gender.|
|Profile Data||Includes your username and password when creating an account, purchases or orders made by you, your interests, preferences, feedback and survey responses.|
|CCTV Data||We use CCTV and other surveillance systems, such as body worn cameras in Poundland stores, our Distribution Centres and our Head Office in the United Kingdom to record images of customers, staff and other visitors to store. We also use mounted CCTV cameras on our delivery vehicles which look out to the road and into the cab of the vehicles. These cameras may capture footage of pedestrians and other vehicles while in use.|
|Technical Data||This is technical information including Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.|
|Usage Data||This includes details about how you use our website, including products you viewed or searched for and whether you put any items in your basket.|
|Marketing and Communications Data||This includes your preferences in receiving marketing from us and your communication preferences.|
We do not collect any special categories of personal data about you (such as your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
5. How is your personal data collected?
We will collect and process the following data about you from:
- Our direction interactions with you. We collect most personal data directly from you. You may give us your Identity & Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
choose to purchase our products or services;
create an account on our website;
subscribe to our service or publications;
request marketing to be sent to you;
enter a competition, promotion or survey; or
give us feedback or contact us.
7. Why are we allowed to use your personal Data
We will only use your personal data where the law allows us to do so. To make this easier to read, we have set this out in table format below. The table describes the ways in which we plan to use your data and the legal basis which we rely on to do so.
|Purpose/Activity||Type of data collected||Our lawful (legal) basis for processing|
|To register you as a new customer||(a) Identity & Contact||(a) Performance of a contract with you to enable you to create an account with us.|
To process and deliver your order including:
(a) Manage payments, fees and charges
|(a) Identity & Contact
(b) Financial & Transactional
|(a) Performance of a contract with you in order to provide you with the Goods you have purchased.|
(a) Legitimate interests to:
Please note appropriate signage is in place in all locations where recording takes place, including on our delivery vehicles, notifying members of the public and employees that CCTV is in operation
To manage our relationship with you which will include:
(b) Asking you to leave a review or take a survey
(a) Identity & Contact
(a) Performance of a contract with you
|To enable you to partake in a prize draw, competition or complete a survey||
(a) Identity & Contact
|(a) Performance of a contract with you to update you about the prize draw or submit your survey.
(b) Necessary for our legitimate interests to study how customers use our products to develop them to continue to build our business
|To administer and protect our business and this website including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data.||(a) Identity & Contact
|(a) Necessary for our legitimate interests to help run and protect the business through administration and IT services, network security.|
|To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you||(a) Identity & Contact
(d) Marketing and Communications
|Necessary for our legitimate interests to study how customers use our products in order to develop them, which will grow our business and shape how we market products of interest to you.|
|To use data analytics to improve our website, products/services, marketing, customer relationships and experiences||(a) Technical
|Necessary for our legitimate interests to define types of customers for our products and services, to keep our website updated and relevant and to help improve how we interact with you|
|To make suggestions and recommendations to you about goods or services that may be of interest to you||(a) Identity & Contact
(e) Marketing and Communications
|Necessary for our legitimate interests to develop our products/services and grow our business.|
We always strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you.
This is how we decide which products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have requested information from us or purchased goods from us and you have not opted out of receiving that marketing. Remember you can always opt-out of such marketing by contacting the Customer Service team at firstname.lastname@example.org.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason does not conflict with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
8. Disclosure of your personal data
We may provide personal data to third parties who help us use it for the purposes described in section 7 to deliver and improve the products and services we offer to you. For example:
- Technology and data base services (such as storage and analysis of data). Our databases of personal data may be hosted by third parties on our behalf.
- We may use third party email broadcasting services in order to send emails or SMS messages.
- We use payment service providers in relation to any payments made when purchasing our products.
- We sometimes use market research companies to help us better understand our customers.
- We may share your information with our legal and other professional advisers.
- Our CCTV system is operated by trained Poundland staff and the systems are maintained by a specialist company.
- We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
Government/Law Enforcement Authorities
- HM Revenue & Customs, regulators and other authorities who require reporting of processing activities in certain circumstances
- Personal data may be shared with certain government authorities or law enforcement officials for the detection or prevention of crime.
9. International transfers
We may also share your personal information outside of the UK and European Economic Area (EEA). Typically, this is where a particular service provider which we use is located outside of the EEA, for example, where we use cloud-based technology or a data centre or backup facility overseas. We may also have staff who work for one of our suppliers outside of the UK and EEA who may also need to access data for purposes such as technical support or system development and testing.
When we do send personal data outside of the UK and EEA overseas, we will make sure that suitable safeguards and security measures are in place to protect the information. For example, these safeguards might include:
- Putting in place a contract with the recipient containing terms and standard data protection clauses which have been approved by the authorities as providing a suitable level of protection.
- Sending the information to an organisation which is a member of a scheme which has been approved by the authorities as providing a suitable level of protection.
This means that when such transfer (as set out above) takes place, you can expect a similar degree of protection in relation to your personal information as required by law in the UK.
10. Data security
We take the protection of your data seriously. We have put in place appropriate security measures to prevent your personal data from unauthorised access, alteration, or disclosure. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to contractual terms. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
11. Changing Marketing Preferences
You have the right to opt out of receiving marketing communications from us at any time by:
- informing us that you wish to change your marketing preferences by contacting our customer support team at email@example.com.
- Making use of the simple “unsubscribe” link in emails or any other electronic marketing materials we send to you.
12. Data retention
We keep personal data only for as long as is necessary for the purposes for which it was collected and is held including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.
We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.
When determining the appropriate retention period, we take into account the amount, nature and sensitivity of the personal data, the possible risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means. In most cases we will retain your data for no more than 6 years following our last contact with you.
Details of retention periods for different aspects of your personal data are set out in our retention policy, which you can request from us by contacting firstname.lastname@example.org. We will provide such details as are relevant to you and your request.
In some circumstances you can ask us to delete your data: see Your legal rights below for further information.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
13. Your legal rights
You have several different rights in relation to the personal data that we hold about you. These are briefly described below. To enquire about exercising these rights, please use the contact details set out in section 2 above
You have the right to:
- Request access to your personal data (commonly known as a "data subject access request") to find out what personal data we hold about you.
- Request restriction of processing of your personal data. This enables you to ask us to suspend or restrict the processing of your personal data.
- Request the transfer of your personal data to you. We will provide to your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.