Departments
About us
Privacy Policy

At Superdrug, we take privacy seriously.

The categories of personal data that we process depend on how you use our services. We use your personal data to enable you to apply for a role with Superdrug, create an account to track your application or to request information from us.  All personal data is processed in accordance with applicable data protection laws.

We only disclose your personal data to third parties that assist us with providing you with our services. 

With your consent we also use cookies for marketing, performance and statistical purposes.

We also offer you various choices to control how your personal data is used. You can also contact us at [email protected] if you have a question about the personal data we hold on you.

If you would like more information about the processing of your personal data by us and on the cookies that we use, see below the full version of our Privacy Policy.

LONG VERSION

Our Privacy Principles

At Superdrug we have 5 Privacy Promises which explain how we use and look after your information. We will:

  1. ALWAYS use your personal data in line with data protection law.
  2. ALWAYS tell you what information we collect, what we do with it, who we share it with and who to contact if you have any concerns.
  3. ALWAYS provide options to say 'STOP' if you don’t want communications about relevant job vacancies and applications.
  4. ALWAYS take steps to protect your information and make sure no unauthorised person accesses it.
  5. ALWAYS respond to questions about your personal data without delay.

 

Our Privacy Policy

Last Updated: May 2021

We are committed to safeguarding your privacy rights and ensuring that your personal data is protected. 

This Privacy Policy explains the types of personal data we collect and how we process and protect that data in connection with the services we provide.

This Privacy Policy also applies to our targeted content, including online adverts of roles, which you may see on third party websites, platforms and applications (“Third Party Sites”) based on your online activity. These Third Party Sites may have their own privacy policies and terms and conditions. We encourage you to read them before using these Third Party Sites.

 

  1. WHO IS RESPONSIBLE FOR WHAT HAPPENS WITH YOUR DATA?

Superdrug Stores plc ("Superdrug" or “we”) are responsible for processing your personal data on our website. Superdrug is a member of the A.S. Watson group of companies (“ASW Group”), which is part of the multinational conglomerate CK Hutchison Holdings Limited (“CK Hutchison”).

  1. HOW DO I CONTACT THE DATA PROTECTION OFFICER?

If you have a question in relation to how we process your personal data you can contact our Data Protection Officer via email:  [email protected].

  1. WHAT IS PERSONAL DATA?

Personal Data means information that can directly or indirectly identify you ("Personal Data"). This typically includes information such as your name, address, email address, and telephone number.  However, we may also collect other information such as whether you consider that you have a disability, information about criminal convictions, information about your gender and ethnicity etc.  This type of information is called a “special category of Personal Data” and requires special protection because of its sensitivity.

  1. WHAT HAPPENS WHEN YOU PROVIDE US WITH YOUR PERSONAL DATA OR WHEN WE OTHERWISE RECEIVE YOUR PERSONAL DATA?

We collect your Personal Data directly in a number of ways, for example when you provide us with your Personal Data to apply online or offline for one or more roles, by using our website or when you contact our Talent Team.

When you provide us with your Personal Data, we will process it in accordance with this Privacy Policy. If you do not wish us to process your Personal Data in this way, please do not provide us with your Personal Data.

We may also receive your Personal Data from other sources, including information from commercially available sources, such as public databases and data aggregators, and information from third parties. If you do not want us to receive your Personal Data from other sources, please communicate your preferences directly with the relevant sources.

We process your Personal Data to provide you with our services as further explained below. In certain instances, we only process your Personal Data if you have given us permission to do so, for example in most cases where we process your Personal Data for marketing purposes, use cookies or location data or where we process your special category Personal Data. In other instances we may rely on other legal grounds for processing your personal data, such as performance of the contract with you or legitimate interests, like fraud prevention.

Where we process your Personal Data on the basis of your consent, we will ask for your consent explicitly and only for a particular purpose. We will also ask you to provide additional consent if we need to use your Personal Data for purposes not covered by this Privacy Policy.

Our website is not intended for use by individuals under the age of 16 unless they have permission from their parents or guardian.  However we cannot check whether a visitor is older than 16.  We therefore advise parents or guardians to be involved in the online activities of their children, in order to prevent data about children being collected without parental or guardian consent.  If you believe we have collected Personal Data about a minor without this permission, please contact us at [email protected].

Please refer to the table in Section 5.1 for details of the various types of Personal Data we may collect, the relevant purposes and the legal basis for such processing.

 

  1. FOR WHICH PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

5.1       We process the following categories of Personal Data for the following purposes:

            What Personal Data may we collect?      What is the Purpose of the processing?       How long do we store your Personal Data?         What is our legal basis for the processing?

Browsing on our Sites   Information about the type of browser you use when visiting our website, your IP and device address, hyperlinks that you have clicked, websites you visited before arriving at our website and information collected by cookies or similar tracking devices. We (and third party service providers acting on our behalf) use cookies and similar technologies to process data about you when you visit our website. We would like to know whether you have visited us before and your preferences to provide you with a tailored experience of our website.

See Section 5.2. below for more information about cookies.        For as long as each cookie is set (either a session or persistent cookie).

            Your consent as by using the site you agree to our use of cookies.  In some cases, and always when permitted by law, we will infer from your actions that you agree to cookies. Please note that we need to process certain basic surfing data in order to provide core website  functionalities such as secure log-in.

You can always revisit your cookie preferences by changing your browser settings.

