Privacy Statement

Your trust matters to us. The information we collect, termed 'personal data' under data protection laws must be treated in confidence and with respect per these regulations.

We protect your privacy by upholding these data protection principles:

• Your information is always used lawfully, fairly and in a transparent way.
• We will only collect and use your information for valid reasons that we have clearly shared with you as set out in this Privacy Statement. We will not use your information in any way that is incompatible with those purposes.
• We collect and use the least amount of personal information necessary for those purposes.
• We aim to keep your data accurate and up to date, which is why we may ask you to confirm your information.
• We will keep your information secure and if we no longer need it and we aren’t legally required to keep it, we’ll archive it with severely restricted access, destroy it, or permanently de-identify it.
• Your Privacy Matters: Your personal information will not be shared, sold, rented, or disclosed except as described in this privacy statement.
• No obligation: You’re not obligated to share your personal data with us. However, without it, we might not be able to provide you with certain services or products as a result.

In addition to complying with applicable data protection laws, we also comply with the UK Caldicott Principles, which set out that we must:

• Justify the purpose(s) for using confidential information;
• Not use patient identifiable information unless it is absolutely necessary;
• Use the minimum necessary patient identifiable information;
• Restrict access to patient identifiable information on a strict need-to-know basis;
• Ensure everyone with access to patient identifiable information is aware of their responsibilities;
• Comply with the law;
• Be aware that the duty to share information can be as important as the duty to protect patient confidentiality; and
• Ensure you are informed about how your information is used.

This Privacy Statement covers the following key topics about your personal data (you can click on each title for more information). Each section includes a summary (“The Essentials”) to help you quickly locate the information that is most relevant to you.

1. What is the purpose of this privacy statement?
2. Who does this privacy statement apply to?
3. Who are we?
4. Our Data Protection Officer (DPO)
5. How we obtain your personal information
6. Information we hold about you
7. Children’s data
8. How and why we process your personal information
9. Using your information for other purposes
10. Third parties we may share your information with
11. Transferring information outside the UK or EEA
12. Your rights
13. How do we protect your personal information?
14. How long do we keep your personal information?
15. Automated Decision Making and Profiling
16. Cookies and other technologies
17. Links to other websites
18. Social Media and User Generated Content
19. Right to complain to the ICO
20. Changes to this privacy statement
21. Glossary

This privacy statement explains how Nutricia collects and manages your personal information as a Data Controller. It contains details on who we are, how and why we collect, use store and share your personal information. It also explains your rights and how to contact us or the relevant supervisory authority if you have any concerns that we are unable to address.

This privacy statement applies to:

• Visitors to our website nutriciametabolics.com/en-ie
• Individuals who contact us with queries about our product or services (e.g. via our consumer contact centres)
• Attendees or prospective attendees at Nutricia-related events (online and offline)
• People whose personal data we collect indirectly

This statement does not apply to healthcare professionals (HCPs), who have a separate privacy statement. You can view the HCP privacy statement here.

The Essentials: Nutricia is responsible for managing your personal data when providing our service to you. We are a 'data controller' regarding the information we hold about you. This means that we are responsible for protecting your personal information, deciding its use and complying with all the data protection laws and regulations in the United Kingdom and Ireland.

UK residents:

We are Nutricia Limited t/a Danone UK (referred to in this privacy statement as "Nutricia, "Danone” "us," "our," or "we"). 

Our registered office is located at Nutricia Ltd, Newmarket Avenue, White Horse Business Park, Trowbridge, Wiltshire, BA14 0XQ, United Kingdom.

Nutricia Limited is responsible for the personal data that UK residents share with us. We process it accordance with the UK Data Protection Act 2018 and the UK General Data Protection Regulations (the "UK GDPR"). When we collect or use your Personal Data, we are responsible as the “data controller” for the purposes of the UK GDPR.  

Nutricia is part of the Danone Group. For more information about Danone, visit https://www.danone.com/ie/en.

Republic of Ireland residents:

For Republic of Ireland residents, Nutricia Ireland Limited holds and process your personal data in accordance with the Irish Data Protection Act 2018 and the EU General Data Protection Regulations. 

