Under data protection law, we can only use your personal data if we have a proper reason, for example:

• where you have given consent;

• to comply with our legal and regulatory obligations;

• for the performance of a contract with you or to take steps at your request before entering into a contract; or

• for our legitimate interests or those of a third party.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting us (see ‘How to contact us’ below).

The table below explains what we use your personal data for and why.

​

What we use your personal data for

 

Create and manage your account with us

 

Providing services to you

 

Conducting checks to identify you and verify your identity or to help prevent and detect fraud against you or us

 

To enforce legal rights or defend or undertake legal proceedings

 

Customise our website and its content to your particular preferences based on a record of your selected preferences or on your use of our website

 

Retaining and evaluating information on your recent visits to our website and how you move around different sections of our website for analytics purposes. This helps us to understand how people use our website so that we can make it more intuitive or to check our website is working as intended

 

Communications with you not related to marketing, including about changes to our terms or policies or changes to the services or other important notices

 

Protecting the security of systems and data

 

Statistical analysis to help us manage our business, e.g. in relation to our financial performance, customer base, product range or other efficiency measures

 

Updating and enhancing customer records

 

Disclosures and other activities necessary to comply with legal and regulatory obligations that apply to our business, e.g. to record and demonstrate evidence of your consents where relevant

 

Marketing our services to existing and former customers

 

External audits and quality checks, e.g. for the audit of our accounts

 

To share your personal data with members of our group and third parties in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency

In such cases information will be anonymised where possible and only shared where necessary

 

 

Our reasons

 

To perform our contract with you or to take steps at your request before entering into a contract.

 

To perform our contract with you or to take steps at your request before entering into a contract.

 

For our legitimate interests or those of a third party, i.e. to minimise fraud that could be damaging for you and/or us.

 

Depending on the circumstances:

—to comply with our legal and regulatory obligations;

—in other cases, for our legitimate interests or those of a third party, i.e. to protect our business, interests and rights or those of others.

 

Depending on the circumstances:

—your consent as gathered;

—where we are not required to obtain your consent and do not do so, for our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service to you at the best price.

 

Depending on the circumstances:

—your consent as gathered —see ‘Cookies’ below;

—where we are not required to obtain your consent and do not do so, for our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service to you at the best price.

 

Depending on the circumstances:

—to comply with our legal and regulatory obligations;

—in other cases, for our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service to you at the best price.

 

To comply with our legal and regulatory obligations. We may also use your personal data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests or those of a third party, i.e. to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us.

 

For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service to you at the best price.

 

Depending on the circumstances:

—to perform our contract with you or to take steps at your request before entering into a contract;

—to comply with our legal and regulatory obligations;

—where neither of the above apply, for our legitimate interests or those of a third party, e.g. making sure that we can keep in touch with our customers about existing orders and new products.

 

To comply with our legal and regulatory obligations.

 

For our legitimate interests or those of a third party, i.e. to promote our business to existing and former customers.

 

See ‘Marketing’ below for further information.

 

For our legitimate interests or those of a third party, i.e. to maintain our accreditations so we can demonstrate we operate at the highest standards.

 

Depending on the circumstances:

—to comply with our legal and regulatory obligations;

—in other cases, for our legitimate interests or those of a third party, i.e. to protect, realise or grow the value in our business and assets.

 

Certain personal data we collect is treated as a special category to which additional protections apply under data protection law:

• personal data revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs or trade union membership;

• data concerning health, sex life or sexual orientation.

​

Where we process such special category personal data, we will also ensure we are permitted to do so under data protection laws.

​

We will use such data for the reasons outlined in the table above as relevant in the circumstances but in addition are required by law to meet a further condition to have the right to use such data. Where we use the special categories of data set out above the additional conditions we rely upon are that the processing relates to personal data which is manifestly made public by you (the data subject) and you have given your explicit consent.

 

See ‘Who we share your personal data with’ for further information on the steps we will take to protect your personal data where we need to share it with others.