We may collect and process the following data about you:
Information that you give us
You may give us information about you by filling in forms on our website, (“Our Website”), or by corresponding with us by telephone, email or otherwise. This includes information you provide when you register to use Our Website, subscribe to our service, subscribe to our email newsletter, search for a product, post material or request further services/ information. We may also ask you for information when you enter a competition, promotion or survey and when you report a problem with Our Website. The information you give us may include:

Newsletter Sign Up Form:

• first name
• email address

Contact Us Form:

• title
• forename
• surname
• email address
• message content

If you contact us in writing, we may keep a record of that correspondence. When you subscribe to our Newsletter you will have consented to receiving this as an electronic copy and for your data to be used for . If you are providing us with your personal information so that you can participate in a survey or for us to help you with a complaint/enquiry then it is in Poundland’s legitimate interest to store and use that data for those purposes.

We try to ensure that we deliver the best levels of customer service but if you are not happy please do contact us so that we can investigate your concerns. Please contact us using the customer.Relations@poundland.co.uk email address above.
ICO
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), which is the UK regulator for data protection issues in the United Kingdom. You can do this online through the ICO’s website at www.ico.org.uk, by telephone on 0303 123 1113, or by writing to them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

We keep our privacy policy under regular review.
This version was last updated September 2023. It may change and if it does, these changes will be posted on this page and, where appropriate, notified to you.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during our relationship with you.
Third party links
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. Please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any personal data that may be collected through these websites or services, such as Contact and Location Data. We strongly recommend that you check these policies before you submit any personal data to these websites or use these services.

We may collect, use, store and transfer different kinds of personal data about you. We have set out below what we call this type of data and provide examples of this data in the table below.
In this Privacy Policy, if we refer to ‘Identity & Contact Data’, ‘Profile Data’, ‘CCTV Data’, ‘Financial & Transactional Data’ ‘Usage Data’, ‘Marketing and Communication Data’, we are referring to the examples in in the table below.

Type of Data	Description/Example
Identity & Contact Data	Details such as your first name, last name, maiden name, email address, delivery address, billing address and telephone numbers date of birth, gender.
Profile Data	Includes your username and password when creating an account, purchases or orders made by you, your interests, preferences, feedback and survey responses.
CCTV Data	We use CCTV and other surveillance systems, such as body worn cameras in Poundland stores, our Distribution Centres and our Head Office in the United Kingdom to record images of customers, staff and other visitors to store. We also use mounted CCTV cameras on our delivery vehicles which look out to the road and into the cab of the vehicles. These cameras may capture footage of pedestrians and other vehicles while in use.
Technical Data	This is technical information including Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
Usage Data	This includes details about how you use our website, including products you viewed or searched for and whether you put any items in your basket.
Marketing and Communications Data	This includes your preferences in receiving marketing from us and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing our Website. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
We do not collect any special categories of personal data about you (such as your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

We will collect and process the following data about you from:

• Our direction interactions with you. We collect most personal data directly from you. You may give us your Identity & Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

  • choose to purchase our products or services;

  • create an account  on our website;

  • subscribe to our service or publications;

  • request marketing to be sent to you;

  • enter a competition, promotion or survey; or

  • give us feedback or contact us.

• Automatic collection through your interaction. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies. Please see our cookie policy - www.poundland.co.uk/cookie-policy for further details.

We use cookies to distinguish you from other users of our site. This helps us to provide you with a better experience when you use our website and helps us to continuously improve our site. For detailed information on the cookies we use, the purposes for which we use them and how you can exercise your choices regarding our use of your cookies, see our cookie policy www.poundland.co.uk/cookie-policy

We will only use your personal data where the law allows us to do so. To make this easier to read, we have set this out in table format below. The table describes the ways in which we plan to use your data and the legal basis which we rely on to do so.

