Cookies Notice
NoticeTo make our websites work properly, we sometimes place small data files called cookies on your computer or device. Most websites do this too. Our websites are:
What are cookies?
A cookie is a small text file that our website saves on your computer or mobile device when you visit one of our sites. It enables our website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another.
How do we use cookies?
We use cookies and other technologies to ensure everyone who uses our website has the best possible experience. Cookies also help us keep your account safe. By agreeing to this cookie policy, you are agreeing to the use of cookies and similar technologies for the purposes we describe in this policy.
What types of cookie are there, and which ones do we use?
There are two types of cookie:
Persistent cookies remain on a user’s device for a set period of time specified in the cookie. They are activated each time that the user visits the website that created that particular cookie.
Session cookies are temporary. They allow website operators to link the actions of a user during a browser session. A browser session starts when a user opens the browser window and finishes when they close the browser window. Once you close the browser, all session cookies are deleted.
Cookies also have, broadly speaking, four different functions and can be categorised as follow:
‘strictly necessary’ cookies,
‘performance’ cookies,
‘functionality’ cookies and
‘targeting’ or
‘advertising’ cookies.
Strictly necessary cookies are essential to navigate around a website and use its features. Without them, you wouldn’t be able to use basic services like viewing other pages etc. These cookies do not gather information about you that could be used for marketing or remembering where you’ve been on the internet.
Examples of how we use ‘strictly necessary’ cookies include:
Setting unique identifiers for each unique visitor, so site numbers can be analysed.
Navigation of the website pages
Performance cookies collect data for statistical purposes on how visitors use a website; they don’t contain personal information such as names and email addresses and are used to improve your user experience of a website.
Here are some examples of how we use performance cookies:
Gathering data about visits to the website, including numbers of visitors and visits, length of time spent on the site, pages clicked on or where visitors have come from.
For comparison with other websites using data collected by industry-accepted
measurement and research companies.
Information supplied by performance cookies helps us to understand how you use the website; for example, whether or not you have visited before, what you looked at or clicked on and how you found us. We can then use this data to help improve our services. We generally use independent analytics companies to perform these services for us and when this is the case, these cookies may be set by a third-party company (third party cookies).
Preference cookies allow users to customise how a website looks for them: they can remember usernames, language preferences and regions, and can be used to provide more personal services like local weather reports and traffic news.
Here is an example of how we use functionality cookies:
Remembering if you’ve been to the site before so that messages intended for first-time
users are not displayed to you.
Advertising and targeting cookies are used to deliver advertisements more relevant to you but can also limit the number of times you see an advertisement and be used to chart the effectiveness of an ad campaign by tracking users’ clicks. They can also provide security in transactions. They are usually placed by third-party advertising networks with a website
operator’s permission but can be placed by the operator themselves. They can remember that you have visited a website, and this information can be shared with other organisations, including other advertisers. They cannot determine who you are though, as the data collected is never linked to your profile.
How to control cookies
You can control and/or delete cookies as you wish – for details, see allaboutcookies.org. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.
Privacy Notice
Supermarket Alliance Limited, Jersey, and Alliance Limited, Guernsey, collectively “Alliance” (referred to as “we” or “us”) for the purpose of this notice, are the data controllers and we are pleased to provide you with the following Privacy Notice.
We are working hard to serve shoppers a little better every day. Looking after the personal data you share with us is a hugely important part of this. We want you to be confident that your data is safe and secure with us and understand how we use it to offer you a better and more personalised shopping experience.
What this Notice covers:
We are committed to doing the right thing when it comes to how we collect, use and protect your personal data. That’s why we’ve developed this Privacy Policy, which:
sets out the types of personal data that we collect;
explains how and why we collect and use your personal data;
explains when and why we will share personal data within Alliance and with other organisations; and
explains the rights and choices you have when it comes to your personal data.
We offer a range of products and services, so we want you to be clear about what this Policy covers. This Policy applies to you if you use our services (referred to in this Policy as “our Services”). Using our Services means:
using any of the websites (“our Websites”) where this Policy is posted; or
If you contact us or we contact you about our Services; if you are employed by Alliance; and
Parts of this Policy also apply to our store CCTV systems where they capture footage of you.
Our Websites may contain links to other websites operated by other organisations that have their own privacy policies. Please make sure you read the terms and conditions and privacy policy carefully before providing any personal data on another website as we do not accept any responsibility or liability for websites of other organisations.
Personal Data we Collect:
This section tells you what personal data we may collect from you when you use our Services and what other personal data we may receive from other sources.
When you become an account customer, you may provide us with:
Your personal details, including your postal and billing addresses, email addresses, phone numbers and title.
