Privacy & cookies policy

Tesco PLC ( Company ) is the data controller of personal data we may collect as part of your site and connected services.

We understand that looking after the personal data you share with us is hugely important. We want you to be confident that your data is safe and secure with us and you understand how we use it, this privacy and cookies policy ( Policy ) sets out this key information.

Personal data we collect about you

This section tells you what personal data we collect about you.

We may collect and process information about you, including without limitation:

• Information that you give us. You may give us information about you by filling in forms on our Website or by matching us by phone, e-mail or otherwise. The information you give us may include your name, address, e-mail address and telephone number, personal description and photograph.

• Information that we collect about you. With regard to each of your visits to our Website, we may automatically collect technical information and information about your visit; and

• Information we receive from other sources. We may receive information about you if you use any of the other websites we operate or the other services we provide. We are also working closely with third parties and may receive information about you from them.

We may supplement the information we collect about you with the information we receive from other public sources (eg public registers such as the electoral roll). This allows us to assess the accuracy of the information we hold about you in order to send you relevant offers and information.

How and why we use your personal data

This section explains how to use your personal data.

Collecting your personal information helps us to better understand what you need from us and to improve our services to you. Without limitation, we may use your information to:

• manage and improve our Website, including to ensure that content is presented in the most effective way for you and for your computer;
• manage our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• personalize our services to you;
• Tell You About Important Changes To The Website And Our Services;
• manage promotions, competitions, customer surveys and questionnaires, and allow you to participate in interactive features of our service when you choose to do so; and
• enhance our efforts to keep our site safe and secure.

You have the right to ask us not to process your personal data for marketing purposes.

Shareholders

If you are a shareholder of the Company, we will process the following personal data:

Your name, postal address, email address, phone number, date of birth and financial information (bank account detail, so we can pay dividends for example) as well as information about your share holdings.

It is a legal requirement that a shareholder's name, address and number of shares held are included in our share register. If this information is not provided, we will not be able to register your shareholding.

We will also process your personal data where necessary to comply with the legal requirements placed upon us, such as the Companies Act, Stock Exchange requirements, financial crime regulations and taxation laws.

Legal basis of processing

In relation to personal data we process to send you any marketing communications that you have agreed to receive, we do so based on your consent. You can withdraw your consent at any time to receive these communications.

In relation to other personal data processed, we process this based on what is called our “legitimate interests”, these are:

• to help you understand our business, its performance and changes;
• keep you informed about news and events, including regulatory news connected with Tesco;
• to manage and keep up your account, resolve problems and respond to complaints;
• to prevent and detect fraud;
• invite you to attend events connected with the above.

Sharing your personal data

We may share personal data with other organizations in the following circumstances:

• With our service providers (such as our website or event hosts) in order to run the service and manage your account;
• If you are a shareholder, with our share registrar service provider;
• If you are a shareholder, with our tracing agents in order to locate “missing” shareholders;
• If the law or public or regulatory authority says we must share the personal data;
• If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purpose of preventing fraud);
• Where we restructure, sell or transfer our business (or part of it). For example, a connection with a takeover or merger.

Data protection officer

Our Data Protection Officer can be contacted by email: DPO@uk.tesco.com 

How we protect personal data

We know how important it is to protect and manage your personal data. This section sets out some of the measures we have in place:

• We apply physical, electronic and procedural safeguards in connection with collection, storage and disclosure of personal data;
• We protect the security of your information while it is transmitted by encrypting it;
• We use computer safeguards such as firewalls and data encryption to keep this data safe;
• We only authorize access to employees and trusted partners who need to carry them out of their responsibilities;
• We regularly monitor our systems for possible vulnerabilities and attacks, and we carry out penetration testing to identify ways to further enhance security; and
• We will ask for proof of identity before we share your personal data with you.

Whilst we take appropriate technical and organizational measures to safeguard your personal data, it is important that you keep your login details and devices protected from unauthorized access.

