Privacy Notice

DATA PRIVACY

The Channel Islands Co-operative Society Limited

Privacy Notice

Last updated: April 2026

Version: 3.0

Contents

1  Important information about this privacy notice. 1

2  The sorts of personal information we hold about you. 5

3  How we collect your personal information. 8

4  How we use your personal information. 10

5  Sharing your personal information. 16

6  CCTV. 17

7  For how long we keep your personal information. 18

8  Keeping you informed about our products and services. 18

9  Your rights. 19

10 Contact us. 21

 

1 - Important information about this privacy notice

Welcome to The Channel Islands Co-operative Society Limited privacy notice ("Notice").

The Channel Islands Co-operative Society Limited and its subsidiaries make up the CI Coop group. These include:

  1. The Channel Islands Co-operative Society Limited ("Society")
  2. Offshore Leisure Limited (“OLL”)
  3. Jersey Pharmacy Services Limited ("JPSL")
  4. Edgar Holdings Limited ("EHL")
  5. F. Mallett & Son Limited ("FMSL")
  6. Lloyds (Chemists) Limited ("LCL")
  7. JFTU (Property) Limited ("JFTUPL")

CI Coop is a single co-operative society that serves residents of both the Bailiwick of Guernsey and the Bailiwick of Jersey. Members have to be residents of either Bailiwick with a residential address there. This means we operate across Guernsey and Jersey, providing our products and services whether Food and groceries, Fuel, Pharmacy, Mobile or Funeral care or whether you are a member, provide services to us or rent one of our properties.

Therefore we are subject to the requirements of both the Data Protection (Jersey) Law 2018 (“DPJL”) and the Data Protection (Bailiwick of Guernsey) Law 2017 (“DPGL”).

Controller

When we say “we”, “us”, “Coop”, “CI Coop”, “Channel Islands Coop” or the “Society” in this policy, we are referring to The Channel Islands Co-operative Society Limited and its subsidiaries that make up the CI Coop group.

The Society is registered under the Co-operative and Community Benefit Societies Act 2014 with the Mutuals Public Register of the FCA and is governed by the Industrial and Provident Societies Act 1965 -1978 (Industrial and Provident Societies (Channel Islands) Order 1965-1978). CI Coop’s registered office is at Co-operative House, 57 Don Street, St Helier, Jersey, JE2 4TR.

OLL (registered number 77830), JPSL (registered number 89296), EHL (registered number 48212) and JFTUPL (registered number 101370) are all registered in Jersey with their registered office at Co-operative House, 57 Don Street, St Helier, Jersey, JE2 4TR.

OLL is licensed by the Jersey Competition Regulatory Authority ("JCRA") and Guernsey Competition & Regulatory Authority ("GC&RA") to provide mobile virtual network operator ("MVNO") services in the Channel Islands. It operates and trades in the Channel Islands under the business name 'COOP Mobile'.

FMSL (registered number CMP619) is registered in Guernsey with its registered office at 1-6 Court Row, St Peter Port, Guernsey, GY1 2PD and LCL (registered number CMP 1125) is registered in Guernsey with its registered office at CO-OP Pharmacy Market, The Market Buildings, Market Square, Market Street, St Peter Port, Guernsey, GY1 1HE.

Further, we operate and trade under the following business names as they apply in Guernsey and Jersey:

  1. COOP, Channel Islands Coop, CI Coop
  2. COOP Fuel
  3. COOP Pharmacy & Pharmacy Locale
  4. COOP Mobile
  5. COOP Funeral
  6. Co-operative Medical Care (ceased trading)
  7. De Gruchy’s Funeral Care
  8. Argent’s Funeral Care 

Unless otherwise stated these business names are registered by CI Coop.

You share your personal information with us when you become a member, shop as a customer using your debit or credit card, sign up to our Baby Club, use our pharmacy and funeral services or sign-up to receive more information about what we do.

