Privacy and cookies policy

At Tesco, we’re working hard to serve shoppers a little better every day. Looking after the personal data you share with us is a hugely important part of this. We want you to be confident that your data is safe and secure with us, and understand how we use it to offer you a better and more personalised shopping experience.

What this Policy covers | 
Personal data we collect |  How and why we use personal data |  Sharing personal data within the Tesco Group |  Sharing personal data with Retail Partners and Service Providers |  Sharing personal data with other organisations |  How we protect personal data |  Marketing and market research |  Cookies and similar technologies |  Subject Access Rights |  How to contact us

The data controller is Tesco Ireland Limited (referred to in this policy as “we” or “us”)

• Sets out the types of personal data that we collect

• Explains how and why we collect and use your personal data

• Explains when and why we will share personal data within the Tesco Group and with other organisations; and 

• Explains the rights and choices you have when it comes to your personal data

• Shopping with us over the phone, or online or otherwise using any of the websites (“our Websites”) or mobile applications (“our Mobile Apps”) where this Policy is posted; or 

• Being a member of the Clubcard loyalty scheme (“Clubcard”) 

• This Policy also applies if you contact us or we contact you about our Services.  

• Parts of this Policy also apply to our store Surveillance systems where they capture footage of you.

This section tells you what personal data we may collect from you when you use our Services and what other personal data we may receive from other sources. 

• Your personal details, including your postal and billing addresses, email addresses, phone numbers and date of birth and title.

• Information relating to your membership of any of our clubs, such as Christmas Savers.

• Your account login details, such as your username and the password that you have chosen.

• Information about your online purchases (for example, what you have bought, when and where you bought it and how you paid for it). 

• Information about your online browsing behaviour on our Websites and Mobile Apps and information about when you click on one of our adverts (including those shown on other organisations’ websites). 

• Information about any devices you have used to access our Services (including the make, model and operating system, IP address, browser type and mobile device identifiers).

• Transaction information, including the in-store and online purchases you earn Clubcard points for and how you use your Clubcard coupons and vouchers within the Tesco Group or with Clubcard Partners.

• Personal data you provide about yourself anytime you contact us about our Services (for example, your name, username and contact details), including by phone, email or post or when you speak with us through social media. 

• Details of the emails and other digital communications we send to you that you open, including any links in them that you click on. 

• Your feedback and contributions to customer surveys and reviews.

• Footage of you may be recorded on our Surveillance systems.

We may also use personal data from other sources, such as specialist companies that supply information, online media channels, our Retail Partners and public registers. For example, this other personal data helps us to:

• Manage your Clubcard account (including the allocation of Clubcard points); 

• Review and improve the accuracy of the data we hold; and 

• Improve and measure the effectiveness of our marketing communications, including digital marketing. 

This section explains in detail how and why we use personal data. We use personal data to: 

• Manage the accounts you hold with us, including your Clubcard account Process your orders and refunds. 

Why we're using this data (legal basis): 

• Contractual necessity - at the time we collect it (purchase data, contact details, delivery/collection details). 

• Legitimate interests - following fulfilment of your order. 

• Help to develop and improve our product range, services, stores, information technology systems, know-how and the way we communicate with you. 

• Detect and prevent fraud or other crime.

• Legitimate interests .

• Detect and prevent fraud or other crime.

• Legitimate interests. 

• Manage and improve our Websites and Mobile Apps. 

• Use your online browsing behaviour as well as your in-store and online purchases (including Clubcard transactions) to help us better understand you as a customer and provide you with personalised offers and services. 

• Provide you with relevant marketing communications (including by email, post or digital marketing), relating to our products and services, and those of our suppliers, Retail Partners and the Tesco Group. As part of this, digital marketing may be displayed on websites across the Tesco Group and on other organisations’ websites and online media channels. We may also measure the effectiveness of our marketing communications and those of our suppliers and Retail Partners. 

• Legitimate interests.  

• Consent (where we need this from you which you can withdraw at any time).

• Contact you about our Services, for example by phone, email or post or by responding to social media posts that you have directed at us. 

• Manage promotions and competitions you take part in, including those we run with our suppliers and Retail Partners. 

• Invite you to take part in and manage customer surveys, reviews and other market research activities carried out by the Tesco Group and by other organisations on our behalf. 

• Legitimate interests .

• In order to resolve legal claims or disputes involving you or us. 

• Bringing or defending legal claims.

• To monitor the safety of our stores in order to prevent and detect crime and anti-social behaviour. 

• Bringing or defending legal claims.

• Exercising our legal rights.

In this section, we explain why we think those reasons are suitable and what this means for you. 

