Privacy Notice

Website and Digital Marketing Privacy Notice

Last updated: 24 May 2018

  • 1. Introduction
    • 1.1 dunnhumby respects your right to privacy.  This Privacy Notice explains who we are, how we collect, share and use information (including information about you from which you can be directly or indirectly identified in particular by reference to an identifier) about you, and how you can exercise your privacy rights in relation to your use of our Website at www.dunnhumby.com. For details about how we use your information in relation to our specific products please see the links to Privacy Notices at the login pages for those products.
    • 1.2 If you have any questions or concerns about our use of your information, then please contact us using the contact details provided at the bottom of this Privacy Notice.
  • 2. Quick links
    • 2.1 We recommend that you read this Privacy Notice in full to ensure you are fully informed.  However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link below to jump to that section.
  • 3. What does dunnhumby do?
    • 3.1 dunnhumby is a customer data science company, headquartered in the U.K. but with group companies all around the world.  Our products and services help retailers and brands analyse data in order to improve customer experiences and build loyalty.
    • 3.2 For more information about dunnhumby, please see the "About Us" section of our website at https://www.dunnhumby.com/about-us.
  • 4. What information do we collect and why?
    • 4.1 If you are a user of our Website, we may collect the following information about you:

      Information that you provide voluntarily
    • 4.2 The types of information include your contact details such as your name, email address, postal address and phone number. You may also provide us with your job title and company, its location and sector.
    • 4.3 We may also collect photos, videos or testimonials from you in relation to our products and services where you have given us your consent to do so.
    • 4.4 We may collect and use special categories of information such as information about your dietary requirements where you are attending a dunnhumby event – but only if we have your explicit consent to do so. If you’re unhappy with our use of this type of data, you have the right to withdraw your consent to our use of it at any point using the details provided under the "How to contact us" heading below.
    • 4.5 If you are downloading example data sets ("Source Files"), we also ask you your occupation, country, how you heard about us, and how you will use the data set.

      Information that we collect automatically
    • 4.6 When you use our Website, we may collect certain information automatically from your device.  In some countries, including countries in the European Economic Area, this information may be regulated under applicable data protection and privacy laws.
    • 4.7 Specifically, the information we collect automatically may include your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location), mobile device category and operating system and other technical information.  In addition, we collect information about how your device has interacted with our Website, including the pages accessed, links clicked, requests you have made and documents you have downloaded.
    • 4.8 Some of this information may be collected using cookies and similar tracking technology.
    • 4.9 For further information about the types of cookies we use, why, and how you can control cookies, please see our Cookie Notice.

