FAIR PROCESSING NOTICE (“PRIVACY POLICY”)

As described below, we may share your personal information with other organisations that may receive and process your personal information as a controller in their own right (see Section 7 for further details).

3. What information do we collect?

We collect the following types of personal information:

(a) Information we collect when you register with us

When you register with us, we may ask you for a number of pieces of information including:

• your name and title;
• your billing postal/delivery address;
• your email address;
• your telephone number;
• your profession and/or details about your trade;
• a password – please keep this safe;
• whether you would like to receive information from us via email, SMS text, post or telephone;
• if you are placing an order, we will also ask for your payment card number, expiry date and CVV number;
• If you register for TradePoint membership, evidence that you are in the trade such as a copy of a business card or invoice or other form of ID;
• information that you provide by filling in forms, including those on our Digital Services. This includes information provided by you at the time of becoming a registered user of our Website or a member of a scheme we operate (including the B&Q Club and TradePoint membership scheme) (or any time thereafter) or if you enter any competition, prize draw or promotion sponsored by us. This information could include your name, date of birth, address, contact details, information about your home and information about your DIY and home improvement capabilities and intentions; and
• information concerning your marketing preferences.

(b) Information we collect about how you use our Digital Services and when you shop with us or make contact with us

• When you shop with us instore, online, browse our Websites or other organisations’ websites where our adverts are shown, or use our Digital Services or contact us through a third party platform (such as Twitter, Meta and/or other social media applications), we may collect:
• information about any devices you have used (including the manufacturer, model and operating system, IP address, browser type and mobile device identifiers);
• product selection;
• cookies and information about your online browsing behaviour and history on our Digital Services, your location, and information about when you click on one of our adverts (including those shown on other organisations’ websites);
• details of your orders and/or purchases with or through us;
• your account number and/or your TradePoint membership number;
• information that you provide to us by using our Digital Services, including any photos you have uploaded on our web and mobile platforms and applications;
• information contained in and records of communications between us, including recordings of telephone calls when you contact us and messages sent using instant messaging applications or third party platforms;
• information about your preferences in connection with our Digital Services, for the purposes of enhancing and personalising your experience on our Digital Services;
• CCTV footage in which you feature when you visit our premises; and in the event that you have an accident while on our premises that you bring to our attention, we may record details of that accident and any injury you suffer in the relevant store's accident log. Please note that fixed camera displays are present at our self-checkouts for the purposes of deterring theft from our stores and do not form a part of our CCTV surveillance system; and
• user generated content that you consent us to sharing on our website and/or on our social media channels, which may include any information you may have posted on your social media account about your B&Q purchase and/or experience.

Please note that if you register an account and/or shop online with us, we will be able to link the information collected from you before registration and/or your online purchase (such as your online browsing behaviour) to your account and future information that we collect after registration and/or your online purchase.

If you provide us with personal information about another person, you must ensure that before you provide us with their personal information, you have their agreement to do so and that they are aware of the ways in which we use personal information as set out in this Privacy Policy.

4. Why do we ask for this information?

When you place an order we need your contact and payment information to enable us to take payment and fulfil your order. You can browse our website without providing us with any of this information. When you want to place an order via the website, we ask you to login or register so you can open a customer profile and upload and save images, save your browsing information and your preferences and retrieve them from any of your devices.

When you book an appointment via our website, we will ask for your name and contact details to manage your booking. We ask for information (for example your tastes in colour and style, the size of your house) to better guide you in the viewing of our offering and use of our services.

You may also provide us with personal information via our forums, product questions and reviews, customer support video chat, survey responses or competition and prize draw entries.

We will ask for or collect your personal information when you use or contact our customer support services, including telephone support, instant messaging and video chats, tweets and direct messages.

We ask for your consent before using any user generated content on our website and/or on our social media channels. If you give us your consent, you will be able to withdraw it at any time by messaging us on the platform we used to contact you requesting your consent, or by contacting us using the contact details provided below in section 9. 

