We are HHGL Limited trading as Homebase (we/our/us) (Company number 00533033 with registered office address Witan Gate House, 500-600 Witan Gate, Milton Keynes, United Kingdom, MK9 1BA). This policy describes how we use your personal information.
We respect your privacy and value the trust you place in us when you share your personal information with us. This policy sets out how we, as Data Controller, collect, process, use and disclose your personal information, why we use it, with whom we share it, the rights to which you may be entitled and your choices about our use of your personal information.
This policy covers our use of your personal information arising from use of this website as well as buying / using our products and services.
If you have any questions or need any further clarity please get in touch via email to [email protected] or via post to Head of Legal, HHGL Limited, Witan Gate house, 500-600 Witan Gate, Milton Keynes, Bucks, MK9 1BA.
Data Collection and Usage
Personal Data includes any data that can identify you as a person, or be used in conjunction with other information to identify you.
We comply with all applicable laws in relation to data protection and privacy, including the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
Information that you actively give us to make a purchase:
Performance of contract. We cannot perform our sales contract without this information
We use this information to:
Provide our products and services;
Manage and administer our services;
Process your order;
Take payment from or give you a refund;
Help us ensure that our customers are genuine and to prevent fraud
Information that you actively give us to subscribe to our newsletter, receive information or mailings:
You must provide Consent to sign up to our mailing lists. You can withdraw this Consent at any time. Please see below section 4 for more information.
Help us ensure that our customers are genuine and to prevent fraud;
Send news on our offers, great value products and inspiring DIY projects.
Information that you actively give us to sign up for a prize draw or competition:
We need this information to administer any prize draw competitions.
Each competition will have Terms and Conditions, please consult them with any further questions.
Manage and administer prize draws, competitions and our services;
Help us ensure that our customers are genuine and to prevent fraud.
Information about the way you use our products and services including:
Legitimate Interest. We use this information to deliver quality service and tailor your experience.
Statistical analysis and research.
Information when you communicate with us whether in person, through our website or via email, over the phone, through social media or via any other medium, including:
Legitimate Interest. We cannot answer your communication without this information.
We use this information, including to:
Information that we collect through your use of our website including:
We use this information to:
Information that we collect incidentally from other sources or public sources, including:
Legitimate Interest. We use this information to deliver quality service.
Information received from credit reference agencies.
Fraud prevention and confirming your identity.
Homebase does not knowingly collect data from any unsupervised person under the age of 18. If you are under the age of 18, you must not use the Homebase website or submit any Personal Data to us unless you have the consent of, and are supervised by, a parent or guardian.
Your personal information may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency or in the defence of a legal claims. We will not delete personal information if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.
How long we keep your information
Information we share
There are certain circumstances where we may transfer your Personal Data to contractors, service providers, and to other parties.
We may also share your information with certain contractors or service providers who assist us in the provision of products and services we supply to you, are involved in prize draws and competitions we run or provide other services to assist with our day to day operations. They may process your Personal Data for us, for example, if we use a marketing agency. Other recipient’s/service providers include manufacturers, logistics/delivery providers, advertising agencies, IT specialists, database providers, backup and disaster recovery specialists or email providers.
Our suppliers and service providers will be required to meet our standards on processing information and security. The information we provide them, including your information, will only be provided in connection with the performance of their function.
Your personal information may be transferred to other third party organisations in certain scenarios:
Your Personal Data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data.
Where your information will be held
Our offices are based in England and your data will be held on systems accessible by this office.
We will only transfer data to jurisdictions outside the scope of the European General Data Protection Regulation (GDPR) where the appropriate safeguards set out in the GDPR are in place.
We are happy to provide you with copies of the regulator-approved standard contractual clauses, which you can request from us using the contact details below.
Data Subject Rights
We've listed the rights you have over your information and how you can use them below.
These rights will only apply in certain circumstances. Some of these rights will not be available if there are outstanding contracts between us, if we are required by law to keep the information or if the information is relevant to a legal dispute.
We will normally respond to or action (as applicable) requests within one month from receipt of your request. This period may be extended by 2 further months if necessary taking into account the complexity or number of requests. If this is the case, we will let you know within one month of your original request.
In general, the information or action requested will be provided free of charge. However, if requests are manifestly unfounded or excessive (or repetitive in nature) we may charge a fee (or alternatively refuse to deal with the request).
It is important that we establish that the individual right is being exercised by the correct person. Therefore, we may need to ask you for information in order to verify your identity prior to processing your request. This may include asking you to confirm certain details we hold about you (such as post code or first line of your address) or to provide proof of identification.
You have the right to make the following types of request regarding the Personal Data Homebase holds about you:
The supervisory body for Data Protection in the UK is the Information Commissioner’s Office. They have information about your rights and how to enforce them, as well as processes for complaints.
How to contact us
If you have any questions about this policy please contact our Legal team at D[email protected], or by writing to Head of Legal, HHGL, Witan Gate House, 500-600 Witan Gate, Central Milton Keynes, MK9 1BA.
Want to be removed from the Homebase direct marketing list?
If you want to be removed from our email mailing list, click here to use our unsubscribe form and put in the email address that you wish to be removed. In addition, each email we send you will contain details of how you can unsubscribe.
This policy may be changed from time to time and will be posted here. We encourage you to visit this area frequently to stay updated.
In addition, cookies allow us to understand who has seen which pages and advertisements, to determine how frequently particular pages are visited and to determine the most popular areas of our website.
We are committed to keeping your personal information safe. We've got appropriate physical, technical and administrative measures in place to protect your information against accidental or unauthorised destruction, loss, access or alteration.
The person or organisation that determines when, why and how to process Personal Data. It is responsible for establishing practices and policies in line with the GDPR. We are the Controller of all Personal Data relating to our Company Personnel and Personal Data used in our business for our own commercial purposes.
Any information identifying a Data Subject or information relating to a Data Subject that we can identify (directly or indirectly) from that data alone or in combination with other identifiers we possess or can reasonably access. Personal Data includes Special Categories of Personal Data and Pseudonymised Personal Data but excludes anonymous data or data that has had the identity of an individual permanently removed. Personal data can be factual (for example, a name, email address, location or date of birth) or an opinion about that person's actions or behaviour.
Agreement which must be freely given, specific, informed and be an unambiguous indication of the Data Subject's wishes by which they, by a statement or by a clear positive action, signify agreement to the Processing of Personal Data relating to them.
Means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our Legitimate Interests.
Performance of Contract:
Means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
Sign up to our newsletter to receive all our latest promotions, inspiration and advice