The personal data that we collect from you may be transferred to and stored at a destination outside the European Economic Area ("EEA"). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. If we do this to ensure that your privacy rights are respected in line with this Policy. The most common way we do this is to put in a specific type of contract called “Standard Contractual Clauses” or through an approved scheme such as “Privacy Shield”.

Complaining the data privacy regulator

We'd like the chance to resolve any complaints you have, but you also have the right to complain to the UK data protection regulator (the ICO) about how we use your personal data. Their website is https://ico.org.uk .

Subject access right

You have the right to see the personal data we hold about you. This is called a “Subject Access Request”.

If you would like a copy of the personal data we hold about you, please write to:

Data Protection Executive, Maldon Building, Falcon Way, Welwyn Garden City, AL7 1GA.

You can also email us at subjectaccess.request@uk.tesco.com

Other privacy rights

If you believe we hold incorrect or inaccurate personal data about you please let us know and we will correct it.

In some circumstances you may also have the right to object to use your personal data, restrict our use of it, have us delete it or have a port and copy it to you or a third party.

You can find out more about these rights by visiting the ICO's website: ico.org.uk , or alternatively contact us (see “Contact Us” section below).

How Long We Use Personal Data For

We will not keep your personal data longer than we need how long this depend on several factors, including:

• Why we collected it in the first place;
• How old it is;
• Whether there is a legal / regulatory reason to keep it;
• Whether we need to protect you or us.

Cookies

Our Website uses cookies to distinguish you from other users of our Website. This helps us provide you with a good experience when browsing our Website and also allows us to improve our Website.

In order to comply with the new rules, we use a system of classifying the different types of cookies that we use on the Website, or which may be dropped by third parties through our Website. The classification was developed by the International Chamber of Commerce UK and explains more about which cookies we use, why we use them, and the functionality you will lose if you decide not to have them on your device.

What is a cookie?

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

You can find more information about cookies at www.allaboutcookies.org and www.youronlinechoices.eu .

Cookies used on our website

We use the following cookies on our website:

• Strictly necessary cookies. These cookies enable services you have specifically asked for. For those types of cookies that are strictly necessary, no consent is required. These cookies are essential in order to enable you to move around the Website and use its features, such as accessing secure areas of the Website. Without these cookies services you are asked for, like shopping baskets or e-billing, cannot be provided.

• Performance cookies . These cookies collect anonymous information on the pages visited. By using the Website, you agree that we can place these types of cookies on your device. These cookies collect information about how visitors use the Website, for instance which pages visitors go to most often, and if they get error messages from the website. These cookies do not collect information that identifies a visitor. All cookies are aggregated and therefore anonymous. It is only used to improve how the Website works.

• Functionality cookies. These cookies remember the choices you make to improve your experience. By using the Website, you agree that we can place these types of cookies on your device. These cookies allow the Website to remember the choices you make (such as your user name, language or region you are in) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of the website that you can customize. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymized and cannot track your browsing activity on other websites.

You can find more information about the individual cookies we use and the purposes for which we use them in the table below:

We collect demographic and interests data in our Google Analytics account via the Third-Party DoubleClick cookie. This allows us to see the age, gender and interests of visitors that have this cookie present in their browser.

Source of Demographics and Interest Data

Google provides the following options for visitors looking to opt out or change their Ads settings:

• https://www.google.com/settings/ads/plugin
• https://www.google.com/settings/u/0/ads/anonymous?hl=en_uk&sig=ACi0TChcVI-wX_RhxCvtAmgiLvcBYa6vtwAvDmtOnDDFszVvLbWy4z6heRmDCcFYM-Th--VngiIoZ3x5GXiMoZ3x5MX_MiMo3

Visitors can also opt out of having their data collected by Google Analytics

https://tools.google.com/dlpage/gaoptout/

Using browser settings to manage cookies

You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Website.

Contact Us

To contact us about this Policy please email online@tesco.co.uk

Last updated: 14 November 2018