In the course of our dealings with you, we will collect and process personal information about you. Personal information includes any information allowing us to identify you as an individual, for example, your name, your email address or your telephone number.
We are committed to protecting your privacy. We will use your personal information in accordance with all applicable laws and regulations that relate to data protection and privacy, including the EU General Data Protection Regulation (GDPR).
When using our website we will also place cookies on your device – please see our Cookies page for more information about the cookies we use and how you can change your cookie settings.
As described below, we may share your personal information with other organisations that may receive and process your personal information as a controller in their own right (see Section 9 for further details).
We collect the following types of personal information:
(a) Information we collect when you register with us
When you register with us, we may ask you for a number of pieces of information including:
(b) information that you provide by filling in forms, including those on our Digital Services. This includes information provided by you at the time of becoming a registered user of our Website or a member of a scheme we operate (including the B&Q Club) (or any time thereafter) or if you enter any competition or promotion sponsored by us. This information could include your name, date of birth, address, contact details, information about your home and information about your DIY and home improvement capabilities and intentions; and
(b) Information we collect about how you use our Digital Services and when you shop with us
When you shop with us in-store, online, browse our Websites or other organisations’ websites where our adverts are shown, or use our Digital Services, we may collect:
If you register an account online with us, we will be able to link the information collected from you before registration (such as your online browsing behaviour) to your account and future information that we collect after registration.
We have set out below the purposes for which we use your personal information. We are also required by law to state a “legal basis for processing”, i.e. to tell you on what grounds we are allowed to use your information, and this is also set out below. The legal basis for each purpose is that we have your consent for the use of your personal information, or that we need to use your personal information in order to perform a contract with you, or that the use of your personal information is necessary for our legitimate interests (in which case we will explain what those interests are).
|PURPOSE OF PROCESSING||OUR LEGAL BASIS|
|communicate with you about your order for a service or a product;||Contractual necessity - we use your personal information in order to meet our obligations under our contract with you (for example, to deliver a product you have ordered).|
|contact you about leaving a review on a product or service or providing feedback once your order has been completed or the service has been provided;< 25 kg.||Legitimate interests - we use your personal information to contact you so that we can ask you to provide feedback on the product or service you have ordered.|
|notify you about changes to our services and to otherwise communicate with you. For example, we will use your contact details in order to respond to any queries that you submit to us;||Legitimate interests - we use your personal information to keep you up to date with information about our services, and to respond to your queries.|
|send you information about products and services, including exclusive offers, vouchers, free gifts, deals, and information about products and events;||Legitimate interests - we use your personal information to send you this information. In some cases (such as where we're required to do so by law) we will also ask for your consent before sending you this|
|review your past purchases and viewing history on our website to provide you with special offers or to tailor your experience online;||Legitimate interests - we use your personal information to provide you with these offers and to tailor your experience when using our online services.|
|help us review, develop and improve the products and services we offer. For example, calls to our contact centres may be monitored and/or recorded for quality control and training purposes. We may also send you market research requests via email (which you can opt out of via that email). If you raise a query while we still hold a recording of your telephone call, and we can investigate or answer your query by referring back to this call, we may do so. This may mean that your call recording will be held until your query has been resolved;||Legitimate interests - we use your personal information to help us deliver the best quality of service to you and our other customers.|
improve and measure the effectiveness of our marketing communications, including online advertising. We sometimes compare limited information that we hold about you (for example, your email address or mobile phone number) with third parties that also hold your information or have an existing online relationship with you in order to identify you as our customer and to enable us (or third parties on our behalf) to provide you with relevant marketing online. For example, we may compare your information with the information that social networking sites such as Twitter, Instagram, and Facebook hold on you, so that they can identify you as a Y&A Supplies customer and hence tailor the Y&A Supplies marketing you receive via their sites and products.
|Legitimate interests - we use your personal information to deliver you a tailored experience when using such digital services, to help us understand the effectiveness of our advertising, and to make sure you see adverts that are most relevant to you.|
|provide, enhance and personalise your experience on our digital services provided from our web and mobile portals and applications;||Legitimate interests - we use your personal information to deliver you a tailored experience when using our digital services.|
|carry out security checks to protect against fraudulent transactions and to prevent and detect criminal activity;||Legitimate interests - we use your personal information to protect against unlawful activities. In some cases we may also be under a legal obligation to disclose your personal information (for example, to law enforcement agencies).|
|address any claims made against us.||Legitimate interests - we use your personal information to address any claims you make against us. In some cases we may also be under a legal obligation to disclose your personal information (for example, in connection with legal proceedings).|
Our websites and apps are not intended for children and we do not knowingly collect data relating to children.
We are required by law to keep your personal information only for as long as is necessary for the purposes for which we are using it. The period for which we keep your personal information will be determined by a number of criteria, including the purposes for which we are using the information, the amount and sensitivity of the information, the potential risk from any unauthorised use or disclosure of the information, and our legal and regulatory obligations.
We may disclose your personal information to third parties, including in the following circumstances:
You have the right to ask us to:
We want to make sure that the personal information we hold about you and your preferences as to how we contact you are accurate and up to date. If any of the details are incorrect, please let us know (details below) and we will amend them.
You also have the right to make a complaint to the Information Commissioner's Office if you're not happy with how we've handled your personal information. You can contact the supervisory authority at:
To update your details or ask for a copy of your personal information:
The transmission of information via the internet is not completely secure; this risk is common across the internet and not specific to our services. We cannot guarantee the security of your data (including your personal information) transmitted to our services; any transmission is at your own risk.
It is important for you to protect against unauthorised access to your password and to your computing device. Be sure to sign off and close your browser when you have finished your session. This will help to ensure that others do not access your personal information if you share your computing device or use a computing device in a public place such as a library or internet café.
We may update this notice from time to time. The latest version of this notice will be posted on our Website.