Privacy Policy
To create a better everyday life for the many people means to put people at the heart of everything we do. We want to give you the best service and experience, and using data allows us to get to know you and understand what is important for you when you visit us. However, with such privilege comes great responsibility. We at Ingka Centres understand the importance of transparency and in providing you with information about how your data will be handled and used, so that the control is in your hands.
This Privacy Notice explains how and why we collect, use and store, and process and share your personal data when you visit and interact with us. When using our website, this Privacy Notice should be read alongside the website Terms of Use.
1. Who are we and how can you contact us?
We are Ingka Centres Management UK Ltd, with its registered office at 100 Avebury Boulevard, Milton Keynes, United Kingdom, MK9 1FH (hereinafter referred to as “Meeting Place” or “MP”). We are a part of Ingka Group, but Ingka Centres Management UK Ltd, is the “Data Controller” of any personal data which is collected, processed and stored about you, unless we inform you otherwise.
If you have questions about our Privacy Notice or practices, please feel free to get in touch with us. You may reach us by emailing at dataprotection.officer.gb@ingka.ikea.com or writing to us at 100 Avebury Boulevard, Milton Keynes, United Kingdom, MK9 1FH.
2. Why do we collect the data?
To improve your personalized experience when interacting with us and visiting our Meeting Place, and to perform the service in which you have requested from us. We may also analyze your data for statistical purposes and share your data with other companies within the Ingka Group and third parties who help us segment and understand our customers by providing additional information.
3. How do we collect it?
The data is either collected by you providing us the data directly or indirectly, which we have received from our suppliers who support us in delivering our services to you.
We have implemented appropriate technical and organizational measures to ensure that when you purchase gift cards, signing up for our newsletter or direct marketing, interacting with Meeting Place QR-codes and Wi-Fi, engaging with our social media platforms, completing surveys, entering into competitions/lotteries, and/or visiting our website, the data which is provided to us, will be processed in a secure manner in order for us to be able to perform and/assess the service.
Our website and newsletters may contain cookies, pixel tags and tracking technologies to enhance and personalize your experience with us. To learn more about our use of cookies and similar technologies, can be found in our Cookie notice.
4. What personal data do we process?
When visiting our website, the following data fields may be captured; your IP address, device data e.g. MAC addresses, cookie information, behavioral data on our website including traffic source which maps the visitors last visited website.
No personal data classified as “special category” and/or “sensitive data” will be captured unless the individual directly provides us with such data.
The Meeting Place does not knowingly collect data from children under the age of 16, but it may be provided by the parents/guardians with their consent.
5. How do we use your personal data and why?
In the below section we provide you with an overview of the purposes for which we use your personal data and the legal basis for doing so.
Purpose: Gathering feedback
Description: To gather feedback and reflect customers' opinion/requests in the company's service improvement.
Purpose: Gathering feedback
Description: We have an appropriate business need (to develop and improve the products and services we offer).
Legal basis: We have an appropriate business need (to develop and improve the products and services we offer).Purpose: Internal research and analysis
Description: To understand how our MP and/or our group companies' products and services are being used, understand how we can improve our MP and/or our group companies' products and services
Legal basis: We have an appropriate business need (to develop and improve the products and services we offer).Purpose: In-MP services
Description: To provide customers/visitors with services that enables them to have a better in-MP experience, such as: booking services, lost & found, digital signages, Wi-Fi specific privacy notice can be found here
Legal basis: - It is necessary to enter into or perform a contract (e.g., you agreed to specific Terms & Conditions).
- We have an appropriate business need (to provide you our support related to the services we offer).Purpose: Customer support
Description: To capture and solve questions from customers/visitors in the MP and collect statistics and improve the customer support service
Legal basis: - It is necessary to enter into or perform a contract (e.g., you agreed to specific Terms & Conditions).
- We have an appropriate business need (to provide you our support related to the services we offer).Purpose: Brand related
Description: To send Invitations and communications to visitors/customer related to brand building activities and events.
Legal basis: - You have given us your consent.Purpose: Advertising
Description: To send online advertising using the personal data to provide targeted advertising.
Legal basis: - You have given us your consent.Purpose: Newsletters
Description: To receive our email newsletters by submitting your details and providing your consent.
Legal basis: - You have given us your consent.Purpose: Gift cards
Description: To provide customer a facility to use these cards for shopping.
Legal basis: - It is necessary to enter into or perform a contract (e.g., you agreed to specific Terms & Conditions).Purpose: In-MP monitoring for security (CCTV)
Description: To monitor visitors and customers in the MP to prevent any harm or damage to the on-site premises.