Our registered office is located at Block 1, Deansgrange Business Park, Deansgrange, Co Dublin, A94 P9T3, Ireland.

In instances where your personal data is collected and processed by our Irish based entity, Nutricia Ireland Limited is the “data controller”. Nutricia Ireland Limited is also part of the Danone Group.

The Essentials: Our DPO, Alison Burke, can be contacted at DPO.UKIE@danone.com.

Our DPO is responsible for overseeing what we do with your information and monitoring our compliance with data protection laws.

If you have any concerns or questions about our use of your personal information, you can contact our DPO, Alison Burke, DPO.UKIE@danone.com or by writing to:

UK residents:

Data Protection Officer

Nutricia Limited, Newmarket Avenue, White Horse Business Park, Trowbridge, Wiltshire, BA14 0XQ

Ireland residents:

Data Protection Officer

Nutricia Ireland Limited, Block 1, Deansgrange Business Park, Deansgrange, Co Dublin, A94 P9T3

The Essentials: We collect your personal information from various sources including directly from you or through third parties, such as family, business partners, or social media, for account creation, purchases, communications, events, and marketing activities. 

We will collect your personal data directly from you. You may give us personal data about yourself by:

• visiting our websites or apps;
• creating an account with us;
• ordering products or services from us;
• registering to receive our newsletters or marketing communications by any means (e.g. email, SMS, phone, WhatsApp, instant messaging, etc.);
• entering or participating in a survey, research activity, game, contest or competition run by us or third parties on our behalf;
• submitting an enquiry or request to us or contacting us by phone, email or other means;
• filling in our forms (both online and offline);
• registering for an event (online or offline) or contacting us in relation to that event; or
• engaging (for example posting or commenting) on our social media pages (such as Facebook, Instagram,  or LinkedIn) or engaging with our other digital media communications;
• interacting with us on our Nutricia websites and apps, including when you register for an account with Nutricia, or send or post queries or comments; or
• your healthcare professional places an order, or requests samples or services from us on your behalf.

Some of your personal data is also collected via cookies and similar tracking technologies, see our Cookie Statement  for further details on this.

While we collect most of your personal information directly from you, we may also collect personal data about you from third parties such as:

• our trusted business partners, including marketing agencies, market research companies, companies that co-sponsor our promotions or competitions, retailers.
• family, friends and others who provide your personal data to us because you have consented to, or they think you may be interested in our products and services, or they want to share a product or service with you. 
• other third parties such as media providers/owners, public and third-party websites, advertising platforms, or depending on your privacy settings for social media services, we may also collect information from social media platforms and our suppliers or our group companies (referred to in this Privacy Statement as "third parties" or "suppliers"). For instance, we may place an ad on a third party website, and when you click on that ad, we may receive information about you and other website visitors in order to measure the reach and success of that ad).
• we may also receive your personal data from a patient (if you are a carer) or from a carer (if you are a patient), or your healthcare professional (if you have instructed him or her to provide this to us or he or she provides us with information).

The Essentials: The personal data we collect come directly from you, from partners or affiliates and from cookies and similar technologies. We usually only collect and use basic information such as your contact details (name, email address etc.), communications with us (by phone, chat etc.), information regarding your interaction with our marketing initiatives, websites and products and your interests and preferences. 

Personal information is any information that can be used to identify you. The personal data we collect varies depending on our relationship with you; therefore, this section is divided into three categories to outline the data we collect on: 

a) Visitors to our website nutriciametabolics.com/en-ie

b) Individuals who contact us with queries about our product or services (e.g. via our consumer contact centres)

c) Attendees or prospective attendees at Nutricia-related events (online and offline)

d) People whose personal data we collect indirectly

Visitors to our websites and users of our apps and services: 

We, or third parties on our behalf, may collect the following personal information when you visit our website or use or apps or services:

