Purpose of this Privacy Notice
Who are we?
Who does this Privacy Notice apply to?
What is personal data?
What is our lawful basis for processing your personal data?
When do we collect your personal data?
Who do we share your personal data with?
How do we protect your personal data?
How long do we keep your personal data for?
What are your rights?
How to contact us
How to contact the supervisory authority
Cookies
Changes to our Privacy Notice
The purpose of this Privacy Notice is to inform you when we collect your personal data, how we use your personal data and your rights relating to your personal data.
CDS (Superstores International) Ltd T/A The Range and wilko is a limited company registered in England and Wales. The Range is the data controller for personal data collected and processed through our family of businesses, including The Range (Ireland) Ltd.
Company Registration Number: 02699203
Registered Office: 15 William Prance Road, Plymouth, PL6 5ZD
This Privacy Notice applies to all users of any of our services where we may process your personal data, including when using our website or app, interacting with our social media accounts, contacting us via email, letter or telephone, entering our competitions, visiting our stores or making purchases instore and online.
Personal data is any information that can be used to identify a living individual, directly or indirectly. This includes information such as your name, contact details, home address, browsing history, telephone call recordings, CCTV footage and payment information.
Data protection law helps protect your personal data, including the UK Data Protection Act 2018, the EU General Data Protection Regulation 2018, the UK General Protection Regulation and the Privacy and Electronic Communications Regulations 2003.
The Range will only process your personal data where we have a lawful basis for doing so. The type of lawful basis may change depending on the purpose the personal data is being processed for. These lawful bases include:
We may collect different types of your personal data at different times, depending on the nature of your interaction with us and our reason for processing your personal data.
|
When we may collect your personal data |
The types of personal data we may collect |
|
Setting up an online account on The Range |
Name, Date of Birth, Email Address, Telephone Number, Delivery Address |
|
Using our website or app |
Cookie Preferences, Browsing History, Preferred Store |
|
Entering a prize draw or competition |
Name, Contact Details |
|
Making an online purchase or return |
Name, Delivery Address, Billing Address, Telephone Number, Payment Information |
|
Making an instore purchase or return |
Payment Information, Address |
|
Contacting our Customer Care team |
Name, Email Address, Telephone Number |
|
Subscribing to marketing |
Email Address, Telephone Number |
|
Visiting one of our stores |
CCTV Footage |
|
Registering your vehicle for additional free parking at one of our stores |
Name, Registration Details |
|
Leaving product reviews |
Name, Contact Details |
|
Interacting with our Social Media pages |
Social Media Handle, Name |
|
If you have an accident instore |
Name, Home Address, Telephone Number, Accident Details, CCTV Footage |
|
If you commit a crime in one of our stores |
Name, Address, CCTV Footage |
Facial Recognition trial
We are currently trialling the use of facial recognition technology in a select number of stores. Our primary aim for trialling this technology is to enhance the safety and security of our colleagues and customers and reduce the level of crime within The Range stores by:
The facial recognition system scans every face that visits a trial store and makes a comparison against a Person of Interest (POI) Watchlist. The system instantly deletes these scanned images where no match is found. The system does not store these images, and they cannot be retrieved or reverse engineered. Only those who have committed criminal activity (i.e. physical violence, threats of violence, theft, fraud, property damage) in a Range store will be added to the POI Watchlist.
We only share your personal data where there is a need to do so, for example so your goods can be delivered by a courier.
When we do share your personal data, we will only share the minimum amount of personal data required for that purpose and we will ensure that the third-party is either legally or contractually committed to confidentiality.
If we ever need to transfer your personal data outside of the UK, we will put appropriate safeguards in place to ensure that your personal data is protected to the same level as it is in the UK.
Our family of businesses
We may share your personal data within our family of businesses, including The Range, The Range (Ireland) Ltd and wilko.
The Range marketplace
If you place an order on The Range marketplace from one of our partners, your purchase details will be shared with this marketplace partner. Any communications you have with our Customer Care team about your order will also be shared with the marketplace partner to help resolve any issues you may have.
