OneNumber Privacy Policy

Information we collect about you:

• Your contact details, such as your phone number,
• Cookies: functional, performance and strictly necessary cookies, please see more details in the Cookies Policy section.
• Data about the Device and SIM: IMSI (International Mobile Subscriber Identity), MSISDN from the device (phone number), make and model from the device.

When we collect your personal information:

We collect your personal information when:

• We collect your mobile phone number that you use to authenticate yourself. We don't collect names, addresses or email addresses from your device but we do need access to certain browser attributes (see our Cookie Policy).
• We collect some information about your device and your use of Vodafone OneNumber (for example, language, equipment and usage statistics).
• We'll share some information with your Vodafone carriers and partners, and get some information back from them: your mobile number and other information about your tariff and the eligible services available to you.

We'll also get information about how you use our products and services, such as:

• Details of your use of our services - for example, we can see whether our customers are actively using the service.

• We also collect aggregated analytics information on how our customers use OneNumber in order to improve your experience and troubleshoot.

Vodafone will process your personal data based on:

1. Vodafone's legitimate business interests, for example, fraud prevention, maintaining the security of our network and services, and improvement of our services. Whenever we rely on this lawful basis to process your data, we assess our business interests to make sure they do not override your rights. Additionally, in some cases you have the right to object to this processing. For more information, visit the Your Rights section of this policy.
2. Consent you provide where Vodafone does not rely on another legal basis. Consent is always presented to you separately and you can withdraw your consent at any time. For example, we need your consent to process your data for marketing purposes.
3. Performance of your contract or to enter into the contract and to take action on your requests. For example, we process your account information and payment details for monthly billing of the service associated with the airtime plan.

Where applicable, we share information about you with:

• Companies in the Vodafone Group;
• Partners, suppliers or agents involved in delivering the products and services you've ordered or used;
• Companies who are engaged to perform services for, or on behalf of, Vodafone Limited, or Vodafone Group;
• Credit reference, fraud-prevention or business-scoring agencies, or other credit scoring agencies;
• Debt collection agencies or other debt-recovery organisations;
• Law enforcement agencies, government bodies, regulatory organisations, courts or other public authorities if we have to, or are authorised to by law; or
• A third party or body where such disclosure is required to satisfy any applicable law, or other legal or regulatory requirement.

All data is stored in our data centres in Europe and in whichever local market of whom you are a customer.

We'll store and process your information for as long as we have to by law or as long as we need to be able to deliver you the services you have requested.

We'll keep some personal information for a reasonable period after your contract with us has finished in case you decide to use our services again.

We, or one of our partners, may contact you about Vodafone services during this time if you haven't opted out of receiving marketing communications from us.

Once these periods have expired, we'll delete that information.

We have specialised security teams who constantly review and improve our measures to protect your personal information from unauthorised access, accidental loss, disclosure or destruction.

Communications over the internet (such as emails) aren't secure unless they've been encrypted. Your communications may go through a number of countries before being delivered, as this is the nature of the internet.

We cannot accept responsibility for any unauthorised access or loss of personal information that is beyond our control.

We'll never ask for your secure personal or account information by an unsolicited means of communication. You're responsible for keeping your personal and account information secure and not sharing it with others.

Our website may provide links to third-party websites. We cannot be responsible for the security and content of such third-party websites. So make sure you read that company's privacy and cookies policies before using or putting your personal information on their site.

The same applies to any third-party websites or content you connect to using our products and services.

Below we set out details on how you can exercise your rights. If you have a question or cannot find the answer, please contact our Customer Services team or use our privacy query form and a member of our dedicated team will respond to you.

Please note: the privacy query form is not for Subject Access Requests (SARs). To raise a Subject Access Request, please fill in the Subject Access Request form

Right to access personal data
You have the right to make a request for a copy of the personal data that Vodafone holds about you. To make this request as an individual or an authorised third party, visit our Subject Access Request page which gives details on how to do this. Alternatively, you can contact our Customer Services team.

Right to correct personal data
You have the right to correct information held about you if it's not accurate. If the information we hold about you is inaccurate or needs to be updated, you can log in to My Vodafone to update it or you can contact our Customer Service team

Right to data portability
You have the right to be able to take with you the personal data you provided to us in certain circumstances. Vodafone ensures that you can take your data with you by allowing you to download your monthly bills, at the click of a button. In order to do this, log in to My Vodafone and go to your billing area.

Right to object to use of personal data
You have the right, in certain circumstances, to object to Vodafone processing your personal information. For more information or to exercise this right, please contact our Customer Services team. If this relates to an automated decision performed on you (this means with no human involvement), please let us know and we will review your request.

To opt out of marketing messages:

If you no longer want to receive marketing messages from Vodafone, you can choose to opt out at any time. If you've previously opted in to receive personalised content based on how and where you use our network, you can also opt out at any time.

The easiest way to opt out is by using our marketing preferences page, found under your My Vodafone account settings.

There are also various other ways to opt out:

• Contact our customer services team - see the contact us page
• Click the link at the end of a marketing email, text or picture message to unsubscribe from that channel
• Change your communication preferences by texting the relevant code in this table [PDF: 342KB]
• Tell the adviser if you receive a marketing call
• Disable push notification messages, including marketing messages, at any time in our apps by changing the notification settings on your device or by uninstalling the app
• Contact our customer data team for guidance

If you're opted out of marketing, you may still receive service-related messages.

Please note: You may still receive marketing messages for a short period after opting out while we update our records.

You may have received marketing from Vodafone even if you're not a customer or have never had contact with us. This is a result of third-party marketing lists which Vodafone may acquire from time to time, stating that you have given permission to be contacted by other organisations. If you've registered with us to opt out of marketing from Vodafone, you shouldn't receive such communications. If you still do, we ask that you let us know immediately by contacting our customer data team. This will only stop marketing from us and not stop the third parties from sharing your data unless you contact them directly.

To manage cookies and understand more about what they are
Want to disable a cookie, or understand more about what these are? Check the 'Cookies' section of this Privacy Portal for full details on how to do this.

To opt out of Vodafone Analytics, or to understand what it means for you
While it can't identify or contact you, it's your choice whether you're included. Please see the Vodafone Analytics page.

How to lodge a complaint
If you want to contact us about any of your rights or complain about how we use your information, please use our privacy query form and a member of our dedicated team will respond to you. Alternatively, you can contact our Customer Services team - we'll do our best to help but if you're still unhappy, you can contact the Information Commissioner's Office (ICO). Their website www.ico.org.uk has details on how to contact the ICO.

Right to restrict use of your data
If you feel data we hold on you is inaccurate, or you believe we shouldn't be processing your data, please contact our Customer Services team to discuss your rights. In certain circumstances, you have the right to ask us to restrict processing.

Right to erasure
Vodafone strives to only process and retain your data for as long as we need to. In certain circumstances you have the right to request that we erase personal data of yours that we hold. If you feel that we are retaining your data longer than we need, it is worth first checking that your contract with Vodafone has been terminated, which you can do with Customer Services. If your contract with Vodafone has been terminated, we may still have lawful grounds to process your personal data. For more information on retention periods, see the section in this privacy policy called 'How long do we keep your personal information for?'.