Relax... Your data is in safe hands with All Things Office
General Data Protection Regulation, or GDPR, is changing how businesses process and handle customer data. Our helpful guide explains what it means for you. It won't take long, so you'll soon be back to shopping.
Don't worry, GDPR is really easy to get to grips with.
We'll keep things simple and explain to you what you should know...
There are new changes in European privacy law, this means all businesses now have to take greater care of your personal information and this includes how they collect, use and protect it. There have always been laws around data and on the 25th May 2018, the current regulations are being refreshed and replaced by the General Data Protection Regulation (GDPR for short).
At its heart, GDPR wants to better reflect the modern world we live in and make sure our personal information is kept safe and secure by businesses that use it. It's a good thing for all of us.
What is personal data?
From your name and address to unique account numbers, any information that can identify you can be classed as personal.
This information is used by a vast array of organisations from your employer storing your personal details at work, to how your favourite shop targets you with their promotional offers.
Under the new rules, businesses are now required to take greater care over your personal information and how it's used.
What does the regulation say?
The new regulation aims to put you in further control of your information. You now have additional rights & this includes the right to access the information companies hold so you can understand what companies know about you. More information can be found in our privacy notice at the bottom of this page.
1. Data Controllers and Data Protection Officer
An organisation who collects, uses and manages personal data as you shop, is known as a Data Controller. The person whose job it is to make sure we act in accordance with the law is the Data Protection Officer. It’s who you should contact if you have any concerns over the use of your data
2. How we use your data
We collect personal data to help us provide you with the best possible shopping experience. This is so we can make the right goods and services easily accessible to you and to also keep you in the know about things that may interest you. It’s nothing to worry about and we’re always here to help.
3. Why we need your data
Personal data is anything that identifies you or relates to you. Things like your name, home address, email address or account details. We’ll only collect and use this information where it is needed for us to be super-efficient in providing the goods and services you want from us. Plus, we’ll only keep your data for as long as we are required to do so by law.
4. Who we transfer data to
Transferring your personal information to trusted partners such as courier companies delivering your parcels needs to take place so we can provide the best service to you. You can be sure that all the right safeguards are in place when we transfer your personal data.
5. Your rights
You have a number of rights under data privacy laws. You can have errors corrected, restrict how your information is used, object to the way your information is processed and control how it’s used for marketing purposes. You can also request a copy of what data we hold and make a complaint if you feel you have not been treated fairly.
6. Credit Applications
Applying for credit means we’ll need to know more about you, so we can responsibly provide the right amount of credit for you. The information is collected from you or from credit reference agencies is under the same conditions as any other personal information and, as always, you’re protected by law.
7. Fraud Prevention
When it comes to preventing fraud and money laundering we leave no stone unturned. Whether it’s our own checks or with the help of trusted third parties, your personal data will be used for fraud prevention purposes so that we can minimise any risk to you or us while you shop.
8. Contacting us and Unsubscribing
If you have any queries about data protection or would like a full list of companies who may receive your information, write to us and we’ll provide everything you need. To unsubscribe from marketing offers and updates, customers with access to My Account can change their preferences online anytime. Or, if you don’t have a registered online account, you can telephone or write to us and we’ll do everything we can to help.
We keep your data safe so there
won't be any unexpected surprises.
Our commitment to keeping your information private and safe hasn't changed! Trust has always been of great importance to us and will continue to be.
We continue to review how we work and will always have your interests at heart.
As a result, we have updated our privacy notice to reflect our open and honest approach to how we collect and use your information. We have also created a new privacy hub to provide you with a simple guide to understand the recent changes that are taking place and what new rights you have.
Above all we want to be clear on our ongoing promise to keep your information safe.
In summary this policy explains how:
- We will be open about what data we collect
- We will be open about how we use it
- We will demonstrate to you how we take your privacy very seriously
Making our shopping
experience unique to you!
We want to provide you with the best possible shopping experience and using some of your information helps us to do that. By using your information, we can carefully select products and services that we think may be of interest to you rather than just send out lots of updates.
