Privacy Policy | Ambrose Wilson

Who we are

We are JD Williams & Company Limited ('we' or 'us'). This is the legal entity responsible for how your personal data is collected, stored, and processed.

JD Williams & Company Limited is a company registered in England (registered number 00178367. Our registered office is at Griffin House, 40 Lever Street, Manchester, M60 6ES.

We trade under different brands, including JD Williams, Simply Be, Jacamo, Ambrose Wilson and Home Essentials and are collectively known as the N Brown Group.

Back to top

What data we collect

We collect several types of data, including:

Back to top

Where we get your data from

We mostly get data directly from you. But we also get data from other places, including:

Back to top

Why and how we use your personal data

We are only allowed to use your personal data where we have what is called a lawful basis for doing so. This is what that means in practice.

When you apply for a credit account or wish to check your eligibility for a credit account, we use your personal data to help us decide whether to accept your application, and how much credit we can offer you. This involves accessing and sharing data with Credit Reference Agencies. We also use ID and verification, as well as fraud detection and prevention tools offered by Credit Reference Agencies and fraud detection service providers, where applicable.

For more information on our use of Credit Reference Agencies, please see Data Sharing > Credit Reference Agencies.

Categories of personal data

Name
Home address
Contact details
Date of birth
Financial
Identity Checks using data provided above
Fraud checks using photographic ID e.g., passport or driving license.

Lawful basis

We need to use your data for a contract we have with you, or to enter into a contract with you.

We use your personal data to administer and to operate your personal credit or cash account. We collect and use the contact details that you provide to us to communicate with you about your account and in relation to the products and services we provide to you, including sending order history and statements, service messages and other documents via email. You can add or update your payment details within the account management settings at any time.

Categories of personal data

Name
Address(es)
Contact details
Order information
Payment information

Lawful basis

We need to use your data for a contract we have with you, or to enter into a contract with you.

We collect any personal data and payment information that you provide for the purposes of processing your order. We process all card transactions securely in line with regulations and encrypt the payment details before sending to our card payment and banking provider.

Categories of personal data

Name
Delivery address
Contact details
Order information
Payment information

Lawful basis

We need to use your data for a contract we have with you, or to enter into a contract with you.

We use personal data such as name, delivery address, phone number and email address when we arrange delivery of the things you buy from us.

We also share this data with our select suppliers and delivery partners. These delivery partners will also use the data to contact you and arrange a delivery time, and to keep you updated about when your order will arrive.

Categories of personal data

Name
Delivery address
Contact details
Order information

Lawful basis

We need to use your data for a contract we have with you, or to enter into a contract with you.

We use your personal data to help you access your account and statements or manage your repayments. This may include processing details of any vulnerabilities; health concerns or accessibility needs (special category personal data).

We use your personal contact data, payment history and credit information that we obtain from Credit Reference Agencies and any additional information that you may provide to us to determine whether and when to increase or reduce your credit limit.

We will continue to exchange information about your account and transactions with the Credit Reference Agencies for as long as you are our credit account customer.

For more information on our use of Credit Reference Agencies, please see Data Sharing > Credit Reference Agencies.

We may also share your personal data with individuals or organisations you have authorised to act on your behalf and manage your account. For example, debt management companies, legal or financial advisors, and insolvency experts.

Categories of personal data

Name
Address(es)
Date of birth
Contact details
Marital status
Order information
Payment information
Financial information
Health data and any other special category data

Lawful basis

We need to use your data because we have a legitimate interest, including making sure we can recover any payments due.

We will ask for your explicit consent if we need to use any special category data such as health data. You can withdraw your consent at any time - please see [Right to Object] on how to withdraw your consent and what this means for your account.

If you register for a loyalty scheme on a specific brand, we use your personal data like this:

We share your data with third-party partners so that they can manage and deliver your rewards on our behalf.

To tailor your rewards to you, make them available when you log in to your customer account, and send details to the email address you give us.

Categories of personal data

Name
Address
Contact details
Order information
Payment information
Financial information
Marital Status
Health data and any other special category data

Lawful basis

We need to use your data for a contract we have with you, or to enter into a contract with you.

We use your personal data and account history to check that you are who you say you are and to deal with your complaint when you contact our contact centre.

We log the details of every complaint we get and deal with them as soon as possible.

We may also share your personal data with individuals or organisations you have authorised act on your behalf and manage your account. For example, debt management companies, legal or financial advisors, and insolvency experts.

Categories of personal data

Name
Address
Contact details
Order information
Payment information
Financial information
Marital Status
Health data and any other special category data

Lawful basis

Your personal data may be processed where we have a substantial legitimate interest, including to ensure that we manage complaints and customer issues appropriately and within regulatory requirements.

We will ask for your explicit consent if we need to use any special category data such as health data. You can withdraw your consent at any time.

If you make a claim against us, either about a product or a personal injury claim, we use your personal data plus any supporting evidence that you give to us, to deal with your claim. We share this data with our insurance companies and claims handers, too.

If your claim is not covered by our insurance policy, we may also need to share your personal data with our internal Legal team and, in some cases, outside lawyers.

