What types of personal information do we collect?

The types of personal information that we collect depends on how you choose to interact with us and can include the following: • Title • Name • Email address • Delivery address(es) • Billing address • Date of Birth • Phone number(s) • Purchase history • Interactions with us such as contacting our Customer Service team, or using one of our instore services e.g. The Tailors • Payment details • Attendance at events • Survey completion • Appointment or reservation bookings and information given during attendance including sensitive personal information such as health information and dietary requirements • Images of you • Lifestyle information such as your interests and hobbies to provide you with a bespoke personal shopping experience. This may include more sensitive personal information such as health information or religious beliefs. • For specific services or to comply with anti-money laundering obligations we will need to collect proof of ID including passport and/or driving licence • For you to collect items at airports we will need to know your flight time/s • Information provided via cookies and similar technologies (please visit our Cookie Policy to find out more)

How we collect your information and how we use it

You provide us with your information directly when you make a purchase, sign up to become a Harrods Rewards member, shop online, use the Harrods app, make a restaurant reservation, or register for a competition, service or event. We also collect elements of your information indirectly. For example, if you instruct Royal Mail to redirect your post, we will receive your updated address information and update our records. Similarly, if we are informed that you are no longer at the address we have on file for you, we will update our records. Our website, the Harrods App and Harrods emails may contain cookies and pixel tags that collect your information to enhance and/or personalise your experience. To find out more about our use of cookies and similar technologies (including pixel tags), please click here . In some of our stores, we have WiFi and Bluetooth capabilities enabled to be able to understand the route that our customers have taken around the store. Please read our Store Analytics section below to find out more. We collect and use information about you to provide you with a luxury retail experience. This includes instances where we use your information in order to provide you with a service or fulfil our contractual obligations to you, where you have given your consent and/or where we have identified a legitimate business interest that helps us deliver a luxury retail experience. Should you choose to take advantage of any of our additional shopping services including Private Shopping and Personal Shopping, you may have a personal shopper (or another member of our retail team) assigned to you. They will collect information relevant to you in order to curate the most exclusive and luxurious personalised retail experience. Please read the Shopping Service section to find out more about how your personal information is used to deliver these services. If you receive beauty treatments at Harrods sites, Harrods will collect contact information and where given, consent for marketing communications. Your personal data will be shared with the treatment provider that you have booked to receive treatment from. Full details of how your personal information will be used can be found on your treatment booking and/or registration form. For more information about how we use your data in the Wellness Clinic please click here . Read on to find out more about what personal information is collected when you interact with us.

Information collected when you make a purchase

When you make a purchase at any of our retail outlets or online, we will collect necessary information about you to ensure we can fulfil your order or chosen service. If you choose to pay by card, we will need to collect your payment information in order to process payment. We may ask for additional information from you for a number of reasons: for example, to prevent fraudulent transactions; to comply with anti-money laundering obligations for high-value transactions; or to ensure that we comply with our legal obligations such as age restrictions applicable to the sale of guns, knives or alcohol, or the legal requirement to share your details with TV Licensing when you purchase a television. When you place an order with us for products or services that will be delivered, collected or provided at a later date, we will need to take additional contact details and delivery information from you so that we may complete your order. We may use third-party services to deliver your order and will need to share your contact information with them for this purpose.

All visitors to our Knightsbridge and H beauty sites are invited to take advantage of the free Wifi, which is provided through an external provider, Purple. The Wifi can be accessed by signing up with your email address. You may also choose to sign up to the Harrods Rewards programme at the time of signing in to Harrods Wifi. Your email address will be shared with both Purple and Harrods. To view the Purple End User License Agreement please see here . If you have downloaded the Harrods app you will have access to our Knightsbridge Store Guide, which uses Bluetooth technology to help you find your location and plan your route around our Knightsbridge store. If you have Wifi capabilities switched on and/or Bluetooth enabled with the Harrods app open, we will collect location information from your device about the route you took around the store. Harrods uses this information to understand the more popular routes and destinations chosen by our customers so that we can improve our navigation strategy and customer experience. If you want to disable this functionality, please turn off Wifi, Bluetooth and location services in your device settings when you visit our Knightsbridge store. To make your journey around our store more comfortable, we are continuously looking for easier ways to navigate our Knightsbridge store. While you are walking around the Knightsbridge store, we collect thermal footfall information to better understand visitor journeys and visitor ‘traffic’ levels across different parts of the store. We also have facial-detection software at Door 3 and Door 5 of the store to measure visitor engagement with our digital advertising screens. A camera in the screen detects if a passer-by is looking at the screen. Please note: Harrods only uses this information at a general level to understand customer footfall patterns and to provide our advertising partners with information about how many individuals look at their advertisements. This information is not used for the purpose of identifying you individually, and any personal information is not retained.