If you are a customer or signed up to hear from us, then we may communicate things like promotions, discounts, new product launches or sale previews to you via email or text. Here's a quick example of how this works.
This Christmas we were able to help thousands of our customers buy a secure a new to market HP Printer at an amazing introductory price.
We were able to identify a group of customers who we knew were interested in consumable savings. Using this information we were able to contact those people with the a hand selected deal using emails to communicate our offer.
Our customers secured the best product at the best price. We made it easy for our customers to find the right product and were effective in our marketing. It’s a win win.
This policy has been prepared with due regard to the data protection laws applicable to the data processing activities performed by us in the countries in which we operate ("applicable laws"), including the General Data Protection Regulation ("GDPR") and any subsequent amendment or legislation passed to enact GDPR into UK law. Although the GDPR applies to EU subjects and processing in the EU, we have chosen to apply the GDPR standard of data protection to all data subjects whose personal information we collect and process irrespective of the place of collection and processing. This notwithstanding, it may still be necessary to apply different standards in response to the laws in different countries and it is possible that we may issue addendums for specific countries in which we operate, and where appropriate.
Information we collect and what we use it for
To access certain areas of the website, we may need you to register with us. During the registration process you will be asked to submit personal information about yourself (e.g. name and email address). By entering your details in the fields requested, you enable us and/or our official partners to provide you with the services you select. When you provide such personal information, you accept that we may retain your personal information and that it may be held by us or any third party that processes it on our behalf for the purposes of providing the information, goods or services which you have requested. Any third parties who process personal information on our behalf are required to maintain the confidentiality and privacy of the personal information that they process for us. When we provide you with products or services we may collect and store any personal information that you provide to us. We may, for example, keep a record of your name, address, delivery address, email address, telephone number and payment card details.
When you submit your CV and/or application for a particular role to us, this will be used solely in connection with your application and will not be shared with third parties other than those engaged by us in connection with the recruitment process, such as recruitment consultants or agencies.
We may use your data for the following purposes:
- Providing products and services you request or have expressed an interest in
- Marketing to you via email, phone, mobile messaging, direct mail, or social media
- Administering any competitions, voting, quizzes, and or other offers/promotions which you enter
- Creating an individual profile for you so that we can understand and respect your preferences
- Communicating with you if any products or services you have requested are unavailable
- Fraud screening and prevention purposes
- Record keeping purposes
- Market research so that we can improve the products and services we offer
- Activity logging on our digital platforms
- Personalise and improve your experience on our digital platforms
- Personalise any communications that we may send you
- Responding to your enquiries and requests in an efficient and effective manner
When you sign up with us for an online account, register to receive marketing communications from us (and/or our official partners), enter one of our competitions, fill in one of our forms (whether online or offline) or otherwise expressly provide us with your personal information, we may collect and store any personal information that you provide to us and may use it to personalise and improve your experience on our digital platforms, provide products and services you request from us, and carry out market research.
When you interact with our digital platforms, we may also automatically collect the following information about your visit. This is primarily to help us better understand how our fans use our digital platforms to enable us to create better content and more relevant communications:
- How you have reached our digital platform, the internet protocol (IP) address you have used, and the MAC address of your device
- Your operating system, browser type, versions and plug-ins
- Your journey through our digital platform, including which links you click on and any searches you made, how long you stayed on a page, and other page interaction information
- Content you have viewed and the duration
- Offers you have redeemed
- Which adverts you saw and responded to
- Which pop up or push messages you might have seen and responded to
- Your current subscription status
- Information collected in any forms you complete
- Location based services
We may also infer your country of location from the IP address you have used to access our digital platforms.
We may also generate, use and disclose aggregated and/or anonymised information and statistics about our website and digital platform visitors for marketing and strategic purposes. However, no visitor will be individually identifiable from these aggregated and/or anonymised information and statistics.
If you are under 16
If you are under 16 and register for restricted areas of our digital platforms, we will collect your date of birth and retain that with your name and other details you may provide. This is so we can ensure we treat you in an age appropriate way in line with this policy.
If you have signed up to receive a product or service, we may contact you about this.
