In this article
This privacy notice was last updated on 23 January 2023 (Version 16).
Which? is the UK’s consumer champion. As an organisation we’re not for profit and all for protecting consumers – a powerful force for good, here to make life simpler, fairer and safer for everyone.
The Consumers' Association (Company No. 580128) is a charity registered in England and Wales (Charity No 296072) and is the owner of the rest of the Which? group. More information about our charitable aims can be found here.
The Consumers’ Association is the data controller when it uses your information for these purposes. Its registered address is 2 Marylebone Road, London, NW1 4DF.
All our commercial operations are carried out through Which? Limited (Company No 677665) and its subsidiary companies.
Which? Limited is the data controller when it uses your information for these commercial purposes. Its registered address is 2 Marylebone Road, London, NW1 4DF.
The Consumers Association and Which? Limited will together be referred to in this privacy notice as "Which?", "we", "us" or "our". Details of the services and products provided by the Which? Group are detailed in the table below.
| The Consumers' Association | Which? Limited |
|---|---|
| Campaigns, policy work and supporter engagement | Magazines, books, websites and digital products not provided by the Consumers' Association |
| Ordinary or associate membership | Which? Trusted Traders |
| Which? Connect | Which? Switch |
| The majority of the research included in the various Which? publications | Which? Best Buy Guarantee |
| Which? Consumer Rights & Which? Later Life Care services | Which? Legal, Which? Wills, Which? Money Helpline and Which? Computing helpdesk. |
What this notice applies to. This notice applies to personal information we collect about you directly or that we collect from third parties. It sets out:
What this notice does not apply to. This notice does not apply to any services provided by Which? Financial Services Limited where a different privacy notice applies. This includes Which? Mortgage Advisers, Which? Insurance Advisers and Which? Money Compare. For further details please see the Which?’ Financial Services privacy notice.
Changes to this privacy notice. We keep our privacy notice under regular review. We encourage you to regularly review this page for the latest information on our privacy practices. We will notify you of any significant changes by listing these in Section 12, and via any other appropriate methods.
Information you provide to us voluntarily
You may give us your personal information when you:
Where we request information from you, this will be explained in the relevant forms or pages, or over the telephone. You may choose to provide additional information when you interact with us or to a third party who refers you to us. We record calls for monitoring, training and analysis purposes. We store customer feedback and information on our customer databases.
We, or the companies working for us, automatically collect some data from visitors to our websites. This includes what pages you have viewed, for how long and where you go on our website.
Information is also collected about how you arrived at our websites in the first place. This includes what links or adverts of ours you have viewed or clicked on to reach us, or any search terms you have used. Where you see a Which? advert outside of our website we, or an ad agency working for us, may place a cookie on your browser. This is so that, when you access our website, we recognise that you have seen an advert of ours elsewhere. Information collected automatically using cookies or other tracking technologies includes your IP address. If you have logged in, this includes your login details.
For further information see our separate cookies and tracking technologies notice.
Sometimes we might get information from another company, for example to supplement the data that Which? already has. Where this happens we will make sure we are confident that your information was collected legally.
For example, we use Google Analytics and New Relic to collect information about how customers use our websites. This includes how long customers spend on our websites, how often they return and what demographic categories they fall into. For further information about how Google uses data, please visit www.google.com/policies/privacy/partners/.
Your personal information may be available to us from external publicly available sources. For example, geo-demographic information and information from public registers such as listed directorships, information from the electoral roll and press reports. Depending on your privacy settings for social media services, we may also access information from those accounts or services.
We collect, store and use the following types of information:
In order to receive certain services via the websites (eg access to our Best Buys and Don't Buys recommendations), you will need to create a Which? ID. The information that you provide when setting up your Which? ID includes your name, address, email address and payment card details. If you register to set up a Which ID, you will also have a unique password which enables you to access your account.
We do not routinely collect this type of data. We will usually only do so if you choose to disclose it to us or provide explicit consent. For example, if you take part in our research, tell us about any reasonable adjustments you need, or contact us about your consumer experience, including reporting a scam. In all instances, we will only collect this type of data if there is a valid and legal reason for us to do so.
The following sections describe in more detail how Which?, or one of the companies working for us, may use your information. This also sets out the legal grounds we rely on when processing your data.
We use the information collected for a number of purposes. These include:
There are a number of legal reasons why we are allowed to process your personal information. These include:
We rely on our legitimate interests for the following reasons:
We, or one of the companies working for us, share your personal information with the following third parties:
We share your personal information with certain third parties who provide services to Which? or act on Which?'s behalf. For instance:
We only authorise these companies to process your personal information so they can provide the requested service. Which? group companies are all based in the United Kingdom (“UK”).