Categories of personal data

Name
Address(es)
Contact details
Order information
Financial information
Health data and any other special category data

Lawful basis

We process your personal data on the basis that we have a substantial legitimate interest in managing and defending any claim.

Before we provide products or services to you, we run checks to make sure that you are who you say you are.

We also share the data we get from you with fraud prevention and law enforcement agencies who use it to prevent fraud and money-laundering and to check your identity. If fraud is detected, we may refuse to provide you with products, services, or credit account facilities.

You can see how your information is used by us and fraud prevention agencies, and read up on your data protection rights, at https://www.cifas.org.uk/fpn

Categories of personal data

Name
Address(es)
Contact details
Date of birth
Marital status
Order information
Employment status
Financial information
Online identifiers

Lawful basis

We process your personal data on the basis that we have a substantial legitimate interest in preventing fraud and money laundering, and to verify identity, to protect our business and comply with laws that apply to us.

Such processing is also a contractual requirement of the services or financing you have requested.

We may record inbound and outbound calls from our contact centre for quality assurance/audit, regulatory compliance, due diligence, training, and monitoring purposes.

We keep all call recordings for a period of 12 months

Categories of personal data

Name
Contact details
Address(es)
Date of birth
Order information

Lawful basis

We process this information on the basis of complying with our legal and regulatory obligations to the FCA (Financial Conduct Authority) to record all communications relating to orders and trading.

We also process your personal data on the basis that we have a substantial legitimate interest to provide the best possible service to our customers and realise any improvements that can be made to those services.

We may use your personal data to contact you to ask you to complete a product review or a customer satisfaction survey. We may also invite you to research and focus groups.

We share your personal contact details with research companies who research customer satisfaction programmes for us.

Occasionally, we ask the research companies not to say that they are contacting you on our behalf, because we do not want to influence your answers. The market research company must let you know if you ask them to, at the end of the survey.

Categories of personal data

Name
Contact details
Address(es)
Order information
Date of birth
Title

Lawful basis

Your personal data may be processed where we have a legitimate interest, which is to keep improving the service we offer.

If you tell us that we can, then we will email you details of our latest products, services, and promotions. We also use marketing profiling techniques to tailor our offers to you, to make sure our marketing content is relevant for you. We also use your date of birth to send you offers on your birthday.

We create and keep records of how long you spend reading, and where you click, on the emails we send you, using industry standard technologies such as pixels and gifs.

You can opt-in or opt-out of our marketing activity at any time. Please see the Changing Your Marketing Preferences section below for more information.

Categories of personal data

Name
Email
Date of birth
Order information

Lawful basis

We use your personal data to send you marketing emails, to promote our products and services. We will only send you marketing emails where we have your consent.

If you tell us we can, we will use your telephone number to call you and tell you about our latest products, services, and promotions. We also use marketing profiling techniques to tailor our offers to you, to make sure our marketing content is relevant for you.

If you have subscribed to the Telephone Preference Service (TPS), we will not phone you, unless you have consented to get telemarketing calls from us.

You can opt-in or opt-out of our marketing activity at any time. Please see the Changing Your Marketing Preferences section below for more information

Categories of personal data

Name
Telephone number
Order information

Lawful basis

We use your personal data to contact you via telephone where we have a legitimate interest to promote products and services and you have not objected to this or if you have provided express consent (for example if you are on the TPS but still wish to hear from us in this way).

We use your name and address to mail you personalised marketing. We also use marketing profiling techniques to tailor our offers to you, to make sure our marketing content is relevant for you.

You can opt-in or opt-out of our marketing activity at any time. Please see the Changing Your Marketing Preferences section below for more information.

Categories of personal data

Name
Home address
Order information

Lawful basis

We use your personal to send you direct marketing by post where we have a legitimate interest to promote our products and services and you have not objected to this or if you have provided express consent.

We use social media to hear and understand what our customers think about us, and our products and services.

Sometimes, we may contact you directly on social media if we would like to share your comments or pictures with other customers or if we would like to publish them in our marketing materials. We will always ask you for consent to use your data in this way.

Categories of personal data

Name
Contact details
Reviews
Images
Social networks

Lawful basis

Your personal data will be processed to engage with you on social media where we have a legitimate interest to promote our products and services and to respond to queries raised using social medial channels.

We will also process your personal data in this way where you have provided consent.

We will use your personal data to send you online targeted marketing information about our product offers and promotions through social media.

To do this, we will share your email address in a secure manner with social media companies (like Facebook, for example) who match our advertising requirements to your social media profile.

Categories of personal data

Email

Lawful basis

We use your personal data to send you targeted advertising, where we have a legitimate interest to promote our products and services.

We will only be able to do this if you have selected this service within your social media account marketing preference settings.

Back to top

Changing your Marketing Preferences

Please see below how to change your marketing preferences:

Back to top

Data sharing

It is necessary for us to transfer personal data to other organisations, to operate our business, meet legal obligations, provide our services and to offer benefit to our customers.

When we do this, we only transfer the data that we need to, and we make sure that the personal data is protected throughout this process.

