The Range Privacy Notice
header banner header banner header banner

You are shopping in Reserve & Collect mode for store | Change →

Select your store for Click & Collect*

Find your nearest store

Change postcode

Not in the UK? Change Country

The Range Privacy Notice

Contents

Purpose of this Privacy Notice

Who are we?

Who does this Privacy Notice apply to?

What is personal data?

What is our lawful basis for processing your personal data?

When do we collect your personal data?

Who do we share your personal data with?

How do we protect your personal data?

How long do we keep your personal data for?

What are your rights?

How to contact us

How to contact the supervisory authority

Cookies

Changes to our Privacy Notice

 

 

Purpose of this Privacy Notice

 

The purpose of this Privacy Notice is to inform you when we collect your personal data, how we use your personal data and your rights relating to your personal data.

 

Who are we?

 

CDS (Superstores International) Ltd T/A The Range and wilko is a limited company registered in England and Wales. The Range is the data controller for personal data collected and processed through our family of businesses, including The Range (Ireland) Ltd.

Company Registration Number: 02699203

Registered Office: 15 William Prance Road, Plymouth, PL6 5ZD

 

Who does this Privacy Notice apply to?

 

This Privacy Notice applies to all users of any of our services where we may process your personal data, including when using our website or app, interacting with our social media accounts, contacting us via email, letter or telephone, entering our competitions, visiting our stores or making purchases instore and online.

 

What is personal data?

 

Personal data is any information that can be used to identify a living individual, directly or indirectly. This includes information such as your name, contact details, home address, browsing history, telephone call recordings, CCTV footage and payment information.

Data protection law helps protect your personal data, including the UK Data Protection Act 2018, the EU General Data Protection Regulation 2018, the UK General Protection Regulation and the Privacy and Electronic Communications Regulations 2003.

 

What is our lawful basis for processing your personal data?

 

The Range will only process your personal data where we have a lawful basis for doing so. The type of lawful basis may change depending on the purpose the personal data is being processed for. These lawful bases include:

  • Consent – you provide us with consent to process your personal data for a specific purpose, such as consenting to receive marketing communications.
  • Contract – the processing is necessary for us to fulfil a contract between you and The Range, such as collecting your delivery address when you place an online order so that we can send you your goods and fulfil the contract of sale.
  • Legal obligation – the processing is necessary for us to comply with the law, such as sharing personal data with HMRC.
  • Legitimate interest – the processing is necessary for our legitimate interests, such as monitoring website payments to help identify and protect us from fraudulent activity.
  • Vital interests – the processing is necessary to protect the life of an individual, such as sharing information with the police in an emergency situation.

 

When do we collect your personal data?

 

We may collect different types of your personal data at different times, depending on the nature of your interaction with us and our reason for processing your personal data.

 

When we may collect your personal data

The types of personal data we may collect

Setting up an online account on The Range

Name, Date of Birth, Email Address, Telephone Number, Delivery Address

Using our website or app

Cookie Preferences, Browsing History, Preferred Store

Entering a prize draw or competition

Name, Contact Details

Making an online purchase or return

Name, Delivery Address, Billing Address, Telephone Number, Payment Information

Making an instore purchase or return

Payment Information, Address

Contacting our Customer Care team

Name, Email Address, Telephone Number

Subscribing to marketing

Email Address, Telephone Number

Visiting one of our stores

CCTV Footage

Registering your vehicle for additional free parking at one of our stores

Name, Registration Details

Leaving product reviews

Name, Contact Details

Interacting with our Social Media pages

Social Media Handle, Name

If you have an accident instore

Name, Home Address, Telephone Number, Accident Details, CCTV Footage

If you commit a crime in one of our stores

Name, Address, CCTV Footage

Entering a store using Facial Recognition Technology

We may use Facial Recognition Technology in stores to help with the prevention of crime and making our stores a safe place for customers and colleagues. For more information about this technology visit: https://faicetech.com/

 

 

Who do we share your personal data with?

 

We only share your personal data where there is a need to do so, for example so your goods can be delivered by a courier.

When we do share your personal data, we will only share the minimum amount of personal data required for that purpose and we will ensure that the third-party is either legally or contractually committed to confidentiality.

If we ever need to transfer your personal data outside of the UK, we will put appropriate safeguards in place to ensure that your personal data is protected to the same level as it is in the UK.

 

Our family of businesses

We may share your personal data within our family of businesses, including The Range, The Range (Ireland) Ltd and wilko.

 

The Range marketplace

If you place an order on The Range marketplace from one of our partners, your purchase details will be shared with this marketplace partner. Any communications you have with our Customer Care team about your order will also be shared with the marketplace partner to help resolve any issues you may have.

 

Couriers and logistics

If you place an order for home delivery, we will share your details including your name, email address, telephone number and delivery address with our logistics partners and couriers so that your order can be delivered and you can be kept updated on your delivery,

 

Auditors, insurers and legal advisors

We will share personal data with our auditors, insurers and legal advisors where required, for instance to help us defend or pursue legal claims.

