Privacy Notice

We know that you care about your personal data and how it is used, and we want you to trust that LIPTON Teas and Infusions uses your personal data carefully. When you interact with us, for example when you visit our website, sign up to one of our newsletters or chat with us online, you also share information relating to you, that is personal data, with us.

This Privacy Notice will help you understand what personal data we collect, why we collect it and what we do with it. 

Please take a moment to familiarise yourself with the Privacy Notice and let us know if you have any questions by sending us an email or submitting a request through privacy@lipton.com.

You also have rights in relation to how your personal data is used, such as to object to it being used for direct marketing. See what your rights are and how you can exercise them here.

If you are applying for a role with LIPTON Teas and Infusions then please see our separate Applicant Privacy Notice. 

Key terms

We have tried to keep this Privacy Notice as simple as possible, but to help your understanding please familiarise yourself with the following privacy terms:

- Personal data is any information relating to an identified or identifiable living person (for example, name, email address, card details, social media profile).  

- Processing means any operation that is performed upon personal data, including collecting, using and storing data. 

When “you” or “your” are used in this statement, we are referring to the relevant individual who is the subject of the personal data.

References to "our", "us" or "we" within this Privacy Notice include all of LIPTON Teas and Infusions’ group companies and its 36 brands including Lipton Teas and Infusions, PG tips, Pukka, T2 and TAZO.

LIPTON Teas and Infusions is the data controller of your personal data. This means that we decide how and why your personal data is processed, either alone or jointly with others.

If the structure of our business changes, for example if we merge, combine or divest a part of our business, we may need to transfer your personal data to the relevant third party or re-organised organisation. This would be done, for instance, as part of any due diligence process or for the same purposes as set out in this Privacy Notice.

For more information about LIPTON Teas and Infusions please visit this page.

If you have any questions about this Privacy Notice or how we use your personal data please contact privacy@lipton.com.

The type(s) of personal data we may collect directly from you, as well as the way in which we collect it, depends on how you interact with us.

How we collect your personal data

- Personal data you give us directly. This includes personal data you provide us when you sign up for a newsletter, register for an account, or buy products.

- Personal data we collect automatically. We collect certain types of personal data when you interact with us online. For example, about how you navigate around our website or communicate with our customer service teams. We use cookies and similar technologies to collect some of this personal data. To find out more about how we use cookies, and similar tracking technologies online, and how to exercise your choices about these, please see the information in our Cookie Notice.

- Personal data we collect from other sources. We may also collect your personal data from third parties. This includes trusted partners who provide services, for instance marketing, on our behalf, or online platforms where you interact with our content. For example, we may collect information where you have interacted with our content on social media platforms by ‘liking’ one of our posts or clicking on one of our adverts (Please note that these third parties generally have their own privacy notices and terms. We encourage you to read them being using those websites.)

Types of personal data we might collect

We will not keep your personal data longer than necessary to meet the purposes for which it was gathered. Once this purpose has been fulfilled, we will either securely remove your personal data from our systems or anonymise it, that is, we will remove those aspects of your personal data that link it to you so that you can no longer be identified. For example, we might anonymise data that you have shared with us to participate in a sales promotion or discount offering on one of our products after 1 year, while we delete data shared as part of a question or a request you have sent us after 2 years.

Please note that in some cases we may have legal obligations to keep your data for some time after the initial purpose for collection has been met. For example, where we must keep your data for accounting, litigation, or regulatory reasons.

We may disclose your personal data to certain third-parties, vendors and service providers or affiliated employees, contractors and entities as described below.

Where we share your personal data, we do so for the following purposes:

Where we have a lawful basis to do so, we will also use your personal data to build profiles. We create profiles by analysing information about your online activity, including how you browse and interact with our websites and third party websites, your interactions with our brand communications, and your searching and buying behaviour. We use these profiles to personalise our website content displayed to you as well as our communications with you. Profiling allows us, for instance, to show you more information and products that we believe you would be interested in during your visits to our websites.