For your safety, and the prevention and detection of crime, CCTV is in operation during your visit to the store, any of our retail outlets including all H beauty sites and our outlets at Heathrow and Gatwick airports. Please note: if the police or any other regulatory or government authority investigating suspected illegal activities requests CCTV footage which includes images of you or any other personal information relating to you, we are obliged to comply.

Our website is managed by Farfetch Platform Solutions Limited on our behalf. Harrods remains the Data Controller for personal information collected through our website. When you visit harrods.com, we collect information about your device to help drive innovation and improve user experience. Information can be collected through your IP address or through cookies placed on your device. Some cookies are needed for the proper functioning of the website. Cookies are used for purposes including the storage of items in your shopping bag; the recognition (anonymous) that you are signed in; and the determination of your currency, dependent on preferred delivery location. Other cookies are used for analytic purposes which help us understand how and when you first visited our site, the frequency of your visits and the duration of time spent on our site. We also use cookies to track your journey around the site and may share this with our brand partners where applicable. Analytical cookies also determine when we should surface our email marketing invite pop-up to you. This technology allows us to remember you, so if you have previously visited the site, we are able to recognise you as a returning visitor. If you have already signed up to receive marketing emails, you will not see the pop-up unless you disable the relevant cookie. We try to provide a seamless personalized experience for our customers, by combining details of our relationship with you in-store and online, including the guest checkout service in our records, even if you use different devices online, through your Rewards Programme membership number and/or device identification. Finally, some cookies are used to provide you with personalised advertisements when you visit other selected websites, following your visit to harrods.com. These advertisements will be in the form of ‘banner advertising’ and will show you products that we believe you will be interested in, based on your browsing history on our website. For more information about how Harrods uses cookies, please refer to our Cookie Policy . When you make a purchase on harrods.com, we will collect information about you to fulfil your order or chosen service; this information includes your name, contact details and delivery address. You will be offered the opportunity to use our Guest Checkout path or to create an online account on our website. In order to register an online account, we will ask you for your name and contact details. You will also be asked to create a password and have the option of linking your existing (or registering for) Harrods Rewards membership. Once you have created an account, this will serve as a platform to update your marketing preferences through the Preference Centre .

Joining the Harrods Rewards Programme

Should you become a Harrods Rewards member, you will be eligible to receive certain membership benefits including points redemption to spend in-store, a birthday treat, a subscription to receive some of Harrods magazine publications, complimentary tea and coffee, free delivery or special discount days. Your information will also be used in-store to check your eligibility for each of our benefits, and to track your usage so that we can monitor customer engagement to improve the Harrods Rewards programme and related services. If you choose to opt-in to receive marketing about Harrods Rewards, we will also contact you about your membership benefits and other news or offers of the programme (which may be dependent on your Harrods Rewards membership tier). We may analyse the personal information that you supply to us including sharing this with third parties who help us understand our customers. From time to time, we may also collect additional information about you from these and other third parties. Whilst this information is not essential to operate the Rewards programme, it enables us to learn more about you and provide you with a more tailored and personalised service. If you would like to stop Harrods collecting and using this information about you in this way, please contact us at data.protection@harrods.com . As part of the Harrods Rewards programme, Harrods operates the Mini Harrods programme, which offers parents and/or legal guardians additional exclusive benefits, promotions and events tailored towards children up to the age of 10. If you choose to take advantage of the Mini Harrods programme, we will ask you to register each individual child’s details (including their name and age details). Each child’s Mini Harrods record will be deleted after their 11th birthday. Harrods will only collect personal information of children in relation to the Mini Harrods programme and events for children aged under 13 with parent or legal guardian consent. In the event that we learn that we have collected personal information from anyone under the age of 13 without parental consent, we will delete it immediately. From time to time as a Rewards member, you will be emailed by us with a request for anonymous feedback about your experience visiting us. This is within our legitimate business interests. Your feedback is used to improve the experience we provide and is anonymous. Harrods also has partnerships with third party brands whereby Rewards points can be earned through your use of the third party’s products or services (for example the Harrods American Express card). To deliver this service Harrods and the third party will share your necessary personal information to ensure that your Rewards account is appropriately credited.

