Privacy Notice – Nestlé Nutrition
Nestlé respects your right with regards to data privacy and data protection when you communicate (online or offline) with us through our various websites, mobile applications, offline programs and events. We have therefore developed this Privacy Notice to inform you how each Nestlé related entity in the UK & Ireland (unless stated otherwise - “Nestlé”, “we,” or “our”) collects, stores, uses, shares, processes and protects the personal information about Health Care Professionals (HCP’s) (“you”). It also tells you how you can access and update your personal information and make certain choices about how your personal information is used.
By using our websites, applications or by otherwise giving us your personal information you are accepting the practices described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not use our websites or applications or give us any of your personal information. We reserve the right to make changes to this Privacy Notice at any time. Any changes will be posted in this Privacy Notice and material changes will be prominently notified on the respective website or application this Privacy Notice applies to or will be otherwise communicated to you prior to the change becoming effective. We encourage you to regularly review this Privacy Notice to make sure you are aware of any changes and how your information may be used.
Please be informed that the Nestlé related entity in the UK or Ireland which operates the website you are visiting or service you are receiving (as the case may be) is the Data Controller of any personal information you submit to Nestlé. If you have any queries over who is your Data Controller please contact our Careline on 0800 0818180 (UK) or and 1800 931832 (Ireland).
If you have any requests concerning your personal information or any queries with regard to this Privacy Notice please contact our Careline on 0800 0818180 (UK) or and 1800 931832 (Ireland).
For a detailed description of our privacy practices, please click on any of the questions below.
- 1. What does this Privacy Notice apply to?
- 2. What information do we collect?
- 3. For what purpose do we use your personal information?
- 4. How do we protect your personal information?
- 5. What happens if you refuse to provide your personal information?
- 6. Who do we disclose your personal information to and why?
- 7. How can you access, modify, or make other choices regarding the use of your information?
- 8. Tracking Technology – How and why do we use it?
- 9. E Marketing - What is spamming and what is our position on spam e-mails?
- 10. How long do we keep your personal information?
- 11. Do we link to other third party sites?
- 12. How can you contact us?
- 13. Can Nestlé change the terms of this Privacy Notice?
This Privacy Notice applies to personal information that we collect from or about HCP’s through the methods described in this section.
Please note we may combine personal information that we collect via one method (e.g., a website) with personal information that we collect via another method (e.g., an offline event). We do this to get a more complete view of our HCPs, which, in turn, allows us to serve you better and with more customisation.
1.1 Nestlé websites
This refers to any HCP-directed websites operated by Nestlé, including websites that we operate under our own domains/URLs and websites that we run on third party social networks such as Facebook (e.g. Facebook fan page).
1.2 Nestlé mobile sites/applications
This refers to any HCP-directed mobile sites or applications operated by Nestlé, including our smartphone apps (e.g., iPhone apps).
1.3 Nestlé text messaging programs
This refers to any HCP-directed text messaging programs operated by Nestlé. These programs might be advertised on one of our websites or applications or in a print ad.
1.4 Offline registration cards
This refers to printed registration and similar cards that we may collect from HCP’s via postal mail, or other offline events.
This refers to personal information that we may collect from HCP’s through our Careline, for example if you call us with a question, or comment or to sign up for communications over the phone.
1.6 Data from other sources
This refers to personal information we may obtain about you from other sources. For example, we may hire a third party data aggregator to provide us additional information about existing HCPs (this is known as “data appending”) or we may use a third party to collect HCP data. We may also receive information from third party co-sponsors who we may occasionally partner with to run special events. We may also receive information about HCP’s when we acquire other companies or businesses.
For our core Health Care Professional (HCP) database, this is obtained from our 3rd Party data provider IMS Health UK Ltd.
Depending on how you interact with us (online, offline, over the phone, etc.), we may collect from you various types of information (personal and aggregate), as described in this section.
Personal information (as used in this Privacy Notice) refers to such types of information that can be used to personally identify you, whereas aggregate information does not allow for such identification on its own.
