Bunzl UK & Ireland

Privacy policy

Last updated March 2023

1. Introduction

We appreciate the trust you place in us when sharing your personal data, and keeping that data secure matters to us. This notice explains how we collect and use your personal data, during and after your relationship with us, in line with our obligations under data protection law. It also covers who we share it with, the rights you have over your personal data, and how to exercise them.

Please read this alongside any other privacy notice we may give you on specific occasions, so you understand how and why we use your information. If you have questions or want to exercise your rights, use the details in the Contact us section below.

2. Who we are

For the purposes of the General Data Protection Regulation (GDPR), Bunzl plc is the Data Controller. This covers personal data collected through our websites, by telephone, through Live Chat and through related social media. It means we decide what data is collected, how it is used and how it is protected.

3. The data we hold about you

We may collect, store and use the following categories of personal data (this list is not exhaustive):

  • Personal contact details such as name, title, addresses, telephone numbers and personal email addresses.
  • Business contact details such as position, company name, company address, business telephone number and email.
  • Age or date of birth.
  • Bank account details and tax or VAT status information.
  • For credit arrangements, other data relating to trading information.
  • Where you visit our sites or take deliveries from us, CCTV footage and information from electronic means such as geolocation data for deliveries.
  • Cookie information and information about your use of our information and communications systems.

4. How we collect and use personal data

We collect personal data for one or more of these purposes:

  • To fulfil a contract with you, or with the organisation you represent. In these cases it may be your organisation, rather than you, that provided us with your data.
  • To initiate and complete commercial transactions for the purchase of products or services.
  • To deliver products you have purchased directly or indirectly from us.
  • To communicate with suppliers of goods and services.
  • To keep accounts and other business records.
  • To carry out marketing, electronic or otherwise, including sharing within the Bunzl group.
  • To comply with legal or regulatory requirements, including health and safety obligations.
  • To deal with complaints or queries from customers and suppliers.
  • To generate analytics that help us monitor and improve our website.
  • To keep our websites and business infrastructure secure and running.

We may also collect additional information from third parties, including credit reference agencies.

Technical and cookie information

So every visitor can use and navigate our sites, we also collect: the IP address used to connect your device to the internet; your login information, browser type and version, cookies, time zone setting, and browser plug-in types and versions; your operating system and platform; and information about your visit, including the clickstream to, through and from our site.

5. Lawful basis for processing

We rely on our legitimate interests, or on the need to perform a contract, or on your consent, to collect and use personal data to run our business and provide a service you have requested. In some cases we are under a legal duty to use or disclose data, for example to comply with a request from an official body. When we process on the basis of legitimate interest, we make sure our interests and rights do not override yours.

6. Sharing your personal data

We may share your data on a need to know basis, only where it is necessary or where we are required to. This may include professional advisers and service providers such as accountants, legal counsel, consultants, insurers, IT and communications providers, suppliers, and logistics and transport services. We may also share data with any competent law enforcement body or regulator as required by law, and when we buy or sell any business or assets. We aim to put the necessary safeguards in place so that data we are responsible for stays properly protected when shared with third parties.

7. International transfer

We are a global organisation and use third parties in other countries to help run our business, including other Bunzl Group companies. This can include countries outside the EU that do not have laws providing specific protection for personal data. We take steps to ensure all personal data is given adequate protection and that transfers outside the EU are done lawfully. Where we transfer data to a country not deemed adequate by the European Commission, the transfer is made under an agreement that covers the EU requirements. We require third parties to respect the security of your data and to treat it in line with the law.

8. How long we keep your data

We keep your data only as long as necessary for our business needs and to meet any legal or regulatory duty to retain it. Whatever the period, we keep it subject to appropriate security. To decide the right retention period we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use, the purposes of processing, whether we can achieve them another way, and the applicable legal requirements.

9. Security measures

We put measures in place to protect your data and prevent it being accidentally lost, used or accessed without authority, altered or disclosed. We limit access to those who have a business need to know. We have no control over what happens between your device and the boundary of our infrastructure, so you should be aware of information security risks and take steps to safeguard your own information. We accept no liability for breaches beyond our control.

10. Your rights

You have certain rights over the personal data we hold. To exercise them, use the Contact us section below. To process your request we will ask you for valid identification. Your rights are:

  • The right to be informed about our data processing, which this notice provides.
  • The right of access to a copy of the personal data we hold about you, free of charge.
  • The right to rectification of inaccurate data, and to have incomplete data completed.
  • The right to erasure of your data in certain circumstances, where no overriding legal basis to keep it remains.
  • The right to restrict processing, where we keep the data but stop processing it.
  • The right to data portability, to have data you gave us transferred to another controller in a commonly used, machine-readable format.
  • The right to object to processing based on legitimate interest, to direct marketing, or to a task carried out in the public interest.
  • The right to withdraw consent at any time where processing is based on it.
  • The right to human intervention in any automated decision-making about you.

You do not have to pay to exercise any of these rights. We have one month to respond.

11. Do you have to provide your data?

You are never required to provide personal data, but you may need to when you enter a contract for our services or products. We will not be able to provide them unless you give us the data we need. You will also need to provide certain data if you contact us to exercise your rights under section 10.

12. Automated decision-making and cookies

We may carry out automated decision-making when you use our website, providing content based on your online behaviour obtained through cookies. If you consent to cookies beyond those essential for the site, we can show content relevant to you. You can adjust cookies through the cookie preference settings.

13. Marketing

We may use your data to carry out marketing within the Bunzl group. We only contact people who want to receive marketing, and for our own legitimate interests. If you object to marketing, electronic or otherwise, tell us and we will stop. We may still need to contact you to provide services and products.

14. Cookies

Cookies are small text files placed on your device by sites you visit. We use them to make our site work, monitor its usage and show content we believe is relevant to you. If you register or continue to use the site, we may ask to collect additional data automatically through cookies or similar technology, and you will be asked to agree through our cookie consent tool. You can also block cookies in your browser settings, though blocking all cookies may stop parts of the site working.

15. Contact us

Any comments, questions or suggestions about this policy or our handling of your personal data should be emailed to dataprotection.enquiries@bunzl.com.

You can also write to our registered office:

Bunzl plc
York House, 45 Seymour Street
London W1H 7JT
United Kingdom

16. Complaints

We have appointed a Data Protection Privacy Champion to oversee compliance with this notice. If you have concerns about our use of your data, we would like the chance to respond, so please contact us using the details above. You also have the right to contact the Information Commissioner’s Office (ICO), the independent regulator for data protection in the UK.

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk

Bunzl plc is incorporated in the UK, outside the EU, so we have appointed Bunzl Outsourcing Services BV as our representative for GDPR compliance, to deal with supervisory authorities or data subjects:

Bunzl Outsourcing Services BV
(Chamber of Commerce 33054904, Establishment No. 000019725086)
Rondebeltweg 82, Almere, 1329 BG, Netherlands