You are here: Homepage > Company & Website > What is the website's privacy policy?

Ask a Question

Ask your question by entering it here, or choose from the list of frequently asked questions below

What is the website's privacy policy?

PRIVACY & SECURITY

IMPORTANT – PLEASE READ CAREFULLY

Marks & Spencer is committed to respecting the privacy rights of visitors to its website. This privacy policy explains how we collect, store and use personal data about you when you browse
www.marksandspencer.com (the "Website"), shop with us or otherwise provide your personal data to us.  It provides you with details about the types of personal data that we collect from you, how we use your personal data and the rights you have to control our use of your personal data. 

You must read this privacy policy carefully and we recommend that you print and retain a copy for your future reference. By accessing, browsing or otherwise using this Website, you confirm that you have read, understood and agree to this privacy policy in its entirety.  If you do not agree to this privacy policy in its entirety, you must not use this Website.

Who we are

Marks and Spencer plc is a company registered in England and Wales (registration number 00214436) whose registered office is at Waterside House, 35 North Wharf Road, London W2 1NW. Marks and Spencer plc is part of the Marks & Spencer group of companies (collectively referred to as "Marks & Spencer", "we" or "us" in this privacy policy) and is registered as a data controller with the Information Commissioner's Office (registration number Z6046528).

We respect your right to privacy and will only process personal data you provide to us in accordance with the Data Protection Act 1998, the Privacy and Electronic Communications (EC Directive) Regulations 2003 and other applicable privacy laws.

If you have any questions about how we collect, store and use personal data, or if you have any other privacy-related questions, please contact us by any of the following means:

When contacting us, please remember to quote your name and contact details along with any Marks & Spencer account number or correspondence reference you may have.

Children

We do not and will not knowingly collect information from any unsupervised person under the age of 18.  If you are under the age of 18, you must not use this Website or submit any personal data to us unless you have the consent of, and are supervised by, a parent or guardian.

The personal data we collect about you

When you make purchases from Marks & Spencer (including purchases made in-store, over the phone, or via our catalogue order forms or this Website) we may collect the following personal data about you:

  • your name, age and sex;
  • your billing and delivery postal addresses, phone, fax and e-mail details;
  • where you have registered with us, your user name and password;
  • where you place an order with us, your payment card details;
  • your communication and shopping preferences;
  • your browsing and online shopping activities; and 
  • your date of birth.

We may also collect some or all of the above personal data about you when you access and browse this Website or any third party microsite (as described below), including when you sign up to receive Marks & Spencer newsletters.  We may also collect some or all of this personal data from third parties who have your consent to pass your details to us.


How we may store and use your information

Marks & Spencer (and third party data processors acting on our behalf) may collect, store and process your personal data:

  •  to make this Website available to you and to provide you with content which is tailored to your individual tastes;
  • to maintain any registered account that you hold with us (including pledge accounts created under the "Plan A" section of our Website);
  • with your agreement, to contact you (including by SMS and e-mail) about promotional offers and products and services which we think may interest you and for customer satisfaction and market research purposes;
  • to provide our goods and services to you and for associate purposes, including verifying your identity;
  • for research, analysis, testing, monitoring, risk management and administrative purposes; and
  • for any related purposes, or where we have a legal right or duty to use or disclose your information (including for crime and fraud preventation and related purposes).

We also process your payment card details in order to complete any purchase that you make through this Website and, in certain instances, disclose your personal data to third party credit reference agencies to perform credit checks against you. When you place an order with us, we may offer to retain your payment card details for your convenience to save you having to re-enter these details on a future occasion. However, if you prefer that we do not maintain these details, you can go to 'My Account', click on ‘Edit or delete a credit card’ and delete any card information that we hold about you.

In addition, we may collect anonymised details about visitors to our Website for the purposes of aggregate statistics or reporting purposes.  However, no single individual will be identifiable from the anonymised details that we collect for these purposes.

Except as set out in this privacy policy, we will not disclose, sell or rent your personal data to any third party. If you do consent but later change your mind, you may contact us and we will cease any such activity.

In the event that a third party acquires all or part of our business and/or assets, we may disclose your personal data to that third party in connection with the acquisition. Furthermore, we reserve the right to disclose your personal data to third parties as part of any business or asset sale carried out because Marks & Spencer has gone into insolvency or any similar situation, but only where lawful and compliant  with the Data Protection Act 1998. We may also disclose your personal data where necessary to comply with applicable law or an order of a governmental or law enforcement body.  