In some instances (and unless we say otherwise below), we may combine/link one type of information with another type of information (e.g., personal contact information with account login and/or demographic information) and store them together in our records. In cases, where personal and aggregate information are combined, such information will always be considered as personal information. We strive to limit the amount of personal information we collect and store to that which is reasonably necessary to provide you the relevant services. We generally store your personal information for as long as your account is active with us or as needed to provide you the relevant services. We may store your personal information for a longer period of time to comply with legal or regulatory obligations, resolve disputes, enforce our agreements, or for records management purposes.
2.1 Personal contact information
This includes any information that would allow us to personally contact you, such as your name, profession, home, work or mailing address, phone number (home, mobile phone, etc.), or email address. In some cases, this could include personal information that you give us about someone else (for example, if you provide a colleague’s email address for a tell-a-friend/colleague program). We typically collect personal contact information in connection with a variety of activities, including general website registration, newsletter sign-up, website community features, customer service inquiries and HCP surveys. If you create an account with us, your personal contact information may be stored under your account profile.
2.2 Account login information
This refers to any information that is required for you to establish a unique account with us or for us to give you access to your specific account profile. Examples may include your login ID/email address, screen name, password, and/or security question and answer. We only collect unique login information for those activities that require an account, such as general website registration, newsletter sign-up, and website community features. Your login information, especially your password, should be kept confidential and never shared with anyone else. To change your login email address or password, log in to the relevant edit account section of our site (if available) or contact our Careline on 0800 0818180 (UK) or and 1800 931832 (Ireland)
2.3 Demographic information
This includes any information that describes your demographic or psychographic characteristics. Examples may include your date of birth, age or age range, gender, geographic location (e.g., post code, city and state, mobile location). We typically collect demographic information in connection with a variety of activities, including general website registration, newsletter sign-up, website community registration and HCP surveys. If you create an account with us, you may be allowed to modify certain demographic information stored under your account. To do so, log in to the relevant edit account section of our site (if available) or contact our Careline. For demographic information stored under your profile on a third party social network (e.g., Facebook), see separate paragraph on “Social network info.”
2.4 Technical computer information
2.5 Website usage information
2.6 HCP feedback
This includes information that you voluntarily share with us about your experience in using our products and services, including our websites and applications. Examples may include unsolicited comments and suggestions, testimonials or other questions or feedback related to our products or services. We typically collect this information in the form of HCP surveys, HCP panels, contact forms, “Ask the Expert” forms, and email correspondence and other offline interactions.
2.7 Social network information
This refers to any information that is part of your profile on a third party social networks and that you allow the third party social network to share with us. Examples include your basic account information (e.g., name, email address, gender,current city, profile picture, user ID, etc.) and any other additional information or activities that you permit the third party social network to share with third party application developers. For example, we may receive your social network profile information (or parts of it) every time you download or interact with a Nestlé web application on a social network such as Facebook or Twitter or every time you use a social networking feature that is integrated within a Nestlé website (such as Facebook Connect). To learn more about how your information from a third party social network may be obtained by us (or other third party application developers); please visit the website of the relevant social network. You further acknowledge using your personal information to match information with a social network for advertising purposes.
2.8 Other information (depending on context)
This refers to any other information that we might need to collect for a specific Nestlé form, feature, or other service that you use or request. What this information includes will vary depending on the method of collection and the specific purpose(s) for which the information is being collected. Please see Question 4 “For what purpose do we use your information?” for more specific examples.
The following paragraphs describe the various purposes and features for which we might collect and use your personal information, and the different types of information that might be collected from you through the different methods described in Question 1 above. Please note that not all of the uses below will be relevant to every HCP.
3.1 Account maintenance
We may use your personal information to maintain your accounts with us. This typically involves the use of personal information that was originally collected to set up your account (e.g., personal contact information, account login information, demographic information, etc.).
We may collect and use your personal information to provide you customer/Careline services, including responses to your inquiries. This typically requires the collection and use of certain personal contact information (such as your name or email address) and information regarding the reason for your inquiry (e.g., technical issue, product question/complaint, general question, etc.). The Careline team may be provided through various forms of communication, including email correspondence, call centre support, and live online chat features.
3.3 Product improvement and customisation
We may collect and use your information so we can constantly improve our products, tailor them to your needs, and come up with new product ideas. This mostly involves the collection and use of demographic information and HCP feedback.
