How we collect, use and protect your personal data — in accordance with UK GDPR and the Data Protection Act 2018.
Infinity Cash and Carry Ltd ("we", "us", "our") is committed to complying with the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Looking after the personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to offer you a better and more personalised experience.
We have published this notice to help you understand:
If we make changes to this notice we will notify you by updating it on our website. Infinity Cash and Carry Ltd is the 'Data Controller' of the personal data you provide to us, meaning we determine the purposes and the way in which any personal data is, or will be, processed.
When you buy goods from us, you are entering into a contract with us. Before ordering, you will need to set up an account. To do this we will ask you to provide some personal information, such as:
As an existing customer, if you have shopped with us using a credit or debit card, or we have taken these details for a payment authorisation, we will securely collect and store this payment card information. New customers and existing customers whose payment cards have expired will be asked if they would like to automatically store these details to speed up the payment process. If you set up a direct debit payment, we will also collect bank details from you.
When you apply for a credit account, we obtain information about you from credit reference agencies. This is covered in more detail in Section 5 below.
To undertake website personalisation, we will gather information about the devices you use to access our site (desktop and mobile), which may include your IP address. For further information on our use of cookies and tracking please see Section 10 below.
When you visit our premises, Infinity Cash and Carry Ltd uses CCTV for security monitoring purposes.
Data Protection law says we are allowed to use and share your personal data only where we have a proper reason to do so. We must rely on one or more of the following legal bases:
The table below sets out the ways we use your personal information and the legal basis we rely on for each use.
| What we use your personal information for | Legal Basis | Legitimate Interest (where applicable) |
|---|---|---|
| Set up your account | Legitimate interests | Process efficiency in dealing with such activity. |
| Storing payment cards | Consent | N/A |
| Process your orders | Fulfilling a contract | N/A |
| Notify you of your order status | Legitimate interests | Process efficiency and service improvement. |
| Manage your account and provide customer services (including call recording, data verification, and handling complaints) | Legal obligation / Legitimate interests | Keeping records up to date and handling customer contact efficiently and effectively. |
| Detect, investigate and report financial crime (e.g. fraud) | Legal obligation / Legitimate interests | Improving how we deal with financial crime and complying with regulatory obligations. |
| Undertake website personalisation and administration | Legitimate interests | Developing products and services that attract and retain customers. |
| Marketing communications — special offers, promotions, new lines | Legitimate interests | Developing products and services that attract and retain customers. |
| Notifying you about enhancements to our services | Legitimate interests | Developing products and improving customer interaction. |
| Customer satisfaction surveys, product reviews and market research | Legitimate interests | Developing products and services that attract and retain customers. |
| Maintaining network and data security | Legitimate interests | Maintaining the security of our network and the confidentiality of your information. |
| Logistics planning, demand forecasting, management information and research | Legitimate interests | Responding to demand and planning product ranges effectively. |
Infinity Cash and Carry Ltd works with a number of trusted suppliers, agencies and businesses to provide you with the high quality goods and services you expect from us. All third parties are subject to thorough security checks and will only hold the minimum amount of personal information necessary.
Trusted partners who supply products and services on our behalf. They will only hold personal information needed to fulfil orders or provide a service on our behalf.
In order for you to receive your goods, we work with a number of delivery partners. We only pass limited information to them to ensure delivery of your items.
Businesses who support our website and other business systems.
Companies who help us manage our electronic communications with you, or carry out surveys and product reviews on our behalf.
Trusted third party payment processing providers to securely take and manage payments.
When you apply for credit with us, we will make searches about you with credit reference agencies (CRAs) to assess your creditworthiness, check your identity, and prevent fraud. We will supply your personal information to CRAs and they will give us information about you, such as your financial history.
We will continue to exchange information about you with the CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. Your data may be linked to the data of your spouse, any joint applicants or other financial associates. The CRAs we use include Experian, TransUnion and Equifax — full details are available in their Credit Reference Agency Information Notices (CRAIN).
We use automated credit-scoring methods to assess your application. If you don't meet our lending criteria you will be declined for credit. To object to automated credit scoring, please contact us using the details in Section 11.
