Virgin Atlantic Shops Away is operated by Valuedynamx Limited on behalf of Virgin Atlantic Airways Ltd. (Flying Club). Effective Date of this Policy: 05 October, 2021
Virgin Atlantic Flying Club pride ourselves on the importance of our customer relationships. This also extends to the way in which we handle personal information about our customers. We are committed to being transparent about the ways in which we intend to use your information, to provide you with choices about how we use it and fundamentally to ensure the security of your information.
You can access the full Virgin Atlantic Privacy Policy here and you can find the Privacy Policy of Virgin Red Limited (“VR”) here. VR own and manage Virgin Points
This Privacy Policy relates to the processing of personal data in relation to the Virgin Atlantic Shops Away shopping site (“Shops Away”) and the transactions associated with using it. VR is the ‘Data controller’ and Collinson Valuedynamx Ltd operate and provide the Shops Away service as a ‘Data Processor’ for VR except when processing your information for marketing purposes, in this capacity only, Collinson Valuedynamx is the Data Controller.
Unless otherwise stated, all references to “we” or “our” shall imply Virgin Red Limited as data controller and Collinson Valuedynamx Ltd acting as VR’s data processor.
The scope of this Privacy Policy covers customers in respect of the following:
This Policy details how we collect and use your data when you visit the Shops Away website and any other form of correspondence.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
We collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature to feature more popular retailers or features. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
Other personal data that we collect are:
We may be required by law to collect certain personal information. We may also be required to collect your personal information under the terms of the contract we have with you, Failure to provide this information, may prevent us from being able to perform the contract we have to cancel a product or service you have with us, in all instance, we will notify you if this is the case at the time.
We also collect information about your computer and about your visits to the Shops Away website, including your IP address, browser type and version. Some other personal details that are device based, such as device ID, device type, and location data. Processing of this data implies collecting, storing, using, disclosing or disposing of individuals’ personal data. Please see section 14 for information on how we use cookies.
We may collect, use and store your personal data:
Before you disclose to us the personal data of another person, you must obtain that person's consent to both the disclosure and the processing of that personal data in accordance with this Privacy Policy. Where the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, we are mandated to collect this personal information in order to provide you with our services. Non provision of this information means that we cannot provide you with the services requested.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We use your personal data to offer you our services (in this instance, awarding Virgin Points via your chosen retailer with your online or in store purchases). If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so, and the ways in which we use your data is listed below.
We collect your personal information when:
You fill in forms for example, we will keep a record of the information you provide us when you write to us or contact our customer service centres.
We use the personal information we collect to:
Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We will not share your personal data with anyone else unless you agree to this, or such sharing is necessary to fulfil our contract with you, or we are legally allowed or required to do so. Additionally, your personal data will only be shared with selected organisations which comply with our security procedures and policies.
Your personal information may be disclosed in the ways set out in this Privacy Policy or subject to any agreements in place between us with the following third parties: -
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
In addition your information may be disclosed to:-
We do not sell, rent or trade any of your personal data.
We will not, without your consent, disclose or supply your personal data to any third party for the purpose of their or any other third party's direct marketing.
There are different lawful grounds that we rely on to use your personal information and we will collect and use your personal information in the following situations:
Where our use of your personal information is necessary to perform a contract that you are a party to, or to take steps that you request before entering into a contract, for example for administrative purposes, .
Where our use of your personal information is within our legitimate interests or the legitimate interests of the organisation with which we have shared your personal information, we will have made sure that your personal information, and your rights in relation to that information, are protected. For example, we may rely on this legal ground if we use your personal information to:
Where We have a legal obligation to process your data. We might need to pass information about you to law enforcement agencies if they think or we think you have done something you shouldn’t have. Where we believe it is in your Vital Interests . In limited circumstances where we believe it is necessary to protect someone's safety or vital interests;
Where we believe it is in the Public Interest. In certain circumstances, we may need to use your personal information for purposes which are in the public interest; and
Where we have your consent. Consent is the basis used to send marketing to you for email newsletters.
Where consent is relied on, you have the right to withdraw that consent at any time. Please see the 'Opt-in/Opt-out' section of this notice for more details.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
We will ensure that all necessary and adequate safeguards are in place to prevent unauthorised access, loss, misuse or alteration of your personal data.
We store all personal information on secure servers with relevant access, encryption and firewall controls.