3.4 Marketing communications
We may collect and use your personal information to send you marketing communications, such as email communications, SMS text messages, and postal mailings. Please note that if you choose to receive SMS text messages, your mobile service provider’s fees for messaging will apply. We may also show you marketing communications on other websites, including on social media sites where you are a member, by matching activities or information collected on our websites and online advertisements with those collected on third party sites (“Targeted Advertising”). These marketing communications will keep you up-to-date on the latest news and events, from Infant Nutrition. Sending you marketing communications mostly requires the collection and use of certain personal contact information and demographic information. In some instances (such as for mobile apps and text messaging programs), this could involve the use of your precise geo-location, which may allow us to send you location-based information (e.g. Events or road shows).
You can always opt-out from receiving marketing-related email communications or text messages by following the unsubscribe instructions provided in each such communication. If you have an account with us, you may be given the option to change your communication preferences under the relevant edit-account section of our site (if available) or by contacting our Careline on 0800 0818180 (UK) or and 1800 931832 (Ireland). Changing these preferences would also remove you from our lists for future Targeted Advertising. You may also visit social media sites where you are a member to explore opt out options they may provide for Targeted Advertising. Please note that even if you opt out from receiving marketing communications from us, you may still receive administrative communications from us, such as, notifications about your account activities (e.g., account confirmations, password changes, etc.), and other important announcements. You will also still see generic ads on other websites, including on social media sites where you are a member.
3.5 Third party social networking
We may collect and use your personal information when you interact with third party social networking features such as “Facebook Connect” or “Facebook Like”. These features may be integrated in our sites or applications for the purposes of running events (or similar activities), allowing you to share content with colleagues, or other stated purposes. If you use these features, we may have the ability to obtain certain information about you from your social networking profile (see “Social network information” under Question 2 of this Privacy Notice). You can learn more about how these features work, and the profile data we may obtain about you, by visiting the website of the relevant third party social network.
3.6 Website improvement and personalisation
We may collect and use your information to improve and personalise your experience on our websites, applications and online advertisements. This is typically done through automated tracking technologies (please also see Question 8) that collect and remember certain account login information, technical information, and/or previous website usage information. For example, we might remember your login ID/email address or screen name so you can quickly login the next time you visit our site or so you can easily retrieve the items you previously viewed. Based on this type of information, we may also show you specific Nestlé content that are tailored to your interests.
3.7 Website community features
We may collect and use your personal information to give you access to website community features, including features that may allow you to upload and share articles or other messages or content. This typically involves the collection, use, and (in some instances) public display of certain personal contact information, account login information, demographic information, and/or generated content. Because these features are “communal” in nature, information or content that you post in these areas may be visible to others. Please use caution when using these features or uploading content to a Nestlé site. For some community features, we may give you the ability to control whether some parts of your profile can be seen by others. To access these settings, log in to the relevant edit account section of our site (if one is available) and access your community profile. For website community features that have social networking integration (such as “Facebook Connect”), see separate paragraph on “Third party social networking”.
3.8 Website viral features (e.g., tell-a-colleague)
We may request and use your personal information so you can use website viral features, such as our tell-a-friend features. These features allow you to easily share certain news, product information, or other content with colleagues. These features typically require the collection and use of personal contact information (such as names and email addresses) so that the selected one-time message or content can be delivered to the proper recipients. In most cases, we do not retain the information provided. In some cases (for example, as part of a refer-a-colleague program), we may store the information so we can track successful referrals. For tell-a-colleague or other viral features administered by third party social networks (such as Facebook’s “Share” and “Like” features), please refer to the website of the relevant social network for additional information.
3.9 Order fulfilment
We may collect and use your personal information to process and ship your orders, e.g. product leaflets and to inform you about the status of your orders. This could involve the collection and use of certain personal contact information, account login information, and/or other information related to your order (such as products leaflets ordered). Where orders are being fulfilled by a third party, we will share your personal information with them for the purposes of fulfilment of the order. You may, as a result, also receive communications from that third party (whether by email, SMS or other methods of communication) regarding the fulfilment of the order.
3.10 Other general purposes (e.g., website security, internal research)
We may collect and use your information for other general business purposes, such as to maintain the day-to-day operation and security of our websites and applications and to conduct internal marketing, attitudinal and demographic studies. These activities mostly require the collection and use of certain demographic information, technical computer information, website usage information, and HCP feedback. This information also helps support the interaction with HCP’s, enables meaningful and tailored discussions, services and dialogue with us and providing an improved customer experience and personalised contact.
