Shopper Thoughts Privacy Notice

Last Updated: 19 JUN 2018

  1. Introduction
    1. dunnhumby respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use information about you (including information about you from which you can be directly or indirectly identified in particular by reference to an identifier), and how you can exercise your privacy rights in relation to your participation in the Shopper Thoughts Community.
    2. This Privacy Notice applies to information that we collect via the websites at , Shopper Thoughts-related applications (including our mobile application) and other sources like prize draws and surveys.
    3. If you have any questions or concerns about our use of your information, then please contact us using the contact details provided at the bottom of this Privacy Notice.
  2. Quick links
    1. We recommend that you read this Privacy Notice in full to ensure you are fully informed. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link below to jump to that section.
  3. What does dunnhumby do?
    1. dunnhumby is a consumer data science company, headquartered in the U.K. but with group companies all around the world. Our products and services help retailers and brands analyse data in order to improve consumer experiences and build loyalty.
    2. For more information about dunnhumby, please see the “About Us” section of our website at
  4. What is Shopper Thoughts?
    1. Shopper Thoughts is a community for consumers to share experiences and thoughts on shopping via our website, discussion boards, prize draws and surveys. This helps retailers and brands to develop products and improve the shopping experience. Our clients do not see your individual responses unless you have provided us with your consent, and otherwise view only aggregated reports about groups of shoppers. Consumers benefit from participation by obtaining Shopper Thoughts "redeemable points" and other perks.
  5. What information do we collect and why?
    1. If you are a participant of Shopper Thoughts community, we may collect the following information about you:

      Information that you provide voluntarily as a participant of Shopper Thoughts

    2. The types of information include the following:
      Contact details – name, street address, post code, email address, username, home telephone number, mobile telephone number;
      Demographic details – age, gender, date of birth, photo, region, household income, family composition (i.e. number and gender of children, if any);
      Survey details – results of online surveys relating to issues such as personality, values, attitudes, interests, and health and lifestyle (e.g. your diet and exercise preferences);
      Psychographic details – results of questions as to whether you agree or disagree with certain value statements or behaviours (e.g. a healthy diet is part of my life); and
      Tesco Clubcard number and details of products and services you have purchased which are linked to that Tesco Clubcard account.
      1. Occasionally, we may ask you questions about your health. If we do, we will inform you at the time we collect this information and ask you to consent to us processing it. If we do not ask you for this information please ensure not to provide information about your health.
      2. In Malaysia, we also ask you to indicate your ethnicity and language on a purely voluntary basis. Please do not provide this information if we do not ask for it.

        Information that we collect automatically

    3. When you use our website, we will not collect any information about you automatically through the use of cookies or similar tracking technologies.

      Information that we collect via social networks

    4. As part of being able to provide you with a direct link to Facebook, Instagram and Twitter (and any other social networking applications we may add) via the Shopper Thoughts community, we will also be collecting personal information when you connect to these social networking applications via our sites for the same purposes and duration set out in the section called “How we use your information” above. Remember, your privacy settings on social network applications may determine what information we can collect. If you are at all concerned about your privacy in the context of any social network applications, please refer to the privacy policies applicable to those websites which are found here:
    5. We may collect the following kinds of information from social network applications: your name; your user ID; your e-mail address; your gender; your birthday; your current city; your profile picture; your URL; your “likes”; and any content you post via the social networking application.

