This privacy policy aims to give you information on how Poundland collects and processes your personal data through your use of this website, including any data you may provide through this website when you, purchase a product. We set out the different ways in which data is collected in this policy.
Poundland Limited is the controller and is responsible for your personal data (referred to as "Poundland", "we", "us" or "our" in this policy). Our company registration number is 02495645 and registered office address is at Poundland CSC, Midland Road, WS1 3TX.
If you have any questions about this privacy policy, please contact customer.relations@poundland.co.uk or use any of the alternative contact details below:
Contact details
Our full contact details are:

• Full company name Poundland Limited
• Email address: customer.relations@poundland.co.uk
• Telephone: 0333 234 1877
• Postal address: Customer Relations Team, Poundland CSC, Midland Road, Walsall, WS1 3TX, United Kingdom.

We try to ensure that we deliver the best levels of customer service but if you are not happy please do contact us so that we can investigate your concerns. Please contact us using the customer.Relations@poundland.co.uk email address above.
ICO
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), which is the UK regulator for data protection issues in the United Kingdom. You can do this online through the ICO’s website at www.ico.org.uk, by telephone on 0303 123 1113, or by writing to them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

We keep our privacy policy under regular review.
This version was last updated September 2023. It may change and if it does, these changes will be posted on this page and, where appropriate, notified to you.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during our relationship with you.
Third party links
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. Please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any personal data that may be collected through these websites or services, such as Contact and Location Data. We strongly recommend that you check these policies before you submit any personal data to these websites or use these services.

We may collect, use, store and transfer different kinds of personal data about you. We have set out below what we call this type of data and provide examples of this data in the table below.
In this Privacy Policy, if we refer to ‘Identity & Contact Data’, ‘Profile Data’, ‘CCTV Data’, ‘Financial & Transactional Data’ ‘Usage Data’, ‘Marketing and Communication Data’, we are referring to the examples in in the table below.

Type of Data	Description/Example
Identity & Contact Data	Details such as your first name, last name, maiden name, email address, delivery address, billing address and telephone numbers date of birth, gender.
Profile Data	Includes your username and password when creating an account, purchases or orders made by you, your interests, preferences, feedback and survey responses.
CCTV Data	We use CCTV and other surveillance systems, such as body worn cameras in Poundland stores, our Distribution Centres and our Head Office in the United Kingdom to record images of customers, staff and other visitors to store. We also use mounted CCTV cameras on our delivery vehicles which look out to the road and into the cab of the vehicles. These cameras may capture footage of pedestrians and other vehicles while in use.
Technical Data	This is technical information including Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
Usage Data	This includes details about how you use our website, including products you viewed or searched for and whether you put any items in your basket.
Marketing and Communications Data	This includes your preferences in receiving marketing from us and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing our Website. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
We do not collect any special categories of personal data about you (such as your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

We will collect and process the following data about you from:

• Our direction interactions with you. We collect most personal data directly from you. You may give us your Identity & Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

  • choose to purchase our products or services;

  • create an account  on our website;

  • subscribe to our service or publications;

  • request marketing to be sent to you;

  • enter a competition, promotion or survey; or

  • give us feedback or contact us.

• Automatic collection through your interaction. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. Please see our cookie policy - www.poundland.co.uk/cookie-policy for further details.

We use cookies to distinguish you from other users of our site. This helps us to provide you with a better experience when you use our website and helps us to continuously improve our site. For detailed information on the cookies we use, the purposes for which we use them and how you can exercise your choices regarding our use of your cookies, see our cookie policy www.poundland.co.uk/cookie-policy

We will only use your personal data where the law allows us to do so. To make this easier to read, we have set this out in table format below. The table describes the ways in which we plan to use your data and the legal basis which we rely on to do so.

Purpose/Activity	Type of data collected	Our lawful (legal) basis for processing
To register you as a new customer	(a) Identity & Contact	(a) Performance of a contract with you to enable you to create an account with us.
To process and deliver your order including: (a) Manage payments, fees and charges	(a) Identity & Contact (b) Financial & Transactional	(a) Performance of a contract with you in order to provide you with the Goods you have purchased.
CCTV Data		(a) Legitimate interests to: prevent, reduce and detect crime and anti-social behaviour. protect the health and safety of customers, staff and visitors;  assist the police to prosecute or alternatively to pursue any offenders through the civil justice system; assist with the investigation of health and safety and other occurrences, including employment issues, for example, disciplinary investigations, where appropriate to do so; and to assist with the investigation of civil litigation matters and support Poundland in its defence of such matters. Please note appropriate signage is in place in all locations where recording takes place, including on our delivery vehicles, notifying members of the public and employees that CCTV is in operation
To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey	(a) Identity & Contact (b) Profile (c) Marketing and Communications	(a) Performance of a contract with you (b) Necessary to comply with a legal obligation to update you of any changes to our terms or this privacy policy. (c) Necessary for our legitimate interests to keep our records updated and to study how customers use our products in order to improve the service we provide to you.
To enable you to partake in a prize draw, competition or complete a survey	(a) Identity & Contact (b) Profile (c) Usage (d) Marketing and Communications	(a) Performance of a contract with you to update you about the prize draw or submit your survey.  (b) Necessary for our legitimate interests to study how customers use our products to develop them to continue to build our business
To administer and protect our business and this website including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data.	(a) Identity & Contact (b) Technical	(a) Necessary for our legitimate interests to help run and protect the business through administration and IT services, network security.
To  deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you	(a) Identity & Contact (b) Profile (c) Usage (d) Marketing and Communications (e) Technical	Necessary for our legitimate interests to study how customers use our products in order to develop them, which will grow our business and shape how we market products of interest to you.
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences	(a) Technical (b) Usage	Necessary for our legitimate interests to define types of customers for our products and services, to keep our website updated and relevant and to help improve how we interact with you
To make suggestions and recommendations to you about goods or services that may be of interest to you	(a) Identity & Contact (b) Technical (c) Usage (d) Profile (e) Marketing and Communications	Necessary for our legitimate interests to develop our products/services and grow our business.