Harrods Shopping Services

In order to deliver the best possible customer experience, Harrods offers a variety of shopping services which are available in-store or remotely. Customers use these services to order products, check product availability, request product related advice and/or for a more bespoke shopping experience. Personal Shopping is a service available to Rewards members. Customers that use our Personal Shopping service receive individual contact from a member of our retail team in order to fulfil their request. Clientelling refers to an informal personal relationship initiated between a customer and a member of the Harrods retail team. The Private Shopping service is a by-invitation only service which provides customers with access to a bespoke one-to-one shopping experience via a dedicated private shopper. To find out more information about how Harrods uses your data to provide the Private Shopping service, please contact your private shopper directly. Use of these services may involve you sharing additional personal information about yourself with Harrods. This is so that we can tailor your shopping experience with recommendations of products and services that may be relevant to your lifestyle and preferences. We understand that as part of this, you may share with us sensitive information about your personal circumstances, or festivals and holidays that are important to you. Harrods will always ensure that we have your consent to use this sensitive information as part of these personal shopping services. The level and content of the information that you provide to Harrods and the communications that you receive as part of these personal shopping services are always set and agreed to by you. Please note, the preferences related to your personal shopping arrangements are not part of Harrods’ general marketing communications and cannot be managed through the Preference Centre . In order to secure a purchase for you, we may also provide your personal details to our brand partners operating in-store (and in our other retail outlets), in which case the use of your information will be subject to those brand’s privacy policies. If you are unsure, please ask your shopper to confirm whether your information needs to be shared with the brand in order to secure the purchase, and if it is the latter ask for details about their privacy policy.

Competitions, Prize Draws, Giveaways, Offers, Events and Surveys

When you participate in a Harrods competition, prize draw, giveaway or offer, or sign up to attend one of our events, either in person or online directly with Harrods or indirectly through a third party, we will collect information about you. This information will be used to administer competitions and manage events, including securing your registration, selecting and contacting prize winners, and any post event actions, e.g. surveys. We may also use this information to help us to plan future events or provide a better customer experience. If you provide the personal information of another customer for one of our events, we will assume you have the consent of any named individuals to provide their personal information for these purposes. We will delete your personal information when no longer required in connection with the promotion or event or your other interactions with Harrods. From time to time our brand partners may manage their own promotions and events from our stores however please note that the use and management of any personal information that you provide directly to them will be governed by their separate privacy policies. Full details of our event-management partners’ privacy policies can be found on their website or on event registration. Harrods may issue surveys to support customer analysis and insights into our products and service delivery, where personal data is collected it will be retained for no longer than is required.

We collect and use information about you when you make a restaurant reservation at one of our Harrods Restaurants. You provide us with your information directly when you make a restaurant reservation via a phone call or online, using our reservations platform which is operated by an external partner Seven Rooms. You also provide us with your information indirectly if a restaurant reservation is made via a third party such as OpenTable or The Fork. When making a reservation you may choose to share information relating to your meal preferences, any food allergies, and special occasions. Personal information which you provide when you make a restaurant reservation indirectly via a third party will be shared with us for the purposes of facilitating your restaurant booking. If you have made a reservation through OpenTable or The Fork, your personal information will be handled in accordance with their respective Privacy Policy which can be accessed by visiting their websites.

How do we keep your information secure?

