Privacy

The controller of your information for the purposes of the Data Protection Laws is JD Sports Fashions plc. We are registered with the Information Commissioners Office Z5260447

JD GROUP WEBSITES (OUR "WEBSITES")

The relevant controller above is responsible for your personal data. This policy applies to all of the controllers above and the JD Group as a whole. Our brands each have their own websites. This central policy provides information to you about the basis on which the JD Group as a whole collects, uses, stores and shares your information. We will use your personal data fairly, lawfully and in a transparent manner and in accordance with the Data Protection Laws.

CONSENT

The brands and data controllers listed above within the JD Group may send you marketing messages by email, SMS, social media and post; about us and our products; where you have not unsubscribed and where you have purchased similar products and/or services from that brand or entity, or where you have otherwise signed up, or consented, to receive marketing messages from a brand or entity.

You have the right to withdraw your consent to processing of this nature at any time by contacting our customer care team using the details at the start of this privacy policy. You can tell us you no longer wish to receive marketing information from us by clicking here.

WHAT INFORMATION DO WE COLLECT ABOUT YOU?

If you have an account with us or make a purchase online with us or enter a competition or respond to a survey with us, we collect your name and contact details (including your address, telephone number, details about your order, and your billing information (where you are purchasing products)).

We also collect details of your interactions with us through our customer contact centres, in store, online or via our apps. For example, when you telephone one of our contact centres, we collect notes of our conversations with you and details of your query and from time to time we may record your calls for training and monitoring purposes. We also collect information about the purchases that you make, your saved items, your payment information, your participation in promotions and loyalty programmes, any complaints, and comments that you make and your shopping preferences. If in connection with a brand promotion you use an account linking feature (linking your JD account with an account, you hold with a third-party brand partner) – we will collect information necessary to link your accounts and to provide you with the accompanying linked account benefits. We also collect CCTV images in all our stores.

Each time you visit one of our websites and if you use our mobile apps, we will also automatically collect information and personal data about your computer for system administration including, where available, your IP address, operating system, and browser type. We do this to help us analyse how users use the websites and mobile apps (including behaviour patterns and the tracking of visits across multiple devices), to establish more about our website and mobile users and to assist us in managing your account and improving your online experience. We also collect information about your activities on our websites, for example what device you are using and what products you are looking at.

If you receive email marketing from us, we also collect limited information about how you interact with such marketing emails, which is limited to if you open an email and/or click a link within an email. We do this to understand how engaged you are with our marketing to tailor how much we send to you to improve your experience with us.

Please see our cookies policy for further information about what information may be automatically collected when you visit our websites

Please note that, from time to time, we will combine personal data that we receive from other sources with personal data you give to us and personal data we collect about you.

Third party links

Our sites may include links to third parties’ websites, applications, or plugins. In some instances, this means we might be “joint controllers” of your personal information. This means we might be jointly responsible for determining the collection and use of your personal information. Clicking those links or enabling connections may allow third parties to collect or share your data. Please also read their privacy notices.

WHERE DO WE GET THIS INFORMATION FROM?

We collect some of your information directly from you, either through information that you give to us or information that we collect during your visits to our websites, mobile apps, stores, or through your communications with us. We may obtain some information from third parties, including retail analytics companies, consumer insight companies and credit reference agencies and publicly available sources to assist us with understanding customer demographics and shopper behaviours, such information is aggregated and/or anonymised and therefore does not provide us with information about specific individuals.

WHY DO WE NEED YOUR INFORMATION?

The main purpose for which we use your information is to provide you with the products that you purchase from us and to send you offers and promotions that you might be interested in.

