Introduction

When you engage with Nectar360, we will collect certain personal data. This privacy notice explains what personal data we collect, the way we use it and why, the circumstances when we may share it, and your choices and rights with respect to your personal data.

For the Privacy Policy applicable to the consumer facing Nectar programme, please click here.

Additional product specific privacy policies are available here:

  • SIP Privacy Policy
  • Pollen Privacy Policy

What personal data do we use?

Account Information

This is personal data used to create business accounts with us (e.g. Pollen or SIP accounts) or contact you in the course of our business. At time of writing this is:

  • First Name
  • Last Name
  • Corporate Email Address
  • Job Title and seniority
  • Employer / Organisation Name
  • Business Telephone number

Device information, cookies & similar technologies

This is personal data from devices you use to access our services, including data received via cookies and other similar technologies such as pixels. This could be information such as IP addresses, MAC addresses, unique IDs such as advertising IDs, location data, or information about your browser.

Analytics Data

This is personal data regarding how you interact and use our services.

Survey Data

This is personal data collected when you participate in surveys we conduct as part of our own research and product development activities. This may include responses to questionnaires, feedback forms, and other research instruments. Survey data may include:

  • Responses to questions about our products, services, or brand perception
  • Demographic information provided voluntarily during survey participation
  • Opinions and preferences shared in open-text responses

How we will use your personal data and our legal basis for doing so

Use Category of personal data Legal basis
Operate and deliver media services, including campaign management and media planning, on behalf of our clients
  • Account information
  • Device information
  • Analytics Data
  • Contractual Necessity
Improve our services and tools
  • Account information
  • Device information
  • Analytics Data
  • Survey Data
  • Legitimate Interests
    • Business and product development
Addressing queries, complaints or claims
  • Account information
  • Device information
  • Analytics Data
  • Contractual necessity
  • Legitimate interest
    • Complaints and claims handling
Conduct surveys for our own research and service development purposes
  • Account information
  • Survey Data
  • Legitimate Interests
    • Business and product development
Service updates and communications
  • Account information
  • Contractual Necessity
Monitor and maintain system security
  • Account information
  • Device information
  • Analytics Data
  • Legitimate Interests
    • Security
Monitor and enforce fair use policies
  • Account information
  • Device information
  • Analytics Data
  • Contractual necessity
Plan and run events
  • Account information
  • Survey Data
  • Legitimate Interests

 

Who will we share your personal data with?

We may need to share or grant third parties access to the personal data we hold about you when it is legally permissible to do so. Below are the categories of third party we may need to grant access to your personal data:

 

Suppliers and Service Providers

We work with different companies so that they can help us run Nectar360 and ancillary services. We share the personal data we have with those suppliers and service providers for the following purposes:

  • Cloud storage and analytics services
  • Identity management solutions
  • General IT and analytics services provided by Sainsbury’s Group
  • Survey and research platform providers
  • Media buying and media platforms
  • Events management companies

 

Other organisations

We may also share your personal data with other organisations including:

  • If we’re discussing selling or transferring part or all of Nectar360, we may share your personal data to prospective purchasers and their advisers – but only so they can evaluate the relevant business
  • If we are reorganised or sold to another organisation, we may transfer personal data we hold to them so they can continue to provide services to you
  • If we are required to by law, under any code of practice by which we are bound or where we are asked to do so by a public or regulatory authority
  • If we need to do so in order to exercise or protect our legal rights, users, systems and services
  • In response to requests from individuals (or their representatives) seeking to protect their rights or the rights of others. We will only share your personal data in response to requests which do not override your privacy interests. For example, we will not share your personal data with individuals who are merely curious about you, but we will share your personal data to e.g. insurers, solicitors, employers etc. which have a demonstrable legitimate interest in your personal data

 

International Transfers

From time to time we transfer your personal data outside of the United Kingdom for the purposes described in this privacy policy.  When we do this, your personal data will continue to be subject to one or more appropriate safeguards set out in the law. These might be the use of model contracts in a form approved by the Information Commissioner’s Office (“ICO”), having the recipient sign up to an independent privacy scheme approved by regulators, or transferring to a jurisdiction that is subject to a relevant adequacy decision.

Where we put in place appropriate safeguards to protect personal data we transfer, the safeguards may include securing additional legal agreements to protect your information. You can obtain a copy of these agreements by contacting us using the details in the ‘Contact Us’ section below.

 

How long will you keep my personal data

We will retain your personal data for as long as your employer is a client of Nectar360 and for 7 years thereafter.

Your choices and rights

You have a number of rights under data protection legislation which, in certain circumstances, you may be able to exercise in relation to the personal data we process.

Accessing or rectifying your personal data

You have the right to access and rectify the personal data we hold about you. To request a copy of the personal data we hold about you, or to correct inaccurate personal data, please contact the Privacy Team using the details in the Contact Us section.

Deletion

To request that we delete the personal data we hold about you, please contact the Privacy Team using the details in the Contact Us section.

Object, Restrict, Withdraw Consent and Port

To ask that we restrict, or to object to, the processing of your personal data or to exercise your right to Data Portability, please contact the Privacy Team using the details in the Contact Us section.

Contact us

We are Nectar 360 Services LLP, a company registered in England under number OC378624. Our registered office is at 33 Charterhouse Street, London, EC1M 6HA. We are the Data Controller. We are owned by the Sainsbury’s Group.

If you would like to exercise one of your rights as set out in the “Your choices and rights” section above, or you have a question or a complaint about this policy, or the way your personal data is processed, please contact us by one of the following means:

By email: privacy@sainsburys.co.uk

By post: Nectar Data Protection Officer at Privacy Team, Sainsbury’s Supermarkets Ltd, 18th Floor, Arndale House, Manchester, M4 3AL

You also have the right to lodge a complaint with the UK regulator, the Information Commissioner. Go to ico.org.uk to find out more.

Last updated: 01/04/2026