Supermarket Alliance Limited, Jersey, and Alliance Limited, Guernsey, collectively “Alliance” (referred to as “we” or “us”) for the purpose of this notice, are the data controllers and we are pleased to provide you with the following Privacy Notice.
We are working hard to serve shoppers a little better every day. Looking after the personal data you share with us is a hugely important part of this. We want you to be confident that your data is safe and secure with us and understand how we use it to offer you a better and more personalised shopping experience.
We offer a range of products and services, so we want you to be clear about what this Policy covers. This Policy applies to you if you use our services (referred to in this Policy as “our Services”). Using our Services means:
This section tells you what personal data we may collect from you when you use our Services and what other personal data we may receive from other sources.
When you become an account customer, you may provide us with:
When you browse our websites, we may collect:
When you contact us or we contact you or you take part in promotions, competitions, surveys or reviews about our Services, we may collect:
When you visit our stores:
This section explains in detail how and why we use personal data. In order to collect and process personal data about you we need to have a lawful basis. The main Lawful bases we rely on includes consent (where you have given permission), contract (where processing is necessary for the performance of a contract with you) and our “legitimate interests” (where processing is in the interest of our company and we believe you would have a reasonable expectation for us to do this).
We use personal data to:
We need to process your personal data so that we can manage your customer accounts, provide you with the goods and services you want to buy and help you with any orders and refunds you may ask for.
As an employee, we use your personal data to comply with our employment obligations necessary for employment, Social Security, Tax and other employment obligations as a Data Controller.
We rely on the use of personal data to carry out market research and internal research and development, and to improve our information technology systems (including security) and our product range, services and stores. This allows us to serve you better as a customer.
It is important for us to monitor how our Services are used to detect and prevent fraud, other crimes and the misuse of services. This helps us to make sure that you can safely use our Services.
We want to ensure that we provide you with marketing communications, including online advertising, that are relevant to your interests. To achieve this, we also measure your responses to marketing communications relating to products and services we offer, which also means we can offer you products and services that better meet your needs as a customer. You can change your marketing choices, both when you register with us, and at any time after that. You also have choices when it comes to online advertising.
We want to serve you better as a customer, so we use personal data to provide clarification or assistance in response to your communications.
We need to process your personal data so that we can manage the promotions and competitions you choose to enter.
We carry out market research to improve our Services. However, if we contact you about this, you do not have to take part in the activities. If you tell us that you do not want us to contact you for market research, we will respect this choice. This will not affect your ability to use our Services.
For example, if you have any accident or there is an incident at our stores. This could include medical reports.
We record images using CCTV both inside and outside our stores in order to protect our business, the local community, customers and colleagues. Clear signs are displayed to show its use and images recorded will be retained for a period of 30 days from recorded date. These images will be disclosed to third parties only in the event of criminal activity on the premises, a formal request by a law enforcement agency or for internal investigations.
We may on occasions pass your Personal Information to third parties exclusively to process work on our behalf. Alliance requires these parties to agree to process this information based on our instructions and requirements consistent with this Privacy Notice.
We do not broker or pass on information gained from your engagement with us without your consent. However, Alliance may disclose your Personal Information to meet legal obligations, regulations or valid governmental request. We may also enforce its Terms and Conditions, including investigating potential violations of its Terms and Conditions to detect, prevent or mitigate fraud or security or technical issues; or to protect against imminent harm to the rights, property or safety of our premises, Staff, you as our customer and/or the wider
We know how important it is to protect and manage your personal data. This section sets out some of the measures we have in place
The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. If we do this, we ensure that your privacy rights are respected in line with this Policy.
We will not keep your personal data longer than we need to, how long this is, depends on several factors, including:
You can at any time ask us to provide you with the retention schedule relating to your own personal data. We will provide this information in accordance with our policy and procedure for Data Subject Access Requests.
We will send you relevant offers and news about our products and services in a number of ways including by email, but only if you have previously agreed to receive these marketing communications. If you register with us we will ask if you would like to receive marketing communications, and you can change your marketing choices at any time online, by clicking the
unsubscribe link in the footer of any marketing email, over the phone or in writing.
We also like to hear your views to help us to improve our Services, so we may contact you for market research purposes. You always have the choice about whether to take part in our market research.
You have the right to see the personal data we hold about you. This is called a Data Subject Access Request (DSAR).
If you would like a copy of the personal data, we hold about you can download the on-line Data Subject below or alternatively write to the address shown below.
Data Protection Champion
Supermarket Alliance Limited
6-8 Sand Street,
You can also email us at Dataprotection@alliance.gg.
At any point whilst we are in possession of, or processing your data, you have the following rights:
Right of access – you have the right to request a copy of the information that we hold about you;
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete. If you believe we hold inaccurate or missing information, please let us know and we will correct it;
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records. There are several situations when you can have us delete your personal data, this includes (but is not limited to):
Right to restriction of processing – where certain conditions apply you have a right to restrict the processing. There are several situations when you can restrict our use of your personal data, this includes (but is not limited to):
Right of portability – you have the right to have the data we hold about you transferred to another organisation;
Right to object – you have the right to object to certain types of processing such as direct marketing. If on balance, your rights outweigh our interests in using your personal data, then we will at your request either restrict our use of it or delete it;
Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling;
In the event that we refuse your request under rights of access, we will provide you with a reason as to why, which you have the right to legally challenge.
We will accept the following forms of ID when information on your personal data is requested: a copy of your national ID card, driving license or passport. A minimum of one piece of photographic ID listed above and a supporting document is required such as a utility bill not older than three months. If we are dissatisfied with the quality of ID provided, further information may be sought before personal data can be released.
All requests should be made to Dataprotection@alliance.gg or in writing to us at the address further below. We will respond to your request within a four-week period, once your identification has been verified.
We’d like the chance to resolve any complaints you have, however you also have the right to complain to the relevant data protection Commissioner about how we have used your personal data.
In the event that you wish to make a compliant about how your personal data is being processed by us, you have the right to complain to our CEO. If you do not get a response within 30 days or are dissatisfied with the response, you can complain to the relevant Data Protection Commissioner.
The details for each of these contacts are:
Alliance, For the attention of the CEO, 6 – 8 Sand Street, St Helier, Jersey JE2 3QF Telephone +44 (0) 1534 481740 or email Dataprotection@alliance.gg
Office of the Information Commissioner – Jersey
2nd Floor, 5 Castle St, St Helier, Jersey JE2 3BT
Telephone +44 (0) 1534 716530 or Email: firstname.lastname@example.org
Office of the Data Protection Authority – Guernsey
St Martin’s House, Le Bordage, St. Peter Port, Guernsey, GY1 1BR Telephone: +44 (0) 1481 742074 or email@example.com