We know that you care how information about you is used and shared and we appreciate your trust in us to do that carefully and sensibly. This privacy notice describes how we collect and process your personal information through www.wholefoodsmarket.co.uk and other Whole Foods websites that reference this Privacy Notice (together "Whole Foods Services").
Fresh & Wild Limited, The Barkers Building, 63-97 Kensington High Street, London W8 5SE, United Kingdom ("Fresh & Wild," "Whole Foods", "we", or "us") is data controller of personal information collected and processed through the Whole Foods Services. Further details (including our contact details) can be found here.
Whole Foods Market Services, Inc. and certain of its subsidiaries and affiliated companies in the United States participate in the EU-US Privacy Shield framework. Click here to learn more.
We collect your personal information in order to provide and continually improve our products and services.
Here are the types of information we gather:
We process your personal information to operate, provide, and improve the Whole Foods Services that we offer to our customers. These purposes include:
To enable our systems to recognise your browser or device and to provide Whole Foods Services to you, we use Cookies.
Information about our customers is an important part of our business and we are not in the business of selling our customers' personal information to others. Whole Foods shares customers' personal information only as described below and with Amazon.com, Inc. and the subsidiaries that Amazon.com, Inc. controls, that are either subject to this Privacy Notice or follow practices at least as protective as those described in this Privacy Notice. Additional categories of recipients include:
Third Party Service Providers: We employ other companies and individuals to perform functions on our behalf. Examples include applying for a job via Workday or applying to become a UK supplier. These third-party service providers have access to personal information needed to perform their functions, but may not use it for other purposes. Further, they must process the personal information in accordance with this Privacy Notice and as permitted by applicable data protection laws.
Transfers out of the European Economic Area. Whenever we transfer personal information to countries outside of the European Economic Area, we will ensure that the information is transferred in accordance with this Privacy Notice and as permitted by the applicable laws on data protection.
We design our systems with your security and privacy in mind.
If you have any question or objection as to how we collect and process your personal information, please contact our Customer Service.
In addition, subject to applicable law, you have the right to request access to, correct, and delete your personal information, and to ask for data portability. You may also object to our processing of your personal information or ask that we restrict the processing of your personal information in certain instances.
If you wish to do any of these things, please contact us using the details available here or contact Whole Foods Customer Service.
Whole Foods doesn't sell products for purchase by children. We sell children's products for purchase by adults. If you're under 18, you may use Whole Foods Services only with the involvement of a parent or guardian.
We keep your personal information to enable your continued use of Whole Foods Services, for as long as it is required in order to fulfil the relevant purposes described in this Privacy Notice, as may be required by law such as for tax and accounting purposes, or as otherwise communicated to you.
If you have any concern about privacy at Whole Foods or want to contact our data controller, please contact us with a thorough description and we will try to resolve the issue for you. The data protection officer for Fresh & Wild Limited can be contacted at GDPR@wholefoods.com. You can file a complaint with our supervisory authority, the United Kingdom Information Commissioner's Office, or with a local authority.
Our business changes constantly and our Privacy Notice will change also. You should check our website frequently to see recent changes. Unless stated otherwise, our current Privacy Notice applies to all information that we have about you. We stand behind the promises we make, however, and will never materially change our policies and practices to make them less protective of customer information collected in the past without the consent of affected customers.
Information You Give Us When You Use Whole Foods Services
You provide information to us when you:
As a result of those actions, you might supply us with such information as: your name; address and phone number; payment information; your location information; content of e-mails to us; and device log files and configurations, including Wi-Fi credentials, if you choose to automatically synchronize them with our Whole Foods Services.
Automatic Information
Examples of the information we collect and analyse include:
We may also use device identifiers, Cookies, and other technologies on devices, applications, and our web pages to collect browsing, usage or other technical information for fraud prevention purposes.
Whole Foods Market Services, Inc. and certain of its subsidiaries and affiliated companies in the United States (together, the "Whole Foods US Companies" or, for purposes of this “EU-US Privacy Shield” section, “we” or “our”, see below) participate in the EU-US Privacy Shield Framework regarding the collection, use, and retention of personal information from European Union member countries. We have certified with the Department of Commerce that we adhere to the Privacy Shield Principles. To learn more about the Privacy Shield Principles, see here.
If you have any inquiries or complaints about our handling of your personal information under Privacy Shield, or about our privacy practices generally, please contact us at: GDPR@wholefoods.com We will respond to your inquiry promptly. If we are unable to satisfactorily resolve any complaint relating to the Privacy Shield, or if we fail to acknowledge your complaint in a timely fashion, you can submit your complaint to the panel of European data protection authorities (DPAs), which serve as an independent dispute resolution body to resolve Privacy Shield complaints at no cost to you. We have committed to cooperate and comply with the panel of European DPAs in the resolution of any Privacy Shield complaints. The European DPAs’ contact details can be found here. If neither we nor the European DPAs resolve your complaint, you may pursue binding arbitration through the Privacy Shield Panel. To learn more about the Privacy Shield’s binding arbitration scheme, please see here.
We will only process personal information in ways that are compatible with the purpose we collected it for, or for the purposes you later authorize. Before we use your personal information for a purpose that is materially different than the purpose we collected it for or that you later authorized, we will provide you with the opportunity to opt-out.
We sometimes provide personal information to third parties to perform services on our behalf. If we transfer personal information received under the Privacy Shield to such a third party, the third party's access, use, and disclosure of the personal information must also be in compliance with our Privacy Shield obligations, and we will remain liable under the Privacy Shield for any failure to do so by the third party unless we prove we are not responsible for the event giving rise to the damage.
You can review our Privacy Shield registration here. The Whole Foods US Companies are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). We may be required to disclose personal information that we handle under the Privacy Shield in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
As of December 7, 2018 the following entities are included in Whole Foods Market Services, Inc.'s Privacy Shield Certification:
Whole Foods Market Services, Inc.
Allegro Coffee Company
Clinical Wellness Group of Texas
Mrs. Gooch's Natural Food Markets, Inc., a California corporation
WFM Northern Nevada, Inc.
WFM Private Label, L.P.
WFM Southern Nevada, Inc.
Whole Food Company, Inc.
Whole Foods Market California, Inc., a California corporation
Whole Foods Market Group, Inc., a Delaware corporation
Whole Foods Market Pacific Northwest, Inc., a Delaware corporation
Whole Foods Market Rocky Mountain/Southwest, L.P., a Texas limited partnership