Privacy Notice

Last updated: 17 September 2018

1. Introduction

1.1 dunnhumby respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use information about you and how you can exercise your privacy rights in relation to your participation in the Shopper Thoughts Community.

1.2 This Privacy Notice applies to information that we collect via the website at https://shopperthoughts.ie, and Shopper Thoughts-related applications (including our mobile application) and other sources like prize draws and surveys.

1.3 If you have any questions or concerns about our use of your information, then please contact us using the contact details provided at the bottom of this Privacy Notice.


2. Quick links

2.1 We recommend that you read this Privacy Notice in full to ensure you are fully informed. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link below to jump to that section.


3. What does dunnhumby do?

3.1 dunnhumby is a consumer data science company, headquartered in the U.K. but with group companies all around the world. Our products and services help retailers and brands analyse data in order to improve consumer experiences and build loyalty.

3.2 For more information about dunnhumby, please see the “About Us” section of our website at https://www.dunnhumby.com/about-us.

4. What is Shopper Thoughts?

4.1 Shopper Thoughts is a community for consumers to share experiences and thoughts on shopping via our website, discussion boards, prize draws and surveys. This helps retailers and brands to develop products and improve the shopping experience. Our clients do not see your individual responses unless you have provided us with your consent, and otherwise view only aggregated reports about groups of shoppers. Consumers benefit from participation by obtaining Shopper Thoughts "redeemable points" and other perks.


5. What information do we collect and why?

5.1 If you are a participant of Shopper Thoughts community, we may collect the following information about you: Information that you provide voluntarily as a participant of Shopper Thoughts

5.2 The types of information include the following:

(a) Contact details – name, street address, post code, email address, username, home telephone number, mobile telephone number;
(b) Demographic details – age, gender, date of birth, photo, region, household income, family composition (i.e. number and gender of children, if any);
(c) Survey details – results of online surveys relating to issues such as personality, values, attitudes, interests, and health and lifestyle (e.g. your diet and exercise preferences);
(d) Psychographic details – results of questions as to whether you agree or disagree with certain value statements or behaviours (e.g. a healthy diet is part of my life); and
(e) Tesco Clubcard number and details of products and services you have purchased which are linked to that Tesco Clubcard account.

5.2.2 Occasionally, we may ask you questions about your health. If we do, we will inform you at the time we collect this information and ask you to consent to us processing it. If we do not ask you for this information please ensure not to provide information about your health. 5.2.3 In Malaysia, we also ask you to indicate your ethnicity and language on a purely voluntary basis. Please do not provide this information if we do not ask for it. Information that we collect automatically

5.3 When you use our website, we may collect certain information automatically from your device. In some countries, including countries in the European Economic Area, this information may be regulated under applicable data protection and privacy laws.

5.4 Specifically, the information we collect automatically may include your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location), mobile device category and operating system and other technical information. In addition, we collect information about how your device has interacted with our tool, including the pages accessed and links clicked as well as details of how you arrived at our website.

5.5 Some of this information may be collected using cookies and similar tracking technology.

5.6 For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Notice. Information that we collect via social networks

5.7 As part of being able to provide you with a direct link to Facebook, Instagram and Twitter (and any other social networking applications we may add) via the Shopper Thoughts community, we will also be collecting personal information when you connect to these social networking applications via our sites for the same purposes and duration set out in the section called “How we use your information” above. Remember, your privacy settings on social network applications may determine what information we can collect. If you are at all concerned about your privacy in the context of any social network applications, please refer to the privacy policies applicable to those websites which are found here: Facebook Privacy Policy: https://en-gb.facebook.com/policy.php Twitter Privacy Policy: https://twitter.com/en/privacy Instagram Privacy Policy: http://instagram.com/legal/privacy/

5.8 We may collect the following kinds of information from social network applications: your name; your user ID; your e-mail address; your gender; your birthday; your current city; your profile picture; your URL; your “likes”; and any content you post via the social networking application. Information that we obtain from third party sources

5.9 From time to time, we may receive personal information about you from third party sources including public databases and data aggregators. Before obtaining this information we first check that these third parties either have your consent or are otherwise legally permitted to disclose your personal information to us. Examples of the kinds of information that we obtain from third parties include:

(a) Your region and demographic information (including but not limited to your region and social class based on an analysis of a combination of data relating to your household income, highest level of education and chief income earner within your household) from Tesco clubcard.

