At Tesco, we’re working hard to serve shoppers a little better every day. Looking after the personal data you share with us is a hugely important part of this. We want you to be confident that your data is safe and secure with us, and understand how we use it to offer you a better and more personalised shopping experience.
The data controller is Tesco Stores Limited (referred to in this policy as “we” or “us”).
We are committed to doing the right thing when it comes to how we collect, use and protect your personal data. That’s why we’ve developed this privacy and cookies policy (“Policy”), which:
We offer a wide range of products and services, so we want you to be clear about what this Policy covers. This Policy applies to you if you use our services (referred to in this Policy as “our Services”). Using our Services means:
This Policy also applies if you contact us or we contact you about our Services.
Some other parts of our business and other Tesco Group companies may need to collect and use personal data to provide you with their products and services and for certain other purposes. They have their own privacy policies that explain how they use your personal data.
This section tells you what personal data we may collect from you when you use our Services and what other personal data we may receive from other sources.
We may also use personal data from other sources, such as specialist companies that supply information, online media channels, our Retail Partners and public registers. For example, this other personal data helps us to:
This section explains in detail how and why we use personal data.
Why do we process your personal data in this way? We need to process your personal data so that we can manage your customer accounts, provide you with the goods and services you want to buy and help you with any orders and refunds you may ask for.
Why do we process your personal data in this way? We rely on the use of personal data to carry out market research and internal research and development, and to improve our information technology systems (including security) and our product range, services and stores. This allows us to serve you better as a customer.
Why do we process your personal data in this way? It is important for us to monitor how our Services are used to detect and prevent fraud, other crimes and the misuse of services. This helps us to make sure that you can safely use our Services.
Why do we process your personal data in this way? Looking at your browsing behaviour and purchases allows us to personalise our offers and services for you. This helps us meet your needs as a customer.
Why do we process your personal data in this way? We want to ensure that we provide you with marketing communications, including online advertising, that are relevant to your interests. To achieve this we also measure your responses to marketing communications relating to products and services we offer, which also means we can offer you products and services that better meet your needs as a customer. You can change your marketing choices, both when you register with us, and at any time after that. You also have choices when it comes to online advertising. We set out belowyour choices when it comes to cookies, and how you can control your online behavioural advertising preferences.
Why do we process your personal data in this way? We want to serve you better as a customer so we use personal data to provide clarification or assistance in response to your communications
Why do we process your personal data in this way? We need to process your personal data so that we can manage the promotions and competitions you choose to enter.
Why do we process your personal data in this way? We carry out market research to improve our Services. However, if we contact you about this, you do not have to take part in the activities. If you tell us that you do not want us to contact you for market research, we will respect this choice. This will not affect your ability to use our Services or your Clubcard.
To help us to better understand you as a customer and to be able to provide you with services and marketing communications, including online advertising, that are relevant to your interests we also combine personal data we collect when you make purchases in-store using Clubcard with personal data collected from our Websites, Mobile Apps and other sources.
This section explains how and why we share personal data with other companies within the Tesco Group.
We may share the personal data we collect with other companies in the Tesco Group. For example, we share personal data with the following Tesco Group companies.
Clubcard information is one of a number of factors that Tesco Bank take into account when assessing your credit risk. For example, Tesco Bank will take into account Clubcard information linked to your household (including information about purchases when you or a household member use a Clubcard) when considering your application.
For some banking products, Tesco Bank use Clubcard information to evaluate your eligibility for credit products as part of the assessment they are required to do.
Tesco Bank also use Clubcard information to decide the level of discounts to offer on premiums for some insurance products. For these banking and insurance products, the Clubcard information linked to your household is always used to have a positive effect on your application.
We make Clubcard information (including information about purchases when you use your Clubcard) and information about your online behaviour we have collected through cookies available to Tesco Bank. This helps them to improve their service and make their marketing communications more relevant to you.
You can find more information about the way in which Tesco Bank use your data in their privacy and cookies policy.
We may also use data provided to us by Tesco Bank, for example information about the Tesco Bank products you hold, to improve our service and make our marketing communications more relevant to you.
We make Clubcard information (including information about purchases when you use your Clubcard) and information about your online behaviour we have collected through cookies available to Tesco Mobile. This helps them to improve their service and make their marketing communications more relevant to you.