Before we provide services, goods or financing to you, we undertake checks to prevent fraud and money laundering, and to verify your identity. Personal data processed for this purpose includes: name, address, date of birth, contact details, financial information, employment details and device identifiers including IP address.
We and fraud prevention agencies may enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime. If you are considered to pose a fraud or money laundering risk, your data can be held by fraud prevention agencies for up to six years.
Decisions may be made by automated means as part of fraud prevention processing. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals behaviour consistent with fraudulent conduct, inconsistencies with previous submissions, or deliberate concealment of your true identity.
You have rights in relation to automated decision-making. If a fraud risk determination is made about you, we or a fraud prevention agency may refuse to provide requested services. To find out more or to exercise your rights, please contact us using the details in Section 11.
Some of the information you provide may be transferred outside the United Kingdom to countries such as India and the United States. Although data may be held in UK data centres, colleagues in other countries may access it to undertake the activities described in this policy.
Infinity Cash and Carry Ltd works with suppliers and partners who may make use of cloud and/or hosted technologies. We undertake data security due diligence on our partners and ensure they conform to appropriate accreditations. Wherever transfers of data to third countries occur, we will put in place appropriate contractual provisions to ensure strict rules around the confidentiality and security of your information.
We want to keep you up to date with information about new ranges, special offers and improvements to our website. When you set your account up, we will ask you if you want to receive this type of marketing information. Infinity Cash and Carry Ltd will not share your information with companies outside of Infinity Cash and Carry Ltd for their own marketing purposes.
If you decide you do not want to receive marketing information, you can request that we stop by:
You may continue to receive mailings for a short period while your request is being processed.
The length of time we retain your personal information is determined by the purpose for which we use it and our obligations under applicable laws. We will always retain your personal information for 7 years after the date it is no longer needed by us, except where:
You are entitled to exercise the following Data Subject Rights. More information is available on the Information Commissioner's website at www.ico.org.uk.
Request a copy of the personal information we hold about you.
Request that we correct inaccurate or incomplete personal information.
Request that we delete your personal data in certain circumstances.
Request that we limit how we process your data in certain circumstances.
Request that we transfer your data to another organisation or directly to you.
Object to our processing of your data, including for direct marketing purposes.
Request human review of any automated decisions that significantly affect you.
Lodge a complaint with the ICO at www.ico.org.uk or call 0303 123 1113.
To exercise any of these rights, contact us using the details in Section 11.
This notice explains what cookies are, how Infinity Cash and Carry Ltd uses them and the choices you have. By continuing to use infinitycashandcarry.com (the "Site"), you agree to our use of cookies as described here.
Cookies are small text files stored on your browser or device when you visit the Site. They allow the Site to recognise you either for the duration of your visit (session cookie) or on repeat visits (persistent cookie). They are not harmful and do not contain sensitive information such as your home address or credit card details.
Yes. Information stored in cookies is safe and anonymous to external third parties. Your account security is never compromised. Find more at www.allaboutcookies.org and www.youronlinechoices.com.
Yes — however, disabling cookies will limit your experience of the Site and some features, including adding items to your basket and signing into your account, will not work. To change your cookie settings, amend the settings in your web browser (see your browser's Help menu).
We allow selected third parties to place cookies when you visit our site for analytical and targeting purposes. Infinity Cash and Carry Ltd is not responsible for the privacy policies of third party sites and we advise you to check these separately.
| Cookie Provider | Purpose |
|---|---|
| Google Tag Manager | Tag management system to deploy marketing and analytics tags without modifying site code. |
| Google Analytics | Web analytics service that tracks and reports website traffic and visitor behaviour. |
| Bing Ads | Tracks conversions and serves targeted advertisements via Microsoft's Bing advertising network. |
| Yahoo DOT Tag | Measures conversions and audience behaviour for Yahoo advertising campaigns. |
| Yahoo Analytics | Tracks and analyses visitor behaviour and campaign performance via Yahoo. |
| Facebook Connect | Social login and sharing tool enabling connection via Facebook account. |
| Facebook Custom Audiences | Builds custom audience segments for targeted advertising on Facebook. |
Visitors who do not want their data used by Google Analytics can install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout. You can also customise Google Display Network ads at adssettings.google.com.
To exercise your data subject rights, make a complaint, or ask any question about this Privacy Policy, please get in touch using contact use form.