Nutricia Ltd t/a Early Life Nutrition knows that you care how your personal data is used and we recognize the importance of protecting your privacy.
Contact us here if you have any queries and comments, or if you want to make a request regarding any of your data subject rights.
BASIC PRINCIPALS OF OUR PRIVACY COMMITMENT
Nutricia Ltd. are committed to protecting your right to privacy. We aim to protect any personal data we hold, to manage your personal data in a responsible way and to be transparent in our practices. Your trust is important to us. We have therefore committed ourselves to the following basic principles:
- You have no obligation to provide any personal data requested by us. However, if you choose not to, we may not be able to provide you with some services or products
- We aim to collect, process and use as little personal data as possible
- When we do collect your personal data, we aim to keep it as accurate and up to date as possible
- If the personal data we collect is no longer needed for any purposes and we are not required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it at the earliest opportunity
WHAT PERSONAL DATA DO WE COLLECT?
The personal data we collect varies depending upon the purpose of the collection and the product or service we are providing you.
Generally, we may collect the following types of personal data from you directly:
a) Personal contact data, such as your name, email address and physical address
b) Account login details, such as your e-mail address and password. This is necessary to create a personal account
c) Details of communications with us, which may include details of our conversations via the Careline (phone, email, Live Chat or web forms) or direct message from social media pages
d) Demographic and parental information, such as your age, gender, your expected due date (EDD) or baby’s birth date
e) Browser history, such as pages accessed, date of access, location when accessed, and IP address;
f) Information related to your maternal or baby’s health
g) Information about people other than you, such as personal data about your family members, when you provide such information directly to us;
h) Social media profiles if you contact us via our social media pages
i) Data relating to purchases and transactions: Financial information, Work address, Phone Number, Bank account or credit card number, gender, online identifiers e.g. IP address, Information on family members e.g. family connections, communications e.g. conversations via chat, Carelines and/or other customer service channels.
We may also collect personal data about you indirectly when:
a) you share content on social media pages, websites or applications related to our products or in response to our promotional material on social media; or
b) we may collect personal data about you from information collected by other websites (for instance, we may place an ad on a third party website, and when you click on that ad, we may receive information about you and other website visitors in order to measure the reach and success of that ad).
c) we may collect data about when you open an email or click on a link in one. This allows us to see how well our communications with you are performing.
Why do we collect and use your personal data?
We collect your personal data so we can provide you with the best online experience and to provide you with a high quality of customer service. In particular we may collect, hold, use and disclose your personal data for the following purposes:
a) To process and answer your enquiries, complaints or to contact you in order to answer your questions
b) To improve the quality of service from our Careline by linking to any previous contacts you may have had with us
c) To develop and improve our products, services, communication methods and the functionality of our websites
d) To send you a customer satisfaction survey after using the Careline or social media pages
e) To communicate information to you, to manage your baby club registration and/or subscription to our emails, direct mail
f) To manage our everyday business needs in connection with your participation in competitions or promotional activities
g) To authenticate your identity when contacting us by telephone, electronic means or otherwise
h) For internal training and quality assurance purposes
i) To understand and assess your interests, wants, and changing needs in order to improve our website, our current products and services, and/or developing new products and services
j) To provide personalized products and communications as well as product recommendations
k) In order to process transactions and fulfil orders
We may also need your personal data to comply with legal obligations or in the context of a contractual relationship that we have with you.
When we collect and use your personal data for purposes mentioned above or for other purposes, we will inform you before or at the time of collection.
Where appropriate, we will always ask for your consent to process the personal data. Where you have given consent for processing activities, you have the right to withdraw your consent at any time.
Where we process your personal data, you are entitled to a number of rights and can exercise these rights at any point. We have provided an overview of these rights below together with what this entails for you. You can change your preferences any time by visiting the update my details page.
The right to access your personal data and correction
You have the right to access, correct or update your personal data at any time. We understand the importance of this and should you want to exercise your rights, please contact us via this link.
The right to data portability
Your personal data is portable. This means it can be moved, copied or transmitted electronically. However, this right only applies where:
a) The processing is based on your consent;
b) The processing takes place for the performance of a contract;
c) The processing takes place by automated means
If you wish to exercise your right to data portability, please contact us via this link.
The right to deletion of your personal data
You have right to request that we delete your data if:
a) your personal data is no longer necessary in relation to the purposes for which we collected it; or
b) you withdraw the consent that you had previously given us to process your personal data, and there is no other legal ground to process that personal data; or
c) you object to us processing your personal data for direct marketing purposes; or
d) you object to us processing your personal data for Nutricia Ltd, Early Life Nutrition’s legitimate interests (such as improving overall user experience on websites);
e) the personal data is not being processed lawfully; or
f) your personal data needs to be deleted to comply with the law
g) If you wish to delete the personal data we hold about you, you can use the following unsubscribe link on our website. Alternatively you can contact the Careline during office hours. We will take reasonable steps to respond to your request in accordance with legal requirements.
If the personal data we collect is no longer needed for any purposes and we are not required by law to retain it, we will do what we can to delete, destroy or permanently anonymise it. Data for baby club membership will be retained for a maximum period of 3 years 9 months depending on the time in which baby club membership is first registered.
