F&F Online
Tell us what you think
A few quick questions about how you shop.
It takes about 2 minutes.
Tap to begin
01 of 06
Awareness
F&F Questionnaire
Before today, did you know F&F is available online?
Did you know F&F has exclusive styles online only?
02 of 06
Shopping
F&F Questionnaire
Which online clothing retailers do you shop with most often?
Select all that apply
What is most important when choosing where to buy clothing online?
Select all that apply
03 of 06
Barriers
F&F Questionnaire
If you haven't shopped with F&F Online before, why not?
Feel free to select more than one.
04 of 06
Perception
F&F Questionnaire
How likely would you be to consider F&F for your next clothing purchase?
How would you rate F&F on the following?
Value
Style
Quality
Range
05 of 06
Future
F&F Questionnaire
What would make you more likely to shop with F&F Online?
Which categories would you be most interested in shopping online?
Select all that apply.
06 of 06
About you
F&F Questionnaire
Almost done. A few details about you.
What is your age?
What is your gender?
Where do you live?
What is your employment status?
Optional
What is your household income?
Thank you for sharing
Your answers help us shape F&F Online.
Are you sure?
Are you sure you want to leave? Your answers won't be saved.
Still there?
Your questionnaire is about to reset. Would you like to keep going?
Privacy Policy
Tesco Stores Limited · Policy date: 24 June 2026
Overview
This privacy policy applies to Tesco Stores Limited.
Tesco states that protecting customer information is an important part of its relationship with customers. The policy explains:
- what personal data Tesco collects and creates;
- how and why Tesco uses that information;
- who Tesco may share it with;
- how Tesco protects it;
- whether information may be transferred outside the UK;
- how long information is retained;
- how Tesco treats data relating to Clubcard users aged 16–17;
- how cookies and similar technologies are used; and
- the privacy rights available to customers.
Customers using a Clubcard for 16–17-year-olds should also read the dedicated section later in the policy.
What personal data does Tesco use?
Tesco collects and creates several categories of personal data.
A. Identity and contact data
Tesco may collect information used to identify and communicate with customers, including:
- name;
- title;
- Clubcard number;
- postal address;
- email address;
- telephone number; and
- social-media handle, where relevant.
For sensitive interactions, including certain data-rights requests, Tesco may also request documentation that verifies identity or address.
B. Financial and transactional data
Tesco collects information connected with purchases and payments, including:
- bank or payment-account information;
- payment-card information;
- what was purchased;
- when and where the purchase took place;
- how a product or service was purchased;
- delivery or collection details;
- Clubcard points; and
- other transaction-related benefits.
Tesco also maintains Clubcard-points information and updates balances when Clubcard vouchers are exchanged with Reward Partners.
Colleague Clubcard holders
The same privacy policy also applies where a customer uses a Colleague Clubcard, including:
- primary Colleague Clubcard holders;
- second cardholders;
- next-of-kin recipients; and
- holders of a Colleague Clubcard for Life.
Tesco may use shopping information from these cards to generate aggregated insights that help it assess and improve colleague benefits.
C. User and interaction data
Tesco collects information about how people interact with its stores, products and services.
This may include:
- website interactions;
- app interactions;
- clicks and browsing behaviour;
- interaction with in-store products and services;
- Scan as You Shop activity, including the order and time in which products are scanned;
- customer surveys; and
- feedback about shopping experiences.
Tesco also collects information from camera-based technologies, including:
- CCTV;
- queue-monitoring systems;
- self-checkout scan-assistance systems;
- number-plate recognition systems in car parks; and
- number-plate recognition used at some petrol forecourts.
Scan-free checkouts
Some Tesco stores use scan-free checkout technology.
The system uses cameras and measurement technology to understand how a customer moves around the store and which products they pick up.
This enables Tesco to create a basket automatically so that individual items do not need to be manually scanned at checkout.
Images and information produced by analysing those images are normally deleted within five days.
The information is used to:
- provide the scan-free checkout service;
- troubleshoot the system; and
- improve system accuracy.
A third-party provider supports the scan-free technology. Tesco states that it does not provide that supplier with additional information that would identify the individual customer.
