Last update: 30th May, 2018
Thanks for visiting one of the Nando’s websites, for downloading and installing the Nando’s App or for using one of our services which requires you to provide us with your Personal Information (as defined below). We want to make sure you feel reassured about what happens when you browse our website or give us any of your information. Formal’s not our style, so we’ve made this as easy to read as we can.
We’re committed to protecting your Personal Information. This Privacy Policy explains how Nando’s collects, records and uses information about you. It also explains the choices you can make about the way your information is collected and used. If you provide Nando’s with Personal Information, you are giving your consent to the collection, use and transfer of your Personal Information as set out in this Privacy Policy.
Our websites in the UK and the Republic of Ireland are:
https://www.nandos.co.uk/
www.nandos.ie
takeaway.nandos.co.uk
takeaway.nandos.ie/Restaurant
delivery.nandos.co.uk
We’ll refer to these websites, our App and other services which require you to provide us with your Personal Information collectively as the “Service” in future mentions in this policy.
Our use of cookies are set out in our Cookies Policy at www.nandos.co.uk/cookies-policy
If you do not agree to anything set out in this Privacy Policy, you should not use the Service and you should not provide us with any Personal Information.
For the purpose of the Data Protection Act (the “Act”), the Data Controller of our Services for both UK and Irish customers is Nando’s Chickenland Limited (UK). Data Controller is just a legal term that means we have responsibilities in respect of your Personal Information under the Act. Our registered company number is 02580031. We are registered with the UK Information Commissioner's Office (Registration Number: Z9462934).
All information will be held and used in accordance with the Act. If you want to read more about the Act, you can do so here:
United Kingdom: ico.org.uk/your-data-matters/
Republic of Ireland: dataprotection.ie/docs/A-guide-to-your-rights-Plain-English-Version/r/858.htm
When you visit our Service (in a restaurant, on a mobile device, tablet or desktop) or download and use our App, you may provide us with information personal to you including for example your name, your address, your postcode, your email address, your mobile phone number and your date of birth, whether you are a student, and the other information outlined below (your "Personal Information"). You may provide additional Personal Information if you wish.
You may provide us with Personal Information in a number of ways:
1) by registering your Nando’s Card (either online or using our App) or by subscribing to receive email, SMS or Push communications from us. To become a registered Nando’s Card holder you must provide us with your name, email address, date of birth and postcode, but you may provide us with additional information if you choose to do so.
2) by ordering a takeaway using our online ordering service or by using our App. When you place a takeaway order online we may collect information such as what items you’ve browsed, your favourite orders, if you’ve applied any dietary filters and if you have selected one of our restaurants as a favourite.
3) by inputting your payment details – but only in order to complete a transaction.
4) by allowing us to collect your physical geolocation through our App (if you have enabled Location Services and agreed to allow Nando’s to send you Push messages).
5) by registering a Nando’s Gift Card online (in order to protect or spend any of your balance).
6) by registering to use our Delivery or in-restaurant WiFi services.
7) by signing up for promotions or competitions.
8) by corresponding with our Customer Experience team by email, live chat, in writing, on social media or telephone, in which case we may retain the content of your emails, letters or conversations together with your title, name, email address, the social media username that you’re using, telephone number and our responses.
We also collect information about your device, including (where available) your IP address, operating system and browser type, the geographical location of your device, how you use our Service, and the date and length of your visit. This information is collected automatically. This information is aggregated and it does not identify you as an individual. We do this to help improve your experience on our Service.
We use your personal information for the purposes of:
1) allowing you to register your Nando’s Card with us and to respond to any correspondence;
2) contacting you with information about Nando’s products, services, news and special offers, if you’ve given your consent when you registered with us;
3) making sure you get the best experience from our Service - depending on what computer or device that you’re using;
4) if you’re using the App (and you have given us permission to do so by enabling this on your device), sending you ‘Push’ notifications containing information about our products and services and to provide you with information in the App;
5) notifying you about changes or updates to any of our Services;
6) carrying out market research and product development;
7) meeting legal, regulatory and compliance requirements;
8) investigating any complaints about the Service; or
9) investigating any safety or security incidents or breaches.
We only share information with companies that we use to help us better understand and serve you. We never sell or give your Personal Information away to anybody.
Where we share your Personal Information we ensure that they have agreed to be bound by this Privacy Policy and will only use it for the purposes outlined in this Privacy Policy.
It’s possible that we, or one of our divisions, agencies or affiliates, could merge with, be sold to, or be acquired by a third party. In accordance with the conditions of this Privacy Policy, we may share your Personal Information with any successor company.
We may share your Personal Information with:
Nando’s entities:
We’ll share your “Personal Information” with people or departments within Nando’s but only if they have a need to access it.
Third parties:
We may disclose Personal Information about you to other third parties to comply with applicable laws and regulations. We also have the right to disclose such Personal Information to third parties where there’s been a complaint concerning your use of our Service or where we believe that you haven’t complied with our Privacy Policy.
We engage third party payment processors to process the payment of your online order. These third party processors may store your payment card details, if you want them to, to speed up your transaction time. If you do not want to take advantage of this, please do not select this function.
We may also share Personal Information with third parties for marketing, advertising and strategic development purposes to help us understand customer trends and patterns and to make sure that Nando’s is talking to you about the most relevant things. We have Agreements in place that define what third parties can and cannot do with your Personal Information. We also conduct periodic reviews of third parties to ensure compliance. However we will only send marketing to you where you have previously consented to receiving marketing materials from us.
