Download a copy of our latest Article 14 Notice
We work with household brands and public service organisations, such as car manufacturers or local councils, so you receive advertising and information that is most relevant to you. We also try to make sure you aren’t sent marketing about products, offers or services that aren't right for you. For example, someone who doesn't have a garden is less likely to be interested in a lawnmower offer from their local retailer. We also help to make sure that organisations don't send things to an old address if you have moved.
While much of the data we obtain or process doesn't relate to individuals but rather to households, properties or geographic areas, the data we receive and process may include elements that identify you such as names and addresses and this is known as "personal data". We process personal data to allow us to create products and services that help our clients improve their marketing, so you receive communications that are relevant and helpful - whether you’re a potential new customer for a brand, one of their existing customers or, in the context of public sector organisations, a citizen.
You have the right to be informed about the collection and use of your personal data. This is a key transparency requirement under data protection regulation, and we want to make this easy for you.
We've published lots of information and content across this Consumer Information Portal to ensure you're informed of what data we collect and how we use it and so that you can control the use of your personal data. However, this page provides a summary of the important information you should be aware of and where to go to in our Consumer Information Portal to find out more or to opt out.
You can also view our "frequently asked questions" page which is updated regularly by clicking here.
You may know Experian as one of the major UK Credit Reference Agencies. But Experian also have a separate part of the organisation that helps businesses and public sector organisations communicate with you more effectively by turning data into something meaningful for them and which creates benefits for you. This part of the business is called Experian Marketing Services.
Have a question or simply wish to find out more about Experian Marketing Services? Go directly to our Consumer Information Portal where we've published lots of content to ensure you're informed of what data we collect and how we use it and so that you can control the use of your personal data.
You can also contact us via post, telephone or email:
Experian Customer Service Team
Experian Ltd
PO BOX 8000
Nottingham
NG80 7WF
customerservices@uk.experian.com
We process personal data to allow us to create products and services that help our clients improve their marketing, so you receive communications that are relevant and helpful.
Within Experian Marketing Services, the personal data we hold, and process includes:
We do not obtain or use any special categories of personal data, such as ethnicity, nor do we use data such as social media profiles.
We obtain personal data from a number of sources: -
More about the personal data we obtain and the sources of that information can be found in the Personal data section of the Consumer Information Portal.
You can ask us for a copy of the personal data we hold about you in either our Marketing Services business or across our entire Experian business. This is known as a Data Access Request (DSAR). To request a copy of your personal data that we hold, please visit Experian's Data Access Request page or contact our Customer Services Team.
We obtain and process personal data to create products and services that help our clients improve their marketing, so you receive communications that are relevant and helpful.
Personal data held by Experian Marketing Services is used for the following purposes:
We process personal data to create models and segmentations (often called "profiles") which we use to outline the likely characteristics of groups of individuals, households or geographic areas. These models and segments are not actual information about a particular individual or household. Rather, they are about the likely characteristics of all the people and households within a particular group or segment. These profiles allow organisations to make sure their marketing or communication is being sent to people who are most likely to be interested in it or to locate services in the best place.
Whilst the creation of models and segments by our Marketing Services Business will involve profiling, Experian does not make any decisions based on the profiling that we undertake for marketing purposes. We make this information available to our clients who will use it to make informed decisions about their own marketing campaigns.
If you want to know more about our segments, models and profiling see our Dividing things up, creating models and making predictions section of our Consumer Information Portal. This section also provides some examples of how profiling can be used in marketing.
You can ask us for a copy of all the personal data (actual and modelled) we hold about you. This full information request is known as a Data Subject Access Request (DSAR). To request a copy of all the personal data that we hold about you, please visit Experian's Data Access Request page or contact our Customer Services Team.
Our marketing database provides a range of actual and modelled demographic, socio-economic and behavioural characteristics on UK adults and households. This database consists of names and addresses gathered from the sources described in section 2, and brings this data together, ensuring that the data is cleaned, names and addresses properly formatted and validated as being current and relevant industry and internal suppression files applied.