The responsibility for your personal information in each of these scenarios is set out below:

Entity

Data Protection registration

Controller / Processor

Activity

The Channel Islands Co-operative Society Limited

15593 (J)

DPA2548 (G)

Both

Member owned co-operative retail society, retailer of food and fuel, provision of funeral care, employs colleagues, acts as sub-postmaster on behalf of Jersey Post Limited and Guernsey Post Limited.

Edgar Holdings Limited

17596 (J)

Controller

Holdco

Jersey Pharmacy Services Limited

58834 (J)

Both

Holding company and pharmacy services

JFTU (Property) Limited

58842 (J)

Controller

Property Holdco

Offshore Leisure Limited

58841 (J)

Controller

COOP Mobile

F. Mallett & Son Limited

DPA8915 (G)

Controller

Holdco

Lloyds (Chemists) Limited

DPA8916 (G)

Controller

Holdco

(Note: J = registered as a data controller in Jersey, G = registered as a data controller in Guernsey)

Acting as sub-postmaster

CI Coop acts as sub-postmaster to both Guernsey Post Limited and Jersey Post Limited, offering postal services at our member counters.

When providing postal services please refer to the privacy notices below:

Guernsey Post - https://www.guernseypost.com/privacy_notice

Jersey Post - Privacy and website policy - Jersey Post

DPO

To assist us in managing our data protection obligations and ensuring our compliance with this Notice we have appointed a Data Protection Officer (“DPO”). If you have any questions in respect of this Notice and how we manage or process your personal information please contact the Data Protection Officer at Co-operative House, 57 Don Street, St Helier, Jersey, JE2 4TR or on 01534 879822 or by email to: dpo@channelislands.coop.

About this Notice

We understand that your privacy and the security of your personal information is extremely important. This Notice sets out why we collect your personal information, what we do with your personal information, how we keep it secure, how and where we collect it from, how long we keep it for, as well as what your rights are in relation to the personal information we hold about you.

This Notice applies no matter how you interact with us as a (prospective) COOP customer, over the phone, by email, in writing, on-line, through our website, social media channels, or entering our competitions.

References in this Notice to "you" or "your personal data" include personal data relating to individuals who interact with us directly, indirectly and may also include personal data relating to dependants, children, vulnerable persons, or other individuals whose information is provided to us by a parent, guardian, carer or authorised representative of that individual.

Changes to this Notice and your duty to inform us of changes

From time to time we may change this Notice. You should check this Notice occasionally to make sure you understand how we handle your personal information. Substantive changes to the Notice will be notified to you and / or published on our website.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Other privacy notices

Where we are required to do so, we will issue separate privacy notices covering your personal information, how we collect and use it, the basis for doing so, how we keep it secure, where we collect it from, how long we keep it and your rights. We have separate privacy notices for other aspects of the Society's activities and operations,  namely the COOP Mobile service and Coop Pharmacy.

 

2 - The sorts of personal information we hold about you

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). 

We collect, store, transfer, and otherwise use personal information about you when you contact us, become a COOP customer or provide us with your information for another specific purpose. Please refer to our separate Privacy Notices for Coop Mobile and Coop Pharmacy for how we collect, store, transfer and otherwise use personal information about you. 

We may collect, use, store and transfer different kinds of personal information about you which we have grouped together as follows:

  1. Identity Data includes first name, last name, former names or aliases, username or similar identifier, marital status, title, date of birth, place and country of birth, identification number (passport or national identity card), gender, share number, nationality, URN, driving licence, TIN and social security number, and signature.
  2. Contact Data includes addresses (e.g. billing and deliveries), email address and telephone number(s), including mobile.
  3. Financial Data includes bank account and payment card details, related to your transaction data and/or which we may require in relation to your membership share account.
  4. Transaction Data includes details about payments to and from you relating to goods or services purchased from our businesses (including prior to becoming a member, where identifiable) and/or the administration of your membership share account.
  5. Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website. Where we have your permission, details of your categories of website and apps that you have visited so that you can be served advertising (see our cookie policy for further details).
  6. Profile Data includes your username and password, your interests, preferences, educational status, feedback and survey responses.
  7. Usage Data includes information about how you use our website.
  8. Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
  9. Images include CCTV when visiting our stores or if you provide an image upon joining or updating your membership information at one of our member counters.
  10. Special category data including criminal records or medical records, such information only be collected where we have a legal basis, legitimate interest or your consent to do so.