 

Law enforcement, government agencies and public bodies

We may share personal data with law enforcement, government agencies and public bodies where required to meet our legal obligations.

 

Crime prevention and detection agencies

We share data with fraud prevention agencies, debt recovery agencies and crime solution organisations such as NBCS to help us identify and deal with criminal activity.

Suppliers and manufacturers

We may share your personal data with our suppliers or manufacturers if it is required, for instance if you are reporting a fault with a product.

 

Third-party service providers

We share personal data with various third-party service providers who perform functions on our behalf and help provide additional services, such as Microsoft who provide IT services and Zendesk who help us manage customer contact.

 

Advertising and marketing agencies

We may share your personal data with advertising and marketing agencies when you consent to marketing cookies or consent to receive marketing communications, who help provide personalised advertising and send marketing communications on our behalf.

 

Payment providers

If you use a payment provider such as Klarna, Paypal or Clearpay, we will share your purchase details with them.

 

Finance providers

If you make a purchase using finance through our finance provider Novuna, we will share your purchase details with them.

 

Jonas and James kitchens

If you purchase a Jonas and James kitchen from The Range, we may need to share your personal data with our kitchen manufacturer TKC and suppliers such as Hoover or Candy so that we can provide you with a bespoke kitchen that matches your requirements.

 

Rug Doctor

If you hire a Rug Doctor from one of our stores, your details will be shared with Rug Doctor to help them manage and track their machines.

 

Customer feedback agencies

If you make a purchase from our website we may share your details with customer feedback agencies such as Trustpilot so that we can gather customer reviews.

 

Parking companies

If you register your vehicle in our store to receive additional free parking, we will share your registration details with the relevant parking company to prevent you from receiving a Parking Charge Notice (PCN).

 

How do we protect your personal data?

 

We take keeping your personal data safe seriously, and we take all appropriate organisational and technical measures to keep your data secure and prevent unauthorised or unlawful destruction, loss, alteration, access or disclosure.

We have both physical, electronic and procedural safeguards in place at all stages of processing your data, from when we collect the personal data to when we delete it.

These measures include only collecting the minimum amount of personal data required, encrypting personal data when we store it, requiring a password to access any personal data and securely deleting personal data as soon as it is no longer required. We also use strong firewalls and carry out system monitoring and penetration testing to help keep your data secure.

 

How long do we keep your personal data for?

 

We will only retain your personal data for as long as is necessary, taking into consideration the purpose it was collected for and any applicable legal or regulatory obligations. This means that different types of personal data will be retained for different periods of time.

When we are no longer required to keep your personal data it will either be securely deleted, or your personal data removed so that the data is anonymous.

 

What are your rights?

 

You have several rights when it comes to your personal data under data protection law, including:

  • The right to be informed – you have the right to be informed when your data is collected and how it is used.
  • The right to access – you have the right to request copies of your personal data.
  • The right to rectification – you have the right to request we correct any incorrect any incorrect personal data or complete any incomplete personal data.
  • The right to erasure – you have the right to request we erase your personal data in certain circumstances.
  • The right to restrict – you have the right to request we restrict the processing of your personal data in certain circumstances.
  • The right to object – you have the right to object to your personal data being used in certain circumstances.
  • The right to data portability – you have the right to request we transfer the personal data we hold on you to either yourself or another organisation in certain circumstances.
  • The right to human intervention – you have the right to human intervention where automated decision making or profiling is used in certain circumstances.

 

If you make a request relating to your rights this request is usually free, though we may charge a fee or refuse a request if it is repetitive, unfounded or excessive.

We will usually fulfil your request within one calendar month though if the request is complex we may need a little longer, but we will always contact you within one month to let you know when you will receive a response. We may also ask you to confirm your identity or provide further information before we are able to fulfil the request.

If you wish to make a request regarding any of your rights, you can do so by contacting our Data Protection Officer using the contact details below.

 

How to contact us

 

If you would like to get in touch with us regarding your personal data or anything mentioned above, please contact our Data Protection Officer using the contact details below:

Email: dpo@therange.co.uk

Post: Data Protection Officer, The Range Head Office, 15 William Prance Road, Plymouth, PL6 5ZD

 

How to contact the supervisory authority

 

If you have any concerns about how your personal data has been handled you have the right to complain to the supervisory authority. Please visit the website of the relevant supervisory authority to find out more information:

UK – Information Commissioner’s Office (ICO): www.ico.org.uk

ROI – Data Protection Commissioner (DPC): www.dataprotection.ie

 

Cookies

 

If you would like to learn more about the cookies we use on our website or update your cookie preferences, please visit our Cookie Policy.

 

Changes to our Privacy Notice

 

Our Privacy Notice is routinely reviewed and updated when necessary. Please check regularly for any changes.

Last updated November 2024.