There's often a focus on consent to use personal data but, in many circumstances, consent wouldn't be appropriate. For example, a shoplifter withdrawing consent to be filmed with CCTV would increase risk to you and our colleagues; or a customer withdrawing consent to process their payment information. 

Therefore, in many situations, we rely upon two other legal reasons. The first, relates to needing data to fulfil a 'contract' with you. At the point of you buying goods and services from Tesco, a contract is created and any data we collect to allow us to deliver or provide those services or goods can be used and kept to make sure we fulfil our contract. The second is a concept called 'legitimate interests'. This is when there are legitimate and reasonable reasons we might collect and use data. For example, collecting information through your Clubcard is beneficial to both Tesco and you because we can understand what products you're interested in and make sure the products we offer match that need. 

Where we have mentioned above our use of your personal data is based on our “legitimate interests”, these are: 

• To service our customers’ needs, including delivering our products and services.

• To promote and market our products and services. 

• To service your account (such as your Clubcard account), manage complaints and resolve any disputes. 

• To understand our customers including their patterns, behaviours as well as their likes and dislikes. 

• To protect and support our business, colleagues, customers and shareholders.

• To prevent and detect anti-social, fraud and other crime. 

• To test and develop new products and services as well as improve existing ones. 

We've assessed these fundamental reasons against the fundamental rights and freedoms provided to you under the law and balanced them up against the benefit both you and Tesco might receive from this data being used. 

We may share the personal data we collect with other companies in the Tesco Group. For example, we share personal data with the following Tesco Group companies. 

When we share personal data with these companies we require them to keep it safe, and they must not use your personal data for their own marketing purposes. 

• Sell products through our services; or 

• Offer products, services and/or the ability to earn points through Clubcard. 

We only share personal data that enable our Retail Partners to provide their services. For example, when you redeem points we will give the relevant Retail Partner your name and contact details so that they can deliver your items. 

Some of the service providers we work with operate online media channels, and they place relevant digital marketing for our products and services, as well as those of our suppliers and our Retail Partners, on those online media channels on our behalf. For example, you may see an advert for our products and services as you use a particular social media site or watch television through your pay TV account. Examples of our service providers include Facebook, Adobe, Dunnhumby and Worldpay. 

• If the law or a public authority says we must share the personal data or for the administration of justice; 

• If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud); 

• Where we restructure, sell or transfer our business (or a part of it). For example in connection with a takeover or merger. 

• We protect the security of your information while it is being transmitted by encrypting it; We use computer safeguards such as firewalls and data encryption to keep this data safe; 

• We only authorise access to employees and trusted partners who need it to carry out their responsibilities; 

• We regularly monitor our systems for possible vulnerabilities and attacks and we carry out penetrations testing to identify ways to further strengthen security; 

• We will ask for proof of identity before we share your personal date with you; and 

• We will reveal only the last four digits of your payment card number when confirming an order. 

Whilst we take appropriate technical and organisational measures to safeguard your personal data, it is important that you keep your login details and devices protected from unauthorised access. 

Your personal data may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. If we do this, we ensure that your privacy rights are respected in line with this Policy and data protection laws. The most common way we do this is to put in place a specific type of contract, a copy of this type of contract can be found here.

• Why we collected it in the first place;

• How old it is; 

• Whether there is a legal/regulatory reason for us to keep it;

• Whether we need it to protect you or us. 

We will send you relevant offers and news about our products and services in a number of ways including by email, but only if you have previously agreed to receive these marketing communications. When you register with us we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time. 

IDA Business and Technology Park

Butlerstown 

Cork Road

Waterford 

A Cookie is a small text file, often encrypted, that is placed in your web browser on your receiving terminal (your PC, telephone, tablet, or any other device) when you visit a website. During the course of your visit to that website, and on subsequent visits, it sends information from your browser which contains information about your visit(s). They do not damage your computer. They can be used only for the duration of your visit or they can be used to measure how you interact with services and content over time. Cookies help to provide important features and functionality on our Websites and Mobile Apps, and to improve your customer experience. 

When you consent to Cookies on our Services, these may be used to do the following: 

For example, we use Cookies so we can remember your preferences and the contents of your shopping basket when you return to our Websites and Mobile Apps.

These Cookies collect data that is mostly aggregated and anonymous. 

Cookies used for this purpose are often placed on our Websites by organisations providing specialist services to us. These Cookies may collect information about your online behaviour, such as your IP address, the website you arrived from and information about your purchase history or the content of your shopping basket. This means that you may see our adverts on our Websites and on other organisations’ websites. You may also see adverts for other organisations on our Websites. 

To help us to deliver digital marketing that is relevant to you, we may also combine data we collect through Cookies in the browser of your desktop computer or other devices with other data that we have collected, for example your use of Clubcard and in-store purchases. 