D. Marketing data
Tesco records information about customer marketing preferences and how customers interact with digital marketing.
For example, Tesco may record:
- whether marketing emails are opened;
- whether a customer interacts with Tesco advertising online; and
- whether advertising activity appears to correspond with later purchases.
Customers can opt out of Tesco marketing through their marketing-preference settings.
Tesco uses marketing-interaction information to assess advertising effectiveness.
E. Location data
The Tesco app may ask a customer to provide location information, for example to provide information about the nearest or most relevant local store.
Tesco states that customers will be informed when location information is collected and will be given a choice about providing it.
F. Technical device data
Tesco may collect technical information relating to devices used to access its websites or mobile applications.
This can include:
- device identifiers;
- operating system;
- IP address;
- sign-in information;
- browser information;
- browser plug-ins;
- location-related information;
- the website or source from which the customer arrived;
- the destination visited after leaving Tesco’s site; and
- visit frequency.
If a person uses Tesco in-store Wi-Fi, Tesco may also collect information about when and where its network was accessed.
Cookies and related technologies are used in connection with some of this information.
G. Special-category data
Certain types of personal information receive additional protection under data-protection law.
For Tesco Stores Limited, this mainly concerns health information.
Where Tesco collects this type of information, it says that it will explain what is being collected and why.
H. Data collected from third parties
Tesco may receive personal data from external sources such as:
- specialist data companies;
- Sagacity;
- media partners;
- retail partners;
- selected brands; and
- public registers, including the electoral register.
Where Sagacity supplies information to Tesco, Tesco states that the person should have been informed of that sharing when the information was originally collected.
Information supplied by Sagacity may include:
- estimated age ranges;
- estimated affluence ranges;
- whether children are likely to live in the household;
- estimated age ranges of children; and
- address-related information such as redirection or gone-away indicators.
Tesco uses this information to improve its understanding of customers and keep records accurate and current.
Tesco states that it does not return personal information that Tesco itself has collected or created to Sagacity.
I. Aggregated and pseudonymised data
Tesco seeks to remove personal data that it does not need.
Where enough identifying information is removed so that an individual can no longer be identified, the resulting information is treated as anonymous.
Tesco also creates pseudonymised data.
Pseudonymisation involves removing directly identifying information, such as a name or email address, and replacing it with an identifier or reference.
Tesco uses this approach to reduce privacy risk and to generate aggregated analysis across large datasets, such as Clubcard customer information.
Examples may include broad insights into customer trends rather than information about a particular named individual.
Why does Tesco use personal data?
Tesco identifies several purposes for processing personal information and explains the relevant legal basis for each.
Making Tesco services available
Tesco processes personal data to:
- manage customer accounts;
- manage Clubcard accounts;
- provide products and services;
- fulfil orders;
- organise delivery or collection; and
- process refunds.
Legal basis
Tesco may rely on:
- contractual necessity when information is required to provide a purchased product or service; and
- legitimate interests after an order has been fulfilled.
Without some of this information, Tesco may be unable to provide the requested goods or services.
Managing and improving day-to-day operations
Tesco uses personal data for activities such as:
- market research;
- internal research;
- product development;
- service improvement;
- store improvement;
- systems improvement;
- security improvement;
- communications improvement; and
- development of organisational knowledge and capabilities.
Legal basis
Tesco relies on legitimate interests.
Personalising the Tesco experience
1. Managing and improving websites and mobile applications
Tesco uses cookies and similar technologies to operate, manage and improve its websites and mobile applications.
Some cookies are considered necessary for site or application functionality.
Customers can use Tesco’s cookie controls to understand and change optional cookie choices.
2. Understanding customers and personalising experiences
Tesco analyses shopping behaviour and the behaviour of similar households.
Information used may include:
- website browsing;
- mobile-app browsing;
- in-store purchases;
- online purchases;
- Clubcard transactions; and
- other shopping patterns.
Tesco uses this information to group customers into behavioural segments.
These segments may indicate tendencies such as:
- preference for promotional offers;
- likelihood of carrying out smaller top-up shopping trips;
- preference for online shopping; or
- likely interest in particular categories.