We take all necessary technical and organisational measures to protect the confidentiality and security of your personal information collected through the various methods described in this Privacy Notice. These efforts include, but are not necessarily limited to: (i) storing your personal information in secure operating environments that are not available to the public and that are only accessible to authorized Nestlé employees, and our service providers, agents and those with whom we have contracts; (ii) using industry-standard SSL encryption (or similar) to protect the security of certain sensitive personal information during transmission, and, (iii) verifying the identities of registered users before they can access the personal information we maintain about them.
If you choose not to submit any personal information when requested, you may not be able to participate in certain activities and personalised features and may limit the services we can provide you. For example, if you do not wish to share with us your email address, you will not be able to receive any of our electronic newsletters or otherwise register on our websites or use our applications.
Nestlé will never share your personal information with any third party that intends to use it for direct marketing purposes unless we have specifically informed you and you have given us specific permission to do this.
We may share your personal information with our subsidiary companies, companies in which Nestlé S.A. has control through either direct or indirect ownership (collectively “Nestlé Group”). Some of these are located outside the EEA. Nestlé may also share your personal information with third parties (some of whom are outside the EEA), but only in the following circumstances:
6.1 Service Providers, Agents and Contractors
We may use third parties, like service providers, agents or contractors to provide support for the internal operations of our websites, applications and online advertisements and to assist us with administering our websites, applications and online advertisements or the various functions, programs and promotions (and similar) available to you and generally for the purposes described in this Notice. Some of these third parties may be located outside the country where you accessed this website. These third parties and its employees may come into contact with your personal information in the course of providing their services to us. Any such third party must at all times provide equivalent levels of security for your personal information as Nestlé and, where required, are bound by a legal agreement to keep your personal information private, secure and to process it only on the specific instructions of Nestlé.
6.2 Partners and Joint Programs
From time to time, we may run joint or co-sponsored programs on our website or application with another company, organization, or other reputable third party; and, as part of this event, collect and process personal information. If your personal information is being collected by (or is shared with) a company other than Nestlé as part of such program, we will let you know this at the time your personal information is collected. If you do not want your information to be collected by or shared with a company other than ours, you can always choose not to opt in or participate in these events at the time the personal information is collected/requested.
We may also share collected data details with our main partner for HCP data management (IMS Health UK Ltd), when a HCP is not part of our current database. Contact will be made by our partner to verify and validate collected data on the HCP.
6.3 Legal and Business Transfers
We may also disclose your personal information if we are required to do so by law, or if in our good faith judgment, such action is reasonably necessary to comply with legal processes, to respond to any claims, or to protect the safety or rights of Nestlé, its customers, or the public.
In the event of a merger or acquisition of all or part of Nestlé by another company, or in the event that Nestlé were to sell or dispose of all or a part of the Nestlé business, the acquirer would have access to the information maintained by that Nestlé business, which could include personal information. Similarly, personal information may be transferred as part of a corporate reorganization, insolvency proceeding, or other similar event, if permitted by and done in accordance with applicable law.
6.4 Aggregate Information
7. How can you access, modify, or make other choices regarding the use of your personal information?
The following outlines the choices you have with respect to the collection and use of your personal information by us.
7.1 You can opt out.
You always have the option not to share any of your personal information with us. However, if you choose this option, you will be limited in the activities and features we can provide you, as mentioned in Question 5 above.
7.2. How to opt out
If you do not want to receive newsletters, announcements, or other communications and/or services from a Nestlé website or brand, please do not opt-in for those communications or services at the time of registration. If you have opted-in and, at a later time, wish to opt-out, please visit the appropriate Contact Form section(s) on our website or application and amend your preferences.
7.3 What if I receive an e-mail, message or another contact I am not expecting?
Along with every e-mail marketing communication sent to you, we provide you the opportunity to discontinue receiving future marketing communications (i.e., unsubscribe). Simply follow the unsubscribe process or directions provided in the email.
7.4 How do I know whether I am opted in?
You can always review or update any personal information that we may have collected about you for our general website and application registration. To do this, please visit the appropriate Contact Form section(s) on our website or application (if available).
