We will only use your personal data where we are permitted to do so by applicable law. Under EU and UK data protection law, the use of personal data must be justified under one of a number of legal grounds. The principal legal grounds that justify our use of your personal data are:

• Contract performance: where your information is necessary to enter into or perform our contract with you.
• Legal obligation: where we need to use your information to comply with our legal obligations.
• Legitimate interests: where we use your information to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights.
• Legal claims: where your information is necessary for us to defend, prosecute or make a claim against you, us or a third party.
• Consent: where you have consented to our use of your information (you will have been presented with a consent form or facility in relation to any such use and may withdraw your consent through an unsubscribe or similar facility).

We may use your personal data in the following ways. In each case, we note the grounds that we rely on to use your personal data:

• Provide, maintain and improve our Services: [Legal grounds: legitimate interests, consent, contract performance]
• Provide and deliver the products and services you request, process transactions and send you related information, including confirmations: [Legal grounds: legitimate interests, consent, contract performance]
• Verify your identity and prevent fraud: [Legal grounds: legitimate interests, consent, contract performance]
• Send you technical notices, updates, security alerts and support and administrative messages: [Legal grounds: legitimate interests, consent, contract performance]
• Respond to your comments, questions and requests and provide customer service: [Legal grounds: legitimate interests, consent, contract performance]
• Communicate with you about products, services, offers, promotions, rewards, and events offered by XXX and others, and provide news and information we think will be of interest to you: [Legal grounds: legitimate interests, consent, contract performance]
• Monitor and analyse trends, usage and activities in connection with our Services: [Legal grounds: legitimate interests, consent, contract performance]
• Personalize and improve the Services and provide advertisements, content or features that match user profiles or interests: [Legal grounds: legitimate interests, consent, contract performance]
• Process and deliver contest or promotion entries and rewards: [Legal grounds: legitimate interests, consent, contract performance]
• Link or combine with information we get from others to help understand your needs and provide you with better service: [Legal grounds: legitimate interests, consent, contract performance]
• Carry out any other purpose for which the information was collected: [Legal grounds: legitimate interests, consent, contract performance]