PRIVACY POLICY

Last updated: 26/09/2023

INTRODUCTION

The 'Product App' is a software tool developed by Oliver Hardman, associated with John Lewis Plc, a UK-based company. This Privacy Policy delineates how we manage and utilise data when you engage with Product App and its affiliated services, including the Product App Identity Service and PartnerAI.

ELIGIBILITY FOR USE

Product App is exclusively tailored for Partners and contractors of the John Lewis Partnership aged 16 or above. Unauthorised usage without pre-written consent is prohibited. Note that this Privacy Policy may undergo changes, but significant modifications will be communicated via in-app notifications.

DATA CONTROL & RESPONSIBILITY

For the services of Product App, Oliver Hardman acts as the primary data controller, unless the data originates or is aggregated by Waitrose Ltd or John Lewis Plc. In such scenarios, John Lewis Plc assumes the role of the data controller. Further insights regarding data management can be accessed from the John Lewis Partnership Privacy Notice.

DATA COLLECTION & PURPOSE

We gather data for multiple reasons, including personalising your app experience and refining our services. Monitoring interaction patterns and service preferences further aids us in product development and enhancements.

DATA COLLECTION EVENTS

Various activities and interactions within the app trigger data collection. These include authentication processes, engagement with app features, user-generated content submissions, settings modifications, and during unforeseen technical glitches.

TOOLS FOR DATA MONITORING

We employ tools like Google Analytics, Crashlytics, and Sentry to observe and analyze user behavior. This analysis assists in enhancing user experience and refining our services.

PERSONALLY IDENTIFIABLE INFORMATION (PII)

We receive specific PII from Google during the authentication process via the Product App Identity Service (PAIS). The PAIS, however, operates under Google's purview and their data collection is subject to Google's Privacy Policy. Details on the scope of retained data by PAIS are available upon request.

PARTNERAI & ASSOCIATED SERVICES

RetrievalQA

This feature facilitates data sourcing from credible databases. All user interactions with RetrievalQA are stored indefinitely for quality assurance and service enhancement. OpenAI, our partner, also temporarily retains this data in alignment with their Data Privacy Policy.

Image Search

Allows users to identify items using photos. Images processed might be stored on servers operated by us and Google LLC. The stored images facilitate future service improvements, especially in image recognition capabilities.

Find In Store

Employs your device's Wi-Fi and camera to approximate your in-store location. Initial usage requires user consent after which camera feed might be processed and stored for refining the feature.

LAWFUL BASIS FOR PROCESSING

Your explicit consent, obtained during app initiation, serves as our primary justification for data processing. Additionally, data processing might occur out of our legitimate interest in enhancing services or due to contractual commitments with partners.

DATA SUBJECT RIGHTS

You, the user, retain rights including:

• Right to be informed about data collection and usage.
• Right to access retained data.
• Right to correct inaccuracies.
• Right to data deletion.
• Right to restrict or object to processing activities.
• Right to data portability.
• Right to voice concerns against automated decisions.

To exercise any of these rights, please contact us directly.

CONTACT INFORMATION

For queries or clarifications regarding this Privacy Policy or data rights, please reach out at oliver.hardman@waitrose.co.uk.