Couriers and logistics
If you place an order for home delivery, we will share your details including your name, email address, telephone number and delivery address with our logistics partners and couriers so that your order can be delivered and you can be kept updated on your delivery,
Auditors, insurers and legal advisors
We will share personal data with our auditors, insurers and legal advisors where required, for instance to help us defend or pursue legal claims.
Law enforcement, government agencies and public bodies
We may share personal data with law enforcement, government agencies and public bodies where required to meet our legal obligations.
Crime prevention and detection agencies
We share data with fraud prevention agencies, debt recovery agencies and crime solution organisations such as NBCS to help us identify and deal with criminal activity.
Suppliers and manufacturers
We may share your personal data with our suppliers or manufacturers if it is required, for instance if you are reporting a fault with a product.
Third-party service providers
We share personal data with various third-party service providers who perform functions on our behalf and help provide additional services, such as Microsoft who provide IT services and Zendesk who help us manage customer contact.
Advertising and marketing agencies
We may share your personal data with advertising and marketing agencies when you consent to marketing cookies or consent to receive marketing communications, who help provide personalised advertising and send marketing communications on our behalf.
Payment providers
If you use a payment provider such as Klarna, Paypal or Clearpay, we will share your purchase details with them.
Finance providers
If you make a purchase using finance through our finance provider Novuna, we will share your purchase details with them.
Jonas and James kitchens
If you purchase a Jonas and James kitchen from The Range, we may need to share your personal data with our kitchen manufacturer TKC and suppliers such as Hoover or Candy so that we can provide you with a bespoke kitchen that matches your requirements.
Rug Doctor
If you hire a Rug Doctor from one of our stores, your details will be shared with Rug Doctor to help them manage and track their machines.
Customer feedback agencies
If you make a purchase from our website we may share your details with customer feedback agencies such as Trustpilot so that we can gather customer reviews.
Parking companies
If you register your vehicle in our store to receive additional free parking, we will share your registration details with the relevant parking company to prevent you from receiving a Parking Charge Notice (PCN).
We take keeping your personal data safe seriously, and we take all appropriate organisational and technical measures to keep your data secure and prevent unauthorised or unlawful destruction, loss, alteration, access or disclosure.
We have both physical, electronic and procedural safeguards in place at all stages of processing your data, from when we collect the personal data to when we delete it.
These measures include only collecting the minimum amount of personal data required, encrypting personal data when we store it, requiring a password to access any personal data and securely deleting personal data as soon as it is no longer required. We also use strong firewalls and carry out system monitoring and penetration testing to help keep your data secure.
We will only retain your personal data for as long as is necessary, taking into consideration the purpose it was collected for and any applicable legal or regulatory obligations. This means that different types of personal data will be retained for different periods of time.
When we are no longer required to keep your personal data it will either be securely deleted, or your personal data removed so that the data is anonymous.
You have several rights when it comes to your personal data under data protection law, including:
If you make a request relating to your rights this request is usually free, though we may charge a fee or refuse a request if it is repetitive, unfounded or excessive.
We will usually fulfil your request within one calendar month though if the request is complex we may need a little longer, but we will always contact you within one month to let you know when you will receive a response. We may also ask you to confirm your identity or provide further information before we are able to fulfil the request.
If you wish to make a request regarding any of your rights, you can do so by contacting our Data Protection Officer using the contact details below.
If you would like to get in touch with us regarding your personal data or anything mentioned above, please contact our Data Protection Officer using the contact details below:
Email: dpo@therange.co.uk
Post: Data Protection Officer, The Range Head Office, 15 William Prance Road, Plymouth, PL6 5ZD
If you have any concerns about how your personal data has been handled you have the right to complain to the supervisory authority. Please visit the website of the relevant supervisory authority to find out more information:
UK – Information Commissioner’s Office (ICO): www.ico.org.uk
ROI – Data Protection Commissioner (DPC): www.dataprotection.ie
If you would like to learn more about the cookies we use on our website or update your cookie preferences, please visit our Cookie Policy.
Our Privacy Notice is routinely reviewed and updated when necessary. Please check regularly for any changes.
Last updated November 2024.