Legal basis: - We have an appropriate business need (to prevent or investigating criminal actions).Purpose: In-MP monitoring for optimization
Description: To monitor visitors in the MP for MP optimization by counting number of visitors, producing heat maps or aggregated information on movement.
Legal basis: - We have an appropriate business need (to develop and improve the products and services we offer).Purpose: Social media
Description: To present our services, communicate and provide relevant updates related to the MP, we utilize widely used social media channels, such as: Facebook and Instagram.
Legal basis: - We have an appropriate business need (to communicate and advertise the services that we offer).Purpose: Enquiries and complaints
Description: To deal with enquiries and complaints made by or about you relating to us, our site and the Meeting Place.
Legal basis: - It is necessary to enter into or perform a service contract.
- We have a relevant legal or regulatory obligation.
- We have an appropriate business need (to send you communications, record and investigate complaints and ensure that future complaints are handled appropriately).Purpose: Prize draws or competitions
Description: To administer any prize draws or competitions that you choose to enter. We sometimes use third parties to help us do this, we will make this clear in the dedicated terms and conditions.
Legal basis: - It is necessary to enter into or perform a contract (e.g., you agreed to specific Terms & Conditions).
- We have an appropriate business need (to provide you our support related to the services we offer).Purpose: Business transactions related to company restructuring
Description: In connection with a business transaction such as a merger, or a restructuring, or sale.
Legal basis: - We have an appropriate business need (to buy or sell group companies or to restructure our business).
- We have a relevant legal or regulatory obligation.
Description
To gather feedback and reflect customers' opinion/requests in the company's service improvement
Legal basis
- We have an appropriate business need (to develop and improve the products and services we offer).
6. For how long do we keep your personal data?
We keep your personal data for as long it is necessary to provide a service to you, for business and operational reasons or based on legal obligations. The time we keep your personal data depends on the purpose it was collected for, so this can differ case by case. When we no longer need your personal data for the intended purpose(s), the data will be deleted or anonymized so you can no longer be identified. An exception applies when we are required to store personal data for a longer period of time based on applicable laws and legislations.
7. Your data subject rights
Under privacy laws, including the UK General Data Protection Regulation (“UK GDPR”) you have certain rights in relation the personal data that we hold about you. There will not usually be a charge for dealing with these requests. You may exercise these rights at any time by contacting us using the details set out in section 1.
The access, rights and controls might vary depending on your request, however, in general the following rights are available to you, unless we communicate or justify otherwise.
Access
You are entitled to gain confirmation from us about the data that we process about you, and, where that is the case, access to the personal data.Rectification
You are entitled to to ask us to update and amend your data that might be inaccurate, incomplete or outdated.Erasure (“right to be forgotten”)
You are entitled to request us to delete some data which no longer necessary is for its purpose.Restriction
You are entitled to ask us to temporarily or permanently restrict/stop some of the processing of your data.Object
You are entitled to at any time, object to the processing of your data, including direct marketing.Data portability
You are entitled to receive a readable copy about your data and, if requested, have the data to be transferred to another service provider.Not be subject to automated decision-making
You are entitled to not be subject to a decision based solely on automated processing, including profiling, which creates legal effects concerning you, or similarly significantly affects you.
We take your privacy and data seriously, so it is important for us to communicate that you also have the right to send a complaint about our use of your personal data to your local data protection authority. However, we would of course love to hear from you and your thoughts about our processes, and how you would like us to develop and change our processes, prior to involving the local authorities.
Your local Data Protection Authority is the Information Commissioner’s Office (ICO). For more information about them, please view their website at https://ico.org.uk/
Making a complaint to your local Data Protection Authority will not affect any other legal rights or remedies that might be available to you.
8. International data transfers
We may transfer personal data overseas to members within the Ingka Group where we share a business interest or use the same computing systems. These transfers are made lawful through an agreement between our group companies and standard contractual clauses approved by the European Commission (appropriately amended to reflect the United Kingdom’s status outside of the European Union).
For transfers to members within Ingka Group or suppliers who are based outside the United Kingdom, have servers outside of this location, or are based in a country which has not received a UK adequacy decision , we will implement standard contractual clauses approved by the European Commission (appropriately amended to reflect the United Kingdom’s status outside of the European Union), and will take steps to ensure that the transfer of your personal data outside of the UK receives an adequate level of protection as it does in the UK or use other valid transfer tools or derogation in line with applicable data protection laws in order to protect and secure your personal information.
