Privacy Policy

Who we are

We are JD Williams & Company Limited (‘we’ or ‘us’). This is the legal entity responsible for how your personal data is collected, stored, and processed.

JD Williams & Company Limited is a company registered in England (registered number 00178367). Our registered office is at Griffin House, 40 Lever Street, Manchester, M60 6ES.

We trade under different brands, including JD Williams, Simply Be, Jacamo, Ambrose Wilson and Home Essentials and are collectively known as the N Brown Group.

Back to top

What data we collect

We collect several types of data, including:

Back to top

Where we get your data from

We mostly get data directly from you. But we also get data from other places, including:

Back to top

Why and how we use your personal data

We are only allowed to use your personal data where we have what is called a lawful basis for doing so. This is what that means in practice.

When you apply for a credit account or wish to check your eligibility for a credit account, we use your personal data to help us decide whether to accept your application, and how much credit we can offer you. This involves accessing and sharing data with Credit Reference Agencies. We also use ID and verification, as well as fraud detection and prevention tools offered by Credit Reference Agencies and fraud detection service providers, where applicable.

For more information on our use of Credit Reference Agencies, please see Data Sharing > Credit Reference Agencies.

Categories of personal data
• Name
• Home address
• Contact details.
• Date of birth
• Financial
• Identity Checks using data provided above.
• Fraud checks using photographic ID e.g., passport or driving license.

Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.

We use your personal data to administer and to operate your personal credit or cash account. We collect and use the contact details that you provide to us to communicate with you about your account and in relation to the products and services we provide to you, including sending order history and statements, service messages and other documents via email. You can add or update your payment details within the account management settings at any time.

Categories of personal data
• Name
• Address(es)
• Contact details.
• Order information
• Payment information

Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.

We collect any personal data and payment information that you provide for the purposes of processing your order. We process all card transactions securely in line with regulations and encrypt the payment details before sending to our card payment and banking provider.

Categories of personal data
• Name
• Delivery address
• Contact details
• Order Information
• Payment Information.

Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.

We use personal data such as name, delivery address, phone number and email address when we arrange delivery of the things you buy from us.

We also share this data with our select suppliers and delivery partners. These delivery partners will also use the data to contact you and arrange a delivery time, and to keep you updated about when your order will arrive.

Categories of personal data
• Name
• Delivery address
• Contact details
• Order Information

Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.

We use your personal data to help you access your account and statements or manage your repayments. This may include processing details of any vulnerabilities; health concerns or accessibility needs (special category personal data).

We use your personal contact data, payment history and credit information that we obtain from Credit Reference Agencies and any additional information that you may provide to us to determine whether and when to increase or reduce your credit limit.

We will continue to exchange information about your account and transactions with the Credit Reference Agencies for as long as you are our credit account customer.

For more information on our use of Credit Reference Agencies, please see Data Sharing > Credit Reference Agencies.

We may also share your personal data with individuals or organisations you have authorised to act on your behalf and manage your account. For example, debt management companies, legal or financial advisors, and insolvency experts.

Categories of personal data
• Name
• Address(es)
• Date of birth
• Contact details.
• Marital status
• Order information
• Payment information
• Financial information
• Health data and any other special category data

Lawful basis
We need to use your data because we have a legitimate interest, including making sure we can recover any payments due.

We will ask for your explicit consent if we need to use any special category data such as health data. You can withdraw your consent at any time - please see [Right to Object] on how to withdraw your consent and what this means for your account.

If you register for a loyalty scheme on a specific brand, we use your personal data like this:

• We share your data with our third-party partners so that they can manage and deliver your rewards on our behalf.
• To tailor your rewards to you, make them available when you log in to your customer account, and send details to the email address you give us.

Categories of personal data
• Name
• Address
• Contact details.
• Order information
• Payment information
• Financial information
• Marital Status
• Health data and any other special category data

Lawful basis
We need to use your data for a contract we have with you, or to enter into a contract with you.

We use your personal data and account history to check that you are who you say you are and to deal with your complaint when you contact our contact centre.

We log the details of every complaint we get and deal with them as soon as possible.

We may also share your personal data with individuals or organisations you have authorised act on your behalf and manage your account. For example, debt management companies, legal or financial advisors, and insolvency experts.

