We use your personal information for the purposes set out in the table below. In this table any reference to “our legitimate interests” will be replaced with “reasonable and legitimate purposes as permitted by law” in respect of Canada only.

Please also see the section below "Legal bases for processing your information" for an explanation of the lawful bases relied upon to process your personal data, as well as the section entitled "Special categories of personal data" for information about the additional lawful bases for our processing of such data.

Purpose	Lawful basis
To administer our website and apps, business and Centres	Our legitimate interests (in efficiently operating our website, apps, business, and Centres).
To enable your use of the products and services available on our website and apps or otherwise made available offline or on our in-Centre computers and devices	Our legitimate interests (in promoting our business)
To provide our gift card programmes	Performance of a contract
To administer our gift card programmes	Our legitimate interests (in promoting our business and the business of our tenants)
To provide you with the services, benefits and tailor-made experiences included within membership of our Privilege Club or the replacement for Privilege Club, known as McArthurGlen Club (for more detail, see the section below titled "Membership Program")	Performance of a contract or our legitimate interests (in promoting our business and the business of our tenants)
To manage and run direct marketing campaigns, competitions or offers by email, phone, SMS or post relating to McArthurGlen and its partner brands' products and services. This may include organising our mailing lists into broad groups based on general criteria, such as gender and geographical area, to ensure that you receive marketing communications that are relevant to you. The purpose of this organisation and grouping of our mailing lists is to manage the distribution of our communications more efficiently and to limit the volume of the communications you receive. This activity does not involve any analysis or evaluation of your individual behaviour, preferences or personal characteristics, or result in the creation of a personal profile as described in the "Profiling" section above.	Consent or our legitimate interests (in promoting our business)
To confirm orders and fulfil orders placed on our website or apps	Performance of a contract
To respond to your questions or requests for additional information and communicate with you about the website or apps and the Centres	Our legitimate interests in managing and promoting our business and providing services to our customers
To provide you with information that you have specifically requested or that we have asked if you would like to receive	Our legitimate interests in managing and promoting our business and providing services to our customers
To respond to your questions or provide you with information that you have specifically requested or that we have asked if you would like to receive or take steps at your request in relation to a contract with you or prior to entering into a contract	Performance of a contract
To take payments for use of our car parks	Performance of a contract
To operate and manage our car parks	Our legitimate interests in efficiently operating our car parks
For internal research and analysis so that we can see how our website, apps and the Centres’ products and services are being used, understand how we can improve our website or apps and the Centres’ products and services	Our legitimate interests in optimising our business and the services we provide
To deal with enquiries and complaints made by you or on your behalf relating to us, our services, website or apps and the Centres	Our legitimate interests in promoting and managing our business, solving problems and providing good customer service
To keep our website, apps and systems secure and prevent fraud	Our legitimate interests in reducing cybersecurity risks and detecting and/or preventing fraud
To keep our website, apps and systems secure and prevent fraud as required by law	Compliance with a legal obligation
Where relevant, to meet legal, regulatory and compliance requirements	Compliance with a legal obligation
Where relevant, for the establishment, exercise or defence of legal claims	Our legitimate interests in managing our legal rights and obligations or compliance with a legal obligation
In order to carry out tasks or achieve objectives in relation to the management of our business in our legitimate commercial interests	Our legitimate interests in running our business
To monitor and analyse the use of any account to prevent, investigate and/or report security incidents or crime	Our legitimate interests in reducing cybersecurity risks and/or crime
To monitor and analyse the use of any account to prevent, investigate and/or report security incidents or crime where required by law	Compliance with a legal obligation
To verify compliance with the terms and conditions governing the use of our website, apps and in-Centre computers and devices	Our legitimate interests in managing our business and our legal rights and obligations
To protect the rights, property, security or safety of us (including our employees and contractors), our customers, Centre Owners or others and to protect the security of our Centres and including the prevention and detection of crime	Our legitimate interests in reducing damage and risks to our employees and third parties within in our sphere of influence, public interest or compliance with a legal obligation
To deal with accidents or injuries to visitors to our Centres	Our legitimate interests in managing such incidents and reducing damage and risks
To understand your interests and preferences we may combine information we collect about you through transactions or interactions offline or on our in-Centre terminals or our email and SMS communications with the customer profile we hold about you (see the section above titled "Profiling") so we can tailor the content, offers and promotions showed to you to better match your interests and preferences and provide you with a better customer experience – see also our Cookies Notice. If we do not carry out such data processing, you will still see ads and other content, but they will not be tailored to your specific interests and preferences	Our legitimate interests in understanding our customer base, communicating with Privilege Club and McArthurGlen Club members and individuals who choose to subscribe to marketing communications (e.g. our newsletter), promoting our business and the business of our tenants and in managing our business. In Italy, we rely on your consent for this processing activity. The use of cookies, email tracking pixels or similar tracking technologies on your browser/device by McArthurGlen is based on your consent collected via our cookie banner.
To inform the targeting of our advertising (for more detail, see the section below titled "Advertising Partners" under "Information Sharing")	Our legitimate interests in advertising our products and services. The use of cookies, email tracking pixels or similar tracking technologies on your browser/device is based on your consent collected via our cookie banner.
To enforce or apply our terms and conditions or other agreements	Performance of a contract or our legitimate interests
To protect the rights, property, or safety of McArthurGlen, our customers or others	Our legitimate interests
To send customer satisfaction surveys to you	Consent or our legitimate interests
For the purposes described in the WiFi Annex.	Please see table in the WiFi Annex for relevant lawful bases

See the following provisions of GDPR/UK GDPR (as applicable) for reference to lawful bases:

Legitimate interests	Art 6(1)(f)
Contract	Art 6(1)(b)
Legal obligation	Art 6(1)(c)
Consent	Art 6(1)(a)

Privacy Notice

Introduction

Purpose and overview of this Privacy Notice

Definitions and Interpretation

For children and parents

The Information we collect

Profiling

Cookies

Use of your information

Membership Program

Social Media

Legal bases for processing your information

Special categories of personal data and criminal data

Information sharing

Advertising Partners

Securing your information

Transferring your information

Retaining your data

Your rights

Complaints

Changes to this Privacy Notice

Group Companies

Contact information

WiFi Annex

Country specific information