We ask for your permission to send you marketing and promotional material via post, telephone, email and SMS so that we can send you free gifts, discount vouchers, invitations to events, special offers, competitions, prize draws and other marketing material that we believe may be of interest to you. If you give permission, you will be able to withdraw it at any time: by using the unsubscribe link in each communication we send out which will opt you out of receiving either marketing emails or SMS messages, as applicable;

• where you are a registered user of our Website, by using the My Account section on our Website and logging in using your username and password;

• by emailing us dataprotection@b-and-q.ie; or

• by writing to B&Q Customer Services, B&Q House, Chestnut Avenue, Chandler's Ford, Eastleigh, Hampshire SO53 3LE, United Kingdom or by using the Contact Us enquiry form on our Website.

When you use your payment card to make a purchase with us (either instore or online), we will link details of that purchase with other purchases made with the same payment card. (For security purposes, we don’t keep your payment card details for this purpose.) We use this information to better understand how our customers purchase from us. If you join the B&Q Club, or if you opt in to receiving marketing communications from us, we will link details of your purchases with us (including, if you have joined the B&Q Club, details of purchases made before you joined the B&Q Club) with the other details that we hold about you, and we may use this information to make our communications with you more relevant. You can opt-out of this use of your personal information by emailing us at: dataprotection@b-and-q.ie. 

We may also provide you with offers and marketing information about our products and services printed with your till receipt.  We may use personal information we hold about you, including details of the items you’ve bought, in order to provide you with offers and information that we believe may be of interest to you in this way.  You can opt-out of this use of your personal information by emailing us at: dataprotection@b-and-q.ie.

You do not have to give us permission in order to use our website.

Please note that, even if you choose not to receive this marketing information from us, we may still use your personal information to provide you with important services communications, including communications in relation to any orders you submit or products you purchase. We may also offer you the opportunity to indicate the specific types of marketing communications you are particularly interested in receiving from us; where possible, we will tailor the communications you receive to reflect your choices, but we may send you other communications that may be of interest to you. If you are a B&Q Club member, please note that by opting out of marketing communications from us, you will also opt-out of receiving B&Q Club communications.

5. How do we use your personal information

We have set out below the purposes for which we use your personal information. We are also required by law to state a “legal basis for processing”, i.e. to tell you on what grounds we are allowed to use your information, and this is also set out below. The legal basis for each purpose is that we have your consent for the use of your personal information, or that we need to use your personal information in order to perform a contract with you, or that the use of your personal information is necessary for our legitimate interests (in which case we will explain what those interests are), or that we need to use your personal information to comply with law.

 

 

Our Digital Services are not intended for children and we do not knowingly collect data relating to children.

6. How long do we keep your personal information?

We are required by law to keep your personal information only for as long as is necessary for the purposes for which we are using it. The period for which we keep your personal information will be determined by a number of criteria, including the purposes for which we are using the information, the amount and sensitivity of the information, the potential risk from any unauthorised use or disclosure of the information, and our legal and regulatory obligations.

7. Who do we share your personal information with?

We are a member of the Kingfisher Group of companies including B&Q, Screwfix, Castorama and Brico Dépôt (for more information on the Kingfisher Group please visit: www.kingfisher.com).

We may share your personal information with other members of the Kingfisher Group where it is lawful to do so in connection with the purposes above and those listed below. Members of the Kingfisher Group may also use the personal information we share with them to improve our and their websites and other digital services, for analysis purposes and to offer you products and services that they believe may be of interest to you.

We may use automated decision-making when we make decisions by technological means without significant human involvement, and non-automated processes, to help generate business insights based on the customer experience and evaluate or predict customer purchasing preferences. This will include sharing information with Kingfisher plc (our parent company), and other members of the Kingfisher Group who will then, having received this information, use their own similar processes and then share the results with us for the same purposes and to help improve overall customer experience. This means Kingfisher plc and other members of the Kingfisher Group will each be receiving and processing your information in their own right and subject to their own privacy notices which are available on their respective websites. For more information, please visit kingfisher.com.

