Privacy and Cookie Policy Version

We take your privacy and using your personal data very seriously. This privacy policy (“Policy”) covers how we collect personal data, what we do with it and who we share it with.  It also tells you about your privacy rights and how the law protects you. It is important that you read this Policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.

We may collect, use, store and transfer different kinds of personal data which we have grouped together as follows:

• Identity Data includes first name, last name, title, date of birth, employee identification number, the number of your passport, driving licence or other ID;
• Biometric Data includes a photographic likeness of you for identification and verification purposes;
• Contact Data includes address, email address and telephone (including mobile) numbers;
• Financial Data means your bank account and payment card details;
• Transaction Data means the details about payments to and from you and other details of products and services you have purchased from us, including transactions carried out with One4all Gift Cards and Reward Cards;
• Technical Data includes Internet Protocol (IP) address used to connect your device to the Internet, your login information, browser type and version, time zone setting, geo-location, browser plug-in types and versions, operating system (OS) and platform when you access our websites;
• Usage Data includes the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time), page response times, download errors, length of visits to certain pages;
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses;
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect aggregated data such as statistical or demographic data. This may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Policy.

How we collect your personal data?

We use different methods to collect personal data from and about you, including:

– Direct Interactions: you or another person using our website (for example, someone who wishes to order a gift card for you) may give us identity data, contact data, financial data and profile data by entering the information on our website or give us in any other way, such as by communicating with us by post, email or telephone. This includes personal data provided when:

• you apply for our products or services (including where you order gift cards for third party beneficiaries);
• create an account on our website;
• respond to a questionnaire or survey;
• give us some feedback or contact or interact with us to request support.

– Automatic Information: we may receive and automatically collect certain types of information whenever you interact with our website. This may include information about your electronic devices, browsing actions and patterns when you access our website or advertisements and other content served by or on behalf of us on other websites. We collect this information by using “cookies” and other similar technologies.

– Third Parties or publicly available sources: we may receive personal data about you from various third parties and public sources as set out below:

• Technical Data from analytics providers such as Google;
• Contact and Financial Data from the providers of technical and payment services;
• Identity and Contact Data from a third party, such as your employer or other company which has enrolled you to their rewards scheme;
• Identity and Contact Data from credit reference agencies, other electronic identity verification service providers and other publicly availably sources such as Companies House and the Electoral Register.