Appended to these names and addresses are a range of actual and modelled attributes and propensities (see Section 3.1) to provide information on the likely characteristics of these individuals and households.
This marketing database is used by us to create relevant groups of individuals or households (sometimes described as "audiences") for direct marketing (and where appropriate permissions exist) to enable our clients to find new customers (see section 3.4); or for analytical purposes to enable our clients to understand more about their existing customers (see section 3.6).
We use the information we hold to make sure the personal data we may have on you is accurate, relevant and up to date. Our marketing suppression & data cleansing services consist of several datasets which enable organisations to clean, update or remove contact records (usually names and addresses) on their marketing database.
These data sets allow our clients to remove or flag individuals in their marketing databases or in their marketing campaigns who can't or won't respond, helping clients to make sure they aren't sending marketing communications to people who have opted out, have moved address, or to deceased individuals. Our data quality and suppression data also helps prevent identify fraud by ensuring that our clients’ marketing campaigns do not fall into the wrong hands.
The data may also be used to provide a new address for an individual who have moved, helping our clients to maintain, or regain, contact with you if you move address. To be added to our forwarding address file, the forwarding address must appear on our prospect marketing database so that we ensure there is an appropriate legal basis for contacting you.
Our credit risk suppressions derived from Experian’s credit refence data, enable our clients who are marketing financial products and services to uphold responsible lending by removing contact information from marketing lists where the financial services being offered are inappropriate to the circumstances of the individual. For example, this helps to protect vulnerable consumers who are unlikely to be able to afford credit products.
We use a combination of suppression data sources, some owned and created by us and others sourced from third parties. The third party sources we use for suppression are described in detail in the Personal data section of the Consumer Information Portal.
For more information on our data cleansing and suppression services see the Keeping contact lists up to date and relevant section of our Consumer Information Portal.
We help organisations communicate with new prospects, their existing customers or citizens across several channels:
Find out more in the Helping businesses find new customers section of our Consumer Information Portal.
To help organisations communicate with you consistently across digital channels, we use our linkage services to enable clients to connect data from these different sources to build up a better picture of an individual or household across all their preferred marketing channels – a marketing profile. Our linkage database is simply a look up of various ways of identifying an individual, the household or area in which they live, such as name, postal address, email address, IP address, customer IDs which our clients share with us, device IDs, mobile telephone number or town. It enables us to apply our models and segments held on our name and address marketing database (see section 3.2) to these other identifiers, such as connecting an email address with a postal address, to build a marketing profile of those individuals. This can then be used to help organisations better understand individuals they already engage with or to help them identify people that may be interested in their products and services, so they can serve relevant adverts across digital channels.
To understand whether your details are on our current marketing file, and if so from where we obtained the data, click on the button below:
Check if you're on our current Marketing Services file
Find out more about our linkage services in the Powering consistent marketing section of our Consumer Information Portal.
We work with organisations to study their own data together with segments and models that we hold to help them with business problems or questions, such how best to communicate to customers or what new products they should design. Using the models and segments that we build linked to information that our clients have on their customers and citizens (where our clients have your permission to share this with us), we can work out the likely characteristics of their customers to help inform their marketing activities.
For more information see the Solving problems using insights from data section of our Consumer Information Portal.
Sometimes, a small group of organisations, often operating in the same market sector, will decide to pool their information to benefit everyone involved, but where no specific personal data is passed between companies in the group. These groups are sometimes known as "data consortiums".
We run a home shopping and direct retailer data pool on behalf of the member organisations to help the group share anonymised and aggregated information and trends that their customers share, so that they can provide you with a better experience.
We do not use this data outside of the member group and at no point is the personal data provided to us by consortium members shared with any other members, nor do the reports we provide to members include data that can be used to identify you directly.
We also operate a digital identity data pool built using data from participating advertisers, publishers and data partners. Experian helps this group share audience data securely without them needing to disclose or move raw data between each other. This helps make the advertising they buy or sell more relevant. It also provides a way in which they can learn about audiences at high level without being exposed to data at a device or individual ID level.