Marketing
We always strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

Promotional Offers
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you.
This is how we decide which products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have requested information from us or purchased goods from us and you have not opted out of receiving that marketing. Remember you can always opt-out of such marketing by contacting the Customer Service team at customer.relations@poundland.co.uk.

Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason does not conflict with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Service providers
We may provide personal data to third parties who help us use it for the purposes described in section 7 to deliver and improve the products and services we offer to you. For example:

• Technology and data base services (such as storage and analysis of data). Our databases of personal data may be hosted by third parties on our behalf.
• We may use third party email broadcasting services in order to send emails or SMS messages.
• We use payment service providers in relation to any payments made when purchasing our products.
• We sometimes use market research companies to help us better understand our customers.
• We may share your information with our legal and other professional advisers.
• Our CCTV system is operated by trained Poundland staff and the systems are maintained by a specialist company.

Other companies

• We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
• Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

Government/Law Enforcement Authorities

• HM Revenue & Customs, regulators and other authorities who require reporting of processing activities in certain circumstances
• Personal data may be shared with certain government authorities or law enforcement officials for the detection or prevention of crime.

We may also share your personal information outside of the UK and European Economic Area (EEA). Typically, this is where a particular service provider which we use is located outside of the EEA, for example, where we use cloud-based technology or a data centre or backup facility overseas. We may also have staff who work for one of our suppliers outside of the UK and EEA who may also need to access data for purposes such as technical support or system development and testing.

When we do send personal data outside of the UK and EEA overseas, we will make sure that suitable safeguards and security measures are in place to protect the information. For example, these safeguards might include:

• Putting in place a contract with the recipient containing terms and standard data protection clauses which have been approved by the authorities as providing a suitable level of protection.
• Sending the information to an organisation which is a member of a scheme which has been approved by the authorities as providing a suitable level of protection.

This means that when such transfer (as set out above) takes place, you can expect a similar degree of protection in relation to your personal information as required by law in the UK.

We take the protection of your data seriously. We have put in place appropriate security measures to prevent your personal data from unauthorised access, alteration, or disclosure. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to contractual terms. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

You have the right to opt out of receiving marketing communications from us at any time by:

• informing us that you wish to change your marketing preferences by contacting our customer support team at customer.relations@poundland.co.uk.
• Making use of the simple “unsubscribe” link in emails or any other electronic marketing materials we send to you.

We keep personal data only for as long as is necessary for the purposes for which it was collected and is held including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.
We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.
When determining the appropriate retention period, we take into account the amount, nature and sensitivity of the personal data, the possible risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means. In most cases we will retain your data for no more than 6 years following our last contact with you.
Details of retention periods for different aspects of your personal data are set out in our retention policy, which you can request from us by contacting customer.relations@poundland.co.uk. We will provide such details as are relevant to you and your request.
In some circumstances you can ask us to delete your data: see Your legal rights below for further information.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

You have several different rights in relation to the personal data that we hold about you. These are briefly described below. To enquire about exercising these rights, please use the contact details set out in section 2 above
You have the right to:

• Request access to your personal data (commonly known as a "data subject access request") to find out what personal data we hold about you.
Request correction of the personal data that we hold about you. If the information that we hold about you is inaccurate or out of date, you have a right to ask us to correct it, though we may need to verify the accuracy of the new data you provide to us. Request erasure of your personal data. In certain circumstances you can ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party). See section 10 above for details of where and why we rely on legitimate interest. If you disagree with us relying on the legitimate interests grounds for using your personal data you can object to us doing so. We will then reassess the extent to which we can continue to use the data in light of your particular circumstances.
• Request restriction of processing of your personal data. This enables you to ask us to suspend or restrict the processing of your personal data.
• Request the transfer of your personal data to you. We will provide to your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.