• Personal details such as your name, title, social media handles.
• Contact details such as your address, email, telephone number.
• Communication data between you and us, which may include details of our conversations via LiveChat and contact forms available on our websites and/or apps.
• Account Details: username, email and password.
• Social media or third-party account profile information where you use your social media or third-party account to create an account and login or where you share this with us;
• Where you submit content to our websites and/or apps (such as a personal testimonial or review).
• Entries to a survey, game, contest, promotion or competition (including the entry itself, which may include audio or visual information such as your likeness in a video or photo, a comment or answer to a question).
• Membership data: any information you provide to us when signing up for emails.
• Preferences in receiving marketing from us and our third parties and your communication preferences.
• Demographic information and interests, such as your age, gender, preferred products and lifestyle preferences. Lifestyle preferences may include your preferences for some of the products or services we offer, and your interests related to those products or services. We may also infer certain preferences and interests about you based on your browsing habits, your purchase history, your feedback and responses to surveys or market research, and your demographic information.
• Information about people other than you, such as personal data about your family members, when you provide such information directly to us.
• Information about how you engage with our messages and communications (e.g. emails, SMS, instant messages) including whether they are delivered to you, whether you open them, links you click in them and whether you unsubscribe to them.
• Technical Information: Internet Protocol (IP) address used to connect to the internet, device type, website address, country from which you access our system, requested files, browser type and version, browser plug-ins, operating system, and platform.
• Visit and Behaviour Information: Use of our accessibility toolbar; pages clicked, time and length of visits to specific pages, interaction data (scrolling, clicks, mouse-overs), browsing methods, traffic data, location data, weblogs, and information provided for additional services or downloads.

Individuals who contact us with queries about our product or services (e.g. via our consumer contact centres)

We, or third parties on our behalf, may collect the following personal information when you contact us about our products or services: 

• Personal details such as your name, title, social media handles.
• Contact details such as your address, email, telephone number(s).
• Details of each interaction we have with you, such as information provided during your communications with us (including through our customer service lines or social media platforms). Telephone calls may be recorded.
• Information about your family and friends such as your dependants if you provide this information to us.

Attendees or prospective attendees at Nutricia-related events (online and offline) 

We, or third parties on our behalf, may collect the following personal information when you register or attend a Nutricia-related events:

• personal details such as your name, your email address, physical address and telephone number(s) social media handles, language of communication.
• any information you provide in respect of the event itself (such as providing feedback, answering surveys, participating in competitions or games, recordings or interviews or pictures during of the event and/ or any content you submit as part of the event (e.g. if you ask a question).
• your travel and accommodation details.
• any dietary, accessibility or other requirements (where applicable). To the extent this includes information about your health, please see the "Special categories of data" section below.

People whose personal data we collect indirectly

We may also collect personal data about you from other sources such as:

• when you search for our products and services and when you share content on social media pages, websites or apps related to our products, services or a Danone-related event, or in response to our promotional material on social media or activities such as blogs, videos, internet postings and user generated content.
• personal data from other public sources (e.g. comments on other websites than ours) that mention Danone, Nutricia or ones of its brands. We may also collect publicly available data about you in your capacity as a public figure for business objective purposes.
• when you open or click on a link in an email one of our third parties have sent to you on our behalf. This allows us to see how well our communications with you are performing.
• personal data provided to us by media providers and retailers, such as your purchasing history data and your loyalty card profile.
• your insights data is provided to us by third parties (i.e. consumer research organisations, media providers, marketing technology or advertising technology solutions), such as your demographic data (e.g. age, parental status), your location, your interests and your purchase intent, purchase behaviour or consumer and market research data. Some of this data may have been collected from the use of cookies and other similar tracking technologies.    
• We may also collect personal data from our trusted business partners, credit reference agencies or other members of the Danone group.

Special categories of personal data

The Essentials: Your health information may be processed under this category where you have consented to it.

Special categories of personal data require a greater level of protection. This includes information on racial or ethnic origin, religious beliefs, sex life or sexual orientation, and health.

In principle Nutricia does not seek to process sensitive data relating to you. However, some of the personal data that we collect about you or which you provide to us may be special categories of data, often relating to health and wellbeing which may pertain to you and/or your child, when you provide this information to us.

We will only process personal data about your health where it is necessary:

• for the provision of information on our goods and services to you, or to those in your care, where you have expressly requested it from us (for example if we are responding to a question from you regarding product tolerance and allergies);
• related to a contract with a healthcare professional; or
• to a healthcare professional with a duty of care to you in an emergency situation or where you have asked us to do so.

Nutriciametabolics.com/en-ie is not intended for use by children.

