0871 231 2000
Calls cost 13p per minute plus your phone company's access charge
Huge savings on...
This Privacy Policy was last updated on 4th August 2023 and is version 4.0.
This privacy notice describes how we collect, store, use, and share personal data. It also explains the rights you have in relation to the personal data that we hold about you.
You can contact our Data Protection and Privacy Office by emailing us at informationrequest@nbrown.co.uk or alternatively by writing
to:
Data Protection and Privacy Office
JD Williams and Company Limited
Griffin House,
40 Lever Street
Manchester M60 6ES
We are JD Williams & Company Limited ('we' or 'us'). This is the legal entity responsible for how your personal data is collected, stored, and processed.
JD Williams & Company Limited is a company registered in England (registered number 00178367. Our registered office is at Griffin House, 40 Lever Street, Manchester, M60 6ES.
We trade under different brands, including JD Williams, Simply Be, Jacamo, Ambrose Wilson and Home Essentials and are collectively known as the N Brown Group.
We collect several types of data, including:
We mostly get data directly from you. But we also get data from other places, including:
And
We are only allowed to use your personal data where we have what is called a lawful basis for doing so. This is what that means in practice.
When you apply for a credit account or wish to check your eligibility for a credit account, we use your personal data to help us decide whether to accept your application, and how much credit we can offer you. This involves accessing and sharing data with Credit Reference Agencies. We also use ID and verification, as well as fraud detection and prevention tools offered by Credit Reference Agencies and fraud detection service providers, where applicable.
For more information on our use of Credit Reference Agencies, please see Data Sharing > Credit Reference Agencies.
Categories of personal data
Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.
We collect the personal data you provide to us when opening a personal cash account. This includes any payment methods you gave us when you set up the account.
Categories of personal data
Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.
We use your personal data to administer and to operate your personal credit or cash account. We collect and use the contact details that you provide to us to communicate with you about your account and in relation to the products and services we provide to you, including sending order history and statements, service messages and other documents via email. You can add or update your payment details within the account management settings at any time.
Categories of personal data
Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.
We collect any personal data and payment information that you provide for the purposes of processing your order. We process all card transactions securely in line with regulations and encrypt the payment details before sending to our card payment and banking provider.
Categories of personal data
Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.
We use personal data such as name, delivery address, phone number and email address when we arrange delivery of the things you buy from us.
We also share this data with our select suppliers and delivery partners. These delivery partners will also use the data to contact you and arrange a delivery time, and to keep you updated about when your order will arrive.
Categories of personal data
Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.
We use your customer account and contact details to verify and process any returns and refunds.
Categories of personal data
Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.
We use your personal data to help you access your account and statements or manage your repayments. This may include processing details of any vulnerabilities; health concerns or accessibility needs (special category personal data).
We use your personal contact data, payment history and credit information that we obtain from Credit Reference Agencies and any additional information that you may provide to us to determine whether and when to increase or reduce your credit limit.
We will continue to exchange information about your account and transactions with the Credit Reference Agencies for as long as you are our credit account customer.
For more information on our use of Credit Reference Agencies, please see Data Sharing > Credit Reference Agencies.
We may also share your personal data with individuals or organisations you have authorised to act on your behalf and manage your account. For example, debt management companies, legal or financial advisors, and insolvency experts.
Categories of personal data
Lawful basis
We need to use your data because we have a legitimate interest, including making sure we can recover any payments due.
We will ask for your explicit consent if we need to use any special category data such as health data. You can withdraw your consent at any time - please see [Right to Object] on how to withdraw your consent and what this means for your account.
If you register for a loyalty scheme on a specific brand, we use your personal data like this:
Categories of personal data
Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.
We use your personal data and account history to check that you are who you say you are and to deal with your complaint when you contact our contact centre.
We log the details of every complaint we get and deal with them as soon as possible.
We may also share your personal data with individuals or organisations you have authorised act on your behalf and manage your account. For example, debt management companies, legal or financial advisors, and insolvency experts.
Categories of personal data
Lawful basis
Your personal data may be processed where we have a substantial legitimate interest, including to ensure that we manage complaints and customer issues appropriately and within regulatory requirements.
We will ask for your explicit consent if we need to use any special category data such as health data. You can withdraw your consent at any time.
If you make a claim against us, either about a product or a personal injury claim, we use your personal data plus any supporting evidence that you give to us, to deal with your claim. We share this data with our insurance companies and claims handers, too.
If your claim is not covered by our insurance policy, we may also need to share your personal data with our internal Legal team and, in some cases, outside lawyers.
Categories of personal data
Lawful basis
We process your personal data on the basis that we have a substantial legitimate interest in managing and defending any claim.
Before we provide products or services to you, we run checks to make sure that you are who you say you are.
We also share the data we get from you with fraud prevention and law enforcement agencies who use it to prevent fraud and money-laundering and to check your identity. If fraud is detected, we may refuse to provide you with products, services, or credit account facilities.