Apply for a role / create a profile

            Name, title, postal address, email address, phone number, information contained on your CV and other Personal Data you voluntarily provide to us.            We process Personal Data to process your application and assess your suitability for employment by us.           Your Personal Data is kept for one year and then is automatically deleted.   We need this information to process your application. If we need information about you that is considered sensitive we will inform you in a transparent manner about our legal obligations to process such personal data.

Make suggestions for roles that may interest you Your Personal Data which has already been provided when you apply for a role / create a profile.            We process your Personal Data to suggest roles which may be of interest to you.  Your Personal Data is kept for one year and then is automatically deleted.    We need this information to process your application (performance of a contract). If we need information about you that is considered sensitive  we will inform you in a transparent manner about our legal obligations to process such personal data.

 

5.2       Cookies and Similar Technologies

We use cookies and similar technologies (“Cookies”) to improve our products and your experience on our website by collecting information on how you use our website. Some of the Cookies we use are required to enable core site functionality, for example to provide secure log-in, but we also use Cookies that allow us to analyse site usage (so we can measure and improve performance), and advertisement Cookies which are used by advertising companies to serve ads that are relevant to your interests.

Where we use Google Analytics, we have set up the service to anonymise your IP address as soon as data is received by the Analytics Collection Network  https://support.google.com/analytics/answer/2763052?hl=en  , before any storage or processing takes place. To opt out of being tracked by Google Analytics across all websites please visit http://tools.google.com/dlpage/gaoptout.

You can view more information on the Cookies we use on our website. Please note, however, that without cookies you may not be able to use all of the features of our website.

  1. WHO WE SHARE YOUR PERSONAL DATA WITH?

6.1       Our Service Providers

We share your Personal Data with the following data processors (i.e. service providers that help us to perform the above tasks):

  • relevant companies of the ASW Group and subsidiaries of CK Hutchison.
  • relevant companies of the ASW Group and trusted third parties which directly support our operations and management of our website for IT purposes (hosting, maintenance and testing).

These processors are bound by us to strict requirements as required under applicable data protection laws to only handle your Personal Data for us and to comply with high IT security standards.

6.2       Other Recipients

We share your Personal Data with the following third parties that process your Personal Data for their own purposes (i.e. these third parties are not processors; they rather use your Personal Data because they have their own interest):

  • law enforcement or other agencies if we are required to do so by law, or by a warrant, subpoena or court order to disclose your Personal Data.

Please note that we never share your Personal Data with social media platforms. When we engage in audience building or customer matching activities with social media platforms like Facebook or Google, your Personal Data is always anonymised before the transfer. If there are any changes in the future and we have to share your Personal Data with a social media platform, we will ask for your consent.   

6.3       Sharing your Site Usage Information

With your consent, we will share Site usage information with trusted third parties in order to offer you tailored content which may be of interest to you based on your prior activity on our Site. These trusted third parties may set and access their own Cookies, web beacons and similar tracking technologies on your device in order to help us deliver customised content and advertising to you when you visit our relevant Sites. Please see Section 5.2 for more information about Cookies and how to opt out.

You can also visit the website www.youronlinechoices.com to choose which companies can deliver customised advertisements.

Please note that even if you opt out, you may still receive advertisements from us that are not customised based on your website usage information.

  1. TO WHICH COUNTRIES DO WE TRANSFER YOUR PERSONAL DATA?

Many of our trusted third parties and ASW Group companies and CK Hutchison companies are based in countries that provide an adequate level of data protection, such as the UK and the European Economic Area. 

When we need to transfer your Personal Data to a trusted third party or ASW Group or CK Hutchison company based in a country where data protection laws are considered not to offer the same level of protection, we ensure adequate data protection safeguards by relying on other legitimate means, such as Standard Contractual Clauses.

More details on the transfer mechanism can be obtained from our Data Protection Officer (see contact details in Section 2).

  1. HOW LONG DO WE PROCESS YOUR PERSONAL DATA?

We will store your Personal Data for one year and only use it for the purposes described in Section 5.1.

  1. WHAT ARE YOUR RIGHTS?

If certain requirements are fulfilled, you have the right to:

  • Obtain from us confirmation as to whether or not we process Personal Data from you and, where that is the case, access to your Personal Data;
  • Rectification of inaccurate Personal Data;
  • Erasure of Personal Data;
  • Objection to the processing of Personal Data;
  • Restriction of processing of Personal Data; and
  • Portability of Personal Data - receive the Personal Data you have provided to us in a structured, commonly used and machine-readable form and transmit it to another data controller.

You can learn more about these rights here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/. To exercise your rights, please contact the Data Protection Officer  (see Section 2 for contact details) or get in touch via [email protected]

  1. CAN YOU WITHDRAW YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA?

Where your consent is the legal basis for the processing of your Personal Data, you can withdraw your consent by:

Please note that withdrawing your consent will not affect the lawfulness of the processing before the withdrawal. 

  1. CAN YOU COMPLAIN WITH THE DATA PROTECTION AUTHORITIES?

If you think that the processing of Personal Data by us violates data protection laws, you can lodge a complaint with the Information Commissioner in the UK (www.ico.org.uk) or the Data Protection Commissioner in the Republic of Ireland (www.dataprotection.ie). 

  1. HOW DO WE PROTECT YOUR PERSONAL DATA?

We maintain appropriate technical and organisational measures to protect the Personal Data you provide to us against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your Personal Data.

  1. CAN WE CHANGE OUR PRIVACY POLICY?

We may change this Privacy Policy from time to time by posting the updated version of the Privacy Policy here. We encourage you to visit this area frequently to stay informed.

May 2021