We may also share such details with auditors or legal professionals to obtain professional advice. If we do this, your statutory data protection rights will be preserved.
You should be aware that if we’re requested by the police, a regulatory or government authority in the investigation of suspected illegal activities to provide your Personal Information, then we are entitled do so.
Occasionally, we’ll ask to share your Personal Information with third parties for marketing purposes. We’ll only do this when we have your explicit consent to do so (for example, when you enter a competition we’ll ask for your consent). If you don’t give your consent, it won’t prejudice your chances in any competitions.
The transmission of information via the internet is not completely secure. Although we take steps to protect your information, we can’t guarantee the security of your data transmitted to the Service; any transmission is at your own risk. We have implemented reasonable technical and organisational measures designed to secure your personal information from accidental loss and from unauthorised access, use, alteration or disclosure. We’ll continue to maintain and improve these security measures in line with legal and technological developments.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Nando’s is a global company so the Personal Information that you provide to us will be stored on our servers which might be in or outside the EEA (European Economic Area). Access to your Personal Information is limited to those who have a need to manage it. This could include our employees of our group companies, service providers or agencies but your data will be protected in the same ways as outlined in this Privacy Policy. We’ll take all necessary and reasonable steps to ensure that any Personal Information that we send to outside the EEA is afforded the same protections as under UK law including making sure that it is protected by appropriate technical, physical, electronic, and organisational procedures in place to keep that Personal Information and prevent the unauthorised or unlawful processing of your Personal Information, and accidental loss or destruction of, or damage to, your Personal Information. By submitting your Personal Information, you consent to this.
Where you’ve chosen a password which allows you to access certain parts of our Service, you’re responsible for keeping this password confidential. We recommend that you don’t share your password with anyone else. We recommend that your password is unique to your Nando’s account. We will not be liable for any unauthorised access or transactions entered into using your name and password where it has been shared with your permission or if you haven’t taken adequate steps to prevent it on either a desktop computer or another device. If you access our Service using a public computer, we advise you not to store your password and to log out of any parts of our Service. If you’re using a mobile phone or tablet to use our Service, we advise that you have an appropriate passcode.
Some of our Services contain links to other services provided by other data controllers that are not covered by this Privacy Policy and where information practices may be different from ours. You should consult the other services' privacy policies on such third party services before submitting any Personal Information, as we are not responsible for and have no control over Personal Information that is submitted to, or collected by, these third-party services. We sometimes offer content or programs that are sponsored by or co-branded with identified third parties (e.g., competitions or promotions). These third parties can obtain Personal Information that you agree to submit to them to make use of the offer. We are not responsible for the collection and use of your Personal Information by these third parties. However, at the point of collection of any Personal Information, we’ll let you know if these third parties will obtain this and how it will be processed and used.
With our Service, third parties may provide us with data collection and reporting about the use of our service, as well as assist delivering relevant marketing messages and advertisements. These third parties may view, edit, or set their own cookies. The use of these technologies by such third parties is subject to their own privacy policies and is not covered by this Privacy Policy.
The Act gives you the right to access your Personal Information that we hold. To protect your privacy and security, we’ll take reasonable steps to verify your identity before we carry out your request. We will not ordinarily charge a fee for access to your Personal Information but we are entitled to charge a reasonable fee for providing a copy of your Personal Information to you if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You also have the right to ask us to update or amend any information that is wrong, ask us to stop sending you marketing information or even to ask us to delete your account and the associated Personal Information.
If you have any questions about what we do with your Personal Information, ask us to make any changes to your account or to make a complaint please contact us using one of the methods below:
Speak to our Customer Experience team by telephoning 0800 975 8181 (Monday-Friday 9:00 – 17:30)
Chatting to us using the live chat function on our website
Emailing us at customers@nandos.co.uk
Writing to us at Nando’s Customer Experience, Erico House, 93-99 Upper Richmond Road, Putney, London SW15 2TG
Messaging us on Facebook or Twitter (if you’re sending us your number or anything else personal to you then please only do this via a direct message).
We hope we can answer any questions or resolve any problems but if you are still unhappy then you can contact the:
United Kingdom: Information Commissioner’s Office via their webservice www.ico.org.uk
Republic of Ireland: Information Protection Commissioner via their webservice http://www.dataprotection.ie
We won’t keep your Personal Information for longer than is necessary for our legitimate business purposes or than is required by law.
Our Services are not intended for children and are therefore only to be used by anyone aged 14 or over and those under the age of 16 should have their parents or guardians’ permission. We encourage the supervision of children's online activities. For example, parental control tools which are available online to help provide a child-friendly online environment. These tools can also prevent children from disclosing their name, address, and other Personal Information online without parental permission. Your child's privacy is important to us and we are committed to safeguarding children's Personal Information collected online. Users of our Service may participate in many activities without providing any Personal Information. However, if you’d like to participate in certain interactive features on our Service, we’ll ask you to provide us with certain information, such as your email address and age. Nando’s will not send any marketing communications to anyone who has disclosed that they are aged under 16.
From time to time, we may revise this Privacy Policy to reflect new company initiatives, services, changes in the law or technology. Any changes we make to this Privacy Policy will be posted on this service so that you are always informed of the latest version. We’ll also include the date of the most recent revisions at the top of this page.
If you have any questions or comments about this Privacy Policy please feel free to get in touch with us. You can write to us at:
Nando’s Customer Experience, Erico House, 93-99 Upper Richmond Road, Putney, London SW15 2TG.