If you are aged 13-15, you must first tell your parent or legal guardian that you wish to register on our digital platforms and get their consent. You must make sure that your parent or legal guardian knows and agrees each time before you:
- email us or ask us to email anything to you
- send any information to us
- enter any competition or game that requires information about you or offers a prize
- offer or agree to buy anything online
If you are the parent or legal guardian of a user of our digital platforms who is aged 13 to 15 we do not seek your direct consent to their registration, but we expect them to inform you and get your agreement in advance before they register and before each time they do any of the activities listed above.
Aged under 13
If you are under 13, you may only use the restricted areas of our digital platforms if your parent or legal guardian has first told us that you are allowed to do so.
If you are under 13 and wish to register, you must truthfully tell us your name, email address, country and date of birth. We will then ask you for the name and email address of your parent or legal guardian. We will send them an email, so they are aware of your request and will ask them for their consent and to confirm they have authority to give that consent. We need their consent or refusal within 7 days, or else we will assume consent is not granted. Their consent can be withdrawn at any stage.
Even if your parent or legal guardian gives their consent to your registration, if you are under 13 we still expect you to tell them and get their agreement in advance each time before you:
- email us or ask us to email anything to you;
- send any information to us;
- enter any competition or game that requires information about you or offers a prize;
- offer or agree to buy anything online.
If you are the parent or legal guardian of a user of our digital platforms who is under 13, they can access and use unrestricted areas, but we will need your direct consent if they wish to gain access to restricted areas.
There are two broad categories of cookies – ‘first party cookies’ and ‘third party cookies’. First party cookies are cookies that are served directly by the website operator to your computer and are used only by the website operator to recognise your computer when it revisits that site. Third party cookies are served by a service provider on behalf of the website operator and can be used by the service provider to recognise your computer when it visits other websites. Third party cookies are most commonly used for website analytics or advertising purposes.
The cookies that are set by visiting this website include:
- _ga: Google Analytics cookie, which is used to distinguish users.
- __utm*: Google Analytics non-personally identifiable information used for website analytics.
- _atuvc: associated with the AddThis social sharing widget
- _atuvs: associated with the AddThis social sharing widget
Disclosure of your information
In order to provide our products and services to you or to otherwise fulfil contractual arrangements that we have with you, we may need to appoint other organisations to carry out some of the data processing activities on our behalf. These may include, for example, payment processing organisations, delivery organisations, fraud prevention and screening and credit risk management companies, and mailing houses.
We may share your data with advertising networks and/or social media platforms for the purposes of selecting and serving relevant adverts to you via those networks/platforms, and to search engine and analytics providers.
We may share your data with third parties:
- if we are under a legal or regulatory duty to do so
- if it is necessary to do so to enforce our terms and conditions of sale or other contractual rights
- to lawfully assist the police or security services with the prevention and detection of crime or terrorist activity
- where such disclosure is necessary to protect the safety or security of any persons
- and/or (e) otherwise as permitted under applicable law.
Updates and your rights
If you would like to update your records, you can do so by changing your profile on our website. We encourage you to promptly update your personal information if it changes.
You have the right to ask for a copy of any personal information that we hold about you in our records, to correct any inaccuracies and to update any out-of-date information. Please write to us at the address published on our contact section should you wish to do so.
We will provide a copy of your information free of charge. However, if the request is deemed manifestly unfounded or excessive then we will charge a ‘reasonable fee’ covering our administration costs.
Changes to this Policy
Security is very important to us. Secure Socket Layer ("SSL") encryption technology is used for protection of information in transit for any sensitive transactions such as payments. Additional security procedures are in place to protect the confidentiality, integrity and availability of your personal information.
In addition, we have security procedures in place to protect our physical records and computerised databases from loss and misuse, and only allow access to them when it is absolutely necessary to do so, and then under strict guidelines as to what use may be made of the personal information contained within them.
Given that the Internet is a global environment, using the Internet to collect and process personal information may involve the transmission of personal information on an international basis. Therefore, by using our websites and digital platforms and communicating electronically with us, you acknowledge our processing of personal information in this way. However, we will endeavour to protect all personal information collected through our websites and in accordance with strict data protection standards.