Smiths News plc – Privacy Notice
Smiths News plc is committed to protecting the data that we hold and use about you and to respecting your privacy.
We at Smiths News plc (we, us) are committed to protecting the data that we hold and use about you and to respecting your privacy. We are confident that you will find the information that you need set out in this notice, but if you need to know more about the data that we hold or the way that we use it, you can contact us in one of the ways specified at section 5 below.
2. Who we are
3. The way that we use your personal data
a. What personal data do we collect?
b. How do we collect personal data?
c. How do we use personal data and why?
d. How do we share your personal data?
4. Security and retention of your personal data
5. Your rights and how to contact us
The "data controller" of your personal data (in other words, the organisation that determines how your data is used) is Smiths News plc (company number 05195191) of Rowan House, Cherry Orchard North, Kembrey Park Swindon SN2 8UH.
2. Who we are
Smith News plc is the ultimate parent company for both Smiths News Trading Limited and Dawson Media Direct Limited and their respective ancillary businesses.
Smiths News is the UK's largest newspaper and magazine wholesaling business with an approximate 55 per cent. market share. It distributes newspapers and magazines on behalf of the major national and regional publishers, delivering to over 24,000 customers across England and Wales on a daily basis. The speed of turnaround and density of Smiths News’ coverage is critical to one of the world’s fastest physical supply chains.
Dawson Media Direct supplies newspapers, magazines and inflight entertainment technology and content to over 80 airlines in 50 countries. Delivering to strict time windows with security accreditation, DMD serves the specialist needs of airlines and travel points in the UK and worldwide with printed and digital media.
Smiths News plc is registered as a data controller with the Information Commissioner’s Office in the UK.
3. The way that we use your personal data
A. What personal data do we collect?
This policy gives you information about the way that we may use your "personal data". Personal data is any information that could be used to identify you in some way (even if, in some scenarios such as online advertising, we don't know your name). The personal data that we may collect from or about you will include the following:
- e-mail address;
- phone number;
- technical information about the way that you use web, app or mobile services, including the internet protocol (IP) address used to connect your computer to the internet, your login information if you register on our website or via one of our apps, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device information;
- information about your visit to our websites, including information about how and when you came to visit our websites, how you interacted with the websites (products or services that you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information such as scrolling, clicks, and mouse-overs), and where you went next (including full URLs and methods used to browse away from the site);
- information collected from our websites and elsewhere across the internet through cookies, pixel tags, device identifiers and other technologies including information about your uses and preferences;
- potential recordings of calls that you may make to our customer services line;
- location information related to the device that you use to visit the site;
- aggregate information; and
- demographic information and other information provided by you.
For the avoidance of doubt, we do not intend for any of our websites or services to be used by children, and we therefore do not intend to collect data from children.
Similarly, we do not intend to collect (and we ask you not to disclose) any particularly sensitive data, such as data relating to your health, religion or ethnic background, unless you are applying for a role where you may be asked to provide such data (see below).
For the purpose of recruitment, we will collect the personal data you provide to us within your CV and job application, and may also collect data that you choose to provide, such as ethnicity, sexual orientation, religion and medical data as part of our compliance with race relations and employment equality regulations. This is classed as special category data and we only process this data when it is necessary for reasons of substantial public interest for the exercise of our functions.