Categories of personal data
• Name
• Address
• Contact details.
• Order information
• Payment information
• Financial information
• Marital Status
• Health data and any other special category data

Lawful basis
Your personal data may be processed where we have a substantial legitimate interest, including to ensure that we manage complaints and customer issues appropriately and within regulatory requirements.

We will ask for your explicit consent if we need to use any special category data such as health data. You can withdraw your consent at any time

If you make a claim against us, either about a product or a personal injury claim, we use your personal data plus any supporting evidence that you give to us, to deal with your claim. We share this data with our insurance companies and claims handers, too.

If your claim is not covered by our insurance policy, we may also need to share your personal data with our internal Legal team and, in some cases, outside lawyers.

Categories of personal data
• Name
• Address(es)
• Contact details.
• Order information
• Financial information
• Health data and any other special category data

Lawful basis
We process your personal data on the basis that we have a substantial legitimate interest in managing and defending any claim.

Before we provide products or services to you, we run checks to make sure that you are who you say you are.

We also share the data we get from you with fraud prevention and law enforcement agencies who use it to prevent fraud and money-laundering and to check your identity. If fraud is detected, we may refuse to provide you with products, services, or credit account facilities.

You can see how your information is used by us and fraud prevention agencies, and read up on your data protection rights, at https://www.cifas.org.uk/fpn

Categories of personal data
• Name
• Address(es)
• Contact details.
• Date of birth
• Marital status
• Order information
• Employment status
• Financial information
• Online identifiers

Lawful basis
We process your personal data on the basis that we have a substantial legitimate interest in preventing fraud and money laundering, and to verify identity, to protect our business and comply with laws that apply to us.

Such processing is also a contractual requirement of the services or financing you have requested

We may record inbound and outbound calls from our contact centre for quality assurance/audit, regulatory compliance, due diligence, training, and monitoring purposes.

We keep all call recordings for a period of 12 months.

Categories of personal data
• Name
• Contact details.
• Address(es)
• Date of birth
• Order information

Lawful basis
We process this information on the basis of complying with our legal and regulatory obligations to the FCA (Financial Conduct Authority) to record all communications relating to orders and trading.

We also process your personal data on the basis that we have a substantial legitimate interest to provide the best possible service to our customers and realise any improvements that can be made to those services.

We may use your personal data to contact you to ask you to complete a product review or a customer satisfaction survey. We may also invite you to research and focus groups.

We share your personal contact details with research companies who research customer satisfaction programmes for us.

Occasionally, we ask the research companies not to say that they are contacting you on our behalf, because we do not want to influence your answers. The market research company must let you know if you ask them to, at the end of the survey.

Categories of personal data
• Name
• Contact details.
• Address(es)
• Order information
• Date of birth
• Title

Lawful basis
Your personal data may be processed where we have a legitimate interest, which is to keep improving the service we offer.

If you tell us that we can, then we will email you details of our latest products, services, and promotions. We also use marketing profiling techniques to tailor our offers to you, to make sure our marketing content is relevant for you. We also use your date of birth to send you offers on your birthday.

We create and keep records of how long you spend reading, and where you click, on the emails we send you, using industry standard technologies such as pixels and gifs.

You can opt-in or opt-out of our marketing activity at any time. Please see the Changing Your Marketing Preferences section below for more information.

Categories of personal data
• Name
• Email
• Date of birth
• Order information

Lawful basis
We use your personal data to send you marketing emails, to promote our products and services. We will only send you marketing emails where we have your consent.

If you tell us we can, we will use your telephone number to call you and tell you about our latest products, services, and promotions. We also use marketing profiling techniques to tailor our offers to you, to make sure our marketing content is relevant for you.

If you have subscribed to the Telephone Preference Service (TPS), we will not phone you, unless you have consented to get telemarketing calls from us.

You can opt-in or opt-out of our marketing activity at any time. Please see the Changing Your Marketing Preferences section below for more information.

Categories of personal data
• Name
• Telephone number
• Order information

Lawful basis
We use your personal data to contact you via telephone where we have a legitimate interest to promote products and services and you have not objected to this or if you have provided express consent (for example if you are on the TPS but still wish to hear from us in this way).