You can find more information about the way in which Tesco Mobile use your data in their privacy and cookies policy.
dunnhumby, part of the Tesco Group, is also one of our main service providers. dunnhumby help us to use personal data to help improve our understanding of customers and personalise your customer experience. You can find out more about what dunnhumby do here.
This section explains how and why we share personal data with Retail Partners and Service Providers.
When we share personal data with these companies we require them to keep it safe, and they must not use your personal data for their own marketing purposes.
We work with a number of Retail Partners who –
We only share personal data that enable our Retail Partners to provide their services. For example, when you shop on the Tesco Marketplace we will give the relevant Retail Partner your name and contact details so that they can deliver your items.
We work with carefully selected Service Providers that carry out certain functions on our behalf. These include, for example, companies that help us with technology services, storing and combining data, processing payments and delivering orders. We only share personal data that enable our Service Providers to provide their services.
Some of the Service Providers we work with operate online media channels, and they place relevant online advertising for our products and services, as well as those of our suppliers and our Retail Partners, on those online media channels on our behalf. For example, you may see an advert for our products and services as you use a particular social media site or watch television through your pay TV account.
This section explains how and why we share personal data with other organisations.
We may share personal data with other organisations in the following circumstances:
We know how important it is to protect and manage your personal data. This section sets out some of the measures we have in place.
We use computer safeguards such as firewalls and data encryption, and we enforce physical access controls to our buildings and files to keep this data safe. We only authorise access to employees who need it to carry out their job responsibilities.
However, whilst we take appropriate technical and organisational measures to safeguard your personal data, please note that we cannot guarantee the security of any personal data that you transfer over the internet to us.
The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. We will put in place appropriate protection to make sure your personal data remains adequately protected and is treated in line with this Policy.
This section explains the choices you have when it comes to receiving marketing communications and taking part in market research.
We will send you relevant offers and news about our products and services in a number of ways including by email, but only if you have previously agreed to receive these marketing communications. When you register with us we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time.
We also like to hear your views to help us to improve our Services, so we may contact you for market research purposes. You always have the choice about whether to take part in our market research.
Cookies are small data files that allow a website to collect and store a range of data on your desktop computer, laptop or mobile device.
Cookies allow us to improve the way our Websites and Mobile Apps work so that we can personalise your experience and allow you to use many of their useful features.
Cookies can help us to understand how our Websites and Mobile Apps are being used, for example, by telling us if you get an error messages as you browse.
These Cookies collect data that is mostly aggregated and anonymous.
Cookies used for this purpose are often placed on our Websites by other organisations, and always with our permission. These Cookies may collect information about your online behaviour, such as your IP address, the website you arrived from and information about your purchase history or the content of your shopping basket. This means that you may see our adverts on our Websites and on other organisations’ websites. You may also see adverts for other organisations on our Websites.
To help us to deliver online advertising that is relevant to you, we may also combine data we collect through Cookies in the browser of your desktop computer or other devices with other data that we have collected, for example your use of Clubcard and in-store purchases.
Cookies can tell us if you have seen a specific advert, and how long it has been since you have seen it. This information allows us to measure the effectiveness of our online advertising campaigns and control the number of times you are shown an advert.
You can use your browser settings to accept or reject new Cookies and to delete existing Cookies. You can also set your browser to notify you each time new Cookies are placed on your computer or other device. You can find more detailed information about how you can manage Cookies at the All About Cookies and Your Online Choices websites.
If you choose to disable some or all Cookies, you may not be able to make full use of our Websites. For example, you may not be able to add items to your shopping basket, proceed to checkout, or use any of our products and services that require you to sign in.
Where we display personalised adverts on other organisations’ websites, the AdChoices icon will usually be displayed. Clicking on this icon will provide you with specific guidance on how to control your online advertising preferences. More information is available on the YourAdChoices website.
Under the Data Protection Act 1998, you have the right to see the personal data we hold about you. This is called a Subject Access Request.
If you would like a copy of the personal data we hold about you, please write to:
You can also email us at firstname.lastname@example.org.
The law allows us to charge an administration fee of £10. If you write to us by post, please enclose a cheque or postal order for £10 made payable to “Tesco Stores Limited”.
We want to make sure that the personal data we hold about you is accurate and up to date. If any of the details are incorrect, please let us know and we will amend them.