B. How do we collect personal data?
We (and other organisations that we work with, such as our suppliers and service providers) may collect personal data in a variety of ways including:
- Directly from you:
o Information such as name, address and telephone number, as well as other information, such as your website registration details and preferred means of communication, may be collected when you voluntarily provide this information to us (for example when you register on the site, search for a product/service, leave a review or call our customer service line);
o Information included within your CV and job application process when applying for a role on our recruitment website or by providing such information to us, and completing equality and diversity questionnaires;
o Information such as name and contact number when visiting one of our offices or depots;
- From other sources:
o We work closely with third parties providing services to us (including, for example, business partners, sub-contractors providing technical, payment and delivery services related to our products or services, advertising networks, social networking platforms, analytics providers, search information providers) and we may also receive information about you from them;
o If you connect your social media accounts via our website or any of our apps, certain personal data from your social media account will be shared with us which may include personal data that is part of your profile or your friends’ profiles;
o In some circumstances related to a particular transaction, we may obtain data from public databases or credit reference agencies; and
o We may combine information that we collect about you from other sources with the information that you give to us directly. We may use this combined information as described in this policy;
- Through your browser or device or through our servers:
Certain information is collected by most browsers or automatically through your device, and we also collect your IP address (this enables us to recognise your computer or device when you use the site) via our server log files.
C. How do we use personal data, and why?
We use your personal data for a variety of purposes related to the products and services that we or any of our businesses as part of Smiths News may provide. From a legal perspective, there are various reasons for doing so. We have set out an explanation of this below.
|For purposes related to the provision of the products and services that we, or any of our businesses as part of Smiths News may offer:|
||We use your data in this way either because we have a contract with you (for example, a contract to provide products or services to you) or because it is in our legitimate interests to do so (for example, it is in our interests to measure customer satisfaction and 'troubleshoot' customer issues) but we will always ensure that your rights are protected.|
For advertising and marketing purposes, including to measure how effective our marketing is:
||In order to contact you directly with marketing (particularly electronically), we will make sure that we have your consent. In other scenarios (for example, serving online adverts to you or measuring the effectiveness of our marketing), we will rely on our legitimate interests as a business, always ensuring that your rights are protected.|
|For administrative and internal business purposes:|
||It is in our legitimate interests as a business to use your data in this way. For example, we have a clear interest in ensuring that our site works properly and that our products and services are high quality and efficient. We will always ensure that your rights are protected.|
|For recruitment purposes:|
||We use your data in this way as it is in our legitimate interests to ensure that you are the right candidate for the role. If successful in your application, we will also process your data in order to enter into a contract with you and in some instances we will need to use your personal data to fulfil legal obligations, for example to check that you are entitled to work in the UK, or to comply with race relations and employment equality regulations. For processing of special category data, we will only do this where it is necessary for reasons of substantial public interest as required by law, and you have chosen to provide this information at the time of application. If at any time you decide that you do not wish for this information to be processed, you can contact us by any of the ways listed in section 5 below.|
|For management of visits to our offices or depots:|
||We have a legal obligation to ensure your health and safety during your visit and/or on our premises, and in the event of a health pandemic may also be obliged to record your details for contact tracing purposes. We also rely on our legitimate interests to understand who visits our sites and depots, and to ensure the security of our business locations.|
|For security and legal and compliance purposes:|
||In some cases, we will need to use your personal data to fulfil a legal obligation (for example, if we receive a legitimate request from law enforcement agencies), and in other cases (such as the detection of fraud or ensuring the security of the site) we will rely on our legitimate interests as a business to use your data in this way.|
|International transfer of your data:|
Whenever we send (or permit a third party to send) your personal data outside of Europe, we will make sure that we take steps necessary to protect your data as required by applicable laws. For example, we will look to ensure appropriate safeguards are provided, such as implementing specific contractual terms with the relevant service providers, or we will look to only use service providers who adhere to certain compliance programmes overseas and maintain relevant certifications, or we may select service providers based in countries with strong local laws to protect your personal data.
D. How do we share your personal data?
We will never sell, rent or swap your personal data or give it to anyone else for them to use for their own purposes without making that clear to you. There are, however, various ways in which we will share your data, as set out below:
As the parent company Smiths News plc will share various business operations and processes with our respective businesses. We may share your personal data with them in order to fulfil our contractual obligations to you, or because it is in our legitimate interests to do so (for example, whilst you may order a product from us, the delivery of that product might be fulfilled by another of our businesses). You can see a list of our businesses within our latest Annual Report and Accounts which can be located on the Smiths News plc website (investors tab) at www.corporate.smithsnews.co.uk.