Specifically, we will collect the following personal information:

'Challenge 25' Scheme – BAT/Yoti pilot

'Challenge 25' builds upon the very successful 'Challenge 21' campaign developed by the UK Retail of Alcohol Standards Group ("RASG"), which proved an effective tool to tackle underage purchase. RASG created Challenge 25 to attempt to eradicate underage sales of alcohol, by resetting consumer expectations so that those who look under 25 years of age would expect to be asked for proof of age when buying alcohol, seeing this as the norm rather than the exception.

CI Coop has adopted 'Challenge 25' as a means of supporting the community generally, and its colleagues who serve its food and fuel retail and pharmacy customers.

Yoti is a market leader in age assurance technology and is the technology platform provider for an age estimation programme being piloted in CI Coop stores.

Its technology has been independently tested by the National Institute of Standards and Technology, demonstrating its reliability as an effective and inclusive way to check age and age ranges with an appropriate threshold. More information can be found here:

https://www.yoti.com/business/facial-age-estimation/

Yoti’s facial age estimation technology is built in accordance with the General Data Protection Regulation principle of ‘privacy by design’ and data minimisation. Yoti’s model has not been trained to recognise faces or match these against other faces in a database. Crucially, this is the difference between facial age estimation and facial recognition.

This privacy-friendly approach to age verification doesn’t require any personal details or documents. Customers are not individually identifiable, nothing is ever viewed by a human, the customer's information is not in any way retained by Coop or the Yoti technology, and all information is instantly deleted once the subject's age (eg the customer at a Coop checkout) has been estimated.

Where CI Coop colleagues consider it necessary, the customer will be invited to either prove their age (e.g. valid passport or drivers’ licence), as they are currently, or to use this technology for an age estimation assessment. If the customer wishes to decline the assessment, CI Coop colleagues would use the existing process. The customer may be refused the sale.

This project provides CI Coop colleagues with an appropriate tool to assist them in the process of establishing whether a customer seeking to purchase age-restricted products is the appropriate age. The decision remains that of the colleague. However, the Yoti technology can assist them in how they reached their decision.

Society Membership 

Shareholder details, any joint account holder, signatories (e.g.; in the case of charitable organisations), balance on you share / loan account, and dividend paid into account.

Members who acquire additional share capital 

Occupation or profession, source of funds, source of wealth, gender, place of birth, nationality, proposed use of funds, CDD documentation required under money laundering legislation, such as government issued identification number or other government issued unique identifier (e.g. passport number / driving licence card number) 

Where this information is required by us in order to comply with applicable anti-money laundering and countering terrorism financing legislation and regulations.

Coop Funeral Care

Client details, including name, address, telephone number, email (client may be a family member, relative or associate of deceased), deceased’s particulars, banking details, information required by your chosen funeral plan provider.

COOP Pharmacy

Required medication, General Practitioners details, social Security number. Please refer to our separate Coop Pharmacy Privacy Notice.

Retail Services (Stores and Online shopping)

Name, address, telephone contact number, date of birth (for purposes of age restricted sales), share number, order history, log-in details (we do not have access to or store your password), shopping basket (until you checkout or delete the items)

COOP Mobile

Where not already noted above, when contracting with us for mobile services, we may obtain information to be able to manage your subscription. Please refer to our separate Coop Mobile Privacy Notice.