Purpose/Activity	Type of data collected	Our lawful (legal) basis for processing
To register you as a new customer	(a) Identity & Contact	(a) Performance of a contract with you to enable you to create an account with us.
To process and deliver your order including: (a) Manage payments, fees and charges	(a) Identity & Contact (b) Financial & Transactional	(a) Performance of a contract with you in order to provide you with the Goods you have purchased.
CCTV Data		(a) Legitimate interests to: prevent, reduce and detect crime and anti-social behaviour. protect the health and safety of customers, staff and visitors;  assist the police to prosecute or alternatively to pursue any offenders through the civil justice system; assist with the investigation of health and safety and other occurrences, including employment issues, for example, disciplinary investigations, where appropriate to do so; and to assist with the investigation of civil litigation matters and support Poundland in its defence of such matters. Please note appropriate signage is in place in all locations where recording takes place, including on our delivery vehicles, notifying members of the public and employees that CCTV is in operation
To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey	(a) Identity & Contact (b) Profile (c) Marketing and Communications	(a) Performance of a contract with you (b) Necessary to comply with a legal obligation to update you of any changes to our terms or this privacy policy. (c) Necessary for our legitimate interests to keep our records updated and to study how customers use our products in order to improve the service we provide to you.
To enable you to partake in a prize draw, competition or complete a survey	(a) Identity & Contact (b) Profile (c) Usage (d) Marketing and Communications	(a) Performance of a contract with you to update you about the prize draw or submit your survey.  (b) Necessary for our legitimate interests to study how customers use our products to develop them to continue to build our business
To administer and protect our business and this website including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data.	(a) Identity & Contact (b) Technical	(a) Necessary for our legitimate interests to help run and protect the business through administration and IT services, network security.
To  deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you	(a) Identity & Contact (b) Profile (c) Usage (d) Marketing and Communications (e) Technical	Necessary for our legitimate interests to study how customers use our products in order to develop them, which will grow our business and shape how we market products of interest to you.
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences	(a) Technical (b) Usage	Necessary for our legitimate interests to define types of customers for our products and services, to keep our website updated and relevant and to help improve how we interact with you
To make suggestions and recommendations to you about goods or services that may be of interest to you	(a) Identity & Contact (b) Technical (c) Usage (d) Profile (e) Marketing and Communications	Necessary for our legitimate interests to develop our products/services and grow our business.

Marketing
We always strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

Promotional Offers
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you.
This is how we decide which products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have requested information from us or purchased goods from us and you have not opted out of receiving that marketing. Remember you can always opt-out of such marketing by contacting the Customer Service team at customer.relations@poundland.co.uk.

Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason does not conflict with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Service providers
We may provide personal data to third parties who help us use it for the purposes described in section 7 to deliver and improve the products and services we offer to you. For example:

• Technology and data base services (such as storage and analysis of data). Our databases of personal data may be hosted by third parties on our behalf.
• We may use third party email broadcasting services in order to send emails or SMS messages.
• We use payment service providers in relation to any payments made when purchasing our products.
• We sometimes use market research companies to help us better understand our customers.
• We may share your information with our legal and other professional advisers.
• Our CCTV system is operated by trained Poundland staff and the systems are maintained by a specialist company.

Other companies

• We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
• Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

Government/Law Enforcement Authorities

• HM Revenue & Customs, regulators and other authorities who require reporting of processing activities in certain circumstances
• Personal data may be shared with certain government authorities or law enforcement officials for the detection or prevention of crime.

We may also share your personal information outside of the UK and European Economic Area (EEA). Typically, this is where a particular service provider which we use is located outside of the EEA, for example, where we use cloud-based technology or a data centre or backup facility overseas. We may also have staff who work for one of our suppliers outside of the UK and EEA who may also need to access data for purposes such as technical support or system development and testing.

When we do send personal data outside of the UK and EEA overseas, we will make sure that suitable safeguards and security measures are in place to protect the information. For example, these safeguards might include:

• Putting in place a contract with the recipient containing terms and standard data protection clauses which have been approved by the authorities as providing a suitable level of protection.
• Sending the information to an organisation which is a member of a scheme which has been approved by the authorities as providing a suitable level of protection.