We engage various third parties to provide services to us for specific functions, and this will often mean that we need to share your personal data with them (it is in our legitimate interests to do so, since we may not have the capabilities to provide these services ourselves). In each case, we will ensure that these third parties are only allowed to use your personal data in order to provide the relevant services to us. We will always make sure that we use organisations that we trust to look after your personal data appropriately and as required by applicable laws.
Some examples of these third parties will include: distribution services, sub-contractor services, credit card processing services, accounts payable and accounts receivable services, order fulfilment, analytics, website management, information technology and related infrastructure provision, customer service, e-mail service providers for sending transactional and marketing emails, auditing, and other similar services.
We may from time to time work with online advertisers, social media platforms and advertising networks to deliver, tailor and measure marketing communications and advertising to you and others, both on the site and elsewhere on the internet (including on social media platforms such as Facebook and Twitter). We also use various Google tools to deliver, measure and tailor our online marketing communications and advertising.
The personal data that these third parties see would never include information such as your bank, credit / debit card or full address details – it relates only to online identifiers such as IP address, data from cookies or similar technologies, or other device related usage information.
Similarly, we may share certain online identifiers with analytics and search engine providers that assist us in the improvement and optimisation of our site.
You can choose not to allow your data to be used to deliver targeted advertising by changing your settings within social media platforms and via Google's own Ads Settings. You can also contact us in one of the ways specified at section 5 below if you would prefer us not to use your data in this way.
All customer data held by us is considered our property. Accordingly, if we sell or propose to sell our business or part of it, we may need to disclose your personal data to prospective buyers.
Similarly, if there are changes to our structure or if our ownership changes, we may need to disclose your personal data to the new owners or operators of this site or any of our apps as part of that process.
There may be scenarios where we are subject to a legal obligation to disclose or share your personal data, such as with law enforcement agencies or public authorities in order to prevent or detect crime.
4. Security and retention of your personal data
We take the security of your data very seriously. We have implemented various strategies, controls and measures to keep your data secure and keep these measures under close review. In addition, we ensure that any payment transactions will be encrypted using SSL technology, and that all payment card data is protected according to industry approved security controls (the Payment Card Industry Data Security Standard).
There are ways that you can help – for example, where we have given you (or where you have chosen) a password which enables you to access certain parts of our site or any of our apps, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
(ii) Retention of your personal data:
We have a detailed internal retention policy that sets out varying retention periods for different categories of data depending on our legal obligations and whether there is a commercial need, such as answering customer account queries. After a retention period has elapsed, the data is securely deleted.
You can help us keep our records up to date by telling us when your contact details and other personal information changes. If you tell us of any changes (either to your personal information or how you wish us to contact you from time to time) it may take a short while for such changes to take effect but rest assured that we respect your rights and will endeavour to carry out such changes as soon as possible.
5. Your rights and how to contact us
The law gives you a number of rights in relation to your personal data and our use of it. You have the right:
|(a)||to ask us not to use your personal data for direct marketing purposes;|
|(b)||to ask to see what personal data we hold about you and to find out about the way that we process the data (and in some circumstances, you can ask us to provide a copy to a third party);|
|(c)||to ask us to correct or update any personal data which is inaccurate;|
|(d)||to ask for personal data to be deleted in some (but not all) circumstances where there is no good reason for us to continue to use it;|
|(e)||to ask us to temporarily stop using your data if you don't believe that we have a right to use it, or to stop us from using your personal data where there is no good reason for us to continue to use it; and|
|(f)||not to be subject to decisions made solely on the basis of 'automated processing' (i.e. the right not to be subject to decisions made solely by algorithms or computers without input from a human) in certain circumstances.|
You also have the right to complain about our use of your personal data. You can contact the Information Commissioner's Office via their website: https://ico.org.uk/concerns or by calling 0303 123 1113.
© v3.2 October 2020