Privacy Statement
Information we collect about you
How we use your Data
How long we will keep your Data
Our legal basis for processing your Data
Who we share your information with
Where we transfer information to
How to access or amend your personal information
Automated processing
Children’s Data
Changes to our Privacy Policy
How to contact us

Privacy Statement

At WHSmith we take your privacy very seriously and will only use your personal information to provide the products and services you have requested from us. This privacy policy applies only to the sale of WHSmith gift cards. For our wider privacy policy, please see our WHSmith website homepage.

This website is operated on behalf of WHSmith by Voucher Express. Voucher Express are responsible for processing any orders placed on this website. For the purposes of current data protection legislation, WHSmith are the Data Controller and Voucher Express are the Data Processor. Your personal data will be processed by Voucher Express in order to fulfil your order and, as a general rule, will not be accessible by WHSmith except as otherwise set out in this privacy policy. You may contact WHSmith and/or Voucher Express if you wish to exercise any of your rights as a data subject and WHSmith will liaise with Voucher Express in order to respond to you.

Information we collect about you

Voucher Express may collect the following information about you when you visit the website:

Name, Address, Email Address, Telephone Number, Personal Message (if any).
Subject to your acceptance of use of cookies and tracking technologies on the website, Voucher Express may also collect information how the website is accessed and used. This usage data may include information such as: your computer's IP address, browser type, browser version, pages visited, time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. For more information, please see our cookie policy.

How we use your Data

Voucher Express will use your data:

For the purpose of fulfilling your order.
To provide and maintain the website.
To provide customer care and support.
To provide analysis or valuable information so that we can improve the website.
To monitor the usage of the website.
To detect, prevent and address technical issues.

If you have opted in to receive marketing communications including information about offers and competitions, your data will be used by WHSmith to send such information to you.

How long we will keep your Data

Voucher Express will retain your data in a form that identifies you for four years from the date your information is collected. This is to enable us to fulfil the purposes outlined above.

Our Legal Basis for processing your Data

Your Data is processed by Voucher Express:

To fulfil the contract to deliver the gift cards you have selected.
For our legitimate interests in relation to the management, operation and enhancement of the website.
Where we transfer your data to WHSmith so that they may send you marketing and promotional material, on the basis of your consent.

Who we share your information with

We disclose personal information to the following recipients:

WHSmith if you have opted in to receive marketing communications from them.
Voucher Express’ service providers. These third parties have access to your personal data only to perform tasks on Voucher Express’ behalf in relation to fulfilling your order and are obligated not to disclose or use it for any other purpose. They are: -

o Braintree, Floor 1, 247 Tottenham Court Road, London, UK W1T 7QX. For the purposes of processing card payments.

o SendGrid, 1801 California St #500, Denver, CO 80202, United States. For the purpose of distributing email communications.

o PCA Predict, Waterside, Basin Road, Worcester, WR5 3DA. PCA provide the address lookup service user on our website.

o Experian, The Sir John Peace Building, Experian Way, NG2 Business Park, Nottingham, NG80 1ZZ. For the purpose of performing fraud checks.

o Zendesk, 1019 Market St San Francisco, CA 94103. Provide the CRM system used for the purpose of managing customer communication by our customer services.

o Pipl, 510 Clearwater Loop, Post Falls, ID 83854, USA. For the purpose of performing fraud checks.

o Royal Mail Group Ltd, 185 Farringdon Road, London, United Kingdom, EC1A 1AA. For the purpose of delivering physical Gift Cards.

Public authorities or judicial authorities (where disclosure is required by law or is necessary so that we can enforce our legal rights, or so that third parties can enforce their legal rights, or so that public authorities can exercise their functions in the public interest).
Legal advisors to the extent they need to see your personal data to provide us with legal advice.
Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

Where we transfer personal information to

We may transfer to and store the information we collect about you in countries other than the country in which the information was originally collected, including the United States and other destinations outside the European Economic Area (“EEA”), in accordance with applicable law. Those countries may not have the same data protection laws as the country in which you provided the information. When we transfer your information to other countries, we will protect the information as described in this privacy policy and comply with applicable legal requirements providing adequate protection for the transfer of information to countries outside the EEA. This includes by entering into the appropriate contractual safeguards such as the EU’s Standard Contractual Clauses with or without the UK Addendum, or the UK’s International Data Transfer Agreement. To obtain a copy of the safeguards we have put in place, please contact us as indicated below.

How to access or amend your personal information

Current legislation provides you with the following rights concerning your data.

a. The right of withdrawal
b. The right to be informed
c. The right of access
d. The right to rectification
e. The right to erasure
f. The right to restrict processing
g. The right to data portability
h. The right to object
i. Rights in relation to automated processing

If you wish to exercise these rights please use the contact details below. Depending on the legal bases for processing, all may not necessarily apply.

Automated Processing

We do not currently use automated decision making or processing systems in providing our products and services.

Children’s Data

This website is not intended to offer services to anyone under the age of 16. If we become aware that we have collected Personal Data from children without verification of parental consent, we will remove that information from our systems. If you are a parent or guardian and you are concerned that your Children have provided us with Personal Data, please contact us.

Changes to our Privacy Policy

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes.

How to contact us

The contact details below are for queries related to data privacy and information processing only. For any other queries please email whsmith@voucherexpress.net

Email: dpo@voucherexpress.co.uk

Post: DPO, Voucher Express, Metcalfe House, 23H Kirkgate, Ripon North Yorkshire, HG4 1PB