Baby & Toddler Club

Our Baby & Toddler Club is there to help make life easier and more affordable for new parents. We collect personal data from you when you join our Baby & Toddler Club, including your full name, email address, proof of identification, your child’s full birth certificate, your share number and your phone number.

Aggregated data

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity.

For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Notice.

Special category data

Special Category data is any information relating to your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, genetic and biometric data, and criminal record or alleged criminal activity.  

On occasions when we collect what is called Special Category data, we will always have either a clear legal basis to process this or your explicit consent.

We may, if you choose to provide it, collect data relating to your ethnicity as part of your application to become a member of CI Coop. We use that information to ensure meaningful equal opportunity monitoring and reporting. Otherwise, we do not collect any Special Categories of Personal Data about you (this also includes details about your race, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Generally, we do not collect any information about criminal convictions and offences, however may do so in order to comply with our anti-money laundering, terrorist financing and proliferation financing obligations or as set out in our Coop Pharmacy Privacy Notice. Where we do collect such information we have a legal basis for doing so, or will have received your consent.  If we rely on your explicit consent, you can withdraw this at any time by contacting our DPO on the details set out below.

If you fail to provide personal information

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. We will notify you if this is the case at the time.

3 - How we collect your personal information

We use different methods to collect personal information about you, including through:

Direct interactions. You may give us your Identity, Contact, Transaction and Financial Data by becoming a member, buying our goods and services, filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

  1. apply to become a member of CI Coop;
  2. purchase our goods, products and services;
  3. create an account on our website or via our App;
  4. subscribe to our service or publications;
  5. request marketing to be sent to you;
  6. enquire about our community involvement;
  7. join our Baby & Toddler Club;
  8. enter a competition, promotion or survey; or
  9. give us some feedback.

Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our cookie policy for further details.

Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below (please also refer to our separate Privacy Notices for Coop Mobile and Coop Pharmacy):

Technical Data from the following parties:

  1. Analytics providers (such as Google, based outside the Channel Islands);
  2. Advertising networks (such as Google); and
  3. Search information providers (such as Google).
  4. Contact, Financial and Transaction Data from providers of technical, payment and delivery services.
  5. Identity and Contact Data from data brokers or aggregators.
  6. Identity and Contact Data from publicly available sources.

Withdrawing your consent

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.   

To withdraw your consent, unless another option is made available by us, please contact our DPO at DPO@channelislands.coop.   

Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law. 

4 - How we use your personal information

We will only use your personal information when the law allows us to, this is called a legal basis (highlighted in bold) for processing your information (data).

Please refer to our separate Privacy Notices for Coop Mobile and Coop Pharmacy to see how we use your personal information in these areas.

Most commonly, we will use your personal information in the following circumstances: 

  1. Where we need to comply with a legal obligation. This would be collecting your social security number or medication information when you use our Pharmacy, your identification data (passport, driving license etc.) when using our money services. 
  1. Where you have entered into a contract with us to provide you with a service. This would be the case when you become a member of the Society, or engage one of our funeral care providers.
  1. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Examples of this include: use of CCTV in all our stores (to protect you as our customer, protect the safety of our employees, prevent and detect crime and for internal investigations for health and safety issues); debt collection, credit referencing or the prevention of fraud. 

We may also use your personal information in the following situations, which are likely to be rare:  

Where you have given, your consent to contact you for a specific purpose. 

  1. In an emergency and it is in your vital interest that we share your information, when we have it recorded. 

Generally we do not rely on consent as a legal basis for processing your personal information other than in relation to sending third party direct marketing communications to you via email or text message.

Opting out

You have the right to withdraw consent to marketing at any time by contacting us either using the details in section 10 below or by emailing hello@channelislands.coop, or updating your preferences through your Member Portal or by choosing to opt-out via the links on any of our communications with you.

Purposes for which we use your personal information

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.