In particular, we use your information:

• to provide you with the products that you have purchased from us and any receipts of purchase, including to deliver your products, and to send you order status updates.
• to take payments for the products that you have purchased and to give refunds or exchanges.
• to provide customer service and support to you.
• to develop and improve our products and services.
• to develop and improve our websites and mobile apps and set default options for you, whether one the website or mobile app or within our marketing (such as language and currency and/or to use your location to display local store information or notify you of specific events happening close to you or provide you with the best delivery options for your orders) and to ensure that content is presented in the most effective manner;
• to provide you with account linking features (and associated benefits) as part of collaborative promotions and loyalty programmes with select third party brand partners.
• to share your order and purchase information with third party brand partners, when you purchase their branded products on our platform and have opted-in to the linking of your JD account and the account you hold with that brand.
• to provide you with information that you request from us or which we feel may interest you. We may send you marketing information by email, SMS, push notification (if you are a user of our app) or post. This can include information about new products and offers that you may find interesting.
• to research our customers' preferences and trending products;
• to run surveys and competitions;
• to notify you about changes to our products;
• as part of our efforts to keep our stores safe and secure (for example through the use of CCTV in our stores);
• to prevent and detect fraud and crime (for example, through the use of CCTV in our stores).

BASIS FOR USING YOUR INFORMATION

Compliance with legal obligations

As a corporate group there are certain laws we need to comply with. We will need to process your personal information to verify your identity and for fraud and crime prevention purposes. Failure to provide the requisite personal information on sign-up / as you use our websites, and/or mobile apps may mean we cannot provide our products to you, as to allow you to purchase our products may mean we may be in breach of our legal obligations. You will not be able to object to processing or ask for the deletion of your personal information insofar as it falls under this category.

Necessary for the entry into or performance of a contract

When you enter into a transaction with us or one of our brands, a contract between you and the relevant brand will have been entered into. For us to fulfil our obligations under such contract (e.g., to allow you to place an order and receive products from us), we will need to collect and process your personal information. Failure to provide the requisite personal information on sign-up to an account or on placing an order and payment information or objecting to this type of processing / exercising your deletion rights will mean we cannot provide our products to you.

Legitimate business interests

We use your personal data as set out in this privacy notice for the legitimate interests of our business to enable us to:

• provide you with products as requested by you.
• carry out research to understand our customers and how they purchase and use our products.
• carry out promotions and loyalty programmes, including programmes run jointly with select brand partners.
• develop and improve our products.

As indicated below, we will also pass your personal data to members of the JD Sports Fashion plc and its group companies (together, the "JD Group", more information can be found here: https://www.jdplc.com/our-group) and other third parties and this is also for our legitimate business interests.

We are required to carry out a balancing test of our legitimate business interests in using your personal data outlined above against your interests and rights under the Data Protection Laws and regulations in the relevant territory. As a result of our balancing test, which is detailed below, we have determined, acting reasonably, and considering the circumstances, that we are able to process your personal data in accordance with the Data Protection Laws on the basis that we have a legitimate business interest.

Consent

As set out above, we will send you marketing communications where you have not told us that you wish to unsubscribe and where you have purchased similar products and/ or services from the same brand or legal entity (as set out in the table above). You will also receive marketing communications from us where you have signed up, or otherwise consented, to receive marketing messages from a brand or entity within the JD Group.

You have the right to withdraw your consent to processing of this nature at any time by contacting our customer care team using the details at the start of this privacy policy.

WHO DO WE SHARE YOUR INFORMATION WITH?

We do not, and will not, sell any of your information to any third party, including your name, address, email address or credit card information. However, we do share your information with a number of select third parties to enable us to provide our products and services to you, to send marketing information and to improve our business operations as set out below.

We will share your information with other members of the JD Group but only for the purposes specified in this

• privacy notice which includes, sharing your information with other members of the JD Group for group analysis and business purposes, to improve our products and services.

We will also use a number of carefully selected third parties to help us to provide you with products, services and to market to you. We disclose your information to:

• Companies that do things to get your purchases to you, such as payment service providers, warehouses, order packers and delivery companies.
• Our trusted service providers, such as marketing agencies, advertising partners, website, and app hosts and other third parties who provide services to help us to tailor our marketing to you.
• Our brand partners and trusted third parties to run collaborative promotions, member programmes and competitions with them. If you are one of our lucky winners, we may share your data with the brand partner or trusted third party for them to contact you to deliver the prize to you. Your account, order, and purchase information (relating to products of the brand partner) may also be shared with brand partners when you have taken steps to link your JD account to an account you hold with the brand partner.
• Credit reference agencies, law enforcement and fraud prevention agencies.
• We will provide third parties with aggregated but anonymised information and analytics about our customers and, before we do so, we will make sure that it does not identify you.