Tesco may combine these segments with information such as:
- a customer’s local store; and
- information obtained from third parties.
This is used to personalise Tesco services, offers and marketing.
3. Relevant and tailored marketing
Depending on the customer’s selected marketing preferences, Tesco may send marketing through:
- email;
- SMS/text messages;
- push notifications;
- post; and
- online advertising.
Marketing may promote:
- Tesco products and services;
- Tesco Group products and services;
- supplier products;
- retail-partner products; and
- selected third-party brands.
Advertising may appear through:
- the Tesco app;
- Tesco websites;
- other Tesco Group websites;
- non-Tesco websites;
- connected television platforms;
- social-media platforms;
- digital-audio services;
- other digital advertising environments;
- digital displays in Tesco stores;
- Scan as You Shop devices; and
- digital out-of-home advertising.
Examples of media platforms mentioned by Tesco include:
- Sky;
- Virgin Media;
- ITVX;
- Channel 4;
- Meta;
- Snapchat; and
- TikTok.
Tesco may measure advertising performance by comparing advertising interaction with in-store and online purchasing behaviour.
Tesco states that it limits the information used for this purpose to what is necessary and, where possible, obscures or anonymises information to protect identity.
Legal basis
Tesco may rely on:
- legitimate interests; and
- consent, including consent relating to cookies, similar technologies and certain device information.
Contacting and interacting with customers
Customer services
Tesco uses personal information to:
- provide important service information;
- respond to customer-service enquiries;
- communicate by phone;
- communicate by email;
- communicate by post; and
- respond to social-media messages directed to Tesco.
Promotions and competitions
Tesco processes personal data where necessary to administer promotions and competitions entered by customers.
Customer surveys, reviews and market research
Tesco may invite customers to take part in:
- surveys;
- reviews;
- research panels; and
- market-research activities.
Some activities may be run by other Tesco Group companies or by organisations acting for Tesco.
Tesco Home Panels operates under a separate privacy policy, with additional information provided to people who register for that service.
Legal basis
Tesco relies on legitimate interests.
Resolving legal claims and disputes
Tesco may process personal information in connection with disputes, claims, accidents or incidents occurring in Tesco stores.
This may include medical information where relevant.
Legal basis
Tesco may rely on:
- legitimate interests; and
- the establishment, exercise or defence of legal claims.
Protecting stores, customers and colleagues
Tesco monitors the use of its services in order to:
- detect fraud;
- prevent fraud;
- detect crime;
- prevent crime;
- identify misuse of services;
- protect customers;
- protect employees;
- protect Tesco premises; and
- protect the wider local community.
ANPR
Automatic Number Plate Recognition may be used in Tesco car parks to determine whether vehicles comply with parking rules.
ANPR may also be used at petrol forecourts to identify vehicles where:
- the driver has no means of payment; or
- a vehicle leaves without fuel being paid for.
ANPR information may also be used during investigations involving vehicles, security incidents or legal claims.
Body-worn cameras
Tesco employees may use body-worn cameras.
Tesco says footage from these devices is handled in a similar way to other CCTV footage.
Non-live retrospective facial recognition
Tesco may use retrospective facial-recognition technology following suspected criminal incidents in Tesco stores.
This technology is not described as real-time facial scanning.
Instead, after an incident:
- specially trained Tesco employees manually review CCTV;\
- facial images of a suspected offender may be extracted;\
- the images may be sent to Tesco’s crime-intelligence partner, Auror Europe Limited;\
- Auror may create an encrypted biometric template from the image;\
- AI technology may compare that template with templates connected with previous Tesco incidents from the prior two years;\
- the system may suggest possible matches;\
- a specially trained Tesco employee must manually verify any suggested match; and\
- the new incident template may be added to the relevant database.
Tesco Stores Limited and Auror Europe Limited act as joint controllers for this processing.
Tesco describes several controls around this technology:
- it is limited to investigations involving specified serious incidents;
- examples include theft above a defined threshold, burglary, robbery and physical assault;
- only images of the suspected person should be used;
- other individuals should be cropped or redacted;
- only images meeting defined quality standards are used;
- the technology is not used where the suspect appears to be under 18; and
- human verification is always required before a match is confirmed.