Find out more about the data consortiums that we operate in the Sharing insights across groups section of the Consumer Information Portal.
From time to time we may use the personal data that we obtain for other purposes. These include:
For more detail see the section on Other uses of personal data that we may obtain and process within our Marketing Services in our Consumer Information Portal.
You can opt out of us using your data for some of these purposes by visiting the Your data rights page of our Consumer Information Portal or by clicking on the button below:
Data protection law means that every organisation must have a lawful ground, or reason, for processing any personal information about an individual.
To build our marketing products and services, we process your personal data under a lawful ground called 'Legitimate Interest'. As a marketing services organisation our business is dependent on us being able to process personal data in order to build the products and services that we provide to our clients to help them with their marketing activities. It is, therefore, in our legitimate interest to do so. Our clients have a legitimate interest in finding new customers or delivering the best products and services to existing customers through their marketing activities, using our products and services to make sure that communication with you is relevant and tailored to your likely interests.
When we process your personal information under legitimate interest, we consider your rights under data protection laws as well as any potential impact to you — both positive and negative. We will never place our interests above yours. We will never use your personal data for activities where the impact on you overrides our interests or the interests of our clients.
Whilst we rely on the legitimate interest processing ground to process personal data to build our marketing products and services, like any other business, we are required to comply with many laws and regulations. Where necessary and reasonable for us to do so, we will use your personal data to the extent required for us to comply with these requirements. In such circumstances, the processing ground we rely on is compliance with a legal obligation.
To learn more about Legitimate Interest and examples of where we may process data in compliance with a legal obligation, and our commitments to data privacy click here.
We work with many of the brands and organisations you'll be familiar with across a mix of market sectors. Information held by Experian Marketing Services is disclosed to the following third parties: -
For more information and examples of how we work with organisations in each of these areas see the section on Who uses our services on our Consumer Information Portal.
Our main database is hosted in Nottingham, England and, as such, your personal data will, on the whole, remain within the UK.
However, we also operate elsewhere in the world and may access your personal information from these locations as well. We will also sometimes engage service providers to support our business and they may be based, or use data centres, overseas. Where we or our service providers do so, then we will ensure your personal data is adequately protected.There are different ways that this can be achieved, for example, where it is transferred to a country which has been approved by European authorities as having adequate protection in place or by putting contracts in place to ensure it is protected.
To find out more see How we safeguard and protect your data privacy on our Consumer Information Portal.
We will only keep your personal data for as long as there is a continuing need to do so, and no longer. Below is a description of the retention periods that apply to each category of personal data we hold about you:
Postal Direct Marketing
Contact data obtained from data partners to enable Direct Marketing from our marketing database |
Our postal marketing database is rebuilt monthly to ensure that data held is up-to-date and as accurate as possible. The raw input contact data (names and postal addresses) from our data partners, which is provided to us monthly, is retained for 2 months for back-up purposes to allow for one full refresh of the product to be completed prior to deletion of the input data. The monthly "built" marketing database file is retained and archived for 12 months to allow for the investigation of Data Subject queries. Contact data held within this live database may have been collected by the supplier 0-24 months previously. |
Email Prospect Marketing
Email data obtained from data partners to enable us to create relevant marketing audiences for deployment via email |
Our email marketing database is rebuilt monthly to ensure that data held is up-to-date and as accurate as possible. The raw input contact data (names, postal address and email addresses) from our data partners, which is provided to us monthly, is retained for 2 months for back-up purposes to allow for one full refresh of the product to be completed prior to deletion of the input data. We only retain the live version of the built product. Note: Experian do not provide lists of contact email addresses directly to third party organisations. The sending of the email, to communicate offers from relevant brands or organisations, is sent to a data subject directly by the organisation to whom they gave their consent to be contacted with email marketing offers. |
Insight
Identities, models, segmentations for insight purposes |