(b) Shopping habits, online user activity, preferences and information about your lifestyle such as your hobbies and interests and publicly available information such as user-generated content, blogs and postings. We receive this information from our clients that we are carrying out the survey on behalf of (including but not limited to Tesco, retailers, media customers, fast moving consumer goods customers).

6. How we use your information and the legal basis for processing it

6.1 We process the information you provide to us voluntarily to the following things (listed below), which enable you to use Shopper Thoughts:

(a) to register you as a Shopper Thoughts participant and select you for surveys that you are most likely to enjoy;
(b) to respond to your queries or comments; and
(c) to carry out prize draws or promotions.

6.2 We also process the information you provide to us voluntarily to do the following things (listed below), which help us to develop our business and improve Shopper Thoughts, and create insights into consumer shopping behaviour, which we share with our clients:  

(a) to better understand what products or services may be of interest to you;
(b) to send you products or samples as part of a Shopper Thoughts survey, or help our clients to do so;
(c) to analyse the effectiveness of Shopper Thoughts surveys;
(d) to provide insight back to our clients on the topics covered in each survey that we run. This insight is normally aggregated as described above in section 4; and
(e) to test and improve the mathematics, science and processes we use in our other dunnhumby group businesses and those we use in the course of providing services to our clients, for example to group individuals by their common characteristics (sometimes referred to as the “segmentation” of groups of people) and to predict people’s behaviour.

6.3 We collect information automatically about you to technically provide the tool to you, better understand how you use our tool, where you come from, and what content on our tool is of interest to you. We use this information for our internal analytics purposes and to improve the quality and relevance of our tool to you. We use cookie tracking for the same purpose.

6.4 We use the information we collect from social networks to get customers to share and promote Shopper Thoughts on social media, like Facebook and twitter.

6.5 We use the information we receive from these third parties to maintain and improve the accuracy of the records we hold about you and improve your experience as a participant of the Shopper Thoughts community.

6.6 We will only process special category data (e.g. health information, as described in section 5.2.2) with your consent.

6.7 We will only share data which identifies you (e.g. survey responses, see section 4) with our clients with your consent.

6.8 We may send you marketing communications for dunnhumby products or services via e-mail. You can opt out of receiving marketing e-mails from us at any time. Please see how in section 11.1(c).

6.9 We may display non-targeted advertisements for related dunnhumby products or services to you within the Shopper Thoughts website or Shopper Thoughts applications. 6.10 If you have questions about or need further information concerning the legal basis on which we collect and use information about you, please contact us using the contact details provided under the “How to contact us” heading below.

7. Who does dunnhumby share my information with?

7.1 We may disclose your information:

(a) to our group companies;
(b) to our clients in an aggregated format, unless we have your consent to share your information in a non-aggregated format as described in section 4 above;
(c) to third party services providers who help us provide Shopper Thoughts, for example by hosting it, enabling certain features or functionality including user tracking, or by providing ancillary services such as support and maintenance, security technology, or helpdesk support to our employees and clients. The main third party service providers that we use for Shopper Thoughts are as follows:

  • Q – Q is a software platform on which information will be stored and analysed.
  • Sawtooth – is a tool that is used to carry out complex surveys in multiple platforms that are aimed at assessing how customer information changes over time.
  • SPSS – is a tool that is used to carry our data analysis.
  • Tesco – will facilitate provided the consumer rewards in the form of Clubcard points.
  • ResearchBods – will get notified when you have hit 1000 points and can redeem your points against an online voucher. Their data is hosted on AWS based in the London Region, and in Ireland.
  • InsightLabs - manages the tool within Central Europe (Czech, Slovakia, Hungary and Poland). Their data is hosted is Czech Republic.
  • Borderless Access - manages the tool within Asia (Thailand and Malaysia). Their data is hosted on cloud on US based servers.