Any personal data sent to us, either in writing or email, may be insecure in transit and we cannot guarantee its delivery.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of your personal data, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
We will not ask you for your password.
Your personal information will be treated in accordance with UK law concerning data protection and may be transferred within the European Economic Area ("EEA"), as well as to countries outside the EEA (including to the USA). The countries to which we transfer your personal information are the United Kingdom (primary servers) and United States, Hong Kong and Australia (replicas).
Apart from the UK, these countries may not be regarded by the European Commission as ensuring an adequate level of protection for personal information. As a result, when we transfer your personal information outside the EEA, we will put in place appropriate international transfer legitimising safeguards in accordance with our legal obligations to ensure that your personal information is adequately protected. If this is the case, we will ensure that appropriate safeguards are in place to protect your personal information and to ensure it is kept securely at all times. Such safeguards used are the EU Commission approved Standard contractual Clauses (Model Contract Clauses- MCC’s) or other legitimising instruments (as stated in chapter v of the GDPR) for international data transfer for data to be processed appropriately. If you would like to know more about how we protect your personal information when it is transferred outside the EEA, please contact us using the details below.
As we outline in the "Your rights" section below, you will have the right to object to our using your information for our legitimate interests. However, please keep in mind that your objection to this sort of processing may affect our ability to carry out the tasks that we have set out above.
You have the right to stop using the service and terminate your Flying Club membership at any time. When you do so, you will no longer be able to use, earn or spend Virgin Points with Flying Club. Please note that, in these circumstances, we may still keep your information in accordance with the " PERSONAL DATA DISPOSAL AND RETENTION" section.
You also have the following rights when it comes to our handling of your personal information:
Please get in touch with us at the address or email below if you would like to exercise any of these rights (including having access to your personal information):
Virgin Red
Virgin Red Limited
66 Porchester Road
London W2 6ET
UK
[email protected].
Alternatively, you can contact our information protection officer at [email protected]
You have the right to complain to the UK's information protection regulator, the Information Commissioner's Office (ICO), about our handling of your information. You can use the relevant section of the ICO website to do this: https://ico.org.uk/make-a-complaint/.
In order to remain compliant with any legal and regulatory obligations, or as part of our evolving business practices, we may update this Privacy Policy from time to time by publishing a new version. In certain instances, we may notify you.
We are not responsible for the practices employed by Third Party Websites linked to or from our Website nor the information or content contained therein. Please remember that when you use a link to go from our Website to a Third-Party Website, our Privacy Policy will no longer apply. Your browsing and interaction on any other Website, including Third Party Websites, which have a link on our Website, are subject to that Website's own Privacy Policy.
Shops Away uses cookies on the website in order to improve your user experience by enabling our website to 'remember' you, either for the duration of your visit (using a 'session cookie') or for repeat visits (using a 'persistent cookie').
Please click here to read our Cookie Policy which explains what we do and how you can alter your cookie settings.
Shops Away Marketing
If you have consented to receiving our Shops Away newsletter about the offers available with Shops Away merchants, this will be sent to you by Collinson Valuedynamx. You have the right, at any time, to withdraw your consent and Collinson Valuedynamx will not process your personal data to send you the newsletter.
These marketing messages will be separate from the general Flying Club marketing messages that you may have already agreed to receive. Therefore, if you opt out of receiving marketing emails about Shops Away it will not opt you out of your general Flying Club marketing messages or communication from VAA or Virgin Red where you have opted into receiving communication from them separately.
You can opt-out of receiving email communications simply by clicking the unsubscribe link, which is contained within every marketing emails or outreach that you are sent.
You may instruct us at any time not to process your personal data for marketing and communications purposes by means of ‘opting-out’.
Please note it can take up to 14 days for a request to be fulfilled because of pre-planned or ongoing marketing activity.
We keep our Privacy Policy under regular review, and we will make any new versions available on our website. This Privacy Policy was last updated in July 2024.
Shops Away
Virgin Red Limited
66 Porchester Road
London W2 6ET
UK
[email protected]
If you feel your rights have not been respected, or do not feel a situation was resolved satisfactorily, you have the right to raise a complaint with the UK Information Commissioner’s Office.
You can contact them as follows: -
| Web: | |
| Telephone: |
+44 (0)303 123 1113 |
| In Writing: |
Information Commissioner's Office |