Microsites

Marks & Spencer has partnered with certain trusted third parties to make available certain additional third party products and services to you, including:

  • M&S Money (under partnering arrangements with Marks and Spencer Financial Services plc, a member of the HSBC Group) accessible by clicking here
  • M&S Appliances (under partnering arrangements with DRL Limited) accessible by clicking here 
  • M&S Energy (under partnering arrangements with SSE Energy Supply Limited) accessible by clicking here
  • M&S lunchtogo (under partnering arrangements with EWA Ltd) accessible by clicking here
  • M&S Made-to-Measure Shirts (under partnering arrangements with Bivolino) accessible by clicking here 
  • M&S Personalised (under partnering arrangements with Hallmark Cards PLC) accessible by clicking here
  • M&S Health & Nutrition (under partnering arrangements with 9XB) accessible by clicking here
  • Marks & Spencer Recycling (under partnering arrangements with SHP Limited) accessible by clicking here

Each of these third party products and services can be accessed online through the relevant third party's "microsite". A microsite is a website that is owned and operated by a third party but which is M&S-branded and can be accessed from links on the main M&S Website. Alternatively, you can visit a microsite by clicking on the links above.

Please note that, although M&S's third party partners display M&S branding on their respective microsites, M&S does not own or operate any microsite and each microsite is governed by its own terms and conditions and privacy policy.  Personal data that you provide or which are collected about you through a microsite will be used by the relevant third party in accordance with that microsite's terms and conditions and privacy policy.  In some cases, third party microsite operators may disclose your personal data to us so that we may use them in accordance with this Privacy Policy.

If you have any questions or concerns about the collection or use of your personal data collected through any microsite, you should contact the relevant third party microsite operator using the contact information specified in their privacy policy.

E-mail newsletter preferences and text alerts

We provide you with the ability to control whether or not to receive e-mail newsletters, or to change the types of e-mail newsletters you receive, through our newsletter preference centre which is accessible by clicking here.

Marks & Spencer will only send you text alerts with your permission. You can opt out of receiving these text alerts at any time by texting STOP to 65006. Data may be supplied to third party processors to enable the service to be provided.

Personalised banner advertising

If you browse this Website you may receive personalised banner advertisements whilst browsing other reputable websites.  We are committed to providing you with information on products and offers which are relevant to you.  Any banner advertisements you receive will relate to products which have been viewed whilst browsing this Website on your computer or other device.  This service is provided by M&S via a reputable third party specialist provider, through the use of ‘cookies’ placed on your computer or other device (see further information on the use of cookies in the section below). Cookies can be removed or disabled altogether - see below for further information.

Targeted updates and marketing

If you have agreed that we can contact you for marketing purposes we may send you emails and other communications relating to products and services which we think will be of interest and relevance to you as an individual.  We do this by monitoring the browsing and online shopping habits of customers and providing them with information on products they have viewed and related products.  

International transfers

We may transfer personal data that we collect from you to third party data processors located in countries that are outside of the European Economic Area and to other Marks & Spencer group companies in connection with the above purposes.  Please be aware that countries which are outside the European Economic Area may not offer the same level of data protection as the United Kingdom, although our collection, storage and use of your personal data will continue to be governed by this privacy policy.

Cookies

Cookie Policy

What are cookies?
This website uses cookies to collect information.  Cookies are small data files which are placed on your computer or other mobile or handheld device (such as smart ‘phones or ‘tablets’) as you browse this website.  They are used to ‘remember’ when your computer or device accesses this website.  The cookies are essential to the effective operation of our website and to enable to you shop with us online.  Cookies are also used to tailor the products and services offered and advertised to our customers, both on this website and elsewhere. 

Information collected
Some cookies collect information about browsing and purchasing behaviour by people who access this website via the same computer or device.  This includes information about pages viewed, products purchased and the customer journey around a website.  We do not, however, use cookies to collect or record information on users’ name, address or other contact details.  M&S is able to use cookies to monitor individual customer browsing and purchasing behaviour but third parties are not able to identify customers using cookies.

Who sets the cookies?
The cookies stored on your computer or other device when you access this website are set by M&S, our suppliers who partner with us to help deliver a high quality website and on-line shopping experience, and other third parties.
Some cookies are set by or on behalf of M&S and are necessary to enable customers to a make purchases on our website. 
Cookies may also be set by third parties who participate with us in affiliate marketing programmes.   The most important such third parties are Criteo, Transversal and Rich Relevance who broadcast banner advertisements on behalf of M&S and a number of other reputable companies.  None of these third parties collect any personal data from which they would be able to identify individual customers.


What are cookies used for?

The main purposes for which cookies are used are:-

1. For technical purposes essential to effective operation of website, particularly in relation to on-line transactions.

2. To drive M&S marketing, particularly banner advertisements and targeted updates which are explained in more detail elsewhere in the Privacy Policy.

3. To enable M&S to collect information about the browsing and shopping habits and activities of customers, including to monitor the success of campaigns, competitions etc. 

4. To enable M&S meet its contractual obligations to make payments to third parties when a product is purchased by someone who has visited our website from a site operated by those parties.