If any of the mechanisms set forth above is not available or you wish to make a different request, please contact our Careline on 0800 0818180 (UK) or and 1800 931832 (Ireland)
7.5 What if I have never opted in to Nestlé?
Nestlé does make use of tracking technologies (for example “Cookies”, “IP Addresses”, Log Files”, “Web Beacons”, “Tagging”) to gather certain information such as browser type and operating system, referring page, path through site, domain of ISP etc. for the purpose of improving the use and functionality of our websites and other purposes described below. Tracking technologies help us tailor our websites to your personal needs.
If you like to learn more about Nestlé’s policy on Cookies and your rights, please visit the Nestlé UK Cookies Policy.
8.2 IP Addresses
We may keep track of Internet Protocol (IP) addresses to (among other things): (i) troubleshoot technical concerns, (ii) maintain website safety and security (iii) restrict access to our websites to certain users, and, (iv) better understand how our websites are utilized. An IP address is a number that is used by computers on the network to identify your computer every time you log on to the Internet.
8.3 Log Files
We (or a third party on our behalf) may collect information in the form of logs files that record website activity and gather statistics about web users' browsing habits. These entries are generated anonymously, and help us gather (among other things) (i) a user’s browser type and operating system, (ii) information about a user’s session (such as the URL they came from, the date and time they visited our website, and which pages they've viewed on our website and for how long), and, (iii) other similar navigational or click-stream data. We also use information captured in log file for our internal marketing and demographic studies, so we can constantly improve and customize the online services we provide you. Log files are used internally only, and are not associated with any particular user.
8.4 Web Beacons
We may use web beacons (or clear GIFs) on our websites or include them in the e-mail messages we send you. Web beacons (also known as “web bugs”) are small strings of code that provide a method of delivering a graphic image on a web page or in an email message for the purpose of transferring data back to us. The information collected via web beacons may include some of the information described in the IP Address section directly above, as well as information about how a user responds to an email campaign (e.g., the time the email is opened, where does the user link to from the email, etc.). We use web beacon information for a variety of purposes, including but not limited to, site traffic reporting, unique visitor counts, advertising and email auditing and reporting, and personalisation.
Spamming is where unsolicited e-mails are sent to you containing advertisements or marketing related materials without your consent.
We do NOT send spam e-mails. We use an anti-spam tool to protect our employees from spamming. Sending e-mails without consent is illegal in many countries. We will not use your personal information (including your e-mail address) for direct marketing or follow-up communications unless you give us your EXPRESS permission. This is called "OPT-IN" consent.
Also, we do not share your personal information with any third party who will use your personal information for spam mails.
Nestlé websites give you the opportunity to receive marketing information by e-mail. Every e-mail sent by Nestlé will give you the opportunity at any time to stop receiving marketing e-mails
If for some reason you believe you have received spam e-mail from a Nestlé Group company please contact our Careline on 0800 0818180 (UK) or and 1800 931832 (Ireland)immediately.
10. How long do we keep your personal information?
We may store the personal information that you have provided us with through the various methods described in this Privacy Notice in our databases such as our Customer Relationship Marketing (cRM) database. We will only keep your personal information for as long as it is reasonably necessary taking into consideration our need to answer queries or resolve problems, provide improved and new services and comply with legal requirements under applicable law(s). This means that we may retain your personal information for a reasonable period after you stop using Nestlé services or stop using this website or application. After this period, your personal information will be deleted from all systems in the Nestlé Group.
We remind you that you have a right to have your personal information deleted at any time. Please see Question 7 above.
Our websites and applications may provide links to, or features from, other third party sites (such as independent e-commerce sites and third party social networks). If you link to or use such third party sites or features, you do so at your own risk. We do not control and are not responsible for the content or practices of any third party site, application, or feature.
If you have any questions, complaints, or comments regarding this Privacy Notice or our information collection practices, please contact our Careline at:
0800 0818180 (UK)
1800 931832 (Ireland)
Nestlé UK Ltd
1 City Place
Our Republic of Ireland Office:
Nestlé (Ireland) Ltd
3030 Lake Drive,
Citywest Business Campus,
Nestlé will occasionally make changes and corrections to this Privacy Notice. Please check this Privacy Notice regularly to see the changes and how these may affect you.
Copyright © 2015 Société des Produits Nestlé S.A.