CCTV images and biometric templates held within this facial-recognition database are removed within two years.
Other investigation records may be retained according to Tesco’s broader retention rules.
Relevant information may be shared with:
- police;
- other law-enforcement bodies; and
- other retailers,
where this assists an investigation.
Legal basis
Tesco identifies:
- legitimate interests;
- exercising legal rights; and
- substantial public interest in preventing or detecting unlawful acts.
Tesco Pharmacy services
Tesco processes personal information, including medical information, in connection with pharmacy services and NHS requirements.
Prescription information is used to provide healthcare and is not used for unrelated purposes.
Information relating to non-prescription medicine sales and pharmacy services may be used to measure and plan healthcare services.
Examples include:
- non-prescription medicines;
- weight-management services;
- flu vaccinations; and
- travel vaccinations.
Tesco may also create anonymous aggregated statistics to understand broader patterns, including how participation in weight-management programmes may affect shopping behaviour.
Health information is treated as special-category personal data.
Customers can use NHS mechanisms to opt out of certain uses of NHS information for planning and research.
Options mentioned include:
- the NHS data-choice website;
- the NHS App; and
- the NHS Digital contact centre.
Legal basis
Depending on the activity, Tesco may rely on:
- consent;
- NHS legal or regulatory obligations;
- necessity for medical care or treatment; and
- statistical purposes permitted by law.
Tesco’s legitimate interests
Where Tesco relies on legitimate interests, it states that its interests include:
- meeting customer needs;
- delivering products and services;
- improving online and in-store experiences;
- promoting Tesco products and services;
- promoting products and services from Tesco Group companies;
- supporting retail partners, selected brands, media partners and service providers;
- servicing customer accounts;
- managing Clubcard accounts;
- handling complaints;
- resolving disputes;
- understanding customer behaviour;
- understanding preferences and shopping patterns;
- protecting Tesco’s business;
- protecting colleagues;
- protecting customers;
- protecting shareholders;
- detecting and preventing antisocial behaviour;
- detecting and preventing fraud;
- detecting and preventing other crimes;
- testing new products and services;
- developing new products and services; and
- improving existing products and services.
Tesco states that it assesses these interests against customers’ legal rights and freedoms.
Does Tesco share personal data?
Tesco may share personal data with other organisations, including Tesco Group companies and Tesco Bank, where sharing is necessary for purposes including:
- delivering products or services;
- working with retail partners;
- working with selected brands;
- working with media partners;
- working with service providers;
- establishing legal rights;
- exercising legal rights;
- defending legal rights;
- complying with legal obligations;
- preventing fraud; and
- restructuring, selling or transferring all or part of the business.
Service providers
Tesco uses third-party organisations that help provide and improve its services.
Examples include providers of:
- technology services;
- data storage;
- data combination;
- analytics;
- payment processing;
- order fulfilment;
- legal services; and
- professional services.
Tesco states that personal information is shared only where necessary for the provider to carry out the relevant service.
Tesco may also combine information obtained from service providers with Tesco’s own information to better understand customer purchases and interactions.
Retail partners
Tesco works with retail partners that may:
- sell products or services through Tesco;
- participate in Tesco Marketplace;
- allow customers to earn Clubcard points; or
- allow customers to redeem Clubcard rewards.
Tesco may share information needed for these partners to provide services requested by customers.
Information may also be used with retail partners for:
- marketing;
- analytics; and
- advertising.
Selected brands
Tesco works with selected external brands and organisations to promote products and services that Tesco believes may be relevant to customers.
Advertising may be displayed through:
- Tesco online accounts;
- order-confirmation experiences;
- social media; and
- Tesco marketing emails.
Tesco states that it uses privacy-protective measures when using customer information for this type of advertising.
Measures may include:
- matching customer audiences in ways designed to prevent Tesco and the advertiser from directly viewing each other’s identifiable customer data;
- replacing identifying information such as names with codes; and
- giving advertisers aggregated campaign-performance information.