We may disclose your personal information to third parties, including in the following circumstances:

We use third parties to carry out certain activities on our behalf that involve the processing of personal information. For example, we may engage third party service providers to fulfil orders, deliver packages, send postal mail, SMS text messages and email, maintain and update our databases of customer details (including the removal of repetitive or incorrect information), analyse data to help us develop, provide and improve our products and services, provide marketing assistance, process card payments, process payments online, carry out surveys and installations, provide customer service, process the booking of appointments and handle claims. These third parties have access to personal information needed to perform their functions, but may not use it for other purposes. We may use the information we receive from third parties to supplement, improve and add to our databases of customer details, for purposes such as credit checking and fraud prevention.

Where we allow customers to pay for products and services via our Digital Services using online payment methods and digital wallets, customer personal information may be shared with providers of those services for payment purposes in order to process the transaction, for example, with PayPal when you choose to use PayPal, Apple Pay or Google Pay for your payment. In such circumstances PayPal processes your personal data as an independent controller. For more information on how PayPal uses personal information that it collects from you, please see PayPal’s Privacy policy. For information on how Apple/Google uses personal information that it collects from you, please see: Apple/Google Pay Payments: statement available at braintreepayments.com.

We may share information that we hold about you (for example, your email address and information about your purchases) with third parties that also hold your information or have an existing online relationship with you in order to identify you and to enable us (or Kingfisher Group companies or other third parties on our behalf) to provide you with relevant marketing online. For instance, we may share your information with social networking sites such as Facebook and Google so that they can identify you as a customer of ours and can tailor the marketing we send you via their sites and products.

We may also share information that we hold about you with third parties with whom we have a commercial arrangement or shared business interest.  Those third parties may also share information that they hold about you with us.  For instance, where we operate B&Q stores as a concession within stores of another retailer, we may share information about you and your purchases with the other retailer (and they may share information they hold about you with us) so that we and that retailer can assess and analyse our commercial arrangement, and ultimately develop and improve the products and services we offer.  We will only share this information where there are appropriate safeguards in place with the third party.   

We may pass personal information to external agencies and organisations (including the police and other law enforcement agencies) for the purpose of preventing and detecting fraud (including fraudulent transactions) and criminal activity. These external agencies may check the information we give them against public and private databases and may keep a record of such checks to use in future security checks. We may also disclose personal information to the police and other law enforcement authorities in connection with the prevention and detection of crime.

We may pass personal information to our insurers in the event that a claim is made or could be made against us. For example, we may send CCTV footage and information contained in our accident logs to our insurers. In the event that we sell or buy any business or assets, we may disclose personal information held by us to the prospective seller or buyer of such business or assets. If we or substantially all of our assets are acquired by a third party (or subject to a reorganisation within our corporate group), personal information held by us will be one of the transferred assets.

We may pass your personal information to third parties if we are under a duty to disclose or share your personal information in order to comply with any legal obligation (including in connection with a court order), or in order to enforce or apply our Digital Services Ts&Cs, Terms and Conditions of Sale, Supply & Install Terms and other agreements we have with or otherwise concerning you (including agreements between you and us (or one or more of our affiliates)); or to protect our rights, property or safety or those of our customers, employees or other third parties.

We may share anonymous or aggregate data (such as aggregated statistics or other anonymised data) with third parties.

Where we share your personal information with a third party we will ensure that the third party we use can provide sufficient guarantees regarding the confidentiality and security of your personal information. We will have written contracts with them which provide assurances regarding the protections that they will give to your personal data and their compliance with our data security standards and international transfer restrictions. 

Links to external sites

We may provide links to the websites of other Kingfisher Group companies from our Digital Services. Your use of those websites is subject to the terms of use and policies available on those websites.

From time to time we may also establish relationships with third parties that will enable you to access the websites or applications (such as video players) of such third parties directly from our Digital Services. Each third party operates its own policy regarding the processing of personal information and the use of cookies on its website(s) or through its applications and you are advised to read the third party's privacy policy and cookies policy.

Please note that third party websites and applications are not under our control. When you click through to these websites or access these applications you leave the area controlled by us. Similarly, where you have contacted us or shared user generated content with us using a third party platform (for example a social media platform), the third party(ies) that provide these platforms will use your information in accordance with their own privacy notices. We do not accept responsibility or liability for any issues arising in connection with the third party's use of your data (including your personal information).