This means that when such transfer (as set out above) takes place, you can expect a similar degree of protection in relation to your personal information as required by law in the UK.

We take the protection of your data seriously. We have put in place appropriate security measures to prevent your personal data from unauthorised access, alteration, or disclosure. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to contractual terms. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

You have the right to opt out of receiving marketing communications from us at any time by:

• informing us that you wish to change your marketing preferences by contacting our customer support team at customer.relations@poundland.co.uk.
• Making use of the simple “unsubscribe” link in emails or any other electronic marketing materials we send to you.

We keep personal data only for as long as is necessary for the purposes for which it was collected and is held including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.
We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.
When determining the appropriate retention period, we take into account the amount, nature and sensitivity of the personal data, the possible risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means. In most cases we will retain your data for no more than 6 years following our last contact with you.
Details of retention periods for different aspects of your personal data are set out in our retention policy, which you can request from us by contacting customer.relations@poundland.co.uk. We will provide such details as are relevant to you and your request.
In some circumstances you can ask us to delete your data: see Your legal rights below for further information.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

You have several different rights in relation to the personal data that we hold about you. These are briefly described below. To enquire about exercising these rights, please use the contact details set out in section 2 above
You have the right to:

• Request access to your personal data (commonly known as a "data subject access request") to find out what personal data we hold about you.
Request correction of the personal data that we hold about you. If the information that we hold about you is inaccurate or out of date, you have a right to ask us to correct it, though we may need to verify the accuracy of the new data you provide to us. Request erasure of your personal data. In certain circumstances you can ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party). See section 10 above for details of where and why we rely on legitimate interest. If you disagree with us relying on the legitimate interests grounds for using your personal data you can object to us doing so. We will then reassess the extent to which we can continue to use the data in light of your particular circumstances.
• Request restriction of processing of your personal data. This enables you to ask us to suspend or restrict the processing of your personal data.
• Request the transfer of your personal data to you. We will provide to your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.

We may collect and process the following data about you:
Information that you give us
You may give us information about you by filling in forms on our website, (“Our Website”), or by corresponding with us by telephone, email or otherwise. This includes information you provide when you register to use Our Website, subscribe to our service, subscribe to our email newsletter, search for a product, post material or request further services/ information. We may also ask you for information when you enter a competition, promotion or survey and when you report a problem with Our Website. The information you give us may include:

Newsletter Sign Up Form:

• first name
• email address

Contact Us Form:

• title
• forename
• surname
• email address
• message content

If you contact us in writing, we may keep a record of that correspondence. When you subscribe to our Newsletter you will have consented to receiving this as an electronic copy and for your data to be used for. If you are providing us with your personal information so that you can participate in a survey or for us to help you with a complaint/enquiry then it is in Poundland’s legitimate interest to store and use that data for those purposes.

 

(a) With regard to each of your visits to Our Website we may automatically collect the following information:

• Technical information, including the Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
• Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from Our Website (including date and time); products you viewed or searched for, the resources on Our Website you accessed, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any telephone number used to call our customer relations number.

We use and share data for evaluation purposes. This includes assessing its suitability for a particular purpose and, for example, deciding whether or not it would be useful to us as part of a product or service. Sometimes it may be necessary to share data with a third party in order for them to be able to match it to data that they hold and return additional data to us.

(b) We use CCTV in Dealz stores in the Republic of Ireland to record images of customers, staff and other visitors to store.

This section explains the legal basis on which we process personal data.

Legitimate interests

Data protection law allows the use of personal data where necessary for legitimate purposes provided that this isn’t outweighed by the impact it has on the relevant individuals. The law calls this the “legitimate interests” condition for processing personal data.