Customers can opt out of advertising from selected brands using Tesco marketing preferences.
Tesco may also work with brands to generate aggregated insights into:
- overlapping customer groups;
- broad behavioural trends; and
- commercial opportunities.
Direct identifiers are obscured, and the resulting analytics are intended to be aggregated so individuals cannot be identified from the output.
Media partners
Tesco works with media partners for digital advertising.
Partners mentioned include:
- Meta;
- Google;
- Pinterest;
- TikTok;
- dunnhumby; and
- LiveRamp.
These organisations may support:
- advertising delivery;
- audience selection;
- advertising measurement; and
- campaign services.
Targeted advertising on television and streaming platforms
Tesco customers may receive targeted advertising on services such as:
- Sky;
- Virgin Media;
- ITVX; and
- Channel 4.
Targeting may be based on broad shopping habits of the customer or similar households.
Tesco states that, for this activity, it does not share information directly identifying the person, such as:
- name;
- Clubcard number; or
- address.
Tesco also states that it does not provide the customer’s individual purchase history directly to the platform.
Customers may opt out through:
- the relevant television or streaming platform’s settings; or
- Tesco direct-marketing settings.
Advertising to custom audiences
Tesco may create large customer groups, often referred to as custom audiences, for advertising on platforms such as:
- Pinterest;
- Meta; and
- Google.
These audiences may be based on general shopping behaviour and may be used by Tesco, retail partners or selected brands.
Tesco may send limited customer information to the platform so that advertising can be shown to the relevant audience.
Tesco states that:
- information is obscured to protect identity; and
- information supplied for the activity is deleted promptly after use.
Customers can opt out of Tesco’s use of information for custom-audience advertising through Tesco marketing preferences.
Advertising platforms may also provide separate controls for personalised advertising.
Tesco Bank
Tesco Bank is owned by Barclays Bank.
Tesco Bank and Tesco work together in connection with financial products offered to Tesco customers.
Tesco may provide information to Tesco Bank so that application forms can be pre-populated.
Customers are given an opportunity to check or update the information.
Information made available to Tesco Bank may include:
- Clubcard information;
- shopping habits;
- categories of purchases made by the customer or household; and
- online-behaviour information collected using cookies.
Tesco says Tesco Bank may use this information to:
- improve its services;
- understand customer relationships across Tesco businesses;
- improve marketing relevance;
- create customer segments; and
- create scores used as one factor in automated decision-making.
Factors considered may include:
- estimated likelihood of repaying borrowed money;
- frequency of using Tesco products or services;
- shopping preferences;
- whether the person is a Clubcard customer; and
- whether the person already has a Tesco Bank product.
Tesco states that Tesco Bank uses Clubcard information to provide better prices, offers, terms or support, and not to increase prices or reject an application.
Tesco may also receive information from Tesco Bank where Tesco provides shared services.
Examples include information about Tesco Bank products held by the customer for purposes such as:
- awarding Clubcard points;
- improving service; and
- personalising marketing.
Tesco states that only the minimum necessary information is shared.
What about within the Tesco Group?
Tesco Insurance
Tesco Insurance includes Tesco Personal Finance Limited and Tesco Underwriting Limited.
Tesco may provide information to Tesco Insurance to:
- pre-populate application forms;
- improve services;
- understand relationships across Tesco businesses;
- personalise marketing; and
- assess whether a Clubcard customer may receive better pricing.
Tesco Insurance may use Clubcard information such as:
- shopping behaviour;
- household purchase patterns; and
- online behaviour collected through cookies.
Tesco Insurance may also use Clubcard information when a customer obtains a quotation through a price-comparison service.
Algorithms and computer systems may be used to create customer segments and scores.
Factors may include:
- estimated likelihood of repaying money;
- frequency of using Tesco products;
- shopping preferences;
- Clubcard membership; and
- existing Tesco Insurance relationships.
These scores may form one factor within automated decision-making.
Tesco states that Clubcard information is used by Tesco Insurance to provide discounts, better prices or offers.
It states that Clubcard information is not used to increase insurance prices or reject an insurance application.
Tesco Insurance may use name and address information to identify Clubcards linked to the same surname and household address.