The Essentials: Your personal data is collected and used for purposes such as performing our agreement with you (e.g. managing marketing communications), responding to your enquiries, personalising your experience with our services and marketing our products and services (e.g. building customer profiles, evaluating marketing campaign effectiveness), improving our products, services and processes, and complying with legal obligations or defending our rights. The reason we process your personal data depends on the precise purpose, but can be based on the agreement with you, based on Danone’s legitimate interests (see detail in the explanation) or based on Danone’s own legal obligations.

We use the types of personal information listed above for a number of purposes, each of which has a ‘lawful basis’.

We process your data based on largely on legitimate interests and consent.

Consent: Where you have given consent, but you later change your mind, you may withdraw your consent by contacting us and we will stop doing processing your personal data in this way. However, if you withdraw your consent, this may impact our ability to provide our products and associated services to you

Legitimate Interests: Whenever we collect and use your personal information on the legal basis of legitimate interests, we take care it does not outweigh your rights as an individual. Our legitimate interests involve using your personal information to:

a. Provide services to our customers.

b. Run, grow, and develop our business.

c. Operate and secure our websites and apps.

d. Ensure a safe working environment for staff and visitors.

e. Invest in new products to benefit our communities.

f.  Handle internal group administration.

g. Marketing, market research and business development

h. Placing, tracking and ensuring fulfilment of orders with our suppliers;

i.  Investing in and rolling out new products to benefit the communities in which we operate

j.  Online targeting or retargeting marketing purposes. We do this by creating profiles and lookalike audiences of people that may share characteristics, interests and preferences similar to you for the purposes of showing these audiences online advertising of our products or services that they are likely to be interested in, unless you have told us that you would rather not have your data used in this way.

More information on how your personal data is used and how to opt out is explained below in the "Profiling and automated decision making" section of this Privacy Statement below.

We may also rely on the following legal bases for processing:

• Contractual necessity
• Legal obligations

The table below outlines why we collect and use your personal data, along with the lawful bases for doing so.

Please note that not all the purposes listed below will apply to everyone and we may process your personal information for more than one lawful basis depending on that purpose. Please contact us if you’d like more information about the specific lawful basis.

Opting out of marketing-related communications

As described above, we may use your personal data to send you communications that may be of interest to you and/or information about our products or services, including updates, exclusive offers, promotions or new services or products.

Where legally required or where it is appropriate, we will ask for your consent to process your personal data for promotional or marketing-related purposes. We usually do this via an untick-box(es) located at our data collection points (e.g on registration or sign-up pages) or via our customer service representatives by answering the question(s) posed to you.

If you would prefer not to receive marketing-related communications from us or from our third parties operating on our behalf, you can ask us or our third parties to stop sending you these communications at any time by following the unsubscribe links in our marketing-related communications or by contacting us at any time. If you have an account with us, you can also update your marketing preferences in your profile at any time.

You have the right to withdraw your consent at any time by informing us of your decision. If you wish to withdraw your consent, please see the “Your Rights” section of this Privacy Statement below.

Where you chose to opt out of receiving these marketing-related communications, please note that, this will not apply to personal data provided to us as a result of a product/service purchase, product/service experience or other transactions where you may still receive service-related communications, such as an order update or notifications about your account (e.g. account confirmations, password changes, etc.), and other important non-marketing related communications.

We generally use your personal information solely for the purposes it was initially collected (as outlined above). However, we may use your information for another purpose, provided that this purpose is compatible and related to the purposes set out in this privacy statement. For example, if we initially collected your information to provide you with a service, we might also use it to improve that service by analysing usage patterns and customer feedback.

If we ever need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

On occasion, we may use your personal information without your knowledge or consent for other purposes where such use is required or permitted by law. For instance, in certain scenarios, we might be obligated to share information with regulatory authorities or law enforcement agencies as part of legal proceedings or investigations. This ensures compliance with legal and regulatory standards and helps us maintain the integrity and security of our services.

The Essentials: Subject to adequate safeguards, your personal information may be shared with our Nutricia group companies,  or our third-party service providers and subcontractors acting on our behalf.