Most of our processing activities are based on the legitimate interests condition. This includes almost all of our store CCTV, credit referencing and data marketing services. When the use of your personal data is based on our “legitimate interests”, these are:

• to support our customers’ needs, including helping with enquiries;
• to understand our customers including their patterns, behaviours as well as their likes and dislikes;
• to protect and support our business, our staff, customers, suppliers and visitors;
• to prevent and detect anti-social behaviour, fraud and other crime;
• to test and develop new products and services as well as improve existing ones.

Consent

We sometimes rely on consent from the relevant individuals in order to process their personal data, but this is relatively rare. It is used as the basis for sending marketing materials to consumers by email, telephone, SMS or similar methods, for example.

Performance of our contract with the relevant individual

When a person signs up to one of our websites, we agree to provide them with products and services as set out in the Terms & Conditions for the relevant website. We need to use some of their personal data in order to be able to provide them with those products and services.

We also use this basis for processing some of our staff data.

We work closely with third parties (including, for example, but not limited to, business partners, sub-contractors in technical, payment, delivery and customer services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.

We use information held about you in the following ways:

Information you give us

We will use this information:

• to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us and your complaints and enquiries;
• to provide you with regular email bulletins, promotional offers and/or information about our products and services.  We will only use your information for such marketing purposes if you have ‘opted in’ confirming that you agree and accept to receive post / SMS / email from us;
• to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
• to provide you with information about goods or services we feel may interest you. If you are an existing customer, we will only contact you by electronic means (email or SMS) with information about goods and services. If you are a new customer, we will contact you by electronic means only if you have consented to this;
• to notify you about changes to our service;
• to analyse market trends and use of Our Website.

Information provided by you during the submission of a competition/promotion entry

We may use this information:

• for administration purposes of the competition/promotion;
• in instances where the competition/ promotion prizes are distributed by a third party, the winners’ names, addresses and contact telephone numbers will be forwarded to that third party in order for them to arrange delivery of the prizes;
• for post-competition/promotion/ future publicity purposes;
• in the case of the winners, your name and home town may be published on Our Website and made available to third parties upon written request within a specified time after the closing date of the competition/ promotion;
• where you have opted in to receiving email newsletters from us, your competition/ promotion registration details will be added to our mailing list. You can leave the mailing list at any time by following the simple ‘unsubscribe’ instructions included on each email newsletter.

Information we collect about you

We will use this information:

• to administer Our Website and for internal operations, including trouble shooting, data analysis, testing, research, statistical and survey purposes;
• to improve Our Website to ensure that content is presented in the most effective manner for you and your computer;
• to allow you to participate in interactive features of our service, when you choose to do so;
• as part of our efforts to keep Our Website safe and secure;
• to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
• to make suggestions and recommendations to you and other users of Our Website about goods or services that may interest you or them.

The purposes of the store CCTV systems are:

• to Prevent and detect crime – e.g. vandalism, fraud;
• to protect the health and safety of customers, staff and visitors;
• to assist the police to prosecute or alternatively to pursue any offenders through the civil justice system.

Information we receive from other sources

We may combine this information with information you give us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).

All information you provide to us is stored securely and is only used for the purposes for which it was collected We use data centres in USA (compliant with GDPR) to store personal data related to those who have subscribed to our Newsletters

Disclosure of your information

Other companies

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

Service providers

We may provide personal data to third parties who help us use it for the purposes described in section 2. For example:

• Our databases of personal data may be hosted by third parties on our behalf.
• Some of our products and services rely on us sending personal data to third parties who then analyse or enhance it and return the results to us.
• We use third party email broadcasting services in order to send emails or SMS messages.
• We use payment service providers in relation to any payments made by individuals.
• We sometimes use market research companies to help us better understand our customers.
• Our CCTV system is operated by trained Dealz staff and the systems are maintained by a specialist company.

These service providers are generally not allowed to use information for their own purposes or on behalf of other organisations.

Business transfers

If we sell our business to a third party, or go through a corporate reorganisation, we will transfer personal data to the company that acquires the business.