Where more than one relevant Clubcard exists, it may seek to use the card associated with the highest household spending level when calculating applicable offers or terms.
Tesco may also receive limited information from Tesco Insurance about products held by customers for purposes including:
- improving services; and
- making marketing more relevant.
Tesco says only the minimum necessary information is shared across the Group.
Tesco Mobile
Tesco makes Clubcard information available to Tesco Mobile.
This can include:
- purchase information linked to Clubcard use; and
- online behaviour collected through cookies.
Tesco says this helps Tesco Mobile:
- improve its services; and
- make marketing communications more relevant.
dunnhumby
dunnhumby forms part of the Tesco Group and is one of Tesco’s major service providers for analytics, customer insight and media services.
dunnhumby helps Tesco:
- analyse customer information;
- understand customer behaviour;
- personalise customer experiences;
- understand sales trends;
- help Tesco, retail partners and selected brands identify groups that may be interested in particular products or offers;
- support advertising delivery; and
- measure retail-media campaigns.
Booker
Booker forms part of the Tesco Group and operates as a wholesale supplier.
One Stop
One Stop is part of the Tesco Group and operates convenience retail and franchise businesses.
Tesco may sometimes share information with One Stop so that customers can be informed about One Stop stores in their area.
How does Tesco protect personal data?
Tesco describes organisational, physical and technical security measures.
These include:
- employee training;
- internal data-handling rules;
- physical security controls;
- electronic security systems;
- encryption when data is transferred;
- encryption of stored information;
- network and computer safeguards such as firewalls;
- limiting access to authorised Tesco employees and trusted partners;
- monitoring systems for weaknesses and attacks;
- penetration testing;
- identity verification before releasing personal information to a requester; and
- displaying only the final four digits of payment-card numbers when confirming orders.
Does Tesco transfer personal data outside the UK?
Tesco states that personal information may be transferred to, or processed by organisations located outside the United Kingdom.
When this occurs, Tesco says that appropriate protections are used so that the information receives protection comparable to that required in the UK.
Safeguards may include:
- transfer to a country recognised as providing an appropriate level of data protection;
- contractual obligations requiring a recipient to protect information to UK-equivalent standards; or
- use of recognised cross-border data-transfer arrangements.
How long does Tesco keep personal data?
Tesco states that personal data is not retained longer than necessary.
In most cases, Tesco says it will not keep personal information for more than seven years after the customer’s relationship with Tesco ends.
Some information has more specific retention periods.
Purchase and payment information
May be retained for up to seven years after the transaction.
Reasons include:
- fraud investigations; and
- legal claims.
Customer complaints and feedback
Deleted four years after the last communication.
Research panels and market surveys
Information submitted through research panels or market surveys is deleted three years after it is created.
CCTV
CCTV information is normally kept for no more than 31 days after creation.
Health and safety records
Health and safety records, including incident reports, are deleted seven years after creation.
Serious disputes and investigations
Where personal information is required for a serious dispute, litigation or investigation, it may be kept until seven years after the matter has been closed.
Clubcard for 16–17-year-olds
This section applies to people who register for or use a Clubcard designed for customers aged 16–17.
Information collected
Tesco asks for date of birth during registration.
This is used to:
- confirm eligibility; and
- recognise when the customer turns 18 so Tesco can invite them to move to a standard Clubcard account.
Other information described elsewhere in Tesco’s privacy policy may also be collected.
Additional protections
Tesco says additional age-appropriate protections are applied.
Certain non-essential uses or features are limited or disabled, including:
- marketing communications;
- online advertising;
- some online-shopping journeys;
- some optional Clubcard features; and
- some types of data sharing.
Cookies
Tesco and its partners use cookies and similar technologies such as:
- cookies;
- tags; and
- pixels.
These technologies are used to:
- operate websites and apps;
- personalise experiences;
- improve customer experiences;
- recognise devices;
- remember information;
- measure interaction with services and content;
- provide online advertising;
- detect fraudulent behaviour; and
- prevent security breaches.
How cookies work
Cookies are small text files that can contain a unique identifier and can be stored on a computer or mobile device.
