Languages
Privacy Notice
Last updated : June 2023
1. INTRODUCTION
We know that you care about your personal data and how it is used, and we want you to trust that LIPTON Teas and Infusions uses your personal data carefully. When you interact with us, for example when you visit our website, sign up to one of our newsletters or chat with us online, you also share information relating to you, that is personal data, with us.
This Privacy Notice will help you understand what personal data we collect, why we collect it and what we do with it.
Please take a moment to familiarise yourself with the Privacy Notice and let us know if you have any questions by sending us an email or submitting a request through privacy@lipton.com.
You also have rights in relation to how your personal data is used, such as to object to it being used for direct marketing. See what your rights are and how you can exercise them here.
If you are applying for a role with LIPTON Teas and Infusions then please see our separate Applicant Privacy Notice.
Key terms
We have tried to keep this Privacy Notice as simple as possible, but to help your understanding please familiarise yourself with the following privacy terms:
- Personal data is any information relating to an identified or identifiable living person (for example, name, email address, card details, social media profile).
- Processing means any operation that is performed upon personal data, including collecting, using and storing data.
When “you” or “your” are used in this statement, we are referring to the relevant individual who is the subject of the personal data.
2. WHO WE ARE
References to "our", "us" or "we" within this Privacy Notice include all of LIPTON Teas and Infusions’ group companies and its 36 brands including Lipton Teas and Infusions, PG tips, Pukka, T2 and TAZO.
LIPTON Teas and Infusions is the data controller of your personal data. This means that we decide how and why your personal data is processed, either alone or jointly with others.
If the structure of our business changes, for example if we merge, combine or divest a part of our business, we may need to transfer your personal data to the relevant third party or re-organised organisation. This would be done, for instance, as part of any due diligence process or for the same purposes as set out in this Privacy Notice.
For more information about LIPTON Teas and Infusions please visit this page.
If you have any questions about this Privacy Notice or how we use your personal data please contact privacy@lipton.com.
3. WHAT DATA WE COLLECT FROM YOU AND HOW WE USE IT
The type(s) of personal data we may collect directly from you, as well as the way in which we collect it, depends on how you interact with us.
How we collect your personal data
- Personal data you give us directly. This includes personal data you provide us when you sign up for a newsletter, register for an account, or buy products.
- Personal data we collect automatically. We collect certain types of personal data when you interact with us online. For example, about how you navigate around our website or communicate with our customer service teams. We use cookies and similar technologies to collect some of this personal data. To find out more about how we use cookies, and similar tracking technologies online, and how to exercise your choices about these, please see the information in our Cookie Notice.
- Personal data we collect from other sources. We may also collect your personal data from third parties. This includes trusted partners who provide services, for instance marketing, on our behalf, or online platforms where you interact with our content. For example, we may collect information where you have interacted with our content on social media platforms by ‘liking’ one of our posts or clicking on one of our adverts (Please note that these third parties generally have their own privacy notices and terms. We encourage you to read them being using those websites.)
Types of personal data we might collect
Type of Personal Data | Purpose for Processing | Description of Processing | Legal Basis |
---|---|---|---|
Name, (email) address, interests/preferences (if provided you you) | Sending you a Lipton Teas and Infusions newsletter
| Collecting, storing, using and analysing your personal data | Consent: We will only send you Lipton Teas and Infusions newsletters if you agree for us to do so. |
Name, (email) address, purchase history, loyalty scheme interaction data | To improve our loyalty scheme and our service to you | Collecting, storing, using and analysing your personal data | Legitimate Interest: Where you have signed up for a loyalty scheme with one of our Lipton Teas and Infusions brands, we will analyse the personal data collected to help improve our products and services. Where we rely upon legitimate interest as a lawful basis, we have balanced your rights and freedoms against our interests, or those of any third parties, and determined your rights are not infringed. |
Name, (email) address, country, Facebook or Gmail account details (if provided by you) | Responding to queries, requests or complaints, providing feedback to stakeholders and improving our business processes | Collecting, storing, using, analysing and sharing your personal data | Legitimate Interest: Where you have contacted us, for instance via our Careline platform, we will process the information you have shared with us to respond to and deal with your query. We may also provide, if appropriate, anonymised feedback to relevant internal stakeholders, such as our production sights, based on the information provided by you in order to improve our overall business processes. In such a case we would balance your rights and freedoms against our interests, or those of any third parties, and proceed only if your rights are not infringed. |
Name, (email) address, purchase details, bank account details | Enabling you to buy our products online and delivering them to you | Collecting, storing, validating, using and sharing personal data | Performance of a contract with you: We require your personal data so that we can process and deliver your purchase. |
Name, (email) address, purchase history | Maintaining the safety of our products, informing you of safety/health issues, and recalling the product where needed | Storing, validating, using and sharing your personal data | Legal obligation: We are required by law to process your personal data for this purpose |
4. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will not keep your personal data longer than necessary to meet the purposes for which it was gathered. Once this purpose has been fulfilled, we will either securely remove your personal data from our systems or anonymise it, that is, we will remove those aspects of your personal data that link it to you so that you can no longer be identified. For example, we might anonymise data that you have shared with us to participate in a sales promotion or discount offering on one of our products after 1 year, while we delete data shared as part of a question or a request you have sent us after 2 years.
Please note that in some cases we may have legal obligations to keep your data for some time after the initial purpose for collection has been met. For example, where we must keep your data for accounting, litigation, or regulatory reasons.
5. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
We may disclose your personal data to certain third-parties, vendors and service providers or affiliated employees, contractors and entities as described below.
Where we share your personal data, we do so for the following purposes:
Type of Third-Party | Purpose for Disclosure |
---|---|
Third party service providers | We use third parties to help us process your personal data in order to provide some of our services. For example, to fulfil your orders, enable you to participate in competitions, honour vouchers. These third parties cannot do anything with your personal data unless we have instructed them to do it. |
Regulator(s) or Government Authorities | We may transfer and disclose your personal data to comply with a legal obligation and when we believe that an applicable law requires it. For example, at the request of a regulatory authority conducting an investigation. |
Acquiring company | If the structure of our business changes, for example if we merge, combine or divest a part of our business, we may need to transfer your personal data to the relevant third party or re-organised organisation. |
6. PROFILING
Where we have a lawful basis to do so, we will also use your personal data to build profiles. We create profiles by analysing information about your online activity, including how you browse and interact with our websites and third party websites, your interactions with our brand communications, and your searching and buying behaviour. We use these profiles to personalise our website content displayed to you as well as our communications with you. Profiling allows us, for instance, to show you more information and products that we believe you would be interested in during your visits to our websites.
7. WHERE WE STORE/TRANSFER YOUR PERSONAL DATA
Depending on your location and the services you use, we may transfer your personal data to entities within the Lipton Teas and Infusions group or to third parties based outside of the Economic European Area (“EEA”). If you are based in the EEA, we are required by law to ensure that your personal data enjoys a level of protection essentially equivalent to that within the EEA.
Transfers to countries with an EU Data Adequacy Decision
Some of the countries we may transfer personal data to have been recognised by the European Commission as offering an adequate level of protection to personal data (“Adequacy Decision”). You can find the complete list of Adequacy Decisions taken by the European Commission here. Consequently, personal data can flow from the EEA to that third country without any further safeguard being necessary.
Transfer to non-adequate non-EEA countries
We may also transfer data from the EEA to countries that do not have an Adequacy Decision. In those cases we will only transfer personal data where we have added safeguards to our contracts with the receiving entities, so called EU Standard Data Protection Clauses, in order to ensure that your personal data is afforded the same level of protection as it is in the EEA.
8. SECURITY OF PERSONAL DATA
To protect your personal data from unauthorised access, disclosure or loss, we have put appropriate technical and organisational measures in place. These include encrypting connections and equipment, creating back-ups, and limiting and controlling those who can access the data.
9. YOUR RIGHTS
You have rights relating to your personal data. You can exercise these rights (as explained below) by sending an email with your contact details and your request to privacy@lipton.com.
We will handle your request carefully and respond to you without undue delay and at the latest within one month after receiving your request, unless there is a lawful reason to extend this period in which case we will let you know as soon as possible.
Please note that the extent to which you can exercise your rights may be limited by the rights and interests of other parties. For example, we may not be able to delete all of your personal data upon request where we have to keep it for regulatory reasons. If we are unable to exercise your request then we will let you know and explain why without undue delay.
a) Access
You can ask us whether we process your personal data and, if so, request a copy of that personal data.
b) Correction
You can request that we correct any personal data that we process about you that is inaccurate or incomplete.
c) Processing restriction
You can request that we limit or stop the processing of your personal data in some circumstances, such as when you contest the accuracy of the personal data.
d) Deletion
You can request that we delete your personal data in some circumstances.
e) Move, copy or transfer
You can request, in certain circumstances, that we transfer the personal data that you have shared with us to you or a third party of your choice. In such a case we are under an obligation to send the data in a structured, commonly used, and machine-readable format.
f) Objection to data processing
You can object to our processing of your personal data in some circumstances and request that we stop such processing at any time, including where we process your personal data for direct marketing purposes.
g) Withdraw consent
Where you have agreed to your data being collected, you will always have the right to withdraw that consent at any time. You can do this by either following the information provided at the time you provided your consent, or by contacting us directly (see Section 11 below).
h) Exclusion from automated decision making
You have the right not to be subject to a decision based solely on automatic processing of your personal data, including profiling, if that decision would impact your legal rights or affect you in an otherwise significant manner. We do not use such automated decision-making in relation to our processing of your personal data described in this Privacy Notice.
i) Complaint to a supervisory authority
If you have a concern about the way we have handled your personal data, and you are located within the EU, and/or your rights were infringed within an EU country, you can lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available here.
10. COOKIES PRIVACY NOTICE
We also use cookies to collect and process personal data. To find out more about how we use cookies, and similar tracking technologies online, and how to exercise your choices about these, please see our Cookie Notice.
11. CONTACTING US
If you want to exercise any of the rights set out above or have any questions or concerns about how we look after your personal data, please contact us at privacy@lipton.com or by writing to us at:
Eduard van Beinumstraat 18
2Amsterdam, 7th Floor
1077 CZ AMSTERDAM
The Netherlands
Please include your reply address when you write to us.
12. CHANGES TO THIS PRIVACY NOTICE
We keep this Privacy Notice under regular review and will update it when necessary. You are encouraged to undertake your own reviews of this Privacy Notice from time to time. We will notify you of any changes, including when they will take effect, if we are required to do so by data protection laws and we will always include at the top of the Privacy Notice the date on which it was last updated.