Regulators

We may sometimes need to pass personal data to a regulator such as the Data Protection Commission, Information Commissioner’s Office or the Financial Conduct Authority.

Within Europe

We are based in the United Kingdom, and will access and use personal data from here.

Elsewhere

We also send information elsewhere in the world. F-or example, where we use cloud-based technology or a data centre or backup facility overseas. People in other countries may also need to access that database for purposes such as technical support or system development and testing.

While countries within the European Union all ensure a high standard of data protection law, some parts of the world may not provide the same level of legal protection in relation to personal data. As a result, when we do send personal data overseas, we will make sure that suitable safeguards are in place to protect the information. For example, these safeguards might include:

• Putting in place a contract with the recipient containing terms which have been approved by the authorities as providing a suitable level of protection.
• Sending the information to an organisation which is a member of a scheme which has been approved by the authorities as providing a suitable level of protection. One example is the “Privacy Shield” scheme that has been agreed between the European and US authorities.

We keep personal data only for as long as is necessary for the purposes for which it is held. You will need to contact us or refer to the privacy notices for our specific activities in order to find out exactly how long the data is kept for.

We perform various profiling activities using personal data. When we refer to profiling, we mean using personal data to make predictions about people, or to categorise them into particular groups.

Our Website uses cookies to distinguish you from other users of Our Website.  This helps us to provide you with a good experience when you browse Our Website and also allows us to improve Our Website. For detailed information regarding the cookies we use and the purposes for which we use them, see our Cookie policy (below).

Our Website may, from time to time, contain links to and from other websites. If you use the links to leave Our Website and visit a website operated by somebody else, you should note that we do not have any control over that website. Accordingly, we cannot accept responsibility for the protection and privacy of any information which you provide while visiting such sites. You should exercise caution and read the Privacy Policy applicable to the website in question before you submit any personal data to these websites.

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to Our Website; any transmission is at your own risk. We provide advice on our forms about how to help ensure the security of your data. However, once we have received your information, we will take appropriate security measures to try to prevent unauthorised access.  For more information on the Data Protection Act 2018, please visit the website maintained by the Data Protection Commission and Office of the Information Commissioner.

You have several different rights in relation to the personal data that we hold about you. These are briefly described below. To enquire about exercising these rights, please use the contact details set out in section 1.

• Access: You have a right to find out what personal data we hold about you, and certain other information such as how we are using it.
• Withdrawal of consent: When we rely on your consent to use your data (see section 3 above), you have the right to withdraw that consent at any time.
• Objection to direct marketing: You have the right to object to us using your personal data for direct marketing purposes. If you do this we will stop using it for those purposes.
  With effect from 25 May 2018 you also have the following rights:
• Rectification: If the information that we hold about you is inaccurate or out of date, you have a right to ask us to correct it.
• Objection to legitimate interests: If you disagree with us relying on the legitimate interests grounds for using your personal data (see section 3 above), you can object to us doing so. We will then reassess the extent to which we can continue to use the data in light of your particular circumstances.
• Erasure: In certain circumstances you can ask us to delete your personal data from our systems. However, this usually won’t apply to all of your data because we might have good reason for needing to keep some of it.
• Restriction: In some circumstances you can ask us to restrict the ways in which we use your personal data.
• Portability: You have the right to receive some limited kinds of information in a portable format.

We try to ensure that we deliver the best levels of customer service but if you are not happy you should make contact so that we can investigate your concerns. Please contact us using these details:

Post: Customer Relations Team, Dealz ROI, Unit 7 – 15 The Hub Logistics Park, Bracetown, Clonee, Co Meath, ROI, D15 X3VC

Email: customer.relations.dealz@ie.dealz.eu

Telephone: 1 89 09 30 843

You also have the right to lodge a complaint to the Data Protection Commission (DPC) which is the body that regulates the handling of personal data in Ireland. You can do this online through the DPC’s website at https://www.dataprotection.ie/, by telephone on  01 7650100 / 1800437 737 or by writing to them at Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.