Sometimes it is necessary for us to share information with service providers acting on our behalf or other organisations. If we do this, we make sure we only do so with organisations that safeguard and protect your personal data in the same or similar way that we do.   

Except as specified in this privacy statement, we will not share, sell, or rent your personal data to any third party without notifying you and obtaining your consent if needed.

We share your information with third parties directly involved in your care such as:

• Your friends, family and others: including anyone who has the authority to act on your behalf such as a power of attorney or deputy, where appropriate to do so for the provision of your health or social care, in the vital interests of you or others (or with your consent where applicable). 

Your personal data may also be shared with the following third parties who work on our behalf to help us provide our website and apps:

• Trusted Subcontractors: such as those which work on our behalf, to assist us to carry out your requests, respond to your inquiries, manage complaints, allow personalised conversations with our consumer contact centre teams, fulfil your request, honour coupons, provide you with samples, enable you to participate in sweepstakes, promotions and competitions, such as logistics providers, sponsors and customer support providers, marketing agencies, market research companies, suppliers that assist in the organization of our events, marketing, advertising and promotional activities and facilitation of surveys, market research, sourcing testimonials, reviews and feedback such as marketing & design agencies, research agencies, events management agencies and events management platforms such as Eventbrite, Inc. These third-party service providers are required not to use your personal data other than to provide the services requested by us or otherwise in accordance with our instructions.
• Service providers related to core information technology and other related services: such as external IT providers, electronic systems to store and process information, or CRM platform providers, cloud hosting providers, software providers, audit providers to monitor system usage and security events, archiving and back-up providers, systems maintenance providers, analytics and optimisation services relating to our websites and apps, accessibility platforms and telephone call recording for monitoring purposes.  
• Bulk mailing providers: to communicate with patients to provide you with relevant information.
• Professional advisors: such as lawyers or insurers, in the exercise or defence of legal claims.
• Other internal Nutricia companies within our Danone group: Where it is in our legitimate interests to do so for internal administrative purposes (for example, ensuring consistent and coherent delivery of products to our customers, corporate strategy, merger and acquisition operations, compliance, auditing and monitoring, research and development and quality assurance).
• Social media platforms: When our web pages use social plug-ins from these businesses (such as the “Like" and "Share" buttons). These other businesses may receive and use personal data about your visit to our sites or apps. If you browse our website or view content on our apps, personal data they collect may be connected to your account on their site. For more information on how these businesses use personal data, please read their privacy policies.
• Business transfer recipients: Including third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners can only use your personal data in the same way as set out in this Privacy Statement. 

In addition, we may also share your information with independent third parties such as:

• Regulators / safeguarding authorities/commissioners:  We share your personal data with these public bodies where we are required to do so by law or a regulatory obligation.
• The police and other law enforcement agencies: in limited circumstances we may share your personal data with the police if required for the purposes of criminal investigations and law enforcement or where disclosure is required to protect our rights or those of our staff, customers or other third parties.

We will consider all such requests carefully. In accordance with applicable laws, Nutricia will review the request and assess its validity. Where there is a statutory basis for sharing your personal data, we are not required to obtain your permission to collect and share it. However, we will only disclose your data based on necessity and always in compliance with legislation – see below. In all cases, where personal information is shared, either with or without your consent, a record will be kept.  

Sharing your information without your consent

There are circumstances where we may need to share your information without your consent. For example:

• When the health and safety of others (including members of staff) is at risk;
• To protect public health;
• When the law requires information to be passed on;
• For the prevention or investigation of serious crime;
• Under a court order;
• When sharing is in the public interest; or
• Where there are safeguarding concerns for vulnerable people.

The Essentials: We primarily keep your information in the UK and in some instances the EEA  

Your personal data may be used, stored and/or accessed by staff working for us, other members of our group, trusted third parties or when required by law and/or government authorities operating outside your country of residence. However, we primarily keep your information in the UK and the EEA. When we share your data internationally, we always ensure appropriate measures to protect your data, including:

a) confirming an adequacy decision by the EU Commission or the UK Government for transfers out of Ireland or the UK as relevant;

b) using standard contractual clauses approved by the EU commission or the UK Government as relevant; or

c) any other legal safeguarding mechanism.

Further details about our international data transfers are available on request.