The right to restriction of processing
You have the right to restrict the processing of your personal data if;
a) you do not believe the personal data we have about you is accurate; or
b) the personal data is not being processed lawfully, but instead of deleting the personal data, you would prefer us to restrict processing instead; or
c) we no longer need your personal data for the purposes we collected it, but you require the data in order to establish, exercise or defend legal claims; or
d) you have objected to the processing of your personal data and are awaiting verification on whether your interests related to that objection outweigh the legitimate
grounds for processing your data.
If you wish to restrict our processing of your personal data, please contact us via this link and we will take reasonable steps to respond to your request in accordance with legal requirements.
The right to object
You have the right to object to the processing of your personal data at any time. Please contact us via this link.
The right to lodge a complaint with a supervisory authority
While we would be grateful if you lodged any complaints with us, you have the right to lodge a complaint directly with the UK ICO about how we process personal data.
You can also contact the Data Protection officer at Nutricia Ltd using this link.
HOW WE PROTECT YOUR PERSONAL DATA
We understand that the security of your personal data is important. We make our best efforts to protect your personal data from misuse, interference, loss, unauthorized access, modification or disclosure. We have implemented a number of security measures to help protect your personal data. For example, we implement access controls, use firewalls and secure servers, and we encrypt personal data.
We may enact data processes on your behalf in specific circumstances. An example would be in the event of a notified baby death, your details would be checked for a duplicate account under (C&G baby club / Aptaclub) and automatically unsubscribed. Only in circumstances where accounts are registered with the same email address, can this process be enacted.
SHARING OF YOUR PERSONAL DATA
When we share your personal data with affiliates and other organizations, we make sure we only do so with organizations that safeguard and protect your personal data and comply with applicable privacy laws in the same or similar way that we do.
Your personal data will be shared with the following third parties for the purposes described:
|Categories of third parties
|Adobe Audience Manager
||Non-identifying membership data
||To show you products and services appropriate to your baby’s age while you browse on other websites
||Personal contact data (email & name)
||To allow personalised conversations with our Careline team
||Personal contact data and social media profile
||To analyse social media activity or feedback on Aptamil owned social pages
||Personal contact data and survey data
||To analyse feedback for improving our services
||Personal contact data (email & name), survey answers
||To develop and improve our products, services, communication methods and the functionality of our websites
||Personal contact data (email and address)
||To analyse purchase behaviours based on site and email usage
||Personal contact data (email and name)
||To allow login via Facebook on the Aptaclub website
||To allow Danone to see how well adverts perform
||Personal membership and contact details
||To allow personalised conversations with the Careline and analysis of data to improve our services
|Constant Commerce (Buy Now widget)
||IP address and tracking cookie||To determine the user's location before the service is used. Location service can be disabled on your device in the privacy settings, but this will make the Buy Now service unavailable. Cookie is required so that retailer preference is retained.|
PS Mailing Services Ltd
|Personal contact data
||To allow direct mail to be delivered
|Anonymised membership data
||To analyse user behaviours on a website and email the allow us to enhance your experience
|Email / push notification databases:
|Sendgrid||Membership data, personal contact data (email)||To allow emails to be delivered|
|Purchasing and processing orders|
||Contact and personal details (Email, Name, Address’s), payment and financial data (Credit card, brank account)
||To process payments
||Contact and personal details, payment and financial data.
||Contact and personal details (Email, Name, Address’s), payment and financial data (Credit card, brank account)
||To develop ecommerce website and test functionality
Sharing data internationally
Personal data may be processed outside the European Economic Area (EEA). When processed outside the EEA, Danone will make sure that this cross-border data processing is protected by adequate safeguards.
The safeguards that we use to protect cross-border data processing include:
a) Model Contractual Clauses approved by European Commission. These standardized contractual clauses provide sufficient safeguards to meet the adequacy and security requirements of the European General Data Protection Regulation; or
b) Certifications which demonstrate that third parties outside of the EEA process personal data in a way that is consistent with the European General Data Protection Regulation. These certifications are approved either by the European Commission, a competent supervisory authority or a competent national accreditation body in terms of General Data Protection Regulation.
Automated decision-making and profiling
For some services and products we may process your personal data using automated means. Essentially this means that decisions are taken automatically without human intervention. An example of this would be deciding which type of campaign emails you receive from us.
We may also process your personal data for profiling purposes to predict your behaviour on our website or products that may be of interest to you. This can be used to show you adverts for our products and services appropriate to your baby’s age while you browse on other websites. We will also use your data to send tailored communications via email and direct mail, if you have opted to receive them.
If we intend to make use of such methods, we will of course inform you and we will give you an opportunity to object to these processes in advance. You are also free to contact us for further information on such processing.
Cookies and other technologies
a) Information about your device browser and operating system;
b) The IP address , device ID and Mac ID of the device you are using;
c) Web pages of ours that you view;
d) Adverts you view;
e) Links that you click while interactive with our services, and emails you open.
f) Time and date of activity
Please see our cookie statement for more information on this link.
Privacy considerations for local law
Although the General Data Protection Regulation applies in the same way to all EU Member States, sometimes local privacy laws may contain stricter rules or information that is relevant on a local level. We will hold and process your personal data in accordance with the UK Data Protection Bill 2018 which provides the same protections as the EU GDPR.
How to contact us