Where will your personal information be processed?

Your personal information may be transferred to, and stored and processed in, one or more countries outside the European Economic Area ("EEA"). For transfers of your personal information outside of the EEA, we will take additional steps and implement appropriate measures to ensure that your personal information is adequately protected in accordance with applicable data protection law.

These measures generally include either:

• Transferring personal information to countries that have been deemed to provide an adequate level of protection for personal information under applicable data protection law; or

• Transferring personal information where the recipient has agreed to an approved data transfer agreement in the form of the standard contractual clauses.

• Occasionally, we may transfer your personal information in circumstances where there are no adequate safeguards where this is permitted by data protection law.

Please contact us using the details below if you want further information on the specific safeguards used by us when transferring your personal information out of the country in which we are established.

8. Your rights

You have the right to:

• ask us to confirm what personal information we hold about you and provide you with a copy of that data;

• ask us to correct any personal information that is inaccurate;

• subject to certain conditions, the erasure of your personal information on certain grounds including where you think that the information we are processing is inaccurate, or the processing is unlawful. There are various lawful reasons why we may not be in a position to erase your personal information. This may apply (i) where we have to comply with a legal obligation, (ii) in case of exercising or defending legal claims, or (iii) where retention periods apply by law;

• subject to certain conditions, object to or ask us to restrict the processing of your personal information. This right applies only if the processing of your personal data is explicitly based on our "legitimate interests" (See Section 4 above).Objections must be based on grounds relating to your particular situation. They must not be generic so that we can demonstrate that there are still lawful grounds for us to process your personal information;

• ask us to stop using your personal information to send you marketing materials such as our catalogue, marketing email, discounts or vouchers.

• provide you with the personal information that you have provided to us, in a structured and commonly-used electronic format, or transmit that information directly to another company if that is technically feasible. This applies where we are using your personal information on the basis of your consent or because it is necessary to perform a contract with you (see How do we use your personal information, above).

• Stop using your personal data in automated decision making (including profiling) in certain circumstances.

Where we rely on consent to process your personal information, you also have the right to withdraw your consent at any time. If you withdraw your consent, this will only take effect for the future. 

Our security procedures mean that we may request proof of identity before we are able to disclose your personal information to you or comply with other requests.

We want to make sure that the personal information we hold about you and your preferences as to how we contact you are accurate and up to date. If any of the details are incorrect, please let us know (details below) and we will amend them.

You also have the right to make a complaint to the supervisory authority if you’re not happy with how we’ve handled your personal information.The websites for the supervisory authorities that regulate our processing of your personal information are set out below:

9. How to contact us?

Due to the unprecedented challenges we are all facing during the Coronavirus (COVID-19) pandemic, you may experience delays when making information rights requests during the pandemic. Where possible, we ask that you contact us via email.

To update your details or ask for a copy of your personal information:

You can click on this link to access our Data Subject Request Form; where you are a registered user of our Website, by using the My Account section on our Website and logging in using your username and password;

You can write to us at: B&Q Data Protection, 6th floor, 2 Grand Cancal Square, Dublin 2, D)2 A342 or by using the Contact Us enquiry form on our Website;

You can email us at dataprotection@b-and-q.ie;

If you would like to contact our Data Protection Officer please email: dataprotection@b-and-q.ie or write to Data Protection Officer, B&Q Limited, B&Q House, Chestnut Avenue, Chandlers Ford, Eastleigh, Hampshire SO53 3LE.

10. Protecting your personal information

The transmission of information via the internet is not completely secure; this risk is common across the internet and not specific to our services. We cannot guarantee the security of your data (including your personal information) transmitted to our services; any transmission is at your own risk.

It is important for you to protect against unauthorised access to your password and to your computing device. Be sure to sign off and close your browser when you have finished your session. This will help to ensure that others do not access your personal information if you share your computing device or use a computing device in a public place such as a library or internet café.

11. Updates to this policy

We may update this policy from time to time. The latest version of this policy will be posted on our Website.