When you browse our websites, we may collect:
Information about your online browsing behaviour on our Websites and information about when you click on one of our promotions (including those shown on other organisations’ websites);
Information about any devices you have used to access our Services (including the make, model and operating system, IP address, browser type and mobile device identifiers).
When you contact us or we contact you or you take part in promotions, competitions, surveys or reviews about our Services, we may collect:
Personal data you provide about yourself anytime you contact us about our Services (for example, your name and contact details), including contacting us by phone, email or post or when you speak with us through social media;
Details of the emails and other digital communications we send to you that you open, including any links in them that you click on; and
Your feedback and contributions to customer surveys or reviews.
When you visit our stores:
Images of you may be recorded on our CCTV systems;
If you are employed by Alliance, for your safety and wellbeing.
How and Why We Use Personal Data:
This section explains in detail how and why we use personal data. In order to collect and process personal data about you we need to have a lawful basis. The main Lawful bases we rely on includes consent (where you have given permission), contract (where processing is necessary for the performance of a contract with you) and our “legitimate interests” (where processing is in the interest of our company and we believe you would have a reasonable expectation for us to do this).
We use personal data to:
Make our Services available to you:
We need to process your personal data so that we can manage your customer accounts, provide you with the goods and services you want to buy and help you with any orders and refunds you may ask for.
As an employee, we use your personal data to comply with our employment obligations necessary for employment, Social Security, Tax and other employment obligations as a Data Controller.
Manage and improve our day-to-day operations:
Manage and improve our websites
We use cookies and similar technologies on our Websites to improve your customer experience. Some cookies are necessary so you should not disable these if you want to be able to use all the features of our websites. You can disable cookies, but this may affect your customer experience. For more information about cookies and how you can disable them, see the cookie notice here.
Help to develop and improve our product range, services, stores, information technology systems, know-how and the way we communicate with you
We rely on the use of personal data to carry out market research and internal research and development, and to improve our information technology systems (including security) and our product range, services and stores. This allows us to serve you better as a customer.
Detect and prevent fraud or other crime
It is important for us to monitor how our Services are used to detect and prevent fraud, other crimes and the misuse of services. This helps us to make sure that you can safely use our Services.
Personalise your Alliance experience:
Provide you with relevant marketing communications
We want to ensure that we provide you with marketing communications, including online advertising, that are relevant to your interests. To achieve this, we also measure your responses to marketing communications relating to products and services we offer, which also means we can offer you products and services that better meet your needs as a customer. You can change your marketing choices, both when you register with us, and at any time after that. You also have choices when it comes to online advertising.
Contact and interaction with you:
Contact you about our services
We want to serve you better as a customer, so we use personal data to provide clarification or assistance in response to your communications.
Manage promotions and competitions you take part in
We need to process your personal data so that we can manage the promotions and competitions you choose to enter.
Invite you to take part in and manage customer surveys, reviews and other market research activities
We carry out market research to improve our Services. However, if we contact you about this, you do not have to take part in the activities. If you tell us that you do not want us to contact you for market research, we will respect this choice. This will not affect your ability to use our Services.
Claims:
In order to resolve legal claims or disputes involving you or us
For example, if you have any accident or there is an incident at our stores. This could include medical reports.
CCTV:
To monitor the safety of our stores in order to prevent and detect crime and anti-social behaviour.
We record images using CCTV both inside and outside our stores in order to protect our business, the local community, customers and colleagues. Clear signs are displayed to show its use and images recorded will be retained for a period of 30 days from recorded date. These images will be disclosed to third parties only in the event of criminal activity on the premises, a formal request by a law enforcement agency or for internal investigations.
Social Media
If you are using one of our social media pages, please remember that our page is provided via social media platform sites, such as Facebook, which has its own functionality, terms and privacy policies. Please ensure you have read these carefully and have checked your own personal settings to ensure you are happy with how your information will be used by the social media site. Our social media pages may make use of these functions, but we do not control them and are not responsible for them. We will not assume responsibility for data shared or the responsibilities of a data controller, that responsibility will remain with the social media provider.
Alliance will monitor the social media site on occasion and, as soon as practically possible, any inappropriate entries will be removed.
Sharing personal data with third parties:
We may on occasions pass your Personal Information to third parties exclusively to process work on our behalf. Alliance requires these parties to agree to process this information based on our instructions and requirements consistent with this Privacy Notice.
