- By contacting our general customer services team at: email@example.com
- By contacting our Data Protection Officer:
How We Collect Your Information
We collect your personal information when you interact with us or use our services, such as when you sign up to receive voucher alerts. We also look at how visitors use our Sites, to help us improve our services and optimise customer experience.
We collect information:
- When you create an account with us or change your account settings
- When you submit forms or share promotions on our Sites
- When you contact us for any reason
- When you enter competitions or complete surveys
- When you otherwise interact with or browse our Sites
Information We Collect From You
As part of our commitment to the privacy of our customers and visitors to our Sites more generally, we want to be clear about the sorts of information we will collect from you.
We may collect and process the following types and categories of personal data about you:
- Contact information: name, postal address, email address, telephone numbers, username, and associated correspondence between us.
- Demographic information: birth date, age, student status and associated information (such as your university), gender, postal code.
- Other identification information: information about your computer or mobile device, including your identifier or other unique identifier (e.g. Android advertising ID or Apple IDFA), IP address, operating system model, network, renewal date, and browser type.
- Preferences & Interests information: the types of offers and retailers/brands that interest you, information collected from social media interactions (such as via Facebook Connect).
- Transactional information: details of your visits to and use of our Sites or emails that we send you, including the offers you view and use, rewards you redeem, including receipts and other data you submit as part of the reward, traffic data and other communications data, the resources that you access, the transactions you make.
- Location information: includes information relating to the latitude and longitude of your device and the time and date the location information was recorded, your location relative to nearby retailers/brands or your presence within a geofence.
- In respect of the Browser Extension only, the site you are visiting when the Browser Extension is activated.
We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Our Sites are not intended for children and we do not knowingly collect personal data relating to children.
Use of Your Information
We will only process the data we collect about you if there is a reason for doing so, and if that reason is permitted under data protection law. Most commonly, we will use your personal data in the following circumstances:
- Where it is necessary for our legitimate interests in conducting and managing our business including to enable us to provide you with best service and experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where we need to comply with a legal or regulatory obligation.
We use information held about you in the following ways:
- To ensure that content from your our service is presented in the most effective manner for you and your device.
- To provide you with information, products, or services, that you request from us or which we feel may interest you.
- To carry out our obligations arising from any contracts entered into between you and us.
- To allow you to participate in competitions, surveys, and interactive features of our service.
- To notify you about changes to our service.
- To report aggregate information to our business users. This is statistical data about our users’ actions and patterns.
- To estimate our audience size and usage pattern.
- To store information about your preferences, and so allow us to customise our service according to your individual interests.
- To recognise when you return to our Sites.
- To gain understanding and insights about the nature of our audience and how they interact with our products and services, including A/B testing.
- To detect and prevent potential fraudulent or other activity in breach of our terms and conditions.
- To log when you have arrived at and / or leave a location (for example, a shopping centre, a high street, or a restaurant).
- To provide location based services to you (for example, providing offers for retails/brands nearby or other promotions relevant to your location).
- To verify whether you are a student and, if so, provide you with access to exclusive student content.
Third parties collecting your data through cookies or other similar technologies may use the information to provide you with interest-based advertising or other targeted content.
Direct Mailings, Push Notifications, and Unsubscribing
Where you have consented to receive marketing communications from us, we will send you emails and/or push notifications (depending on what you have consented to) containing our latest codes, deals, and promotions that we feel may interest you.
You may withdraw your consent for email marketing communications at any time by:
- Clicking the “Unsubscribe” link in a marketing communication email we send you.
You may withdraw your consent for push notifications marketing communications at any time by:
- Switching off notifications in the settings area of the App.
Please allow two working days for this instruction to take effect in all of our systems.
Retention of Your Information
We will not retain your information for any longer than we think is necessary.
Information that we collect will be retained for as long as needed to fulfill the purposes outlined in the ‘Use of Your Information’ section above, in line with our legitimate interest or for a period specifically required by applicable regulations or laws, such as retaining the information for regulatory reporting purposes.
When determining the relevant periods, we will take into account factors including:
- Our contractual obligations and rights in relation to the information involved
- Legal obligations under applicable law to retain data for a certain period of time
- Statute of Limitations under applicable laws
- Our legitimate interests
- Potential disputes
- Guidelines issues by relevant data protection authorities
Otherwise, we securely erase your information where we no longer require your information for the purposes collected.
Disclosure of Your Information
The information we collect about you will be transferred to and stored on our servers. We are very careful and transparent about who else your information is shared with.
Sharing your information internally:
- We share your information internally only where necessary for the purposes set out in the ‘Use of your information’ section.
Sharing your information with third parties:
We share your information with third party service providers. The types of third party service providers whom we share your information with includes:
- Service providers who provide IT and system administration services, email service providers, customer services, and location services, for the purposes of data storage, and analysis.
- Merchants who we promote on our Sites.
- Affiliate networks to track sales originating from our service.
- Professional advisers acting as processors including lawyers, bankers, auditors, and insurers, who provide consultancy, banking, legal, insurance, and accounting services.
- HM Revenue & Customs, regulators, and other authorities acting as processors or joint controllers who require reporting of processing activities in certain circumstances.
- Marketing and advertising partners, so that they can ensure that you see advertising which is more relevant to you, and send you email and postal marketing on our behalf.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice when it is transferred to third parties.
If we enter into a joint venture with, purchases or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors.
Sending Information Outside The EEA
We will only send personal information to providers outside the EEA if those providers are required to protect personal information in the same way they would be required to protect personal information if they were based within the EEA. This means that we will only send personal information to a non-EEA country if:
- The European Commission has determined that the relevant non-EEA country affords an adequate level of protection for personal information;
- Pursuant to an agreement between us and the relevant provider based in the non-EEA country which contains data protection clauses adopted or approved by the European Commission; or
- We send data to the US pursuant to the Privacy Shield.
We adopt appropriate security measures to ensure the personal information we hold about you is suitably protected.
We take steps to protect your information from unauthorised access and against unlawful processing, accidental loss, destruction and damage, once we have received your information.
Under data protection law, you may have a number of rights concerning the data we hold about you. If you wish to exercise any of these rights, please contact our Data Protection Officer using the contact details set out above. For additional information on your rights please contact your data protection authority and see below.
The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this policy.
The right of access. You have the right to obtain access to your information (if we’re processing it). This will enable you, for example, to check that we’re using your information in accordance with data protection law. If you wish to access the information we hold about you in this way, please get in touch (see Contact Details).
The right to rectification. You are entitled to have your information corrected if it is inaccurate or incomplete. You can request that we rectify any errors in information that we hold by contacting us (see Contact Details).
The right to erasure. This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of certain pieces of the information that we hold about you by contacting us (see Contact Details).
The right to restrict processing. You have rights to ‘block’ or ’suppress’ further use of your information. When processing is restricted, we can still store your information, but will not use it further.
The right to data portability. You have the right to obtain your personal information in an accessible and transferable format so that you can re-use it for your own purposes across different service providers.
The right to lodge a complaint. You have the right to lodge a complaint about the way we handle or process your information with the national data protection authority.
The right to withdraw consent. If you have given your consent to anything we do with your information, you have the right to withdraw that consent at any time. You can do this by contacting us (see Contact Details). Withdrawing consent will not however make unlawful our use of your information while consent had been apparent.
The right to object processing. You have the right to object to certain types of processing, including processing for direct marketing and profiling. We will stop processing this personal information if you exercise your right to object unless there are overriding grounds upon which we may rely in order to continue that processing or unless that processing is necessary in order to establish, exercise, or defend legal claims.
You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.