The Essentials: You are entitled to various privacy-related rights If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal information, or request that we transfer a copy of your personal information to another party, you can contact us here: https://www.danone.co.uk/contact-us/data-subject-rights-request.html.

In accordance with data protection laws, you are entitled to various privacy-related rights, which can be exercised by you at any time. You can contact us here: https://www.danone.co.uk/contact-us/data-subject-rights-request.html.

Under certain circumstances, you have the right to:

• Obtain clear, transparent, and easily understandable information about how we use your personal information.
• Request access to the information we hold about you (also known as a "data subject access request"), which enables you to receive a copy of that information and check that we are lawfully processing it;
• Request correction of any incomplete or inaccurate information that we hold about you;
• Request erasure of your personal information where there is no good reason for us continuing to process it. Note that we may have a legal basis to retain this information which may supersede your right to erasure;
• Object to certain types of processing based on grounds relating to your particular situation where we are relying on a legitimate interest (ours or those of a third party);
• Request the restriction of processing of your information, for example if you believe the personal data we have about you is inaccurate;
• Withdraw consent, where we rely on consent to process your personal data; and
• Request the transfer of your personal information to another party.

To process your request, we might need more information from you. We may ask for proof of identity or additional verification. This security step ensures your personal data is not shared with anyone who is not authorised to receive it.

We consider all requests in accordance with the relevant laws and aim to address them within one month from our receipt. Occasionally, it could take us longer than a month if your request is particularly complex. If this is the case, we will inform you if we need more time and explain the reasons why.

Please note that not all rights are absolute, and we may refuse to comply with or charge a reasonable fee for a request that is unfounded or excessive (repetitive).

We may also rely on certain exemptions not to comply with your requests, for example, if you request us to erase your information but we need to keep using it to comply with our own legal obligations or to establish, exercise, or defend legal claims. If an exemption applies, we will notify you when responding to your request.

For more information about your privacy and data protection rights, you can always contact our Data Protection Officer, Alison Burke, directly via at: DPO.UKIE@danone.com.

The Essentials: We take the security of your personal data seriously and use various measures like role-based access, multifactor authentication, firewalls, and encryption to protect it. 

We understand that the security of your personal data is important. We make our best efforts to protect your personal data from misuse, interference, loss, unauthorised access, modification, or disclosure. We have implemented a number of strict security measures to help protect your personal information. For example, we implement role-based access controls, use multifactor authentication, firewalls, secure servers, and encrypt your information at rest and in transit. 

To ensure that your information is kept confidential, safe and secure, all our staff are given training in data protection and information governance before they start handling personal data. Current staff must also undertake regular refresher training courses tailored to their individual roles.

Where we have given you, or where you have chosen, a password which enables you to access your account, it is important that you keep this password confidential and do not share it with anyone.

Additionally, we advise you to:

• Regularly change your password to enhance security.
• Log out of your account after each session, especially when using a shared or public device.
• Report any suspicious actions or concerns to us immediately.

By following these guidelines, you also help to ensure the protection and security of your personal information and maintain the integrity of your account.

The Essentials: We only keep your information for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. 

We only keep your information for as long as is necessary to fulfil the purposes for which it was collected. This length of time varies based on the purposes for which it was gathered, including compliance with applicable laws or regulations, accounting, tax or reporting requirements, as well as to establish, exercise, or defend our legal rights.

For example, where you make a purchase online with us or register for an event, we will keep the personal data related to your purchase or registration, so we can perform the specific contract you have entered. After that, we will keep the personal data for a period which enables us to handle or respond to any complaints, queries or concerns relating to the purchase or registration.

Specific details regarding retention periods for different types of personal information are available in our retention policy, which can be obtained from our Data Protection Officer by emailing DPO.UKIE@danone.com.

The Essentials: We do not process data using automated means or engage in profiling that may have a legal effect or significant impact on you. We may use your information to create profiles to personalise our services and communications for you, and to show you relevant ads, sometimes using automated means.  When doing so, we ensure to comply within the frame of applicable legal requirements.

We may analyse information about you in order to create profiles (e.g. by compiling individuals into groups that we believe to have certain common characteristics) for online advertising or retargeting purposes. We use these profiles to personalise our websites, apps, services or products, as well as our communications to you (e.g. by sending/displaying content that may be relevant and useful to you, subject to applicable data protection and e-privacy laws).