We use Worldpay to process your Direct Debit payments. More information on how Worldpay processes your personal data is available at https://online.worldpay.com/terms/privacy. This includes information about your right to object and other data protection rights.
We share your information between companies in our group for the following purposes:
We may also share your information with other members of our group if you have indicated to us that you would like to hear about their Which? products and services.
All members of our group treat your information with similarly high standards. They will use it only for the purposes set out in this privacy notice. A full list of companies/brands within our company group is available here.
We may use personal information about our existing customers to better understand who our content appeals to (our target audiences) on social media sites, search engines and advertising platforms (such as Google, Facebook, and Pinterest).
The personal information is encrypted (put into a code so that it's secure) before it is uploaded to those platforms. The platforms will then attempt to match your profile in their database so that they can establish whether you hold an account with them. If you have an existing account with those platforms, the information will be used to understand how many of our customers have been shown a Which? advert on these platforms so we can measure how well our adverts are performing, to better understand the interests, demographics and behaviours of our target audience and to promote our services. It may also be used to identify users of the social media site that have a similar profile to you so we can show them adverts.
The information we provide to the social media platform is destroyed once the matching exercise is complete.
If you do not wish your personal data to be used for targeted social media advertising or marketing, please email preferences@which.co.uk.
You can also amend your social media provider’s advertising settings to prevent your data being used in this way.
A social networking widget may be found in many of our pages. This widget gives you the tool to bookmark our websites, blog, share, tweet and email our content to a friend. Cookies from these social media companies may be placed on your system when you interact with this widget, or when you are on the same webpage while being logged into these social networking services. Our cookie and tracking technologies notice provides further information about this.
Which? may share your information with third parties involved in any reorganisation, restructuring, merger or sale, or other transferring of assets. Which? will only share your personal information with a third party that agrees to treat it with the same high standards set out in this Privacy Notice.
These third parties may be companies who help us provide our products and services to you, companies you have contacted Which? through, or companies you ask us to contact on your behalf.
In some circumstances we are legally obliged to share information. For example under a court order, to regulators or law enforcement authorities, or to investigate security breaches, fraud or other crimes. In any scenario, we’ll make sure that we have a lawful reason to share the information and document our decision.
We will also disclose your information to establish, exercise or defend legal claims, For example:
In some instances we may need to send your information to third parties outside of the UK. These countries and territories may not have the same data protection laws as those in the UK. If we do transfer your information outside the UK we will take appropriate steps to protect that information. These include:
You have the following rights regarding your personal data:
More information about the right to complain can be found at https://ico.org.uk/for-the-public.
Please be aware that you are under no obligation to provide us with your personal information. However, in some instances, if you don’t provide certain information then we may not be able to provide you with products and services, or otherwise interact with you.
When exercising your data protection rights we may ask you to verify your identity to help us respond to your request.
If you would like to exercise any of the above rights, please contact us using the details outlined in the table below.. All of these rights are free to exercise. We will do our best to respond to you as quickly as possible and within one month of receiving your request. We will inform you within one month of receiving the request if we will need longer to respond, for example if the request is complex.
We want to make sure that your personal information is accurate and up to date. Please always let us know if you think that it is not and needs updating.
| Action | Contact |
| Request that we do not share your data with social media companies, search engines and advertising platforms for targeted advertising purposes | Email: preferences@which.co.uk |
| Make a data subject access request or SAR (right to access your personal information) | Email: sars@which.co.uk Phone: 029 2267 0000 Write to: General Counsel, Which?, 2 Marylebone Road, London, NW1 4DF |
| To exercise any of your other privacy rights, such as deletion or to let us know your details are incorrect | Email: dataprivacy@which.co.uk |
Whenever we collect or process your personal data, we will only keep it for as long as we need it.. At the end of that retention period, your data will either be deleted or anonymised. Examples of our retention periods are in the following table.
| Type of data | How long we keep your data for |
| Membership | For the duration of your membership and for up to 3 years after you stop being a member |
| Financial | For 10 years from the date of payment where we have financial reporting obligations |
| Legal claims, advice or complaints | For 7 years from the end of the legal claim, matter or complaint |
We may use the information you provide to send you communications about Which?'s products and services and/or Which?'s campaign work. This might be by email or SMS, with your consent, or by telephone or post.
You can change your marketing preferences or unsubscribe from receiving any further marketing communications at any time by:
We use tracking technology (a clear image gif) within our emails to improve our future interactions with you. This means we are able to capture information including the time and date you open our emails and the type of device used to open the email.We may analyse the information we collect about you to improve our communications. We use profiling and screening techniques to make our communications to you more relevant and appropriate, and to improve your experience. When building a profile, we may analyse geographic, demographic and other information relating to you to better understand your interests and preferences. We may use additional information from external sources to help us do this.