Purpose/Activity

Type of data

Lawful basis for processing including basis of legitimate interest

To process your application and register you as a new member.

(a) Identity

(b) Contact

(c) Financial

(d) Transaction

(a) Performance of our contract

(b) Our legitimate interests (e.g. recovery of debts due)

 

Other administrative matters relating to your membership, such as inviting you to attend meetings, keep minutes, administer voting, pay dividends and to send you information to help you participate in the governance of the Society.

(a) Identity

(b) Contact

(c) Financial

(d) Transaction

(a) Performance of our contract

(b) Legal obligation

(c) Legitimate interests

To manage our relationship with you which will include:

(a) Notifying you about changes to our terms or privacy policy

(b) Asking you to leave a review or take a survey

(a) Identity

(b) Contact

(c) Profile

(d) Marketing and Communications

(a) Performance of our contract

(b) Legal obligation

(c) Our legitimate interests (to keep our records updated and to study how customers use our products/services)

To participate in corporate transactions, such as restructuring, mergers or acquisitions of the CI Coop Group

(a) Identity

(b) Contact

(c) Transaction

(d) Usage

Our legitimate interests (to engage with potential transacting parties from time to time. This might include passing personal data to a potential buyer after completion of a legitimate interests impact assessment).

To share limited and relevant personal data to the Jersey Cyber Security Centre (JCSC).

(a) Identity

(b) Contact

(c) Usage

Our legitimate interest in maintaining secure and resilient systems and protecting customers from cyber threats.

To support or otherwise cooperate with Government of Jersey departments and regulators during a major incident

(a) Contact

 

The protection of vital interests, which is used in rare and urgent circumstances where there is a risk to life.

To enable you to partake in a prize draw, competition or complete a survey

(a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

(a) Performance of our contract

(b) Our legitimate interests (to study how members/customers use our products/services, to develop them and grow our business)

To provide you with information relating to our community activities and opportunities for participation

(a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

Our legitimate interests (to encourage customers to participate in our local communities to develop and grow our business)

To administer and protect our business (including monitoring and recording communications, troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) 

(a) Identity

(b) Contact

(c) Technical

(a) Our legitimate interests (for running our business, quality assurance, training, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)

(b)  Legal obligation

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

(a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

(f) Technical

Our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)

To use data analytics to improve our website, products/services, marketing, member/customer relationships and experiences

(a) Technical

(b) Usage

(c) Financial

(d) Transaction

Our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)

To make suggestions and recommendations to you about goods or services that may be of interest to you (e.g. the sending of offers, vouchers and events information.)

(a) Identity

(b) Contact

(c) Technical

(d) Usage

(e) Profile

(f) Marketing and Communications

Our legitimate interests (to develop our products/services and grow our business)

To manage your prescription or medical needs

(a) Identity

(b) Contact

 

Performance of our contract

 

In relation to our funeral services, to handle enquiries and orders, to liaise with you, to provide information required by a crematorium, burial site or service venue, to fulfil your order and to process payments

(a) Identity

(b) Contact

(c) Profile

 

Performance of our contract

 

In relation to our funeral services, to confirm your identity when you visit one of our funeral homes, on the basis of our legitimate interests of caring for your loved one.

 

(a) Identity

 

Our legitimate interests

In relation to our funeral services, to complete statutory paperwork relating, for instance, to care of your loved one or cremation

(a) Identity

(b) Contact

(c) Profile

 

Legal obligation

In relation to our funeral services, to arrange or plan for a funeral in line with your religious preferences

(a) Identity

(b) Contact

(c) Profile

 

Performance of our contract

 

In relation to our tenants, to handle your tenancy application, to liaise with you, to process payments, to arrange repairs and maintenance and otherwise manage the tenancy

(a) Identity

(b) Contact

(e) Profile

(f) Financial

Performance of our contract

 

In relation to our tenants, to check your right to rent, to manage your deposit with the deposit protection scheme and to manage gas, electrical and fire safety