They allow a website or mobile application to recognise the device.
Some cookies last only for the current visit.
Others remain for longer periods and help Tesco understand interactions over time.
Tesco may also use cookies to record device-related information for fraud detection and security purposes.
Customers can review and change cookie choices using Tesco’s Cookie Settings control.
Data-protection rights
Tesco describes a number of rights available under data-protection law.
Access
Customers have the right to request access to personal data Tesco holds about them.
This is commonly called a Subject Access Request, or SAR.
Tesco provides the following email address for access requests:
subjectaccess.request@tesco.com
Objecting to Tesco’s use of personal data
Customers may object where Tesco relies on legitimate interests.
Tesco says it will consider the objection and balance its interests against the individual’s rights.
Depending on the circumstances, a person may be able to request that Tesco:
- restrict processing; or
- delete the information.
For most direct-marketing uses, Tesco states that it will stop using the information when requested.
Correcting inaccurate information
Customers can ask Tesco to correct personal data that is inaccurate or incomplete.
Withdrawing consent
Where processing is based on consent, a customer can withdraw that consent.
Tesco states that it will stop the relevant consent-based processing after withdrawal, unless another lawful basis applies.
Restricting processing
A customer may be entitled to ask Tesco to limit use of personal information in situations including where:
- a successful objection has been made;
- the accuracy of the information is being challenged; or
- Tesco has used the information unlawfully but the customer does not want it deleted.
Deletion
A customer may be entitled to request deletion in situations including where:
- Tesco no longer needs the information;
- the customer has successfully objected to processing;
- consent has been withdrawn and no other lawful basis applies; or
- the information was processed unlawfully.
Data portability
Customers may have a right to obtain and transfer certain personal information in a portable form where the legal requirements for portability are met.
Tesco directs customers to further guidance from the UK Information Commissioner’s Office for details.
Automated decision-making and profiling
Tesco Stores Limited states that it does not make significant decisions about customers that are based solely on automated processing, including profiling.
Separate Tesco businesses, such as Tesco Bank or Tesco Insurance, may use automated decision-making as described in the relevant sections of the policy.
Complaints
Customers can complain directly to Tesco if they are concerned about how their personal information has been used.
Tesco states that it would like the opportunity to resolve complaints directly.
Customers may also complain to the UK data-protection regulator, the Information Commissioner’s Office (ICO).
Further information about privacy rights is available from the ICO.
Contacting Tesco about privacy
Questions or complaints about Tesco’s use of personal data can be directed to Tesco using the following contact details.
Phone
Postal address
Tesco Customer Service Centre
Baird Avenue
Dundee
DD1 9NF
United Kingdom
Data-protection email
Tesco states that this email address is intended specifically for data-protection matters and should not be used for unrelated customer-service enquiries.
Subject Access Request contact
For requests for a copy of personal data held by Tesco:
subjectaccess.request@tesco.com
Read the full Tesco Privacy and Cookies Policy at tesco.com.
Terms & Conditions
Abridged terms 105935 - F&F Online Relaunch
UK 18+ only. Normal exclusions apply. Mobile phone able to scan a QR code and internet access required. No purchase necessary. Promotional Period: activity is running in participating locations between 2nd and 4th October 2026, from either 9am to 5pm or 10am to 6pm. 1 day per location. To participate, scan the QR code on the promotional strut card at the F&F coffee van and complete the online survey. Show the “thank you” page to a member of staff to claim an 8oz coffee. Coffee options available: Latte, Americano, Cappuccino, Flat White. Decaf and plant-based versions available. Max 1 claim per person. For full T&Cs and participating locations and dates, see stand. Promoter: Tesco Stores Limited, Tesco House, Shire Park, Kestrel Way, Welwyn Garden City, AL7 1GA.
105935 - F&F Online Relaunch Full Terms & Conditions
Please read these terms and conditions carefully. These terms and conditions apply to the F&F Promotion (the "Promotion"). These terms and conditions prevail in the event of any conflict or inconsistency with any other communications, including advertising or promotional materials. Participation/claim instructions are deemed to form part of the terms and conditions and by participating you will be deemed to have accepted and be bound by the terms and conditions.