You can see how your information is used by us and fraud prevention agencies, and read up on your data protection rights, at https://www.cifas.org.uk/fpn
Categories of personal data
Lawful basis
We process your personal data on the basis that we have a substantial legitimate interest in preventing fraud and money laundering, and to verify identity, to protect our business and comply with laws that apply to us.
Such processing is also a contractual requirement of the services or financing you have requested.
We may record inbound and outbound calls from our contact centre for quality assurance/audit, regulatory compliance, due diligence, training, and monitoring purposes.
We keep all call recordings for a period of 12 months
Categories of personal data
Lawful basis
We process this information on the basis of complying with our legal and regulatory obligations to the FCA (Financial Conduct Authority) to record all communications relating to orders and trading.
We also process your personal data on the basis that we have a substantial legitimate interest to provide the best possible service to our customers and realise any improvements that can be made to those services.
We may use your personal data to contact you to ask you to complete a product review or a customer satisfaction survey. We may also invite you to research and focus groups.
We share your personal contact details with research companies who research customer satisfaction programmes for us.
Occasionally, we ask the research companies not to say that they are contacting you on our behalf, because we do not want to influence your answers. The market research company must let you know if you ask them to, at the end of the survey.
Categories of personal data
Lawful basis
Your personal data may be processed where we have a legitimate interest, which is to keep improving the service we offer.
If you tell us that we can, then we will email you details of our latest products, services, and promotions. We also use marketing profiling techniques to tailor our offers to you, to make sure our marketing content is relevant for you. We also use your date of birth to send you offers on your birthday.
We create and keep records of how long you spend reading, and where you click, on the emails we send you, using industry standard technologies such as pixels and gifs.
You can opt-in or opt-out of our marketing activity at any time. Please see the Changing Your Marketing Preferences section below for more information.
Categories of personal data
Lawful basis
We use your personal data to send you marketing emails, to promote our products and services. We will only send you marketing emails where we have your consent.
If you tell us we can, we will use your telephone number to call you and tell you about our latest products, services, and promotions. We also use marketing profiling techniques to tailor our offers to you, to make sure our marketing content is relevant for you.
If you have subscribed to the Telephone Preference Service (TPS), we will not phone you, unless you have consented to get telemarketing calls from us.
You can opt-in or opt-out of our marketing activity at any time. Please see the Changing Your Marketing Preferences section below for more information
Categories of personal data
Lawful basis
We use your personal data to contact you via telephone where we have a legitimate interest to promote products and services and you have not objected to this or if you have provided express consent (for example if you are on the TPS but still wish to hear from us in this way).
We use your name and address to mail you personalised marketing. We also use marketing profiling techniques to tailor our offers to you, to make sure our marketing content is relevant for you.
You can opt-in or opt-out of our marketing activity at any time. Please see the Changing Your Marketing Preferences section below for more information.
Categories of personal data
Lawful basis
We use your personal to send you direct marketing by post where we have a legitimate interest to promote our products and services and you have not objected to this or if you have provided express consent.
We use social media to hear and understand what our customers think about us, and our products and services.
Sometimes, we may contact you directly on social media if we would like to share your comments or pictures with other customers or if we would like to publish them in our marketing materials. We will always ask you for consent to use your data in this way.
Categories of personal data
Lawful basis
Your personal data will be processed to engage with you on social media where we have a legitimate interest to promote our products and services and to respond to queries raised using social medial channels.
We will also process your personal data in this way where you have provided consent.
We will use your personal data to send you online targeted marketing information about our product offers and promotions through social media.
To do this, we will share your email address in a secure manner with social media companies (like Facebook, for example) who match our advertising requirements to your social media profile.
Categories of personal data
Lawful basis
We use your personal data to send you targeted advertising, where we have a legitimate interest to promote our products and services.
We will only be able to do this if you have selected this service within your social media account marketing preference settings.
You can change your marketing preferences for email marketing at any time by:
Please allow 48 hours for your changes to be processed.
You can change your marketing preferences for telemarketing at any time by:
Please allow 48 hours for your changes to be processed.
You can change your marketing preferences for direct postal marketing at any time by:
Please allow 48 hours for your changes to be processed. You may still receive direct postal marketing materials which have already been processed before we received your request for up to 2 months.
You can exercise your right to object to social media marketing at any time by:
Please allow 48 hours for your changes to be processed.
It is necessary for us to transfer personal data to other organisations, to operate our business, meet legal obligations, provide our services and to offer benefit to our customers.
When we do this, we only transfer the data that we need to, and we make sure that the personal data is protected throughout this process.
Sometimes, we are required to share personal data with third parties including government agencies, service providers, and external auditors. We will share your personal data with third parties when it is:
The third parties identified below include service providers, contractors, agents, and government bodies.
Purpose
Credit assessment purposes, for fraud prevention purposes or for the provision of
other products and services.
Purpose
Check your identity, credit assessment, and prevent fraud
Purpose
To operate or support business operations and core infrastructure, such as IT
services and courier delivery services.
Purpose
Variety of audit checks to assure compliance with policies, processes and any
legal or regulatory requirements
Purpose
To provide insurance policy covers, handle claims under the policies, and to
provide independent legal advice.