The security of your personal information is of utmost importance to us. We use appropriate security measures to protect it against any loss, destruction or unauthorised use. Information you provide to one of the Harrods Group companies may be shared within the rest of the Harrods Group. We also work with trusted third parties to help us deliver an excellent service to you. We require all third parties that interact with Harrods’ information or customer data to undergo an information-security due diligence assessment. This is to ensure that information is only shared with third parties who have appropriate security measures in place. Our website uses software to provide high-level encryption technology although, unfortunately sending personal data over the internet is not secure and as such, we cannot be held responsible for it. We strongly encourage you to never send any sensitive information, such as passwords or credit card information, via email, or messaging services e.g.: SMS, WhatsApp. In creating a password to access certain parts of our website, you are responsible for keeping it secure and confidential. Please do not share a password with anyone. We do not sell customer information and will not share your information with any third parties for the purposes of marketing their goods and services to you without your consent.

How can you manage the information we hold about you?

We are committed to ensuring that you remain in control of your personal information and that you are aware of your rights in relation to it. The easiest way to contact us about your personal information is to email: customer.service@harrods.com where a member of our customer service team will respond to your request. To contact Harrods Data Protection Officer, please email: data.protection@harrods.com . If you are in the EU, you may also contact our representative by emailing EURepresentative.Harrods@twobirds.com , or by writing to us at: Bird & Bird GDPR Representative Services SRL Avenue Louise 235 1050 Bruxelles Belgium You are entitled to make a request about your personal information covering the following: • Access to your personal information (subject access request). You can ask to see a copy of the personal information that we hold about you. Please note: we may need to exclude certain information from your request for the protection of other individuals’ privacy, or because we are permitted to exclude information for legal or other reasons justified under the Data Protection Act 2018. • Deletion of your personal information • Amendment of inaccurate or incomplete information that we hold about you • Restriction of how we are using your personal information • Transfer of your electronically held personal information to another organisation or directly to you (the right of portability) • To ask us to stop using your personal information at any time • You have the right not to be subject to a decision when it is based on automatic processing, including profiling, which results in a serious negative impact to you Where we have relied on your consent to use your personal information, you can withdraw consent at any time. If you are unhappy with how we use your personal information you have the right to complain to the Information Commissioner’s Office ( www.ico.org.uk ).

Managing your Marketing Communications

At any point that you interact with us, you may be given the opportunity to opt in to receive Harrods marketing communications. We will only send you marketing communications when you have consented to receive them, using your preferred channels of communication. As part of our commitment to exceptional customer service, we will use your previous spending behaviour and any marketing interests that you may have selected via the Preference Centre , together with any other relevant information that we may hold on you to provide a personalised marketing communications experience that is tailored to you. Please note that by unselecting a particular interest, the communications that you receive from Harrods may still include some content about those interest areas as part of our general marketing communications. Please also note that you may also not be eligible to receive all types of communications that you have opted in to. To understand more about the criteria we use to determine which marketing communications you receive, please contact our Customer Service team. To ensure that you are happy to continue to receive marketing communications, we will periodically notify you of your right to manage your marketing preferences (or ask you to re-subscribe) depending on the type or level of interactions and engagement that you have with Harrods: • If you have not updated your marketing preferences in the two years since we last obtained your consent (or been notified of your right to manage your marketing preferences), but have made a purchase or attended an event during that two year period, or engaged with our marketing emails in the 6 months prior to that two year period expiring, we will send you a reminder of your right to opt-out of marketing communications. If you do not opt-out, we will continue to communicate with you in the same way until you indicate otherwise or until your account is deleted. • If you have not updated your marketing preferences, made a purchase or attended an event in the two years since we last obtained consent and if you have not engaged with our marketing emails in the 6 months prior to that two year period expiring we will ask you to re-subscribe to continue to receive marketing communications from us. If you do not re-subscribe, we will stop sending you marketing communications. If you have given us your email address or mobile phone number and agreed to receive marketing communications from us, we may supply this information to digital advertising or social media companies, including Facebook, Google, Instagram, Pinterest, and YouTube. These companies work on our behalf to identify individuals with similar characteristics to our customers, and provide these individuals with advertising content from us. We also work with these companies to target or retarget you directly with advertisements that we believe you will be interested in. The information we provide to these digital advertising or social media companies is limited to email address or mobile phone number and is always provided in an encrypted format. We use your personal information in this manner as it is in our legitimate interest to advertise to you and to potential new customers. This use of your personal information allows us to understand more about your behaviour and use the information to provide you with more personalised advertisements. If you would like to stop Harrods using your information in this way, please contact us at data.protection@harrods.com . If you would prefer not to see targeted advertising on social media, please refer to the instructions provided by Facebook, Google, Instagram, Pinterest, and YouTube. If you choose to provide your personal details to any of our brand partners instore or online via our website, the use of that information will be governed by those brand partners’ privacy policies and cannot be managed through Harrods or our Preference Centre . Where personal information is collected for use by a brand partner online, you will be provided with a link to the relevant brand partner’s privacy policy. If in store, please ask the relevant sales associate for details about the brand partner’s privacy policy. The easiest way to manage your communication preferences is by creating an account on our website and logging in to the Preference Centre . Alternatively, you can contact our Customer Service team either in-store, through Harrods.com, see the Contacting Us section below. You can also unsubscribe from individual email or SMS marketing communications via the ‘Unsubscribe’ or ‘STOP’ action contained in our marketing communications. It can take up to four weeks for your preferences to be registered on our system, so you may still receive communications from us during this period.