9. Sharing your information
We may share your personal data with third parties for further processing as follows:
• in order to deliver existing services and develop and test new services and features;
• to process payments made;
• in the management of direct marketing;
• to provide Wi-Fi in our Meeting Place; and/or
• to provide CCTV and security services within our Meeting Place.
We may also share information about our visitors who have visited our website and/or our Meeting Place. Such sharing of information will be in an anonymous and/or aggregated form prior to sharing it with third parties.
Third parties could include:
• other companies in our Ingka Group;
• our joint venture partners;
• advertisers, business partners, and sponsors who assist the Meeting Place and Ingka Group to analyze visitor trends and patterns, as well as developing and improving our business model;
• contractors, consultants and professional advisors; and
• law enforcement agencies, government and regulatory bodies to meet applicable legal or regulatory obligations.
10. The usage of CCTV at the Meeting Place
For all of our safety, prevention and detection of crime, and to support the local police authority, we use CCTV, which is located in various locations at our Meeting Place.
The Meeting Place is legally obliged to comply with a direct request received from the police authority, government authority or any other regulatory body, if they suspect illegal activities or for other purposes. Please note that we will use our best endeavors to limit the use of content and images that we need to share, however, we cannot guarantee that all images and any other personal data relating to you will not be shared or deleted.
11. The usage of tracking technologies at the Meeting Place
Within our Meeting Place, we use video surveillance technology for the purpose of conducting visitation and footfall analytics. This helps us understand how visitors use our Meeting Place. This technology uses algorithms based on clothes recognition to create these analytics. It does not involve the processing of any biometric or ‘special category’ personal data. To be clear, your clothes are the only data we process, and only as part of the larger, overall pattern of movement in the Meeting Place – not to see how you, as an individual, use our Meeting Place.
The data is only retained for 24 hours, after which it is deleted. The legal basis for the processing of this personal data is our legitimate interest to gather analytics on visitation and footfall within the Meeting Place in order to improve visitor’s experiences.
12. Digital signage at the Meeting Place
Within our Meeting Place, we use digital advertising screens with sensors that analyse how long visitors have viewed an ad, as well as their approximate gender and age. The sensors capture this information in real time. A real-time image is then anonymized and converted into metadata (numerical values) within 10 milliseconds. No visual image is stored and from the data we store it is technically impossible to reconstruct a visual image or identify a person.
The legal basis for the processing of personal data is our legitimate interest to understand the impact of our advertising campaign.
13. Livat App
The Livat app is a communication tool which we use to communicate information about the map of the Meeting Place(s), a store locator and opening hours to the stores located in the Meeting Place. The services offered as part of Livat App require the processing of your personal data.
We processed personal data collected on the Livat App for the following purposes:
• to enable you to have access to the Livat App. We only use unique installation ID necessary for the installation of the application
We do not reuse the information for another purpose that is different to the one stated. We will not use your personal data for direct marketing purposes.
14. Participating in competitions, giveaways, event, or offers
When you are participating in competitions, giveaways, events or offers we use the data that you have provided us for administration and management purposes. If you choose to enter someone else’s details, we expect that you have received the correct legal basis of the named individual of which you have provided their personal data to us.
In some competitions, giveaways, events or offers, a set of specific terms and conditions will be attached, and in the event of any conflict between the terms and conditions and this Privacy Notice, the specific terms and conditions will prevail.
15. Stores and other suppliers at the Meeting Place
To enhance your shopping experience, our website may include links or references to other websites not controlled by the Ingka Group. The policies and procedures described herein do not apply to those third parties, and we have do not have any control over, or responsibility for the data processing which is carried out by these linked websites. Please visit those third parties’ websites or contact them directly for information on their privacy notices.
The same applies when entering a store and/or engaging with our suppliers at our Meeting Place, who are not owned by the Ingka Group. The Ingka Group has no control over, or responsibility for the data processing which is carried out when engaging with our suppliers or entering their stores, and it is therefore advised that you visit their respective websites for more information on how they process and use your data according to their privacy notice.
16. How will I know if this Privacy Notice has changed?
As privacy regulations changes and we develop our processes, we may make changes to this Privacy Notice.
If you receive direct marketing from us and we have your consent to communicate directly with you, we will try our best to inform you by email if this Privacy Notice has had any material changes.
However, all future changes to our Privacy Notice will be updated online and accessed through our website with the last date of update displayed as below.
We encourage you to review this website regularly for any changes in the Privacy Notice. Your continued use of our website and our services after any implemented changes or revision to this Privacy Notice shall indicate your agreement with the revised terms.
This Privacy Notice was last updated in 03 of February 2022.