Privacy Policy

1. Introduction

This website (“Website”) is owned by WDFG UK Limited (hereinafter "WDFG"), a company of the Dufry Group with company number 02872512, whose registered office is at 4 New Square, Bedfont Lakes, Feltham, TW14 8HA.
This Privacy Policy aims to inform you about how we will use the personal data that you provide to us or that we have obtained from you by using the Website (referred to in this policy as “your personal data” or “information”), why we use your personal data in that way, who it will be shared with and other important information. Please read the following carefully.
By using the Website, you accept the terms and conditions of this Privacy Policy

2. Information We Collect From You

We ask you to provide us with information and we also collect information about you when you purchase gift vouchers via the Website.
The categories of information that we receive from you is as follows: contact information and location information.
The categories of information that we automatically collect about you from your use of the Website is as follows: transaction data, location data, information about the mobile device or network, login information (if you set up an account), operating system used to access the Website.

3. Use of Your Personal Data

We use your personal data in the following ways:

Category of personal data

Purpose of processing

Lawful basis we have as controller


Legitimate interest (where applicable)

Retention period

Name, address, email address, and phone number

To provide you with the services that you have requested in the Website and to process your transaction.



Necessary to perform the contract we have with you (and to take steps to enter into it)



Your data will be deleted after 12 months.

Name, address, email address, and phone number

If request to set up an account on the Website


With your consent


We will retain your data, unless you ask us to delete your account


Name, email address

To provide you with electronic marketing communications that you have requested to receive from us and/or the third parties, as applicable


With your consent


We will retain your data, unless you unsubscribe from receiving marketing communications.

Marketing: If you give your consent, we may use your personal data to contact you by email, to send you newsletters or to notify you of special offers or promotions marketed by Dufry or other companies within the Dufry group.
We may send you marketing from third parties with which the Dufry group has commercial agreements, and offer you their products, via email, in our newsletters or to offer you products, offers or promotions through the Website.
If you do not wish to receive email communications from us, please inform us by sending an email to [email protected] or follow the instructions that will be provided in each communication.
We do not disclose your personal data to the third party advertisers on our Website, but we may provide them with anonymous aggregate information about our users. We may also use such aggregate information to help advertisers reach the kind of audience they want to target. We will use your personal data to enable us to comply with our advertisers' wishes by displaying their advertisement to that target audience.

4. Disclosure of your personal data

We may transfer your personal data to any of the third parties listed below.

Category of data




name, address, email, address, and telephone number

Companies within our group of companies


Marketing by companies within our group of companies


We may share your personal data with other organisations if we sell or buy any business or assets (we may share your personal data with the prospective seller or buyer) or if we or substantially all of our company assets are acquired by another party, in which case your personal data will be one of the transferred assets.
Unless required by law, we will not otherwise share, transfer or distribute your personal data without your consent.

5. Transfers to third countries

We do not transfer your personal data outside of the EEA.

6. Where do we store your personal data?

The information that we collect from you will be stored on our secure servers, which are located within the European Economic Area.
We will collect and store personal data on your mobile device or computer using the Website data caches and browser web storage and any other technology for this purpose.

7. Security

We employ security measures to protect the information you provide to us, to prevent access by unauthorised persons and unlawful processing, accidental loss, destruction and damage. When we have provided (or you have chosen) a password allowing you to set up an account for the Website, you are responsible for safeguarding it and keeping it confidential and you undertake not to allow it to be used by third parties.  Unfortunately, the transmission of information via the internet is not completely secure. Although we will do everything possible to protect your personal information, we cannot guarantee the security of any personal information you disclose online. You accept the inherent security implications of using the Internet and will not hold us responsible for any breach of security unless we have been negligent and only within the limits set out these terms and conditions.

8. Retention

We will keep your personal data for the periods as set out in the table at section 3 above, after which time your personal data will be removed from our systems.

9. Cookies

We use cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you use the Website and allows us to improve the Website. For detailed information on the cookies we use and the purposes for which we use them, please see our cookie policy, which can be found in the Website.

10. Rights over your personal data

You have rights in relation to your personal data. These include:

• to be informed about how your personal data will be used (at no cost to you)  – this Privacy Policy seeks to provide you with that information, but if you have any queries or concerns, please contact us;
• access to your personal data (at no cost to you, unless your request is manifestly unfounded or excessive, in which case we can charge you a reasonable fee or not respond to your request);
• rectification – if your information is inaccurate or incomplete, then you can ask us to have it rectified;
• erasure – in certain circumstances, you have the right to ask us to delete your information that we hold. If you would like to exercise your right to erasure, please contact us;
• to restrict processing – in certain circumstances, you have the right to ask us to restrict processing. These include if you contest the accuracy of information we hold about you, and we will restrict further processing until the accuracy of that information has been verified, if you object to our use of your information and we are deciding whether we have legitimate grounds to continue using your information which override your interests, or if we no longer need your information but you ask us to keep it in order for you to establish, exercise or defend a legal claim;
• data portability (at no cost to you) – if you request it (and if it is technically feasible) we will transmit your information from our systems to a third party’s system in a safe and secure way (this only applies to information that you have provided to us for the performance of this agreement or with your consent);
• to object – you can object to our use of your information where we are using it for the purposes of our legitimate interests or direct marketing (and other limited reasons, which are not applicable here); and
• not to be subject to a decision when is it based on automated processing and it produces a legal effect or a similarly significant effect on you.

Where we have asked for your consent to use your personal data in a particular way, and you have given consent, you may withdraw that consent at any time by notifying us in writing at the details provided below.

11. Complaints

You have the right to lodge a complaint with the supervisory authority (the Information Commissioner’s Office) where your personal data has or is being used in a way that you believe does not comply with applicable data protection laws. We encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have.

12. Changes to our privacy policy

We may make changes to this Privacy Policy at any time by posting a copy of the amended policy on the Website. Any changes take effect from the date on which we post the modified terms. Your continued use of the Website means that you agree to be bound by the modified policy.

13. Links to third party applications and/or websites

This privacy policy applies to this Website only and does not apply to other third party applications and/or websites that can be accessed from this Website.
Our Website may contain links to and from the applications and/or websites of our partner networks, advertisers and affiliates. They are merely for information purposes. If you follow a link to any of these applications and/or websites, please bear in mind that they have their own privacy policies and that we assume no responsibility or liability arising from their policies.

14. Contact

To contact us for any reason, including exercising any of your rights in relation to your personal data, please write to the Legal Department at WDFG UK Limited, 4 New Square, Bedfont Lakes, Feltham, TW14 8HA or you can email us at [email protected]