UK | Privacy Policy

FULFIL Nutrition UK – Privacy Policy

We, at Ferrero (“we” or “Ferrero”), are committed to respecting the right to data protection and the right to privacy of our consumers and website users (“you”). In line with this commitment, we wish to provide you with this information notice, in which we explain the way we collect and handle your personal data in the context of shopping or browsing on our Fulfil Nutrition Website for the United Kingdom (this “Website”).

1. Who are we and how to contact us?

The Ferrero Group has established its headquarters at Route de Trêves 16, L-2633 Senningerberg, Luxembourg (“Ferrero Luxembourg”). In the United Kingdom, Ferrero has its registered office at 889 Greenford Road, Greenford, United Kingdom, UB6 0HE (“Ferrero UK”). When collecting and processing your personal data in the context of shopping or browsing our Website, Ferrero Luxembourg acts as a data controller jointly with Ferrero UK. If you have any questions on the processing of your personal data in the context of shopping or browsing our Website, do not hesitate to contact the Data Protection Officer (DPO) of Ferrero Luxembourg by sending an email at privacy@ferrero.com, or to contact the local Privacy Coordinator of Ferrero UK at Data.PrivacyUK@ferrero.com.

2. What personal data do we collect, for what purpose and on what legal basis?

We only collect personal data that are necessary for the purchase, marketing or advertising of FULFIL Nutrition products and services, including for handling your purchase orders, managing our Website, answering your enquiries and sending marketing communications. In particular, we will collect the following types of data directly from you:

  • Account Data: first name, last name, title, birthday, email address, telephone number, delivery address, billing address or any other information you provide within your personal preferences through your profile or answering question via survey, contest or other campaigns.
  • Marketing communication data: email address, name, surname and preferences about products (only if you register as a customer or actively subscribe to our marketing communications).
  • Purchase data: payments to and from you, and details on products ordered.
  • Technical and Website Usage data: internet protocol (IP) address, login (if applicable), device used to access the site, operating system of device, connection information like browser type, location of device if you choose to share it, time zone settings, purchase and order history, information about how you arrived on our site, and information about how you use the Website, depending on your cookie preferences. For more information, please refer to our Cookie Policy.
  • Customer Care data: information provided to customer care upon leveraging our contact options, including name, contact number, date/time, product information, enquiry, comment or report on the product and contact history.

The specific purposes and corresponding legal basis for the processing of these distinct categories of personal data are summarized in the table below:

Type of data Purpose of the processing Legal basis
Account data Account creation, administration, transaction fulfilment and general communications. Necessity to perform the contract between you and Ferrero.
Marketing communication data Promotional activity, product marketing, and advertising communication. For existing customers: our legitimate interest to inform you about our products and services.
For others: your consent.
Purchase data General fulfilment. Necessity to perform the contract between you and Ferrero.
Detecting and preventing fraud. Legitimate interest of Ferrero to protect its assets and interests.
Technical and Website Usage data Proper functioning of the Website and Website security. Necessity to perform the required services and our legitimate interest to ensure the security of our Website.
Improving Website performance, setting advanced functionalities and advertising purposes. Your consent (you may adjust your preferences at any time by consulting our Cookie Policy).
Customer Care data Provide customer care (handling your request or report and answering any queries you may have). Necessity to perform the required customer care services.
Internal staff training. Our legitimate interest to ensure and improve the quality of our customer care services.
Informing customers about any safety issue relating to our products or services (e.g., recall). Necessity to comply with our legal obligations with respect to product and food safety.

Providing some of these personal data may be mandatory, in the sense that failure to provide them will prevent you from interacting with us, benefitting from our services, or purchasing our products. For example, when purchasing FULFIL Nutrition products via our Website, providing your name and address will be mandatory because these data are necessary for us to be able to fulfil your purchase order. Mandatory data will always be indicated as such in the relevant form or notice.

3. How long do we keep your personal data?

Ferrero will keep your personal data as long as necessary for achieving all the above-mentioned purposes before anonymizing or deleting them, in accordance with the following retention periods:

  • Account data: your account data will be kept as long as you have an active account with us. If you do not use your account for a consecutive period of 5 years, we will inform you about our intention to delete your account. If you do not object within a month, your account information will be deleted. You may of course create a new account at any time.
  • Purchase data: 5 years from the time of purchase.
  • Technical and Website Usage data: please refer to our Cookie Policy.
  • Customer care data: please refer to our Customer Care Privacy Notice.
  • Marketing communication data: we will keep these data as long as you remain opted-in. You may unsubscribe at any time by clicking on the “Unsubscribe” button at the bottom of our marketing communications or by sending an email to our Privacy coordinator.

Upon expiration of these retention periods, the personal data will be deleted or anonymized, except if it is still necessary for us to keep them to comply with a legal obligation or to protect or defend our interests, for example in the event of a claim. In these cases, Ferrero will store your personal data for a longer period, until the claim is fully handled or resolved.

4. With whom do we share your personal data?

To achieve the above-mentioned purposes, Ferrero will share specific personal data (only those relevant and necessary) with the following categories of Recipients:

  • Internal Recipients (within Ferrero):
    • Brand marketing team to better understand our customers;
    • Customer and Shopper Understanding department to determine product demand moments and consumption occasions;
    • Direct-to-Consumer team to establish cyclical messaging campaigns.

  • External Recipients:
    • Our webstore service provider, i.e., Shopify, which will process Account data when necessary for running the online store of this Website.
    • Our logistics and delivery providers, i.e., DHL, which will process your address information, package contents and dimensions, when necessary for shipment and delivery of your orders.
    • Our website analytics service provider, i.e., Google Analytics, will process Technical and Website Usage data for website analytics and advertising purposes (only when you have consented to it).
    • Our marketing agencies, which will process Marketing communication data to help us to refine our brand messaging and brand equity campaigns (only if you are opted-in).

You may further inquire about the identity of the Recipients of your personal data by contacting the relevant Ferrero DPO or Privacy Coordinator (see above, “Who are we and how to contact us”).

5. Do we transfer your personal data to another country?

Generally, your personal data will only be processed in the European Economic Area (EEA) and the United Kingdom, in particular in the United Kingdom and Luxembourg. However, some of the above-mentioned recipients may be in other countries, such as the US. Ferrero will only transfer your personal data to these other countries in accordance with the applicable privacy and data protection law. You may request a copy of the applicable transfer tools (if any) by contacting us (see above, “Who are we and how to contact us?”).

6. What are your data protection rights?

You have several rights in relation to the processing of your personal data:

  • The right to obtain additional information or clarifications on the processing of your personal data, and to obtain a copy of your personal data;
  • The right to obtain the correction of your personal data if they are inaccurate or incomplete;
  • The right to object to the processing of your personal data on grounds relating to your particular situation whenever the processing is based on our legitimate interests;
  • The right to obtain restriction of processing from us (i.e., temporary suspension of the processing) while we assess the validity of another request relating to your personal data;
  • The right to data portability (i.e., the right to receive your personal data in a commonly used and machine-readable format and transmit them to another controller);
  • The right to request the erasure of your personal data (‘right to be forgotten’); and
  • The right to withdraw your consent whenever consent is the legal basis for the processing.

You may exercise these rights at any time by contacting the local Privacy Coordinator of Ferrero UK at Data.PrivacyUK@ferrero.com. Please note that these rights are not absolute and may be subject to specific conditions. If you contact us to exercise one of these rights, we will analyze your request and get back to you as soon as possible.