We will only share your information with third party suppliers where it is necessary for them to provide us with the services we need.

We may disclose your information to other companies in connection with any merger, acquisition, insolvency situation or otherwise, in which case we will only disclose your information as far as is necessary.

We may also need to disclose personal data to third parties to comply with a legal or regulatory obligation, or if necessary for legal proceedings.

WHAT AUTOMATED DECISIONS DO WE MAKE ABOUT YOU?

We carry out some profiling of you for the purposes of improving and developing our products and services and to help us to tailor our marketing to you.

The impact of any automated decision is to ensure you experience the best service possible.

We use information that we learn about you such as your gender, preferences, hobbies, interests, purchase history and how you engage with the marketing we send to you (as explained above) to make sure the marketing you receive from us and the way our websites and mobile apps are displayed to you are appropriate and tailored to you.

WHERE IS YOUR INFORMATION STORED AND HOW LONG DO WE KEEP IT FOR?

Transfers outside of the European Economic Area

The information which we collect about you may be transferred outside the European Economic Area. In the event of such transfer, we will ensure the adequate standard of security is in place. The safeguards we use include the Standard Contractual Clauses approved by the European Commission and/or the UK Addendum or UK International Data Transfer Agreement where applicable.

Retention of your personal data

We will only keep your information for as long as is necessary to carry out the purposes we collected it for, as set out in this privacy notice (unless a longer retention period is required by the applicable law). We typically keep your personal data for 6 years from the purchase to enable us to deal with any issues or concerns you may have about the products or services you have received, and to allow us to bring or defend legal proceedings. In some circumstances, some of your data will be deleted in much shorter timescales, for example:

• cookies are deleted in accordance with our cookies policy
• CCTV images are kept for 60 days.

If reasonably necessary or required to meet legal or regulatory requirements, resolve disputes, prevent fraud, and abuse, or enforce our terms and conditions, we will also keep hold of some of your information, even if it is no longer needed to provide our services to you.

Security of your personal data

Transmission of information via the internet is not and cannot be completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our websites and mobile apps; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

WHAT NON-PERSONALLY IDENTIFIABLE INFORMATION DO WE COLLECT?

We may also collect non-personally identifiable information (that is, information that does not specifically identify you), for the purposes of aggregates and statistics.

WHAT RIGHTS DO YOU HAVE?

You have a number of rights under the Data Protection Laws in relation to the way we process your personal data, which are set out below. You may contact us using the details at the beginning of this privacy policy to exercise any of these rights.

In some instances, we may be unable to carry out your request, in which case we will contact you to explain why.

Marketing

We always give you the choice of whether or not you wish to receive marketing communications from us (for example by providing opportunities to opt-out of receiving marketing from us). We may rely on your consent or our legitimate interests to process your data for marketing purposes, as explained above.

By contacting us Privacy.Support@jdplc.com you can tell us that you do not wish to receive marketing communications from us and we will update your records. You can also click on the unsubscribe link in any promotional emails.

WHAT IF YOU HAVE A COMPLAINT?

If you have any concerns regarding our processing of your personal data, or are not satisfied with our handing of any request made by you, or would otherwise like to make a complaint, please contact our customer contact centre in the first instance using the details at the start of this privacy policy, so that they can do their very best to sort out the problem.

You can also contact the Information Commissioner's Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF www.ico.org.uk .

OTHER WEBSITES

Our websites may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or your use of those websites.

CHANGES TO THIS PRIVACY POLICY

We will take all measures necessary to communicate any changes to this privacy policy to you, and will post any updated privacy policies on this page.

This policy was last reviewed and updated in April 2023.