Next Retail Limited ("Next") are committed to complying with the General Data Protection Regulation and the Data Protection Act 2018, once enacted. Looking after the personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to offer you a better and more personalised shopping experience.
We have published this notice to help you understand
If we make changes to this notice we will notify you by updating it on our website. Next will be what is known as the 'Data Controller' of the personal data you provide to us, and we will sometimes refer to ourselves in this notice as "we" or "us". By Data Controller, this means Next determines the purposes and way in which any personal data are, or will be, processed. Should you need to contact us please write to:
Data Protection Officer
Next Retail Limited,
or via email@example.com quoting Security and Privacy Enquiry.
This privacy notice was last updated on 2nd May 2018.
When you buy goods from us, you are entering into a contract with us. You will need to set up a Next Account before ordering from us, so we can set this up we will ask you to provide some personal information such as;
As an existing customer if you have shopped with us using a credit or debit card, or we have taken these details for a payment authorisation, we will securely collect and store this payment card information. New customers and existing customer whose payment cards have expired, will be asked if you would like to automatically store these details in order to speed up the payment process. If you set up a direct debit payment, we will also collect bank details from you.
When you apply for a credit account, we get information about you from credit reference agencies. This is covered in more detail in the section, Who we share your information with and why.
When you shop in our stores Next uses CCTV for security monitoring purposes.
Data Protection says that we are allowed to use and share your personal data only where we have a proper reason to do so. The law says we must have one or more of these reasons and these are:
Here is a list of the ways that we may use your personal information, and which of the reasons described above we rely on to do so. Where we list legitimate interests as a reason, we also describe below what we believe these legitimate interests are.
|What we use your personal information for||Our reasons (legal basis)||Our explanation of Next's legitimate interests|
|Set up your Next account||Legitimate interest||Process efficiency in dealing with such activity.|
|Storing payment cards||Consent||N/A|
|Process your orders||Fulfilling a contract||N/A|
|Notify you of your order status.||Legitimate interests||Process efficiency in dealing with such activity, and to make improvements to our services.|
|Manage your account/ Â provide customer services to you.This may include:transfers to Third Countries who undertake customer services/communications activitiescall recordingdata verificationÂ customer complaints/queries||Legal obligation/Legitimate interests(depending on nature of services)||Keeping our records up to date, handling our customer contact efficiently and effectively, working out which of our products and services may interest you and telling you about them.|
|To detect, investigate and report financial crime (e.g. Fraud)||Legal Obligation / legitimate interests||Developing and improving how we deal with financial crime.Complying with any legal obligation placed on us by regulators such as the FCA.Complying with any regulations that apply to us.Process efficiency in dealing with such activity, and to make service and process improvements.|
|Undertake website personalisation and administration.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers.Improving customer interaction with our sites. Defining types of customers for new products or services|
|Marketing communications to inform you of special offers, promotions, new lines and Sales. Provide you with online advertising.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers.Improving customer interaction with our sites.|
|Notifying you about enhancements to our services, such as changes to the website and new services that may be of interest to you.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers.Improving customer interaction with our sites.|
|Contact you to undertake customer satisfaction surveys, invite you to provide product reviews or for market research.||Legitimate interests||Developing products, services, applications and designs that attract and retain customers.Improving customer interaction with our sites.|
|Maintaining network and data security||Legitimate interests||To maintain the security of our network this in turns helps us to maintain the safety and confidentiality of your information.|
|Logistics planning, demand forecasting, management information and research||Legitimate interests||We use information about shopping habits, products bought and volumes, to help us to respond to demand, ensure the right products get to the right areas and to help us plan our ranges.|
Some examples of the categories of third parties with whom we share your data are:Supplier Partners
The identities of the CRAs, and the ways in which they use and share personal information,Â are explained in more detail at:
Experian http://www.experian.co.uk/crain/index.html" Credit Reference Agency Information Notice
CallCredit http://www.experian.co.uk/crain/index.html"Credit Reference Agency Information Notice
Equifax https://www.equifax.co.uk/crain.html"Credit Reference Agency Information Notice
We will use automated credit-scoring methods to assess your application and to confirm your identity. We will automatically check your credit history against our lending criteria and if you don't meet our requirements you will be declined for credit.Â For more information see the CRAIN notices above. There is also an automated decision section below with further detail.Should you wish to object to the use of automated credit scoring, please contact the Data Protection Officer.
We will use automated credit-scoring methods to assess your application and to confirm your identity. We will automatically check your credit history against our lending criteria and if you donâ€™t meet our requirements you will be declined for credit.Â For more information see the CRAIN notices above. There is also an automated decision section below with further detail.Should you wish to object to the use of automated credit scoring, please contact the Data Protection Officer.
Debt recovery and fraud prevention servicesBefore we provide services, goods or financing to you, we undertake checks for the purposes of preventing fraud and money laundering, and to verify your identity. These checks require us to process personal data about you.The personal data you have provided, we have collected from you, or we have received from third parties will be used to prevent fraud and money laundering, and to verify your identity.Details of the personal information that will be processed include, for example: name, address, date of birth, contact details, financial information, employment details, device identifiers including IP address and vehicle details.
We and fraud prevention agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.
We process your personal data on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. Such processing is also a contractual requirement of the services or financing you have requested.
We process your personal data on the basis that it is necessary in the public interest or in exercising official authority for us to prevent fraud and money laundering, and to verify identity, in order to protect ourselves and to comply with laws that apply to us.
Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to pose a fraud or money laundering risk, your data can be held for up to six years.
