What information we collect, use, and why
We collect or use the following information to provide services and goods, including delivery:
- Names and contact details
- Addresses
- Date of birth
- Health information (including dietary requirements, allergies and health conditions)
- Health and safety information
- Account information
- Website user information (including user journeys and cookie tracking)
- Photographs or video recordings
- Call recordings
- Identification documents
- Information relating to compliments or complaints
We collect or use the following information for the operation of customer accounts and guarantees:
- Names and contact details
- Addresses
- Payment details (including card or bank information for transfers and direct debits)
- Account information, including registration details
- Information used for security purposes
- Marketing preferences
We collect or use the following information to prevent crime, prosecute offenders, or defend against legal action:
- Names and contact information
- Criminal offence data (including Disclosure Barring Service (DBS), Access NI or Disclosure Scotland checks)
- Video and CCTV recordings of public areas (including indoor and outdoor spaces)
- Audio recordings of public areas (including indoor and outdoor spaces)
- Video and CCTV recordings of private or staff only areas
- Audio recordings of private or staff only areas
- Dashcam footage – outside vehicle – without audio
- Dashcam footage – outside vehicle – with audio
- Dashcam footage – inside vehicle – without audio
- Dashcam footage – inside vehicle – with audio
- Body worn video footage – without audio
- Body worn video footage – with audio
- Call recordings
- Information relating to health and safety
We collect or use the following information for service updates or marketing purposes:
- Names and contact details
- Addresses
- Marketing preferences
- Location data
- Recorded images, such as photos or videos
- Call recordings
- IP addresses
- Website and app user journey information
- Records of consent, where appropriate
We collect or use the following information to comply with legal requirements:
- Name
- Contact information
- Identification documents
- Criminal offence data (including Disclosure Barring Service (DBS), Access NI or Disclosure Scotland checks)
- Health and safety information
We collect or use the following information for recruitment purposes:
- Contact details (eg name, address, telephone number or personal email address)
- Date of birth
- National Insurance number
- Copies of passports or other photo ID
- Employment history (eg job application, employment references or secondary employment)
- Education history (eg qualifications)
- Right to work information
- Details of any criminal convictions (eg Disclosure Barring Service (DBS), Access NI or Disclosure Scotland checks)
We also collect or use the following information for recruitment purposes:
- Genetic information
- Health information
Lawful bases
Our lawful bases for collecting or using personal information to provide services and goods are:
Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:
Our lawful bases for collecting or using personal information to prevent crime, prosecute offenders or defend against legal action are:
Our lawful bases for collecting or using personal information for service updates or marketing purposes are:
Our lawful bases for collecting or using personal information for legal requirements are:
Our lawful bases for collecting or using personal information for recruitment purposes are:
Where we get personal information from
- 01. People directly
- 02. Health care providers
- 03. Insurance companies
- 04. Schools, colleges, universities or other education organisations
- 05. Councils and other public sector organisations
How long we keep information
All data for over 18 years old kept for 7 years.
All data foe under 18 years old kept until 18 then 7 more years.
Who We Share Personal Information With
- Health care providers
- Organisations we need to share information with for safeguarding reasons
- Professional or legal advisors
- Financial or fraud investigation authorities
- Relevant regulatory authorities
- External auditors or inspectors
- Organisations we’re legally obliged to share personal information with
- Emergency services (where necessary)
Your data protection rights
Under data protection law, you have rights including:
- Your right of access – You have the right to ask us for copies of your personal data.
- Your right to rectification – You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal data in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal data in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent. You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