      Information that we obtain from third party sources

    6. From time to time, we may receive personal information about you from third party sources including public databases and data aggregators. Before obtaining this information we first check that these third parties either have your consent or are otherwise legally permitted to disclose your personal information to us. Examples of the kinds of information that we obtain from third parties include:
      Your region and demographic information (including but not limited to your region and social class based on an analysis of a combination of data relating to your household income, highest level of education and chief income earner within your household) from Tesco clubcard.
      Shopping habits, online user activity, preferences and information about your lifestyle such as your hobbies and interests and publicly available information such as user-generated content, blogs and postings. We receive this information from our clients that we are carrying out the survey on behalf of (including but not limited to Tesco, retailers, media customers, fast moving consumer goods customers).
  6. How we use your information and the legal basis for processing it
    1. We use the information you provide to us voluntarily:
      to register you as a Shopper Thoughts participant and select you for surveys that you are most likely to enjoy;
      to send you products or samples as part of a Shopper Thoughts survey, or help our clients to do so;
      to analyse the effectiveness of Shopper Thoughts surveys;
      to respond to your queries or comments;
      to better understand what products or services may be of interest to you; and
      to carry out prize draws or promotions.
    2. We use the information we collect from social networks to get customers to share and promote Shopper Thoughts on social media, like Facebook and twitter.
    3. We use the information we receive from these third parties to maintain and improve the accuracy of the records we hold about you and improve your experience as a participant of the Shopper Thoughts community.
    4. If you have questions about or need further information concerning the legal basis on which we collect and use information about you, please contact us using the contact details provided under the “How to contact us” heading below How to contact us.
  7. Who does dunnhumby share my information with?
    1. We may disclose your information:
      to our group companies. For example, we have one global access management system which is provided from the UK. We also have a number of global access management and support teams.
      to third party services providers who help us provide Shopper Thoughts, for example by hosting it, enabling certain features or functionality including user tracking, or by providing ancillary services such as support and maintenance, security technology, or helpdesk support to our employees and clients. The main third party service providers that we use for Shopper Thoughts are as follows:
      to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
      to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your information only for the purposes disclosed in this Privacy Notice;
      to any other person with your consent to the disclosure.
  8. How does dunnhumby keep my information secure?
    1. We use appropriate technical and organisational measures to protect the information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your information. Specific measures we use include restricting access to staff on a need to know basis and sending aggregate data to third parties. We also encrypt your username and email address in transit.
  9. International data transfers
    1. Our servers are located in the EU and the US; however our group companies and third party service providers and partners operate around the world.
    2. As a result, your information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection and privacy laws that are different to the laws of your country and, in some cases, may not be as protective.
    3. However, we have taken appropriate safeguards to require that your information will remain protected in accordance with this Privacy Notice. These include implementing the European Commission’s Standard Contractual Clauses for transfers of information between our group companies, which require all group companies to protect information they process from the EEA in accordance with European Union data protection and privacy law.
    4. Our Standard Contractual Clauses can be provided on request. We have implemented similar appropriate safeguards with our third party service providers and partners and further details can be provided upon request.
  10. Data retention
    1. By default, we will keep survey response data for a maximum of 10 years from collection, for the purposes of analysing market trends.
    2. All survey response data older than 10 years will be deleted.
    3. All personal data of a panellist will be deleted within 12 months of receiving a request for their data to be deleted.
    4. All survey response data of a panellist will be deleted within 12 months of receiving a request for their data to be deleted.
    5. All personal data of a panellist will be deleted within 12 months of them being removed from the panel, their survey response data will be retained for 10 years and then deleted We may however keep your information for longer if we have an ongoing legitimate business need to do so (for example, to comply with applicable legal tax or accounting requirements, to comply with our client's terms and conditions/obligation, to manage consumer recruitment and to manage contact preferences with customer who no longer with to participate). When we have no ongoing legitimate business need to process your information, we will either delete or anonymise it or, if this is not possible (for example, because your information has been stored in backup archives), then we will securely store your information and isolate it from any further processing until deletion is possible.
  11. Your data protection and privacy rights
    1. You have the following rights:
      If you wish to access, correct, update or request deletion of your information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below How to contact us. If for any reason, you no longer wish to be a participant of Shopper Thoughts and wish to close your account with us, then please let us know using the contact details provided under the “How to contact us” heading below How to contact us, so that we can delete your account information, please note that this will not include the deletion of any personal information that you put in survey responses.
      In addition, you can object to processing of your information, ask us to restrict processing of your information or request portability of your information. Again, you can exercise these rights by contacting us using the contact details provided under the “How to contact us” heading below How to contact us.
      You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” link in the marketing e-mails we send you.
      Similarly, if we have collected and process your information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your information conducted in reliance on lawful processing grounds other than consent.
      You have the right to complain to an information authority about our collection and use of your personal information. For more information, please contact your local authority. (Contact details for authorities in the European Economic Area, Switzerland and certain non-European countries (including the US and Canada) are available here.)
    2. We respond to all requests we receive from individuals wishing to exercise their rights in accordance with applicable laws.
  12. Updates to this Privacy Notice
    1. We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection and privacy laws.
    2. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.
  13. How to contact us
    1. If you have any questions or concerns about our use of your information, please contact our Data Protection Officer using the following details: The data controller of your information is dunnhumby (Malaysia) Sdn Bhd.
    2. If you are from certain regions like Europe you also have the right to lodge any complaints or concerns with your local data protection authority (DPA). You can find a list of the European DPAs

back to top