Sometimes, we are required to share personal data with third parties including government agencies, service providers, and external auditors. We will share your personal data with third parties when it is:

required by law.
requested by a regulator.
necessary to operate our business.
necessary to manage its contractual relationship with you.
in the public interest to do so.
necessary for the performance of our services.
necessary for fraud detection, crime prevention or investigating errors or issues; or
a court orders us to do so.

The third parties identified below include service providers, contractors, agents, and government bodies.

Back to top

Third Party Categories

We may share your personal data with other third parties, like if we are selling or reorganising our business. We might also share your data to protect our business, our customers, or other people's rights, property, or safety.

We will only transfer your personal data to third parties who adhere to appropriate data security standards and controls. This may include transferring your personal data to third parties who become either joint controllers of the data, or independent data controllers. This will include organisations within the following categories:

Legal services
Regulators and other governmental agencies or law enforcement agencies
External auditors
Credit reference agencies

If a third-party contact you on our behalf, they can only do so to provide the services you asked for and not to advertise their own products or services. If you have any concerns about the third-party companies we work with, or you would like more information, please contact our Data Protection and Privacy Office at informationrequest@nbrown.co.uk.

We will request information about you from Credit Reference Agencies ("CRAs") and we will also share your personal data with CRAs. The CRAs we use are Experian, TransUnion, and Equifax. For more information about how CRAs use your personal data, please refer to the Credit Reference Agency Information Notice ("CRAIN") at:

These companies receive and share personal and financial data on you from other companies that you are connected with financially as well as providing us with verification of your name, address, date of birth and gender details from the Electoral Register to prevent fraudulent applications. The CRAs record details of all credit searches and tell us the risk associated with providing credit and if there is any suspected fraudulent activity associated with you.

We will also share your personal data with CRAs and other companies for fraud prevention purposes and will continue to exchange information about you whilst you have a relationship with us. We will also inform CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs. When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.

We may make periodic searches of the records we hold about you and those held by CRAs and fraud prevention agencies and may also request additional information from you to help manage your account with us and, to take decisions about credit, including whether to make credit available or to extend existing credit arrangements. These searches and any additional information you provide to us will not be available to other lenders for credit assessment purposes.

We, CRAs and fraud prevention agencies may also use credit records for statistical analysis about credit, insurance, and fraud. This is not personal data but is aggregated for the purpose of trend analysis, managing debt and fraud prevention.

You have the right to access your personal records held by CRAs by contacting Experian, TransUnion, and Equifax directly.

Back to top

International Transfers

We do everything we can to keep your data safe and protected. If we have to transfer your data to another country, we make sure the country can keep your data safe, or we put specific measures in place to protect it ourselves. We also take extra steps to protect your data if we need to send it to countries outside of the UK or the European Economic Area, where the laws may be different.

If you want to know why we might need to send your data to places outside of the UK or the European Economic Area, please get in touch with our Data Protection and Privacy Office at informationrequest@nbrown.co.uk. They can also give you more information about how we transfer data.

Back to top

Your Rights

You have several rights under data protection and privacy laws. We explain more about your rights below. If you ever wish to exercise your rights, please contact our Data Protection and Privacy Office at informationrequest@nbrown.co.uk.

Likewise, if you are dissatisfied with the information provided, you can complain to the Data Protection Officer at the same address.

You have the right to ask us if we use your personal data, and to see and get copies of that data. We will tell you what kind of data we have, where we got it, and who we share it with. To make things easier, we have included most of that data within this privacy policy.

We will provide any data you ask for within one month of your request. If we need more time than that, we will let you know.

Please note that for security reasons, we will not give out any bank account details that we have for you.

Sometimes you can ask us to stop using your personal data. For example:

If you think the data, we have on you is incorrect - we will stop using it until we can confirm whether it is accurate or not.
Where you have objected to how we are using it - we will stop until we decide whether our reasons for using it override your objections.
If it is against the law for us to use it
If we do not need it anymore but you want us to keep it because you might need it for legal reasons in the future.

There are some cases where we may be unable to comply with your request. If that were to happen, we would let you know why.

As JD Williams & Company Limited is responsible for your personal data (what is called a 'data controller'), you have the right to ask us for a copy of it. This must be in a format that allows you to transfer it to another data controller.

Your right to transfer only applies:
To the personal data you yourself have given us
When we are using it because you agreed to it or because it is part of a contract
If the way, we are using the data is automated.

We will try to respond to your request within one month. If we need more time, we will let you know.

Back to top

Complaints and Concerns

If you want to complain about the way we use your data, it is best to contact us first. We will investigate your complaint right away. You can complain to the Information Commissioner's Office in the UK or the Data Protection Commission in the Republic of Ireland.

To contact The Information Commissioner's Office:

Visit: ico.org.uk

Call: 0303 123 1113

Write to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Back to top

Changes to this Privacy Notice

We may update this notice at any time. You will see any changes we make on this page.

Back to top

How to contact us

If you have any questions, comments, or requests to make about this privacy notice or your rights, here is how to contact us:

Email us: informationrequest@nbrown.co.uk

Write to: Data Protection and Privacy Office, JD Williams and Company Limited, Griffin House, 40 Lever Street, Manchester, M60 6ES.

Back to top