(a) Identity

(b) Contact

(e) Profile

(f) Financial

Legal obligation

In relation to our tenants, to introduce you to third parties to whom you will be liable, such as utility companies and local authorities

(a) Identity

(b) Contact

(e) Profile

Our legitimate interests in minimising our liabilities and the legitimate interests of those third parties

 

Promotional offers from us

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

As a CI Coop member, you may receive marketing communications from us regarding the range of goods, products and services that we offer to our members. You will also receive marketing communications from us if you have requested information from us or purchased goods or services from us or if you provided us with your details when you entered a competition or registered for a promotion.

We won’t use your personal data for marketing purposes at all if you’ve told us not to and we’ll give you the opportunity to opt-out of receiving marketing information whenever we contact you directly for that purpose.

Third-party marketing

We may share your personal data with other legal entities within the CI Coop group for the purpose of marketing goods, services and products available to you as a member.

You have the right to withdraw consent to marketing at any time by contacting us either using the details in section 10 below or by emailing hello@channelislands.coop, or updating your preferences through your Member Portal or by choosing to opt-out via the links on any of our communications with you.

We will get your express opt-in consent before we share your personal data with any company outside CI Coop group for marketing purposes.

Cookies

Please see our cookie policy.

Change of purposes

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. 

If we need to use your personal information for an unrelated purpose, we will notify you directly or through update to this Notice, and we will explain the legal basis for using your personal data in this manner. 

5 - Sharing your personal information

We will only transfer your information to third parties when it is safe to do so, when it is necessary to do so, and your information is protected in the same way that we protect it.  

Where the third party is our processor, we require them to agree to process the shared information based on our instructions and requirements consistent with this Notice.  We do not allow them to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. If they are a controller of that information alongside us they will be required to comply with all of their obligations to you as a data controller under applicable Data Protection Laws.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

We do not pass on information gained from your engagement with us without a clear legal basis for doing so.

We may share your personal information for the purposes set out in section 6 above with Internal Third Parties and External Third Parties.

Internal Third Parties

Internal Third Parties include other legal entities or persons in CI Coop group.

External Third Parties

We may pass your personal information to organisations outside of the CI Coop group pursuant to processing bases such as the performance of our contract, in order to comply with legal obligations, your vital interests, and your consent.

External Third Parties including the following:

  1. Organisations that provide outsourced printing, mailing, and distribution services, such as the printing and mailing of member related communications
  2. Organisations to which we may outsource certain other activities
  3. UK Engage in connection with our Board member elections.
  4. Regulators (e.g. Guernsey Financial Services Commission, Jersey Financial Services Commission, JCRA, GC&RA, Jersey Financial Intelligence Unit, Guernsey Financial Intelligence Unit, JCSC, Health & Safety Inspectorate, Health & Safety Executive, Chief Pharmacists in each of Jersey and Guernsey)
  5. Professional service providers acting as processors or co/joint controllers, including lawyers, bankers, auditors, and insurers
  6. Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Notice.

International transfers

The personal data that we collect from you may be transferred to, and stored at, a destination outside Jersey, Guernsey, the UK and the European Economic Area ("EEA").  The EEA consists of countries in the European Union, Switzerland, Iceland, Liechtenstein and Norway. They are considered to have equivalent laws when it comes to data protection and privacy. The laws of the Bailiwicks of Jersey and Guernsey and the UK have been deemed “adequate” for the purposes of EU data protection standards.

Your personal data may also be processed by External Third Parties operating outside the UK or EEA. 

If we do this, we ensure that your privacy rights are respected in line with this Policy and the same protection is given to your personal information as laid down by the Data Protection Laws.  

6 - CCTV

We use CCTV across our stores, fuel courts, public areas, and car parks, where applicable for the protection and security of our colleagues, customers, suppliers and the business. This includes for the investigating of accidents, incidents, prevention and detection of crime and for internal investigations, including breaches of our internal policies and fulfilling any requirement of the Health and Safety at Work (Jersey) Law, 1989.