How long will Harrods retain my personal information?

We will retain your personal information only for as long as is necessary, or where we have a legitimate interest or lawful purpose to do so. If Harrods no longer needs to retain certain personal details, for example to carry out analytical and research activities, where possible we will delete personal details about you. The type or level of interactions or engagement that you have with Harrods will determine how long we retain your personal information. For example, we will retain your personal information in connection with the provision of goods and services described in this policy, for as long as you have any accounts with Harrods (including Harrods Rewards), and/or if you have signed up to receive any marketing from Harrods. Unless required by law, we may retain your personal information for a period of up to 6 years after your last interaction or engagement with Harrods. For more information relating to the retention of your personal information, please contact data.protection@harrods.com .

When you contact Harrods through any channel (including by phone, post, email, chat message or social media), we will collect information about you in order to respond to your query, request or feedback. Please note that if you contact Harrods via any messaging or social media channels such as WhatsApp, Facebook and Instagram, your personal information will be handled in accordance with their Privacy Policies which can be found by visiting their websites. Please note: If you contact Harrods by phone, your call may be recorded for quality, training and security purposes. Additionally, calls may be monitored (without your consent) to allow Harrods to collect information for security and regulatory purposes. Harrods Customer Service: Contact Us and chat (quoting ‘Security & Privacy Enquiry’) by phone: +44 (0)20 7730 1234 or by Email: customer.services@harrods.com .

The Harrods Group includes Harrods Limited, Harrods Beauty Limited, Harrods International Limited, Harrods Estates Limited, Harrods Aviation Limited and Air Harrods Limited. Please note: we may share information regarding Harrods Rewards account customers with these Group companies. Please visit the Harrods Estates and Harrods Aviation and Air Harrods websites for details of their separate Privacy Policies.

How will I know if the Privacy policy changes?

If we change the way in which we use your personal information we will notify you within the communications that you already receive. Any future changes to our Privacy Policy will be updated online at harrods.com with the date of the latest update displayed below. We encourage you to check this site periodically to learn about the information that we collect, use and share. The Privacy Policy was last updated: May 2022

Privacy Policy | Harrods.com

Security & Privacy Policy

Using your personal information in a way that you are comfortable with and keeping your information secure is an integral part of the luxury retail experience we aim to provide. Harrods will ensure that data protection and consumer legislation standards are met when handling any of your personal information.

References in this Privacy Policy to ‘we’, ‘us’ and ‘Harrods’ are to Harrods Limited (company number 30209), Harrods Beauty Limited, trading as H beauty (company number 00099442), and Harrods International Limited, (company registration number 00676533) registered offices 87–135 Brompton Road, Knightsbridge, London SW1X 7XL. Harrods Limited is a registered information controller with registration number Z603738X. Harrods Beauty Limited is a registered information controller with registration number ZA787790. Harrods International Limited is a registered information controller with registration number Z4978925.