(d) to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary:
(i) as a matter of applicable law or regulation,
(ii) to exercise, establish or defend our legal rights, or
(iii) to protect your vital interests or those of any other person; (e) to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your information only for the purposes disclosed in this Privacy Notice; and (f) to any other person with your consent to the disclosure.

8. How does dunnhumby keep my information secure?

8.1 We use appropriate technical and organisational measures to protect the information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your information. Specific measures we use include restricting access to staff on a need to know basis and sending aggregate data to third parties. We also encrypt your username and email address in transit.

9. International data transfers

9.1 Our servers are located in the EU and the US; however our group companies and third party service providers and partners operate around the world.

9.2 As a result, your information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection and privacy laws that are different to the laws of your country and, in some cases, may not be as protective.

9.3 However, we have taken appropriate safeguards to require that your information will remain protected in accordance with this Privacy Notice. These include implementing the European Commission’s Standard Contractual Clauses for transfers of information between our group companies, which require all group companies to protect information they process from the EEA in accordance with European Union data protection and privacy law.

9.4 Our Standard Contractual Clauses can be provided on request. We have implemented similar appropriate safeguards with our third party service providers and partners and further details can be provided upon request.

10. Data retention

10.1 By default, we will keep survey response data for a maximum of 10 years from collection, for the purposes of analysing market trends.

10.2 All survey response data older than 10 years will be deleted.

10.3 All personal data of a panellist will be held for 12 months unless we receive a request for their data to be deleted.

10.4 All survey response data of a panellist will be deleted within 12 months of receiving a request for their data to be deleted.

10.5 All personal data of a panellist will be deleted within 12 months of them being removed from the panel, their survey response data will be retained for 10 years and then deleted We may however keep your information for longer if we have an ongoing legitimate business need to do so (for example, to comply with applicable legal tax or accounting requirements, to comply with our client's terms and conditions/obligation, to manage consumer recruitment and to manage contact preferences with customer who no longer with to participate). When we have no ongoing legitimate business need to process your information, we will either delete or anonymise it or, if this is not possible (for example, because your information has been stored in backup archives), then we will securely store your information and isolate it from any further processing until deletion is possible.

11. Your data protection and privacy rights

11.1 You have the following rights:

(a) If you wish to access, correct, update or request deletion of your information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below. If for any reason, you no longer wish to be a participant of Shopper Thoughts and wish to close your account with us, then please let us know using the contact details provided under the “How to contact us” heading below, so that we can delete your account information, please note that this will not include the deletion of any personal information that you put in survey responses.
(b) In addition, you can object to processing of your information, ask us to restrict processing of your information or request portability of your information. Again, you can exercise these rights by contacting us using the contact details provided under the “How to contact us” heading below.
(c) You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” link in the marketing e-mails we send.
(d) Similarly, if we have collected and process your information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your information conducted in reliance on lawful processing grounds other than consent. (e) You have the right to complain to an information authority about our collection and use of your personal information. For more information, please contact your local authority. (Contact details for authorities in the European Economic Area, Switzerland and certain non-European countries (including the US and Canada) are available here.)

11.2 We respond to all requests we receive from individuals wishing to exercise their rights in accordance with applicable laws.

12. Updates to this Privacy Notice

12.1 We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection and privacy laws.

12.2 You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

13. How to contact us

If you have any questions or concerns about our use of your information, please contact our Data Protection Officer using the following details: individualrights@dunnhumby.com. The data controller of your information is dunnhumby Limited. If you are from certain regions like Europe you also have the right to lodge any complaints or concerns with your local data protection authority (DPA). You can find a list of the European DPAs here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.