The legal basis for us to use the CCTV recordings is Legitimate Interest and Legal Obligation.   

Cameras are positioned to cover, where possible, our property only, although in some circumstances the camera may record a public footpath or a public road and capture members of the public and vehicles who are not our customers. 

We reserve the right to use the images, including by way of Police disclosure for evidence in the prosecution of offenders) and in any disciplinary proceedings brought against CI Coop Group personnel. Occasionally we may share CCTV with public or regulatory authorities or in response to requests from individuals seeking to protect their rights, the rights of others or helping to prevent crime and nuisance. We will only share CCTV if we consider a request to be appropriate.

7 - For how long we keep your personal information

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us at the details set out in section 10.

In some circumstances you can ask us to delete your data. See section 9 Your rights to understand how you can do this.

8 - Keeping you informed about our products and services

We would like to tell you about the great offers, ideas, products and services of COOP from time to time that we think you might be interested in. Where we have consent or it is in our legitimate interests to do so, we may do this through the post, by email, text message, phone, through online advertising or by any other electronic means.

We won't send you marketing messages if you tell us not to or if we do not have your consent to do so, but if you receive a service from us we will still need to send you occasional service-related messages and may still send you surveys (you can always opt out of these via the survey email itself). If you wish to amend your marketing preferences, you can do so at any time.

Please note that it can take a little while for all marketing to stop once you either withdraw your consent or tell us you’d like to opt out of marketing. This is because some marketing may have been identified as relevant to your interests and may already be in transit, it cannot therefore be immediately stopped.

9 - Your rights

Under certain circumstances, by law you have the right to: 

  1. Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. 
  1. Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected. 
  1. Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).  
  1. Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes. 
  1. Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it. 
  1. Request the transfer of your personal information to another party.  

If you want to review, verify, correct or request erasure of your personal information, object to the processing or request that we transfer a copy of your personal information to another party, please contact our DPO at DPO@channelislands.coop or on the details at section 10 of this Notice.

No fee is usually required

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.  

Requesting your personal information

You may request your personal information at any time. For Data Subject Access Requests (“DSARs”), please contact our DPO at DPO@channelislands.coop or on the details set out in section 10 below.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights).   

This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.  

How long do we have to respond to your request?

We will respond to your request within4 weeks after and upon satisfactory verification of your identity.  

Right to make a complaint

We would like the chance to resolve any complaints you have about the way we process your information; however, you do have the right to complain to the Jersey Office of the Information Commissioner or the Office of the Data Protection Authority in Guernsey about how we have used your personal information at any time.  

They can be contacted at:

Office of the Information Commissioner – Jersey

2nd Floor, 5 Castle St, St Helier, Jersey JE2 3BT

Telephone +44 (0) 1534 716530 or Email: enquiries@jerseyoic.org 

Office of the Data Protection Authority – Guernsey

Block A, Lefebvre Court, Lefebvre Street, St. Peter Port, Guernsey, GY1 2JP.

Telephone +44 (0) 1481 742074 or Email: info@odpa.gg

Upon receipt of a Complaint about one of the products or services we offer it may be required that we share your data and the subject of the complaint with a supplier or producer of the product or service you have complained about. This is part of the investigation into your complaint, and we can assure you that your data will be protected as well as it is outlined in the notice.  

If you do not want your data shared with a supplier or producer of the product or service you want to complain about, please inform the member of staff taking your Complaint, or contact our DPO by email at DPO@channelislands.coop or on the details set out in section 10 below.

10 - Contact us

We can be contacted at:

The Data Protection Officer

In writing to - Co-operative House, 57 Don Street, St Helier, Jersey, JE2 4TR

By Telephone - 01534 879822

By email to - dpo@channelislands.coop.