We combine this information to make it anonymous and use it to understand whether our emails are opened and what links are clicked on by our customers. We then use this information to improve our communications to you, to improve the services that we provide, and to evaluate the effectiveness of our campaigns.
You can turn off email tracking by disabling automatic picture download within your email provider’s settings.
We engage in the following forms of advertising on other websites.
We use a form of advertising on other websites and on our websites which is called ‘performance advertising’. This is where we only pay the advertiser when our advert is successful.
We have a series of partner sites or ‘affiliates’ who will host our adverts and links. If you come to our website and decide to buy something from us via those adverts or links, then we will then pay them a small fee. We do this either using cookies, with your consent, or by sharing protected, pseudonymous customer order information with them. The affiliates cannot use this information to identify you.
To understand what information is being collected and why, please see our cookie and tracking technologies notice. .
We link to a variety of external websites and retailers where you can buy products or services featured on our websites. This includes large retailers such as Amazon and John Lewis and smaller ones which may be specialists. Links are normally provided by an affiliate but we also work directly with retailers in some cases. Please note that a retailer link alone does not constitute an endorsement of the retailer by Which?. We are not able to show every possible retailer and cheaper prices may be available.
We provide these links to make it easier for you to complete your purchase and so we can earn commission from referring you. This revenue is used to support our not-for-profit mission. To help us do this, we track your activity using cookies. For more information, and to easily manage your cookie settings, please see our cookie policy.
All our research, testing and recommendations are 100% independent. We’re not influenced by third parties and we don't accept freebies from product manufacturers or retailers.
We advertise our products and services on other websites.
We work with an advertising company who decides where it’s best to place our adverts. We usually don’t know where our adverts will appear. The advertising company will place a cookie on your device when you see the advert. This is so they can monitor how effective the advert is and not show you the same advert too many times.
We work with third-party advertising networks and search platforms, such as Google, to show you adverts on other websites or search platforms. These adverts will be about things you’ve previously shown an interest in on our website. The adverts may highlight other products or services we think you’d be interested in, too. Cookies (as well as tools such as Google Tag Manager) help us to do this.
We also work with messaging platforms that may deliver messages to your devices on our behalf. We only do this if we have your express consent. These messages will be tailored to the pages and content you have shown interest in. You have the option when each message is delivered to opt out of all future communications.
We may provide links to other websites where you can find more information about the particular topic. The other websites are outside our control and are not covered by this privacy notice. If you access other websites using the links provided, the operators of these websites may collect information from you. Your information will be used by them according to their privacy notice which may be different to ours.
On some pages of our websites, we use third parties to provide content, applications or plug-ins. We may use these third parties to track how you use the content, applications and plug-ins and customise these for you. For example, when you share an article using a social media sharing button on our websites (e.g. Facebook or Twitter), the social network that has created the button will record that you have done this. For more information on social media plug-ins on our Website, see our cookie and tracking technologies notice.
If you are aged 13 or under, please get your parent's or guardian's permission before you provide information to us. Users without this consent are not allowed to provide us with information. Ifthey do so, we will stop processing their information as soon as we find out.
We want you to feel in control of your data. The table below outlines how you can make changes to reflect your preferences.
| Action | Contact |
| Request that we do not share your data with social media companies, search engines and advertising platforms for targeted advertising purposes | Email: preferences@which.co.uk |
| Make a data subject access request or SAR (right to access your personal information) | Email: sars@which.co.uk Phone: 029 2267 0000 Write to: General Counsel, Which?, 2 Marylebone Road, London, NW1 4DF |
| To exercise any of your other privacy rights, such as deletion or to let us know your details are incorrect | Email: dataprivacy@which.co.uk |
| Change your marketing preferences or unsubscribe from receiving any further marketing communications | Email: preferences@which.co.uk Click on the “unsubscribe” link in the footer of our emails |
To find out more about Which? and who we are, please look at the 'About Us' section of our general terms.
If you are a former Which? Group employee and are seeking to understand how we process your personal data, please contact Which? directly.
Which? may need to update this Privacy Notice from time to time. You can see when the Privacy Notice was last updated by checking the date at the top of the page. A summary of the most recent change can be found in this section, along with the date they were made.
If we make any important changes, like how we use your personal information, we’ll let you know.
25.10.2022 - clarification on how we use your interactions with us on the Which? social media channels
23.01.2023 - amendment made to the definition of criminal offence data