This document sets out the basis on which we will process any personal data we collect from you, or that you provide to us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. For the purpose of the Data Protection Act 1998 (the Act), the data controller is Vodafone Limited, a company registered in England and Wales (company number 238009) whose registered office is at 129 Fetter Lane, London EC4A 1EN.
What is personal data?
Personal data is defined as any information about an individual from which that person can be identified. It does not include anonymized data. It includes direct identifiers such as name, postal address, telephone number, email address, etc.; indirect identifiers such as date of birth or place of birth; unique identifiers such as user account numbers; and other indirect identification mechanisms (eg. IP addresses).
How do we collect your personal data?
We obtain the majority of our customer’s personal data during the course of providing them with products and services including Connection to our network e.g. when they activate a handset or activate a SIM card through one of our sales channels.
We may also obtain data from other sources including credit reference agencies and marketing lists provided by third parties, from publically available information such as from the Electoral Register and from websites that individual customers voluntarily make public.
How do we use your personal data?
When you enter into a contract with us, we will process your personal data to provide you with connectivity products and services, for billing purposes and for account management purposes. This includes sharing some of your information with 3rd party organizations that provide services on our behalf where it is necessary for them to have access to some of your personal data in order to fulfill their obligations to us under the contract.
For example, our systems are configured so that when you top-up your SIM card online, the payment is processed by a third party. We will also use your personal data for other purposes related to contract fulfillment including marketing activities in accordance with the preferences you have expressed to us, customer profiling, and research purposes. This includes analyzing information about how you use our products and services in order to help us improve them for all of our customers.
Where required under applicable laws (including contractual obligations), we may process your personal data for additional purposes such as complying with requests made by public or government authorities; compliance with legal requirements; detection and prevention of crime; a collection of taxes; security measures; regulation of technical issues associated with our network access; protecting and asserting our legal rights, and otherwise as permitted or required by law.
With your consent we may also use your personal data for direct marketing purposes such as sending you promotional materials (which may include emails, texts/SMS messages, and recorded voice calls) about our products and services, special offers etc.; this will only be on the basis of the consent you have given to us at the time we collect your data. You can opt-out from receiving such marketing communications at any time by emailing Admin@mobilephoneprice.xyz or calling 01344 726 400. Please note that even if you opt-out from receiving some types of email marketing, we still need to continue processing personal data in order to fulfill our contractual obligations to you.
How long do we keep your personal data?
We will hold your personal data on our systems for as long as we need it to provide services and products to you and fulfil the purposes described above. We then delete or anonymise this information, eg: when an individual unsubscribes from marketing communications; where legal requirements so require; where this is necessary in order to comply with other legitimate interests pursued by Vodafone (such as regulatory requirements); or where the individual has exercised their right to object (see below). In some cases it may be necessary for us keep certain information for a longer period of time after we stop providing services to you, e.g. if required by law or regulation, or to protect our legal rights.
Anonymised information (such as aggregated data) may be held for longer periods of time without the use of personal identifiers in order to fulfil our legitimate interests, such as generating statistical reports and conducting research.
What are my rights?
Individuals have certain rights in relation to their own personal data. These include:
– The right to be informed about how your data is processed, eg via this privacy notice;
– The right of access to the personal data we hold about you; this enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it;
– The right to rectification if any personal data we hold about you is inaccurate or incomplete;
– The right to erasure of your personal data (known as “the right to be forgotten”); this enables you to ask us to delete or remove personal data where there is no compelling reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object (see below);
– The right to restrict processing if you think the personal data we hold about you is inaccurate, but would like us to verify its accuracy; if we do not verify this, we must still ensure that our use of the data is restricted until the issue has been resolved;
– The right of portability enables you to ask us to provide your personal data in a machine-readable format;
– The right to object at any time to processing of your personal data based on our legitimate interests (see above); and
– Rights in relation to automated decision making and profiling.
If you wish to exercise any of these rights, please contact us using the details set out at the end of this notice – we will respond within one month. We may request proof of identity and/or address, such as a copy of your driving licence or passport. If you have concerns about how we process your personal data please do not hesitate to get in touch with us by contacting Customer Services via vodafone.co.uk or texting “DSAR” to 87977 (RRP 30p per text). You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach them so we would ask that you contact us in the first instance.
What information do we share with other organizations?
We will only provide your personal data to third parties where required by law or where it is necessary for our own legitimate interests (such as to process your payments for products and services) or those of a relevant partner which you have not objected to our providing. This will include transferring data outside the European Economic Area.
Also, where you have agreed, we may provide your personal data to carefully selected partners in order to offer you products and services which we believe will be of interest to you. Examples include information about Vodafone products and services when you sign up for My Account at vodafone.co.uk or if you purchase via our online shop using Paypal or Google Checkout – both of these are partners of ours currently. If you do not wish to receive such marketing information please let us know by contacting Customer Services via vodafone.co.uk or Texting “DM” followed by your unique customer reference number (for example DM123456) to 87977 (RRP 30p per text).
How do we keep your personal data safe and what security measures do we use?