We do not broker or pass on information gained from your engagement with us without your consent. However, Alliance may disclose your Personal Information to meet legal obligations, regulations or valid governmental request. We may also enforce its Terms and Conditions, including investigating potential violations of its Terms and Conditions to detect, prevent or mitigate fraud or security or technical issues; or to protect against imminent harm to the rights, property or safety of our premises, Staff, you as our customer and/or the wider
community.
How do we protect personal data:
We know how important it is to protect and manage your personal data. This section sets out some of the measures we have in place.
We apply physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data;
We protect the security of your information while it is being transmitted by encrypting it;
We use computer safeguards such as firewalls and data encryption to keep this data safe;
We only authorise access to employees and trusted partners who need it to carry out their responsibilities;
We regularly monitor our systems for possible vulnerabilities and attacks;
We will ask for proof of identity before we share your personal data with you; and
We will reveal only the last four digits of your payment card number when confirming an order.
The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. If we do this, we ensure that your privacy rights are respected in line with this Policy.
How long do we use personal data for?
We will not keep your personal data longer than we need to, how long this is, depends on several factors, including:
Why we collected it in the first place;
Whether there is a legal/regulatory reason for us to keep it; or
Whether we need it to protect you or us.
You can at any time ask us to provide you with the retention schedule relating to your own personal data. We will provide this information in accordance with our policy and procedure for Data Subject Access Requests.
Marketing and market research
We will send you relevant offers and news about our products and services in a number of ways including by email, but only if you have previously agreed to receive these marketing communications. If you register with us we will ask if you would like to receive marketing communications, and you can change your marketing choices at any time online, by clicking the
unsubscribe link in the footer of any marketing email, over the phone or in writing.
We also like to hear your views to help us to improve our Services, so we may contact you for market research purposes. You always have the choice about whether to take part in our market research.
Subject Access Rights
You have the right to see the personal data we hold about you. This is called a Data Subject Access Request (DSAR).
If you would like a copy of the personal data, we hold about you can download the on-line Data Subject below or alternatively write to the address shown below.
Data Protection Champion
Supermarket Alliance Limited
6-8 Sand Street,
St. Helier,
Jersey
JE2 3QF
You can also email us at Dataprotection@alliance.gg.
Your rights as a data subject
At any point whilst we are in possession of, or processing your data, you have the following rights:
Right of access – you have the right to request a copy of the information that we hold about you;
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete. If you believe we hold inaccurate or missing information, please let us know and we will correct it;
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records. There are several situations when you can have us delete your personal data, this includes (but is not limited to):
When we no longer need to keep your personal data;
You have successfully made a general objection;
You have withdrawn your consent to us using your personal data (and we do not have any other grounds to use it);
Right to restriction of processing – where certain conditions apply you have a right to restrict the processing. There are several situations when you can restrict our use of your personal data, this includes (but is not limited to):
you have successfully made a general objection; o you are challenging the accuracy of the personal data we hold;
Right of portability – you have the right to have the data we hold about you transferred to another organisation;
Right to object – you have the right to object to certain types of processing such as direct marketing. If on balance, your rights outweigh our interests in using your personal data, then we will at your request either restrict our use of it or delete it;
Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling;
In the event that we refuse your request under rights of access, we will provide you with a reason as to why, which you have the right to legally challenge.
To access what personal data is held, identification will be required
We will accept the following forms of ID when information on your personal data is requested: a copy of your national ID card, driving license or passport. A minimum of one piece of photographic ID listed above and a supporting document is required such as a utility bill not older than three months. If we are dissatisfied with the quality of ID provided, further information may be sought before personal data can be released.
All requests should be made to Dataprotection@alliance.gg or in writing to us at the address further below. We will respond to your request within a four-week period, once your identification has been verified.
Complaints
We’d like the chance to resolve any complaints you have, however you also have the right to complain to the relevant data protection Commissioner about how we have used your personal data.
In the event that you wish to make a compliant about how your personal data is being processed by us, you have the right to complain to our CEO. If you do not get a response within 30 days or are dissatisfied with the response, you can complain to the relevant Data Protection Commissioner.
The details for each of these contacts are:
Alliance, For the attention of the CEO, 6 – 8 Sand Street, St Helier, Jersey JE2 3QF Telephone +44 (0) 1534 481740 or email Dataprotection@alliance.gg
Office of the Information Commissioner – Jersey
2nd Floor, 5 Castle St, St Helier, Jersey JE2 3BT
Telephone +44 (0) 1534 716530 or Email: enquiries@dataci.org
Office of the Data Protection Authority – Guernsey
St Martin’s House, Le Bordage, St. Peter Port, Guernsey, GY1 1BR Telephone: +44 (0) 1481 742074 or enquiries@odpa.gg