On the 25th May 2018, not only did the UK General Data Protection Regulation (UK GDPR) come into force, but also the UK Data Protection Act 2018 which enhances our responsibilities towards the way we process your personal data as well as strengthening your rights. Our short guide explains everything that you need to know.
In our privacy notice, we explain how UK GDPR applies to you and your relationship with TalkTalk. It reflects our open and honest approach to collecting and using your personal information.
In summary, it covers what information we collect, how we collect it, how we use the information, who we’ll share it with and what your rights are.
Don't worry, GDPR is really easy to understand once you've got to grips with the basics. Here's everything you need to know, without the confusing legal jargon.
Choose from the below for more information about your data and how we use it.
UK GDPR means you have increased rights over, and access to, the information we hold about you. You may exercise these rights free of charge and we'll fulfil your request within one month.
You can request a copy of the information we hold on you ( such as personal data, call recordings, notes, contracts & copies of correspondence) by completing a subject access request. It’s free-of-charge to request your information. However, if your request is deemed excessive, we may request you to make a payment or refuse to respond.
You can request your information in a way that suits you. Our live chat team are happy to help with any queries or if you want to write to us, please use the following address:
Data Protection Office
TalkTalk (Compliance)
PO Box 673
Salford
M5 0NH
Remember to include enough information for us to identify your account and ensure we can verify you are authorised to access this information.
Your request will be processed within one month upon receipt of all of the above. For more complex requests we may extend our handling time for a further two months. If we need to do this we will let you know. Once processed we’ll post your information back to you, it will be printed and/or burned onto a password protected disk or encrypted USB stick. Please note that your password will be sent separately.
Yes, but only if you’ve previously added them as nominated user or power of attorney on your account. For more information about these services, check out About Power of attorney and Nominated Users.
In certain circumstances, you have the right to have your personal data erased. This right is not absolute and only applies in certain circumstances. You can submit your request in a way that suits you. If you want to write to us, please use the following address:
DataProtection Office
TalkTalk (Compliance)
PO Box 673
Salford
M5 0NH
Remember to include enough information for us to identify your account and ensure we can verify you are authorised to access this information.
Yes, but only if you’ve previously added them as nominated user or power of attorney on your account. For more information about these services, check out About Power of attorney and Nominated Users.
Under the new privacy laws, you may ask us to port your personal data to you, which you could then use to move your service to another provider.
Within the telecommunications industry, we already help customers to move or port their telephone and mobile numbers to different providers. Beyond this, there is no agreed or standard format for personal data files to be shared across internet service providers. At the moment, it’s therefore unlikely that you’ll be able to use this file with another provider.
For technological and security reasons, we do not currently accept these files from other providers.
The following information will be included in a csv file which is generated when you download your data file:
You can download your data file My Account. Remember to only download your data file on your own computer rather than a shared computer where someone else could see your personal information.
You have an absolute right to stop your personal data being used for direct marketing. You can update your marketing preferences at any time in My Account.
You can also object if the processing is for our legitimate interests (or those of a third party). For more information, see Legitimate Interest Groupings to see where we use legitimate interests. You should give specific reasons why you are objecting to the processing of your data based upon your particular situation.
In these circumstances, this is not an absolute right, and we can continue processing if we can demonstrate compelling legitimate grounds for the processing, which override your interests, e.g. we need it for the exercise or defence of legal claims.
You can register your objection by contacting us. When registering your objection please be aware that, depending on the processing you're objecting to, this may impact the relevance of any communications we can send to you e.g.:
You have the right to have your personal data rectified if it is incomplete or incorrect. Updating customer details and records is an everyday part of our business processes at TalkTalk.
If your personal data changes or you identify an error in any personal data we hold, speak to our customer service teams or update your records in My Account. In some instances, we may require additional evidence to prove your identity before applying changes. We will let you know if this is the case.
In order to meet our obligations under privacy laws, we need consent to market to individuals. We won’t be able to contact individuals directly about any new products we launch, or promotions and offers that are relevant to them, if we do not have such consent.
You will be able to update your consents at any time through a variety of methods:
You can also choose how we contact you, for example by email, telephone or SMS.
You have the right to object to us processing your personal data in certain circumstances, e.g. if we are processing it for legitimate interests* or for direct marketing, including profiling.
When you do register an objection, please be aware that this may impact what we can do with your personal data e.g.:
Additionally, you have the right to request that we restrict the processing of your personal data. E.g. if your personal information is not accurate
To register your objection, simply request this when speaking to an advisor or in My Account.
If you have any questions or requests in relation to UK GDPR, please get in touch and we’ll make sure you get the answers you need.
We appreciate you stopping by to read our Privacy Policy; we've tried to keep it as straight forward as possible.
Personal data is any information which relates to you. From your name and address to account numbers, bank details and IP addresses. Any information that can identify you as an individual can be classed as personal data.
Personal data is used by organisations from your employer storing your personal details at work, to how your favourite companies targets you with their promotional offers. Under UK GDPR & DPA 2018, businesses are required to take greater care over your personal information and how it's used.
We need to process your personal data for a number of reasons and we only collect and use the personal information we need to efficiently deliver the goods and services that you want from us. Here are just a few of the reasons why we need to retain your data:
The length of time we retain your data depends on the nature of the of the personal data and the reason we are obliged to hold it for. We'll only keep your data for as long as we’re required to do so by law.
As an organisation we don’t always need your consent to use your personal data; we can use it without consent if we have a valid reason. These reasons are known as a lawful basis and there are six lawful bases we can use:
You can find more information about this in our Privacy Policy.
We only collect and use the personal information we need to efficiently deliver the goods and services that you want from us. Plus, we’ll only keep your data for as long as we’re required to do so by law.
We need to transfer your personal information to our trusted and approved partners/suppliers so that we can provide and deliver you the best service. We have ensured that all the necessary safeguards are in place to protect your personal information. Where we share your information with third parties, they are required to follow our instructions in respect of the use of your personal information and they must comply with all applicable UK data protection laws to protect your information and keep it secure.
There will be times we may contact you with details on special promotional offers such as TV boost offers or products like our latest Wi-Fi Hub that we think you would be interested in. We will contact you via email, telephone, SMS or post or from our specially selected third parties. If you do not want to receive these communications, you can opt out in the following ways:
You can get answers to any of your questions in a way that suits you. Our live chat team are happy to help with any queries or you can write to us if you prefer.
Please send any questions you have about our Privacy Policy to the below address:
Data Protection Officer
TalkTalk
Soapworks
Colgate Lane
Salford
M5 3TT
For any queries about your Information Rights, including Subject Access Request, please write to us at the below address:
Data Protection Office
TalkTalk
PO Box 673
Salford
M5 0NH