Our attributes, propensities and segmentations are linked to the names and postal addresses of UK adults on our marketing database. As above, the input data (names and postal addresses) is retained for 2 months for back up purposes, to allow for one full refresh of the product to be completed prior to deletion of the input data. The "built" marketing database file is retained and archived for 12 months to allow for the investigation of Data Subject queries. |
Marketing Data Quality and Suppressions data |
Any personal data supplied by 3rd parties for suppression purposes is supplied monthly and previous data is then deleted. Our own 'built' marketing suppression files are retained for 2 months after each monthly build (the 'live' and previous version) before deletion. Records added to our NMR (Non-Marketing Request) file, required to suppress data subjects from Experian processing their data for direct marketing purposes if requested, are kept indefinitely. This is to ensure that at any point in the future, Experian data relating to that data subject is not processed for directing marketing purposes (including any profiling that supports direct marketing). |
Credit Marketing Suppressions |
The raw input data is retained for 2 months for back up purposes, to allow for one full refresh of the product to be completed prior to deletion. Historical "built" suppression files are retained for a period of up to 6 years, aligned with the time period required for it to be held within Experian's Bureau Data, and for analysis purposes only by our clients to understand their retrospective risk profile to ensure responsible marketing of credit products. |
Identification of individuals |
Identification data like names and addresses are kept while there’s a continuing need to do so. This need is assessed on a regular basis, and data that’s no longer needed for this purpose will be deleted. However, much of this data requires on-going retention as it helps us to correctly identify unique individuals when we see them from our data suppliers or from clients, regardless of the presentation of names and addresses, and therefore enables us to keep your data accurate and up to date. Identification data also supports 'linkage' to connect our marketing data to digital sources (unless a data subject objects to direct marketing in which case the record is deleted). This helps our clients in making sure the offers and services marketed to you are relevant and consistent across all marketing channels, providing you with a better overall experience. |
Digital advertising database |
Our digital advertising database contains first party digital IDs (typically cookie IDs) and IP addresses. This data is obtained from publishers and advertisers. This database is fully rebuilt on a daily basis which ensures that any choice you may have around opting out is applied in a timely fashion. The first party digital IDs and IP address log are kept for a period of 180 days before being automatically deleted. Our daily full database process ensures records older than this time limit are removed. |
We will also store personal data for an additional period to allow for other things such as research and development, analytics and analysis, for audit purposes and to enable us to establish, exercise and defend legal claims.
For more details on the retention periods that apply to each category of personal data, see the section we only keep your data for a reasonable time on our How we safeguard and protect your data privacy page of our Consumer Information Portal.
Data protection laws give you a number of rights in relation to the personal data held by us about you:
Whilst we consider all data subjects’ rights’ requests individually and on a case-by-case basis, not all of these rights apply to the data we hold in our marketing services. The main rights that are relevant are summarised below:
Opting-out won’t stop you receiving marketing or advertising messages at all (because not all organisations use our services) and it might mean that the messages you receive are less relevant. But this is your choice to make.
For more information on any of these rights or to find out if they apply, go to our Your data rights page on our Consumer Information Portal or you can contact our Protection Officer (DPO) by email at uk.dpo@experian.com.
If you would rather contact us by post, please address this to:
Experian Customer Service Team
Experian Ltd
PO Box 8000
Nottingham
NG80 7WF
If you have any questions, concerns or issues about the way we’re handling your personal data or want to exercise any of your Data Subject Rights (or find out if they apply), please contact our Data Protection Officer (DPO) by email at uk.dpo@experian.com.
If you would rather contact us by post, please address this to:
The Data Protection Officer
c/o Experian Customer Services Team
Experian Ltd
PO BOX 8000
NG80 7WF
After having contacted us, if you're still unhappy with any aspect of how we handle your personal data you also have the legal right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority that regulates handling of personal data in the UK. You can contact them by phone on 0303 123 1113 or by going to their website at www.ico.org.uk.
We hope you have found this helpful in summarising the ways that we obtain and process personal data. However, if you want to find out more, our Experian Marketing Services Consumer Information Portal contains much more information to help you understand who we are, the data we obtain and process, the benefits of relevant marketing for consumers and society, and how to inform us if you wish to stop your personal data being used for marketing. This Portal also contains a page of Frequently Asked Questions.