We may also use your personal data to create lookalike audiences of people that may share characteristics, interests and preferences similar to you for the purposes of showing these audiences online advertising of our products or services that they are likely to be interested in.

We may also use these insights to display relevant advertising to you either on our websites or apps, or via third-party websites.  

Where we do this, we will inform you via our Privacy Statement and you will have an opportunity to object to these processes, please see the “Your Rights” section of this Privacy Statement below.

 You can contact us for further information on such processing or to opt out.

With your consent where required, we may collect personal information using cookies and other tracking technologies (such as pixels, web beacons, page tags) on our website or apps. This may include:

• Information about your device, browser, and operating system
• The IP address, device ID, and Mac ID of your device
• Web pages you view on our site
• Links you click while using our services and the emails you open
• Time and date of your activity

Please see our dedicated cookie policy for more information on this.

The Essentials: Our websites and apps may link to other sites for convenience, but Nutricia is not responsible for these sites or their data practices. Always check third-party privacy policies before sharing your personal data.

Our website or apps may link to third-party sites, plug-ins, or applications. These links are for your convenience only and do not imply our endorsement or association with them.

This privacy statement covers the personal data we collect or receive as a data controller. We are not responsible for data collected by third parties. Be sure to read the terms and privacy policies of third-party websites before sharing your personal data with them.

We do not endorse or accept responsibility for third-party content, terms, or policies.

Nutricia's websites and apps may include links to third-party sites for convenience, but Nutricia is not responsible for these third-party sites or their data practices. Always review third-party privacy policies before sharing personal data.

The Essentials: When you post content on our websites or social media pages, it can be seen and shared by the public. Be cautious when sharing your personal data online.

Some of our websites and apps allow users to submit their own content. Please remember that any content submitted on our product/brand page(s) on social media platforms can be viewed by the public and reposted, and you should be cautious about providing certain personal data e.g. financial information or address details. We are not responsible for any actions taken by other individuals if you post personal data on one of our product/brand page(s) on social media platforms. We reserve the right to delete user generated content that doesn’t comply with the relevant terms & conditions.

While we would be grateful if you lodged any complaints with us first, you have the right to complain directly to the UK Information Commissioner’s Office (the “ICO”) or the Irish Data Protection Commission (the “IDPC”) if you are not satisfied with the way we use your information.

UK residents:

You can contact the ICO here:

Website: https://ico.org.uk/for-the-public

Mailing Address: Wycliffe House Water Lane, Wilmslow Cheshire SK9 5AF

Phone Numbers: +44 303 123 1113

Email Address:  casework@ico.org.uk

Republic of Ireland residents:

You can contact the IDPC here:

Website: https://www.dataprotection.ie

Mailing Address: Canal House, Station Road, Portarlington, R32 AP23 Co. Laois

Phone Numbers: +353 57 8684800 or +353 (0)761 104 800

Email Address: info@dataprotection.ie

We may update our privacy statement occasionally to reflect changes in our practices, procedures, organisational structures, laws, regulations or recommendations by supervisory authorities.

Any changes to our privacy statement will be posted on this page and will take effect from the date they are implemented. If we make significant changes, we will inform you as required by law. Please check this page regularly to stay updated on any modifications to our privacy statement.

This privacy statement was last updated in September 2025.

Lawful basis

A lawful basis under the UK and EU General Data Protection Regulation (GDPR) means the legal reasons we have for processing your personal data. Here's what it means:

Legitimate Interest means we process your data to run our business best and safely. We consider your rights and any impact on you before doing this. We won't use your data if our interests are overridden by the impact on you unless we have your consent, or it's required by law. Contact us for more details on this.

Performance of a Contract means we process your data to fulfil a contract or take steps before entering into a contract with you.

Complying with Legal Obligations means we process your data to meet legal requirements.

These lawful bases ensure that your data is used in a fair, transparent, and legal manner.

Automated decision-making means decisions made without human intervention. We won't make decisions based solely on this if it has a significant impact on you without notifying you first. We'll provide clear information and an option for human review of the decision.