Marks and Spencer plc (“M&S, we or us”) is the data controller, under the Data Protection Act 1998, of any personal data we collect on this microsite http://christmasfood.marksandspencer.com (“the Microsite”). We are committed to complying with data protection law and keeping our customers’ data secure. This policy explains how we use your personal data collected via this Microsite. The information you submit to this website will be used for the following purposes:- Fulfilling your order with M&S;
- processing payment of your deposit;
- any associated purposes including dealing with queries or issues with your order;
- complying with our legal and regulatory obligations; and
- prevention of crime and exercise of our legal rights.
If you have consented your personal data will also be used to contact you with information regarding M&S offers and our branded products and services.
M&S works with carefully selected partners to host and operate this Microsite. To the extent that these companies access or process our customer’s personal data they will be acting as data processor on our behalf. We exercise strict control over data processing by these companies. In particular they are required to keep data secure and not permitted to disclose data or use it for their own purposes.