We also use Cookies to measure the effectiveness of our marketing communications, for example by telling us if you have opened a marketing email that we have sent you. 

You can find more information about the specific, individual cookies we use and the purposes for which we use them in the table below:

To analyse how our services are used, including to test different content versions. This data may also be used to enable us to personalise our services and the marketing of our services.

•Adobe

•Optimizely

•Google

To enrich your shopping experience by delivering personalised recommendations to you on some of our websites (e.g. on Tesco Direct and F&F Clothing).

•Adobe

To personalise Tesco adverts shown to you via Tesco and on other websites based on your interactions with Tesco. For example, by using data about your transactions with Tesco, what you have in your basket and the pages and products you look at. We may also use your Clubcard data to better personalise our marketing via our main data partner, Sociomantic (a subsidiary of dunnhumby, a Tesco company).

•Sociomantic

•Bing

•Google

To market to you via social media platforms and to enable social sharing and engagement on our websites. These companies may use your data for their own purposes, including to profile and target you with other advertising.

•Facebook

•Twitter

•RadiumOne (po.st)

• To power commenting on our websites (e.g. Tesco Real Food).

• To enable us to personalise and deliver digital marketing on behalf of our Retail Partners.

•Disqus

•Google

•Sociomantic

If you choose to disable some or all Cookies, you may not be able to make full use of our Websites. For example, you may not be able to add items to your shopping basket, proceed to checkout, or use any of our products and services that require you to sign in.

You can also manage advertising related Cookies used on our Services by opting out through the Service Providers listed in the table above or by visiting the YourOnlineChoices website. Where we display personalised adverts on other organisations’ websites, the AdChoices icon will usually be displayed. Clicking on this icon will provide you with specific guidance on how to control your digital marketing preferences. More information is available on the YourAdChoices website. 

However, please be aware that, if you refuse or disable cookies, some of the Site’s functionality may be lost.

• Google Analytics

• Adobe Analytics

• AdRoll

• TradeDoubler

• Facebook

• Google +

• Choose the menu "tools" then "Internet Options"

• Click on the "privacy" tab

• Select the setting the appropriate setting 

• Choose the menu "tools" then "Options" Click on the icon "privacy"

• Find the menu "cookie" and select the relevant options 

• Choose Safari, Preferences, click Privacy, then do any of the following: Change which cookies and website data are accepted

• Select a "Cookies and website data" option: Always block: Safari doesn't let any websites, third parties, or advertisers store cookies and other data on your Mac 

If you would like a copy of the personal data we hold about you, please write to: 

Data Protection Officer Tesco Ireland Limited Gresham House Marine Road Dún Laoghaire Co. Dublin

You can also email us at subjectaccess.requestroi@tesco.com.

corrected: Summary of the right:

if you believe we hold inaccurate or missing information, please let us know and we will correct it.

Summary of the right:

general objection - We will then consider your objection to our use of your personal data. If on balance, your rights outweigh our interests in using your personal data, then we will at your request either restrict our use of it (see section 3 below) or delete it (see section 4 below).

objection in relation to direct marketing - If you make such an objection, we will stop using your personal data for direct marketing purposes.

restrict our use of it: Summary of the right:

There are several situations when you can restrict our use of your personal data, this includes (but is not limited to):

you have successfully made a general objection (listed in section 2 above). you are challenging the accuracy of the personal data we hold.

we have used your personal data unlawfully, but you do not want us to delete it.

Summary of the right:

There are several situations when you can have us delete your personal data, this includes (but is not limited to):

we no longer need to keep your personal data;

you have successfully made a general objection (listed in section 2 above);

you have withdrawn your consent to us using your personal data (and we do not have any other grounds to use it);

we have unlawfully processed your personal data.

Summary of the right:

For more information on this right of data portability, click here. 

We’d like the chance to resolve any complaints you have, however you also have the right to complain to the ROI data protection regulator (the ODPC) about how we have used your personal data. Their website is here.

E-Mail: DataProtectionROI@tesco.com

Phone: 01-2152000 (tel: 01-2152000)

Mail:

Tesco Customer Service

Centre Gresham House

Marine Road

Dún Laoghaire

County Dublin

Our Data Protection Officer can also be contacted by email:

dataprotectionroi@tesco.com

We reserve the right to change the policy at any time, so please check back regularly to keep informed of updates to this Policy.

What this Policy covers | 
Personal data we collect |  How and why we use personal data |  Sharing personal data within the Tesco Group |  Sharing personal data with Retail Partners and Service Providers |  Sharing personal data with other organisations |  How we protect personal data |  Marketing and market research |  Cookies and similar technologies |  Subject Access Rights |  How to contact us | Top of Page