How do I disable cookies?
If you want to disable cookies you need to change your website browser settings to reject cookies.  How to do this will depend on the browser you use and we provide further detail below on how to disable cookies for the most popular browsers:-

For Microsoft Internet Explorer:
1. Choose the menu “tools” then “Internet Options”
2 Click on the “privacy” tab
3 Select the setting the appropriate setting

For Mozilla firefox:
1. Choose the menu “tools” then “Options”
2 Click on the icon “privacy”
3 Find the menu “cookie” and select the relevant options

For Opera 6.0 and further:
1. Choose the menu Files”> “Preferences”
2 Privacy

What happens if I disable cookies?
This depends on which cookies you disable, but in general the site may not operate properly if cookies are switched off.  If you only disable 3rd party cookies you will not be prevented from making purchases on this site.  If you disable all cookies you will be unable to complete a purchase on this site.

ADDITIONAL PRIVACY NOTICE - M&S HOME INSULATION AND SOLAR SYSTEM

This privacy notice explains how we may collect, store and use personal data about you, if you sign up for M&S Home Insulation and Solar System services. This notice only relates to the use of your personal data by Marks and Spencer for the purpose of providing you with insulation services.  Details of how your personal data will be used for the purposes of providing you with home energy (eg gas and electricity) through M&S Energy is set out at www.mandsenergy.com/privacy.  SSE Energy Supply Limited is responsible for handling personal data of M&S Energy customers for the purposes of providing home energy to them.M&S is responsible for handing personal data of M&S Home insulation and Solar System customers.

In order to provide you with an insulation or solar system assessment and insulation or solar system products and services, we may collect the following personal data about you:
• your name, age,address, telephone number, email, fax  and other contact details ;
• information about your property
• where you have asked us to provide installation services to you, your payment card and bank details;
• proof of benefits and age
• your communication and marketing preferences;
• your date of birth

How we may store and use your information

Marks & Spencer (and third party data processors acting on our behalf, including Enact Energy Management Limited) may collect, store and process your personal data:
• To provide you with a quote for insulation and solar system services.
• To arrange and undertake an assessment of the insulation and/or solar system requirements of your home
• To recommend insulation and/or solar system services and products tailored to your needs.
• To install insulation, solar system and energy efficiency products for you; including loft insulation, cavity wall insulation and solar panels.
• With your agreement, to contact you by email, SMS (text messaging), post, telephone (including automated calling services) and fax about promotional offers and information regarding our products and services
• To process your payment for any of the above services, including processing your card details and, in certain instances, disclose your personal data to third party credit reference agencies to perform credit checks against you.
• If we provide insulation and/or solar system services to you, your name, contact details and a summary of the work undertaken will also be sent to the utility company funding energy savings grants (currently SSE Energy Supply Limited) to support their claims for statutory funding.

SECURITY

We use Internet standard encryption technology ("SSL" or "Secure Socket Layer" technology) to encode personal data that you send to us when placing an order through the Website. To check that you are in a secure area of the Website before sending personal data to us, please look at the bottom right of your website browser and check that it displays an image of a closed padlock or an unbroken key

However, please note that whilst we take appropriate technical and organisational measures to safeguard the personal data that you provide to us, no transmission over the Internet can ever be guaranteed secure.  Consequently, please note that we cannot guarantee the security of any personal data that you transfer over the Internet to us.

If you are using a computer or terminal in a public location, we recommend that you always log out and close the website browser when you complete an online session for your security. In addition we recommend that you take the following security measures to enhance your online safety:

  • Keep your account passwords private. Remember, anybody who knows your password may access your account.
  • When creating a password, use at least 8 characters. A combination of letters and numbers is best. Do not use dictionary words, your name, email address, or other personal data that can be easily obtained. We also recommend that you frequently change your password. You can do this by going to ‘My Account’ and clicking ‘Change name, email or password’,
  • Avoid using the same password for multiple online accounts.

Spoof/false emails

We will never ask you to confirm any account or credit card details via email. If you receive an email claiming to be from marksandspencer.com asking you to do so, please ignore it and do not respond.

Your rights

You have the following rights:

  • the right to ask what personal data that we hold about you at any time, subject to a fee specified by law (currently £10);
  • the right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you free of charge; and
  • the right to opt out of any marketing communications that we may send you.

If you wish to exercise any of the above rights, please contact us using the contact details specified above.  However, if you wish to unsubscribe from e-mail marketing communications that we send you, you can most easily do this by clicking on the unsubscribe link at the bottom of any e-mail newsletter we have sent to you or, alternatively, by visiting our e-mail newsletter preference centre.

Third party sites

This Website contains links to other websites operated by third parties (including microsites, described above).  Please note that this privacy policy applies only to the personal data that we collect through this Website and we cannot be responsible for personal data that third parties may collect, store and use through their website (including microsites).  You should always read the privacy policy of each website you visit carefully.

Internet Shopping Is Safe Accredited Retailer

Marks and Spencer is an ISIS accredited retailer and marksandspencer.com is verified as an ISIS compliant website.

Updates to this policy

This privacy policy was last updated in March 2010. Please check back regularly to keep informed of updates to this privacy policy.

Contact us

If you have any questions please contact us.

Back to top

 

Was this answer useful?

For further information see terms and conditions on marksandspencer.com. © 2012 Marks and Spencer plc