Depending on your location and the services you use, we may transfer your personal data to entities within the Lipton Teas and Infusions group or to third parties based outside of the Economic European Area (“EEA”). If you are based in the EEA, we are required by law to ensure that your personal data enjoys a level of protection essentially equivalent to that within the EEA. 

Transfers to countries with an EU Data Adequacy Decision 

Some of the countries we may transfer personal data to have been recognised by the European Commission as offering an adequate level of protection to personal data (“Adequacy Decision”). You can find the complete list of Adequacy Decisions taken by the European Commission here. Consequently, personal data can flow from the EEA to that third country without any further safeguard being necessary.

Transfer to non-adequate non-EEA countries

We may also transfer data from the EEA to countries that do not have an Adequacy Decision. In those cases we will only transfer personal data where we have added safeguards to our contracts with the receiving entities, so called EU Standard Data Protection Clauses, in order to ensure that your personal data is afforded the same level of protection as it is in the EEA.

To protect your personal data from unauthorised access, disclosure or loss, we have put appropriate technical and organisational measures in place. These include encrypting connections and equipment, creating back-ups, and limiting and controlling those who can access the data.

You have rights relating to your personal data. You can exercise these rights (as explained below) by sending an email with your contact details and your request to privacy@lipton.com. 

We will handle your request carefully and respond to you without undue delay and at the latest within one month after receiving your request, unless there is a lawful reason to extend this period in which case we will let you know as soon as possible. 

Please note that the extent to which you can exercise your rights may be limited by the rights and interests of other parties. For example, we may not be able to delete all of your personal data upon request where we have to keep it for regulatory reasons. If we are unable to exercise your request then we will let you know and explain why without undue delay.

a) Access 

You can ask us whether we process your personal data and, if so, request a copy of that personal data.

b) Correction 

You can request that we correct any personal data that we process about you that is inaccurate or incomplete. 

c) Processing restriction 

You can request that we limit or stop the processing of your personal data in some circumstances, such as when you contest the accuracy of the personal data.

d) Deletion 

You can request that we delete your personal data in some circumstances.

e) Move, copy or transfer 

You can request, in certain circumstances, that we transfer the personal data that you have shared with us to you or a third party of your choice. In such a case we are under an obligation to send the data in a structured, commonly used, and machine-readable format.

f) Objection to data processing 

You can object to our processing of your personal data in some circumstances and request that we stop such processing at any time, including where we process your personal data for direct marketing purposes.

g) Withdraw consent

Where you have agreed to your data being collected, you will always have the right to withdraw that consent at any time. You can do this by either following the information provided at the time you provided your consent, or by contacting us directly (see Section 11 below). 

h) Exclusion from automated decision making 

You have the right not to be subject to a decision based solely on automatic processing of your personal data, including profiling, if that decision would impact your legal rights or affect you in an otherwise significant manner. We do not use such automated decision-making in relation to our processing of your personal data described in this Privacy Notice.

i) Complaint to a supervisory authority

If you have a concern about the way we have handled your personal data, and you are located within the EU, and/or your rights were infringed within an EU country, you can lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available here.

We also use cookies to collect and process personal data. To find out more about how we use cookies, and similar tracking technologies online, and how to exercise your choices about these, please see our Cookie Notice.

If you want to exercise any of the rights set out above or have any questions or concerns about how we look after your personal data, please contact us at privacy@lipton.com or by writing to us at:

Eduard van Beinumstraat 18
2Amsterdam, 7th Floor
1077 CZ AMSTERDAM
The Netherlands

Please include your reply address when you write to us.

If you wish to contact us regarding any questions related to the security of our website and the hosting infrastructure in place, please contact us directly at dns@lipton.com.

or by writing to us at:
EKATERRA GLOBAL OPERATIONS
B.V. 455 WEENA
3013 Rotterdam
The Netherlands

We keep this Privacy Notice under regular review and will update it when necessary. You are encouraged to undertake your own reviews of this Privacy Notice from time to time. We will notify you of any changes, including when they will take effect, if we are required to do so by data protection laws and we will always include at the top of the Privacy Notice the date on which it was last updated.