We use social media to hear and understand what our customers think about us, and our products and services.

Sometimes, we may contact you directly on social media if we would like to share your comments or pictures with other customers or if we would like to publish them in our marketing materials. We will always ask you for consent to use your data in this way.

Categories of personal data
• Name
• Contact details.
• Reviews
• Images
• Social networks

Lawful basis
Your personal data will be processed to engage with you on social media where we have a legitimate interest to promote our products and services and to respond to queries raised using social medial channels.

We will also process your personal data in this way where you have provided consent.

We will use your personal data to send you online targeted marketing information about our product offers and promotions through social media.

To do this, we will share your email address in a secure manner with social media companies (like Facebook, for example) who match our advertising requirements to your social media profile.

Categories of personal data
• Email

Lawful basis
We use your personal data to send you targeted advertising, where we have a legitimate interest to promote our products and services.

We will only be able to do this if you have selected this service within your social media account marketing preference settings.

Back to top

Changing your Marketing Preferences

You can change your marketing preferences at anytime.

Email Marketing

You can change your marketing preferences for email marketing at any time by:

Clicking unsubscribe in the body of the email sent to you.
Going online to My Account; or
Ringing the call centre on 0345 071 9018.

Please allow 48 hours for your changes to be processed.

Telemarketing

You can change your marketing preferences for telemarketing at any time by:

Going online to My Account; or
Ringing the call centre on 0345 071 9018.

Please allow 48 hours for your changes to be processed.

Direct postal marketing

You can change your marketing preferences for direct postal marketing at any time by:

Going online to My Account; or
Ringing the call centre on 0345 071 9018.

Please allow 48 hours for your changes to be processed. You may still receive direct postal marketing materials which have already been processed before we received your request for up to 2 months.

Social Media Marketing

You can exercise your right to object to social media marketing at any time by:

Going online to My Account; or
Ringing the call centre on 0345 071 9018.

Please allow 48 hours for your changes to be processed.

Back to top

Data sharing

It is necessary for us to transfer personal data to other organisations, to operate our business, meet legal obligations, provide our services and to offer benefit to our customers.

When we do this, we only transfer the data that we need to, and we make sure that the personal data is protected throughout this process.

Sometimes, we are required to share personal data with third parties including government agencies, service providers, and external auditors. We will share your personal data with third parties when it is:

• required by law.
• requested by a regulator.
• necessary to operate our business.
• necessary to manage its contractual relationship with you.
• in the public interest to do so.
• necessary for the performance of our services.
• necessary for fraud detection, crime prevention or investigating errors or issues; or
• a court orders us to do so.

The third parties identified below include service providers, contractors, agents, and government bodies.

Back to top

Third party categories

We may share your personal data with other third parties, like if we are selling or reorganising our business. We might also share your data to protect our business, our customers, or other people's rights, property, or safety.

We will only transfer your personal data to third parties who adhere to appropriate data security standards and controls. This may include transferring your personal data to third parties who become either joint controllers of the data, or independent data controllers. This will include organisations within the following categories:

• Legal services
• Regulators and other governmental agencies or law enforcement agencies
• External auditors
• Credit reference agencies

If a third-party contact you on our behalf, they can only do so to provide the services you asked for and not to advertise their own products or services. If you have any concerns about the third-party companies we work with, or you would like more information, please contact our Data Protection and Privacy Office at informationrequest@nbrown.co.uk .

Third Party Partners

Companies within the JD Williams & Company Ltd corporate group
Purpose: Credit assessment purposes, for fraud prevention purposes or for the provision of other products and services.

Credit reference agencies and fraud prevention agencies
Purpose: Check your identity, credit assessment, and prevent fraud.

Operational service providers
Purpose: To operate or support business operations and core infrastructure, such as IT services and courier delivery services.

External auditors
Purpose: Variety of audit checks to assure compliance with policies, processes and any legal or regulatory requirements.

Insurance and legal services
Purpose: To provide insurance policy covers, handle claims under the policies, and to provide independent legal advice.

Regulatory bodies and government agencies
Purpose: To meet legal and regulatory requirements.

Law enforcement agencies
Purpose: To prevent, detect and aid the investigation of crime.

