Privacy Policy

  1. Who are we?

The a2 Milk Company Ltd (“we”, “us”, or “our”) is a company registered in Scotland under registration number SC410638 and with registered address c/o 4th Floor, 115 George Street, Edinburgh, EH2 4JN. We are the data controller for the purposes of this Privacy Policy.

 

  1. What is this privacy policy for?

This Privacy Policy gives you information about how we collect and use personal data of our customers and consumers of our products and of users of our website a2milk.co.uk (“this Site”). When we refer to ‘personal data’ in this Privacy Policy it means any information that relates to you from which you can be identified. This Privacy Policy explains how we process your personal data, including in connection with your use of this Site, so please read it carefully.

 

  1. What personal data may we collect?

We collect, process and use the following categories of personal data about you:

  • Personal data you provide when you sign up to the a2 Milk™ newsletter, including your name and email address.
  • Personal data you provide in correspondence with us by phone, e-mail or post, including when you contact us via the ‘contact us’ form on this Site. This information typically includes your name, contact details, nature of the product or service requested and related information so that we may fulfil your request.
  • Any other personal or private information about you that you choose to submit to this Site or any of the social media platforms that we operate.
  • Information about your use of this Site, including your cookie data, clickstream data, browsing history, location data, and preferences in relation to direct marketing.

 

  1. Cookies

This Site uses cookies for a number of purposes, including to distinguish you from other users, to provide you with a good user experience when you browse this Site and to allow us to improve the features of this Site. For more information on Cookies, view our Cookie Policy.

 

  1. How we use your data

We may use your personal data for the following purposes:

  • To operate our business and provide you with services you have requested, including a2 Milk™ newsletters.
  • To display the content of this Site, and any customisations you may select.
  • To verify your identity.
  • To acknowledge, confirm and deal with any enquiries or complaints you may send us.
  • To notify you about any changes to this Site or our services where you have consented to receiving such notifications. When we rely on your consent for these purposes we will only use the means of communications selected by you (e.g. email or post). Any marketing email that you receive from us will allow you to unsubscribe to further email promotions.
  • Subject to us obtaining your consent, to contact you in connection with customer surveys and to use any information you submit in response to such surveys.
  • To administer this Site and ensure that this Site is presented in the most effective manner for you and for your computer/device.
  • For internal business/technical operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes and as part of our efforts to keep this Site secure.
  • On an aggregate basis, to understand how individuals collectively use the features of this Site.
  • To give effect to your legal rights and your rights under this Privacy Policy.
  • To establish or exercise and legal rights or claims such as to protect against fraud, identity theft, and other unlawful activity.
  • To satisfy our obligations under applicable law, this Privacy Policy, and any other policies or terms that are applicable to our relationship with you.
  • For other purposes to which you have consented such as to publish any testimonials submitted by you to promote our products on this Site or in other relevant promotional materials.

We may also combine personal data that you provide to us with other information we collect about you for the purpose set out in the Privacy Policy.

We must have a legal basis to process your personal data. In most cases the legal basis will be one of the following:

  • Performance of a contract – The use of your personal data may be necessary to perform a contract that you have with us. For example, as a user of our services we will use your personal data to respond to your requests and provide you with such services.
  • Legitimate interests – We may use your personal data for our legitimate interests to improve our products and services and the content on this
  • Consent – We will rely on your consent to use your personal data for direct marketing purposes, including to send you the a2 Milk™ newsletter and other notifications about changes to this Site or services, and to invite you to participate in customer surveys. You may withdraw your consent at any time by contacting us using the details at the end of this Privacy Policy.

 

  1. Disclosure of your personal data and international transfers

We may share your personal data with third parties in the following situations:

  • To third party service providers who support our business operations (for example, external customer care agencies) subject to appropriate contractual protections in accordance with applicable law.
  • To our IT suppliers and contractors (e.g. data hosting providers or delivery partners) who process or may otherwise have access to your personal data to provide IT support and enable us to provide our services, subject to appropriate contractual protections in accordance with applicable law.
  • To third party purchasers if we sell or transfer all, or any portion, of our business or company assets to any third party. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Privacy Policy.
  • To law enforcement agencies, courts, regulators, government authority or any other third party where this is necessary to comply with a legal or regulatory obligation, or otherwise where it is necessary to establish, exercise or defend legal rights or claims, or for the purposes of investigating actual or suspected unlawful activity.

Due to the global nature of the company, your personal data may be transferred to and processed in a country that is not regarded as ensuring an adequate level of protection for personal information under European Union law or by the European Commission including Australia. We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us using the details below.

 

  1. Security

We take the security of our customers’ data very seriously and we use appropriate measures to protect all personal information collected in a secure, controlled environment consistent with applicable data protection legislation. The personal data that we collect from you will be stored on UK based servers.

 

  1. Data retention

We will keep your personal data for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal data for a period of time that enables us to:

  • Maintain business records for analysis and/or audit purposes.
  • Comply with record retention requirements under the law.
  • Defend or bring any existing or potential legal claims.
  • Deal with any complaints regarding our products or services.

We will delete your personal data when it is no longer required for these purposes. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.

 

  1. Your data protection rights

Subject to applicable law, you may have the following rights in relation to your personal data:

  • The right to request access to, or copies of, your personal data that we process.
  • The right to request correction of any inaccuracies in your personal data.
  • The right to restrict our use of your personal data.
  • The right to object, in certain circumstances, to our processing of your personal data.
  • The right to request, in certain circumstances, that your personal data is deleted.
  • The right to receive your personal data in a usable electronic format and transmit it to a third party (right to data portability).

 

If you wish to exercise any of these rights please contact us using the contact details in section 11 below. We may also need to ask you for further information to verify your identity before we can respond to any request.

 

  1. Changes to our Privacy Policy

Any changes we may make to our Privacy Policy will be notified to you by way of a banner on this Site. Please check back frequently to see any updates or modifications.

 

  1. Contact

Questions, comments or requests regarding this Privacy Policy should be addressed to our privacy officer at:

Data Controller
The a2 Milk Company,
The Cow Shed,
Shoelands Farm,
Seale Lane,
Puttenham,
GU10 1HL

or by email at: care@a2milk.co.uk

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority of the UK using their website: ico.org.uk, or your local data protection authority (where applicable).

Back to top