As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct, or is inconsistent with your previous submissions, or you appear to have deliberately hidden your true identity. You have rights in relation to automated decision-making: if you want to know more please contact us using the details above.
Consequences of Processing
If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested, or to employ you, or we may stop providing existing services to you.
A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us on the details above.
Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the European Economic Area. They may also require the recipient to subscribe to 'international frameworks' intended to enable secure data sharing.
Your personal data is protected by legal rights, which include your rights to object to our processing of your personal data; request that your personal data is erased or corrected; request access to your personal data.
For more information or to exercise your data protection rights, please contact us using the contact details above.
You also have a right to complain to the Information Commissionerâ€™s Office, which regulates the processing of personal data.
Some of the information you provide to us may be transferred outside the European Economic Area such as India and the US. This is a transfer to a third country.
If you place an order with us and you are outside of the UK we will transfer the data that we hold on you to Next Retail Limited in the UK.
For example Next has a business relationship with Capita India who provide us with IT support together with customer and supplier account administration services. Although the data is held in UK data centres colleagues in India may access it, for them to undertake the activities described above.
Next also works with suppliers and partners who may make use of Cloud and/or hosted technologies. We undertake data security due diligence on our partners and ensure that these partners conform to appropriate accreditations.
Wherever these transfers take place Next will have an appropriate contract in place to ensure that there are strict rules regarding the confidentiality and security of your information in place to safeguard it. To find out more please contact us at firstname.lastname@example.org.
We want to keep you up to date with information about new ranges, special offers and improvements to our website. When you set your account up, we will ask you if you want to receive this type of marketing information.
Next will not share your information with companies outside of Next Retail Ltd for marketing purposes. Next Retail Ltd includes Next Stores, Next Directory and Next.co.uk.
If you decide you do not want to receive this marketing information you can request that we stop by writing to the Data Protection Officer at the address provided above, email@example.com, by calling the Contact Centre on 0333 777 8000, via My Account online or the unsubscribe link within the email.
You may continue to receive mailings for a short period while your request is dealt with.
If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws.
We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for 7 years after the date it is no longer needed by us for any of the purposes listed under How do we use your information above. The only exceptions to this are where:
You have a right to access the personal data that we hold on you. If you would like to see a copy please send a Â£10 fee and a written request to the Group Data Protection Manager at Head Office, quoting Security and Privacy Enquiry. If you think the information we hold on you is incorrect please contact the Group Data Protection Manager at Head Office or via firstname.lastname@example.org, quoting Security and Privacy Enquiry.
Next is a member of the Direct Marketing Association (DMA) and is required to operate within the rules of the DMA's Code of Practice. This means that Next operate to a high level of commercial standards which are designed to :
You are entitled to request the following from Next, these are called your Data Subject Rights and there is more information on these on the Information Commissioners website www.ico.org.uk
This notice is designed to help you understand what cookies are, how Next uses them and the choices you have in regards to their use.
Cookies are small text files that are stored on your browser or the hard drive of your computer or other device when you visit the Site. This allows the Site to recognise you as a user either for the duration of your visit (using a 'session cookie') or for repeat visits ( a 'persistent cookie'). They are not harmful and do not contain any information such as your home address, date of birth or credit card details.
The cookies we use fall into four broad types:
Strictly Necessary Cookies
These cookies are essential in helping you to move around our Site and use its features, such as accessing secure areas of the website. Without these cookies, services you have asked for, such as setting up an account cannot be provided. These cookies do not gather information about you that could be used for marketing or remembering where you've been on the internet.
In order to keep the Site, its services and products relevant, easy to use and up-to-date, we use web analytics services to help us understand how people use our Site. For example, we can see which parts of the Site and products are most popular, identify when errors occur, and test different versions of a page or feature to see which one works best.
These cookies allow websites and applications to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. The information these cookies collect is usually anonymised which means we can't identify you personally. They do not gather any information about you that could be used for selling advertising or remembering where you've been on the internet, but do help us to serve you with advertising that is more relevant to you.
Targeted Marketing Cookies
If you would like more information on any of these types of Cookies, including how to opt-out, please visit www.youronlinechoices.com/
Cookies are an essential part of how our Site works, as they remember certain information about a visitor. Next uses First Party cookies (these are placed there and used solely by Next) and Third Party cookies (these are placed there by third parties we work with).
To change your cookie settings, or if you want to be notified each time a cookie is about to be used, you should amend the settings provided in your web browser to prevent us from storing cookies on your computer hard drive.
For information on how to disable cookies, please consult the "Help" tab of your browser via the menu bar. For further information on non-essential cookies used for targeting and banner advertising please see below.
Next allows selected Third Parties who participate with us in marketing programs to place cookies when you visit our site. These cookies enable us to monitor which adverts you see and click on to get to our site.
For details of the Third Party cookies we use please see the table below. Next is not responsible for the content or privacy policies of Third Parties or other websites, and we advise that you check these yourself.
The following Cookies are all used for Analytical and Targeting purposes.
Website visitors who don't want their data used by Google Analytics can install the Google Analytics opt-out browser add-on. To opt-out of Analytics for the web, visit the Google Analytics opt-out page and install the add-on for your browser. Learn more about the opt-out and how to properly install the browser add-on here.
Visitors can also opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the Ads Settings.
This Cookie Notice was last updated on 2 May 2018, and further changes will be communicated by updating this notice.
Should you need to contact us please write to:
Data Protection Officer Next Retail Limited, Desford Road, Enderby, Leicester, LE19 4AT
or via email@example.com quoting Security and Privacy Enquiry.