1. Privacy Statement

1.1. The information/data held on our IT systems and manual files with regard to our customers (“you/your”) is processed in accordance with the Isle of Man Data Protection Act 2018, the Data Protection (Application of GDPR) Order 2018 (SD 2018/0143) and the GDPR and LED Implementing Regulations 2018 (SD 2018/0145) (“Data Protection Legislation”) which says that the information we hold about you must be:

1.1.1. used lawfully, fairly and in a transparent way;

1.1.2. collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;

1.1.3. relevant to the purposes we have told you about and limited only to those purposes;

1.1.4. accurate and kept up to date;

1.1.5. kept only as long as necessary for the purposes we have told you about; and

1.1.6. kept securely.

1.2. For the purposes of the Data Protection Legislation, the Data Controller is Shoprite (Isle of Man) Limited of Centre House, Little Switzerland, Douglas, Isle of Man, IM2 4RE (683333) (“we/us/our”). 

1.3. We are committed to protecting and respecting your privacy and the security of your information.

1.4. Please contact the Data Protection Officer at the address in 1.2 above with any questions about this Privacy Statement.

The information we collect

 1.5. Our till systems comply with the Payment Card Industry Data Security Standard and all cardholder data is encrypted; this means that we do not hold your cardholder data in an accessible format.

1.6. We may obtain information about you (eg your name, address, email, telephone number, shopping transactions, signature/initials) when you contact us with feedback, enter a competition, place an order, return an item or receive cashback.  We process this information with your consent.

1.7. We may also obtain information about you (eg your name, address, email, telephone number) when processing your lost property.  We process this information because of a legal obligation. 

1.8. We may also obtain information about you (eg your name, address, email, telephone number and medical details) in the event of an accident or incident.  We process this information with your consent or in pursuit of our legitimate interests.

1.9. We operate CCTV systems in some locations for the purpose of safety, security and crime prevention and detection.  We process this information because of a legal obligation or in pursuit of our legitimate interests.

How we use the information we collect

1.10. We store this information securely on our systems, restrict access to those who have a need to know and train our staff in handling the information securely.

1.11. We may use this information to:

1.11.1. respond to your feedback;

1.11.2. administer a competition, an order, a return or cashback;

1.11.3. return your lost property;

1.11.4. improve our customer service;

1.11.5. investigate an accident or incident; or

1.11.6. investigate a safety or security matter.

Others who may receive the information

1.12. We may share this information with our ultimate parent company which is Isle of Man Enterprises plc of Centre House, Little Switzerland, Douglas, Isle of Man, IM2 4RE.

1.13. We may share this information with trusted third parties including:

1.13.1. a supplier, trading partner or service provider in order that any feedback query can be answered fully;

1.13.2. our insurers and other professional advisers; or

1.13.3. the Police and anti-crime schemes supported by the Police regarding offenders and suspected offenders.

1.14.   Apart from the circumstances described in 1.12 and 1.13, we will not disclose the information to a third party without your consent unless disclosure is required or permitted by law.

How long we keep the information for

1.15. We will only retain the information for as long as is necessary for the purpose for which it was collected.

1.16. At the end of the retention period, the information will be deleted completely or anonymised.

1.17. For example:

1.17.1. we will retain information for approximately 12 months after the date of your feedback, the collection of your lost property or a competition closing date; and

1.17.2. we will retain CCTV footage for approximately 30 days, unless it is required for an investigation. 

Your rights

1.18. You may withdraw your consent to us processing your information at any time by contacting the Data Protection Officer and you will be informed of any consequences of so doing at that time.

1.19. You have a number of rights under the Data Protection Legislation, including the right:

1.19.1. of access to a copy of your personal information;

1.19.2. to object to processing that is likely to cause or is causing                  damage or distress;

1.19.3. to prevent processing for direct marketing;

1.19.4. to object to decisions being taken by automated means;

1.19.5. in certain circumstances to have inaccurate personal data                  rectified, blocked, erased or destroyed;

1.19.6. to claim compensation for damages caused by a breach of                  the Data Protection Legislation; and

1.19.7. to request the transfer of your personal information to                        another party.

1.20. Further details of how you can enforce our rights are available upon request from the Data Protection Officer.

How to complain

1.21. We hope that our Data Protection Officer can resolve any query or concern you raise about our use of your information.  If not, you can complain to the Information Commissioner (www.inforights.im or telephone 01624 693260 for further information about your rights and how to make a formal complaint).

2. Cookie Statement

2.1. Cookies are small text files that are placed on your computer by websites that you visit.  They are widely used in order to make websites work or work more efficiently, as well as to provide information to the owners of the site.

2.2. We use Google Analytics to track user activity on our website and to enable various types of functionality.  These cookies are used to collect information about how visitors use our site.  We use the information to compile reports and to help us improve the site.  The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from, and the pages they visited.

2.3. To opt out of being tracked by Google Analytics across all websites, please visit http://tools.google.com/dlpage/gaoptout.

2.4. Please note that these cookies exist to enable functionality on the website and not for advertising purposes.

3. General

3.1. These statements do not cover the links within this site linking to other websites.  We encourage you to read the privacy and cookie statements on the other websites you visit.

3.2. Any changes we make to these statements in the future will be posted on our website; please check back to see any changes.

3.3. Please Contact Us with any queries, comments or requests about these statements.