Purpose
To meet legal and regulatory requirements
Purpose
To prevent, detect and aid the investigation of crime.
We will request information about you from Credit Reference Agencies ("CRAs") and we will also share your personal data with CRAs. The CRAs we use are Experian, TransUnion, and Equifax. For more information about how CRAs use your personal data, please refer to the Credit Reference Agency Information Notice ("CRAIN") at:
These companies receive and share personal and financial data on you from other companies that you are connected with financially as well as providing us with verification of your name, address, date of birth and gender details from the Electoral Register to prevent fraudulent applications. The CRAs record details of all credit searches and tell us the risk associated with providing credit and if there is any suspected fraudulent activity associated with you.
We will also share your personal data with CRAs and other companies for fraud prevention purposes and will continue to exchange information about you whilst you have a relationship with us. We will also inform CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs. When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.
We may make periodic searches of the records we hold about you and those held by CRAs and fraud prevention agencies and may also request additional information from you to help manage your account with us and, to take decisions about credit, including whether to make credit available or to extend existing credit arrangements. These searches and any additional information you provide to us will not be available to other lenders for credit assessment purposes.
We, CRAs and fraud prevention agencies may also use credit records for statistical analysis about credit, insurance, and fraud. This is not personal data but is aggregated for the purpose of trend analysis, managing debt and fraud prevention.
You have the right to access your personal records held by CRAs by contacting Experian, TransUnion, and Equifax directly.
We may share your personal data with other third parties, like if we are selling or reorganising our business. We might also share your data to protect our business, our customers, or other people's rights, property, or safety.
We will only transfer your personal data to third parties who adhere to appropriate data security standards and controls. This may include transferring your personal data to third parties who become either joint controllers of the data, or independent data controllers. This will include organisations within the following categories:
If a third-party contact you on our behalf, they can only do so to provide the services you asked for and not to advertise their own products or services. If you have any concerns about the third-party companies we work with, or you would like more information, please contact our Data Protection and Privacy Office at informationrequest@nbrown.co.uk.
We do everything we can to keep your data safe and protected. If we have to transfer your data to another country, we make sure the country can keep your data safe, or we put specific measures in place to protect it ourselves. We also take extra steps to protect your data if we need to send it to countries outside of the UK or the European Economic Area, where the laws may be different.
If you want to know why we might need to send your data to places outside of the UK or the European Economic Area, please get in touch with our Data Protection and Privacy Office at informationrequest@nbrown.co.uk. They can also give you more information about how we transfer data.
You have several rights under data protection and privacy laws. We explain more about your rights below. If you ever wish to exercise your rights, please contact our Data Protection and Privacy Office at informationrequest@nbrown.co.uk.
Likewise, if you are dissatisfied with the information provided, you can complain to the Data Protection Officer at the same address.
You have the right to ask us if we use your personal data, and to see and get copies of that data. We will tell you what kind of data we have, where we got it, and who we share it with. To make things easier, we have included most of that data within this privacy policy.
We will provide any data you ask for within one month of your request. If we need more time than that, we will let you know.
Please note that for security reasons, we will not give out any bank account details that we have for you.
If you think the data, we have on you is wrong or incomplete, you can ask us to fix it. We will correct it within one month, unless we do not think it is necessary or appropriate to make the change, in which case we will explain why.
If we need more time to fix the data, we will let you know. If you think we made a mistake, you can email us at, informationrequest@nbrown.co.uk and we will investigate it.
You can ask us to delete your personal data in certain situations. For example, when:
There are some cases where we may be unable to comply with your request and delete your information. If that were to happen, we would let you know why.
Sometimes you can ask us to stop using your personal data. For example:
There are some cases where we may be unable to comply with your request. If that were to happen, we would let you know why.
As JD Williams & Company Limited is responsible for your personal data (what is called a 'data controller'), you have the right to ask us for a copy of it. This must be in a format that allows you to transfer it to another data controller.
Your right to transfer only applies:
We will try to respond to your request within one month. If we need more time, we will let you know.
You have the right to say that you do not want us to use your personal data. You can do this:
If you object, we will stop using your data, unless we can show that our reason for using it overrides your objection.
You have the right not to have solely automated decisions made about you. A purely automated decision is when there is no human input in the decision-making process. This right only applies when those decisions have legal consequences or significantly impact you. If this happens, you can ask for a human to make the decision.
You can also ask for information about how the decision was made and what the consequences will be.
If you want to complain about the way we use your data, it is best to contact us first. We will investigate your complaint right away. You can complain to the Information Commissioner's Office in the UK or the Data Protection Commission in the Republic of Ireland.
To contact The Information Commissioner's Office:
Visit: ico.org.uk
Call: 0303 123 1113
Write to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
We may update this notice at any time. You will see any changes we make on this page.
If you have any questions, comments, or requests to make about this privacy notice or your rights, here is how to contact us:
Email us: informationrequest@nbrown.co.uk
Write to: Data Protection and Privacy Office, JD Williams and Company Limited, Griffin House, 40 Lever Street, Manchester, M60 6ES.