- The Promoter: Tesco Stores Limited, Tesco House, Shire Park, Kestrel Way, Welwyn Garden City, AL7 1GA.
- Eligibility: This promotion is open to UK (England, Scotland, Wales and Northern Ireland) residents aged 18 years or over, excluding employees of the Promoter, associated agents, or anyone else professionally connected with the Promotion.
- Promotional Period: activity is running in participating locations between 2nd and 4th October 2026, from either 9am to 5pm or 10am to 6pm. 1 day per location.
- Mobile phone able to scan a QR code and internet access required. Participants are reminded to get the owner's permission before using a device and/or internet access which is not owned or paid for by the participant to participate in the Promotion. The Promoter will not be liable for any internet or mobile connection, or other charges incurred in participating in the Promotion
- The participation instructions form part of the rules. By participating, you agree to accept and be bound by the rules.
-
How to participate:
- Scan the QR code on the promotional strut card at the F&F coffee van at a participating location (see clause 18 for list of locations) and complete the online survey;
- Show the “thank you” page to a member of staff to claim an 8oz coffee (“gift”).
- No purchase necessary.
- Only one claim per person. The Promoter reserves the right to determine, in its sole and absolute discretion, whether a participant has already submitted a claim and to disqualify any subsequent claims.
- No third party or bulk participations. If it becomes apparent that either a participant or household is using any means to circumvent this condition such as, and without limitation, acting fraudulently or dishonestly in the opinion of the Promoter or otherwise acting in violation of these terms, these participants will be disqualified, and any gift entitlement will be void.
-
Gift:
- Coffee options available at the van: Latte, Americano, Cappuccino, Flat White, Matcha. Decaf and plant-based versions available.
- The Promoter reserves the right to verify participants and also ask for proof of identity and to withdraw gift entitlement where there are reasonable grounds to believe there has been a breach of these terms and conditions.
- The gift must be accepted as offered by participants. There is no cash or alternative gift.
- The Promoter reserves the right to provide an alternative gift of equal or greater value should circumstances outside its control make this necessary.
General:
- Promoter’s decision is final and binding. No correspondence will be entered into.
- The Promoter reserves the right, at its sole discretion, to eliminate or disqualify any participants that it regards as being in breach of these terms and conditions or the spirit of the Promotion. Those who try and circumvent the participation process by any method, will be disqualified and any gift entitlement will be void.
- Participation in the Promotion is at the participants’ sole risk. To the extent permitted by law, the Promoter does not accept any responsibility for any damage, loss, liabilities, injury, costs, expenses or claims (whether in contract, tort or otherwise) suffered by participants or any third parties arising out of or in connection with the Promotion and/or accepting the gift. The Promoter further disclaims liability for any injury or damage to participants or any other person relating to or resulting from participation with this Promotion save that nothing in these terms and conditions shall act to limit or exclude the Promoter's liability resulting from its negligence or fraud. The Promoter will award the gift as described in these Terms, but the Promoter accepts no responsibility or liability for the participants’ use of the gift.
- The Promoter reserves the right to cancel, amend, withdraw, terminate or temporarily suspend this Promotion in the event of any unforeseen circumstances or technical reason outside its reasonable control, with no liability to any participants or third parties but will use all reasonable endeavours to avoid consumer disappointment. Such circumstances include, but are not limited to: industrial action, civil unrest, fire, flood, storms, earthquakes, acts of terrorism, acts of war, governmental action or any other event that is beyond the control of the Promoter.
- The application and interpretation of these terms and conditions shall be governed by the law of England and Wales and the courts of England and Wales shall have exclusive jurisdiction in relation to any dispute concerning them.
-
Participating locations and dates:
Friday 2nd October 2026, 9am to 5pm – 168 Buchanan St, Glasgow G1 2LW
Saturday 3rd October 2026, 10am - 6pm – Grainger Street, Central Arcade, Newcastle upon Tyne, NE1 6EG
Sunday 4th October 2026, 10am - 6pm – Manchester Arndale, Market St, Manchester, M4 3AD