      Information we collect from other sources
    • 4.10 We may obtain contact information about you from other sources such as public databases, data aggregators, social networking applications and people you know including your name, address, email address and  telephone number.
  • 5. How we use your information and the legal basis for processing it
    • 5.1 We use the information you provide to us voluntarily:
      • 5.1.1 to respond to inquiries you submit (e.g. by completing forms on various sections of our site);
      • 5.1.2 to send you communications regarding products and/or services, or other materials, which may be of interest to you;
      • 5.1.3 to keep a record of who has downloaded our Source Files and accepted their terms of use;
      • 5.1.4 to provide you with information / updates in regard to the sites (e.g. changes to Terms and Conditions and/or this Privacy Policy); and
      • 5.1.5 to advertise our products and services using photos, videos and testimonials from or about you with your consent.
    • 5.2 We collect information automatically about you to technically provide the Website to you, better understand how you use our Website, where you come from, and what content on our Website is of interest to you.  We use this information for our internal analytics purposes and to improve the quality and relevance of our Website to you.
    • 5.3 We use cookie tracking for the same purpose.
    • 5.4 We may also aggregate all of the information we collect about you with that from other users to create management reporting about usage and performance of the Website.
    • 5.5 If you have questions about or need further information concerning the legal basis on which we collect and use information about you, please contact us using the contact details provided under the "How to contact us" heading below.
  • 6. Who does dunnhumby share my information with?
    • 6.1 We may disclose your information:
      • a) to our group companies so that they can understand which products and services are more likely to be suited to you.
      • b) to third party services providers who help us provide the Website and deliver marketing, for example by hosting it, enabling certain features or functionality including user tracking, or by providing ancillary services such as support and maintenance, security technology, or helpdesk support. The main third party service providers that we use for the Website are as follows:
        • Google Cloud Platform ("GCP") – GCP hosts the Website including your photos and testimonials about you where you have consented to these being shown on our Website.
        • Google Analytics – we use Google Analytics to understand the usage of the Website to help us improve the Website. Google Analytics will give each user a unique tracking ID and will process your browsing data and device information.
        • Pardot, Eloqua, Salesforce and Oracle Sales Cloud – we use these to store your information for the purposes of our marketing activities and to send you marketing communications.
        • Vimeo and YouTube – we use these to show videos of you where you have consented to a video of you being shown on our Website.
      • c) to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
      • d) to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your information only for the purposes disclosed in this Privacy Notice;
      • e) to any other person with your consent to the disclosure.
  • 7. How does dunnhumby keep my information secure?
    • 7.1 We use appropriate technical and organisational measures to protect the information that we collect and process about you.  The measures we use are designed to provide a level of security appropriate to the risk of processing your information.  Specific measures we use include restricting access to staff on a need to know basis and sending aggregate data to third parties.
  • 8. International data transfers
    • 8.1 The servers of our headquarters are located in the UK, and our Website servers are located in the United States and Belgium. However our group companies and third party service providers and partners operate around the world. 
    • 8.2 As a result, your information may be transferred to, and processed in, countries other than the country in which you are resident.  These countries may have data protection and privacy laws that are different to the laws of your country and, in some cases, may not be as protective.
    • 8.3 However, we have taken appropriate safeguards to require that your information will remain protected in accordance with this Privacy Notice. These include implementing the European Commission’s Standard Contractual Clauses for transfers of information between our group companies, which require all group companies to protect information they process from the EEA in accordance with European Union data protection and privacy law. 
    • 8.4 Our Standard Contractual Clauses can be provided on request.  We have implemented similar appropriate safeguards with our third party service providers and partners and further details can be provided upon request.
  • 9. Data retention
    • 9.1 We review the information we hold about you every 6 months and will normally retain the information we collect until we no longer require it for our legitimate business purposes. For example, we will generally delete your information after a maximum of 5 years if we have not heard from you.
    • 9.2 We may however keep your information for longer if we have an ongoing legitimate business need to do so (such as to comply with applicable legal, tax or accounting requirements). For example, we retain your information for audit purposes for up to 7 years if we have carried out a transaction with you or the company you work for.
    • 9.3 When we have no ongoing legitimate business need to process your information, we will either delete or anonymise it or, if this is not possible (for example, because your information has been stored in backup archives), then we will securely store your information and isolate it from any further processing until deletion is possible.
  • 10. Third party sites
    • 10.1 Where our sites contain hyperlinks to third party websites you leave our Website when you click through the hyperlinks. We do not control these third party websites or any of the content they contain and we encourage you to read their privacy notices.
  • 11. Your data protection and privacy rights
    • 11.1 You have the following rights:
      • If you wish to access, correct, update or request deletion of your information, you can do so at any time by contacting us using the contact details provided under the "How to contact us" heading below.
      • In addition, you can object to processing of your information, ask us to restrict processing of your information or request portability of your information. Again, you can exercise these rights by contacting us using the contact details provided under the "How to contact us" heading below.
      • You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details provided under the "How to contact us" heading below.
      • Similarly, if we have collected and process your information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your information conducted in reliance on lawful processing grounds other than consent.
      • You have the right to complain to an information authority about our collection and use of your personal information. For more information, please contact your local authority. (Contact details for authorities in the European Economic Area, Switzerland and certain non-European countries (including the US and Canada) are available here.)
    • 11.2 We respond to all requests we receive from individuals wishing to exercise their rights in accordance with applicable laws.
  • 12. Updates to this Privacy Notice
    • 12.1 We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.  We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection and privacy laws.
    • 12.2 You can see when this Privacy Notice was last updated by checking the "last updated" date displayed at the top of this Privacy Notice. 
  • 13. How to contact us
    • 13.1 You can ask to update, or delete your contact details, or unsubscribe from our marketing by contacting our marketing team: CRM_IR@dunnhumby.com.
    • 13.2 If you have any questions or concerns about our use of your information, please contact our Data Protection Officer using the following details: individualrights@dunnhumby.com.  The data controller of your information is dunnhumby Limited.
    • 13.3 If you are from certain regions like Europe you also have the right to lodge any complaints or concerns with your local data protection authority (DPA). You can find a list of the European DPAs here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.