When we process your personal data, we comply with the UK GDPR and the Data Protection Act 2018, together with any other applicable data protection legislation. Personal data includes all the information we hold that identifies you and everything we do with your personal data (e.g. collecting, storing, amending, transferring and deleting it) counts as processing.
Arla Foods Limited, 4 Savannah Way Leeds Valley Park, Leeds, LS10 1AB, United Kingdom (“Arla” also referred to as “us”, “we” or “our” throughout this policy) is the controller of any personal data you provide and respects your data privacy.
This privacy notice describes how Arla, as data controller, collects and processes personal data about you in connection with our services and the use of our website at www.arla.co.uk.
Please read the statement carefully to understand how we process, use and disclose your personal data.
1. Processing of personal data
We process the following types of personal data for the following purposes and on the listed legal bases:
- Handling purchases from the Arla Shop
When you order products in our web shop, you must provide your name, address, phone number, payment details and details of the products you are ordering.
We are required to process this information to fulfil our contract with you and deliver the products you have ordered (UK GDPR article 6(1)(b)). Your name and postal address may be shared where needed with logistics companies that deliver our products to you (UK GDPR article 6(1)(b)).
In order to manage the payment we need to share your payment details with our payment solution partners. In order to fulfil your delivery we need to share your name and address with our carrier partners (GDPR article 6(1)(b)).
- Provision of newsletters and marketing
If you sign up to receive our newsletters we will process your name and email address to allow us to send you relevant and targeted marketing messages.
This processing will be based on your consent (UK GDPR article 6(1)(a)) to receive such marketing materials and you may withdraw such consent at any time by You can ask us to stop sending you marketing messages at any time by following the opt-out links or by contacting us as further outlined in section 7 below.
- Your participation in competitions
If you participate in competitions arranged by Arla, we will process the personal data you provide (name, email address, competition input, including answers to questions, etc.) to manage the competition, chose and contact the winner (UK GDPR article 6(1)(b)).
Depending on the specific competition and prize, we may share your name, contact details and prize details with our competition prize vendors and carriers (UK GDPR article 6(1)(f). We do so on the grounds of our legitimate interests in ensuring you receive your prize.
If required under any applicable legislation, we will share your name and prize details with the tax authorities (UK GDPR article 6(1)(c)).
- Customer services
If you contact us, either via our website, email or social media platforms, we will register the personal data that you provide to us (e.g. name, company, title, email address, request details, etc.) so that our customer service team may assist you and ensure your request is handled in the best way possible (UK GDPR article 6(1)(f)). We encourage you to read the associated privacy policy for any social media platform you engage with.
- Administration of user profile
If you chose to create an account on our platform, you must provide your email address (UK GDPR article 6(1)(b).
When logged in you can add recipes to your favourites and create your own compilation of recipes and access them from multiple devices.
Based on what you click when logged in, our website technology will get to know you better, and based on this, will present content to you that you are likely to be interested in. For further information about the cookies we use please click here.
- Events and workshops
If you sign up for participation in events and workshops arranged by Arla, we will register the personal data that you provide to us (including, name and e-mail address and information about the event you are attending) to manage the event as well as your participation, confirming your participation, contacting you in case of any changes or cancellations, etc. (UK GDPR article 6(1)(b) and 6(1)(f)).
- Improving our website, marketing and re-targeting
We use cookies to improve your experience on our website and ensure functionality of the site, to track the traffic to our website and to optimise content on the pages. This is based on your cookie-consent, and the subsequent use of the cookie data is based on our legitimate interest to improve our website.
Further, we use cookies to create more relevant marketing for you and to present relevant content to you on our website and on third party websites (re-targeting). We process your information based on your consent when you accept use of the cookies.
You can read more about our use of cookies here.
We also use tools of social media platforms to brand our products (e.g. Facebook Custom Audience). For that purpose, we may provide hashed email addresses, that we obtained from you (e.g. when signing up for newsletters or when purchasing items in our web shop) to the social media, for them to present sponsored posts in your feed. The disclosure is based on our legitimate interests in marketing our products (UK GDPR article 6(1)(f)).
- B2B relations (suppliers, customers, business partners)
In connection with your cooperation with Arla, we will process the personal data, which we receive in connection with any orders and deliveries to control the payment and services (name, contact details, title, company name, etc.). Further we will process your personal data to maintain our business relationship with you or the organisation that you represent, or to administer any activities that you engage in on the grounds of our legitimate interests (UK GDPR article 6(1)(f)).
- Candidates
If you apply for a job at Arla or create a profile in our candidate database, we will process your personal data. For further information on how we use your personal data in that context, please click here.
2. Collection of your personal data
We use a variety of different methods to collect personal data from you including through:
- Direct interactions
You may give us your personal data by filling in forms on our website or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you: place an order for our products or services; submit a query about our products or service whether on our website or by email or phone; request for marketing to be sent to you; or give us feedback or contact us; or contact us in respect of a specific job or a speculative approach; or contact us for other business relationship management purposes.
- Automated technologies or interactions
As you interact with our website, we may automatically collect personal data about you. You can find out more information in our cookie policy available here
- Agents
If you are a contact of one of our business customers or prospective customers, our agents may pass personal data about you to us so we can contact you about our products.
3. Disclosure and transfer of the personal data
We disclose your personal data as described above, and only to the extent that it is necessary. In addition to disclosures described above, recipients of your personal data may include:
- IT and payment solutions suppliers who store or process personal data on our behalf;
- our legal or other professional advisers to the extent that they need to see your personal data to provide their professional services;
- third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
Some data processors or sub-processors may be located outside of the EEA. Where we transfer your personal data outside of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- the country that we are transferring data to has been deemed to have an adequate level of protection for personal data; or
- the transfer is subject to an appropriate transfer mechanism that ensures that the requirements of Article 46 of the UK GDPR are met.
4. Retention period
We only store your personal data for as long as necessary to fulfil the purposes above or, where necessary, to comply with legal obligations imposed on us.
5. Your rights
When we process personal data for our legitimate interests or when we use your personal data for direct marketing, you have the right to object to our processing of your personal data.
Subject to certain statutory exceptions, you have the right to request access to the personal data we hold and process regarding you.
Further, you have the right to request us to rectify any personal data on you that might be incorrect, as well as the right to request us to restrict the processing of your personal data.
You may request to receive any personal data on you that you provided to us a structured, commonly used and machine-readable format, if our processing of such personal data is based on your consent or a contract that you concluded with us (data portability).
Upon your request we will erase personal data on you unless we have a legal basis for continuing the processing.
You have the right to make a complaint to the Information Commissioner's Office (ICO), www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
6. Objection
You have the right to object to the processing of your personal data on certain grounds. These include: if the processing is based on legitimate interests, for direct marketing purposes (including profiling) and/or for purposes of scientific or historical research and statistic.
7. Contact and exercising your rights
As described above, you have a number of rights when we process your personal data. If you wish to exercise such rights, please submit your request via our online webform, which is available .
8. Changes to this privacy notice
We reserve the right to change this privacy notice.
Version 3, February 2022