Credit Reference Agencies
We will request information about you from Credit Reference Agencies ("CRAs") and we will also share your personal data with CRAs. The CRAs we use are Experian, TransUnion, and Equifax. For more information about how CRAs use your personal data, please refer to the Credit Reference Agency Information Notice ("CRAIN") at:

These companies receive and share personal and financial data on you from other companies that you are connected with financially as well as providing us with verification of your name, address, date of birth and gender details from the Electoral Register to prevent fraudulent applications. The CRAs record details of all credit searches and tell us the risk associated with providing credit and if there is any suspected fraudulent activity associated with you.

We will also share your personal data with CRAs and other companies for fraud prevention purposes and will continue to exchange information about you whilst you have a relationship with us. We will also inform CRAs about your settled accounts. If you borrow and do not repay in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs. When CRAs receive a search from us they will place a search footprint on your credit file that may be seen by other lenders.

We may make periodic searches of the records we hold about you and those held by CRAs and fraud prevention agencies and may also request additional information from you to help manage your account with us and, to take decisions about credit, including whether to make credit available or to extend existing credit arrangements. These searches and any additional information you provide to us will not be available to other lenders for credit assessment purposes.

We, CRAs and fraud prevention agencies may also use credit records for statistical analysis about credit, insurance, and fraud. This is not personal data but is aggregated for the purpose of trend analysis, managing debt and fraud prevention.

You have the right to access your personal records held by CRAs by contacting Experian, TransUnion, and Equifax directly.

Back to top

International transfers

We do everything we can to keep your data safe and protected. If we have to transfer your data to another country, we make sure the country can keep your data safe, or we put specific measures in place to protect it ourselves. We also take extra steps to protect your data if we need to send it to countries outside of the UK or the European Economic Area, where the laws may be different.

If you want to know why we might need to send your data to places outside of the UK or the European Economic Area, please get in touch with our Data Protection and Privacy Office at informationrequest@nbrown.co.uk. They can also give you more information about how we transfer data.

Back to top

Your Rights

You have several rights under data protection and privacy laws. We explain more about your rights below. If you ever wish to exercise your rights, please contact our Data Protection and Privacy Office at informationrequest@nbrown.co.uk .

Likewise, if you are dissatisfied with the information provided, you can complain to the Data Protection Officer at the same address.

You have the right to ask us if we use your personal data, and to see and get copies of that data. We will tell you what kind of data we have, where we got it, and who we share it with. To make things easier, we have included most of that data within this privacy policy.

We will provide any data you ask for within one month of your request. If we need more time than that, we will let you know.

Please note that for security reasons, we will not give out any bank account details that we have for you.

Sometimes you can ask us to stop using your personal data. For example:

• If you think the data, we have on you is incorrect – we will stop using it until we can confirm whether it is accurate or not.
• Where you have objected to how we are using it – we will stop until we decide whether our reasons for using it override your objections.
• If it is against the law for us to use it
• If we do not need it anymore but you want us to keep it because you might need it for legal reasons in the future.

There are some cases where we may be unable to comply with your request. If that were to happen, we would let you know why.

As JD Williams & Company Limited is responsible for your personal data (what is called a ‘data controller’), you have the right to ask us for a copy of it. This must be in a format that allows you to transfer it to another data controller.

Your right to transfer only applies:
• To the personal data you yourself have given us
• When we are using it because you agreed to it or because it is part of a contract
• If the way, we are using the data is automated.

We will try to respond to your request within one month. If we need more time, we will let you know.

Back to top

Complaints and concerns

If you want to complain about the way we use your data, it is best to contact us first. We will investigate your complaint right away. You can complain to the Information Commissioner’s Office in the UK or the Data Protection Commission in the Republic of Ireland.

To contact The Information Commissioner’s Office:

Visit: ico.org.uk

Call: 0303 123 1113

Write to: Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Back to top

Changes to this Privacy Notice

We may update this notice at any time. You will see any changes we make on this page.

Back to top

How to contact us

If you have any questions, comments, or requests to make about this privacy notice or your rights, here is how to contact us:

Email us at: informationrequest@nbrown.co.uk

Write to: Data Protection and Privacy Office
JD Williams and Company Limited
Griffin House
40 Lever Street
Manchester
M60 6ES.

Back to top