Sharing and transferring your personal data

Most of Dyson's processes, procedures and systems are shared across the Dyson Group, which means that we need to share your personal data between us. We make sure that access to your personal data is limited to those of our staff who need it, and that all staff understand how and why we protect your personal data. Transfers of personal data between Dyson entities (including those outside of the EEA) are governed by Dyson’s Intercompany Agreement.

We share your personal data with certain third party service providers. They only have access to the personal data they need to perform those services. For example, your order and delivery details will be shared with our couriers. They are required to keep your personal data confidential, must not use it other than instructed by us and must always act in accordance with this privacy notice.

The third parties providing services fall into the following categories:

• Distributors, who help us to sell our products in certain countries;

• Those helping us to deliver products to you;

• Those helping us to provide you with relevant and interesting communications (e.g. social media platforms, analytics companies, marketing and advertising agencies);

• Third parties that help us with mailing services, product services and repairs, processing product purchases, financial services, audit services, administrative services, IT technologies (e.g. data storage), security services and insurance claims; and

• Third parties that help us to provide services and responses to you.

We share certain personal data with third parties who help us to detect and prevent criminal activity (such as fraudulent transactions). The information we share with those third parties includes some of the information that you share with us (such as your contact details and information about the transaction), and some of the information from your online interactions (such as the IP address of your device). That information is used to determine whether a transaction could be fraudulent. One of the third parties we use to help us detect and prevent fraudulent transactions is a company called Riskified; they are responsible for their use of your personal data and will use it for the purposes set out in their privacy notice.

We will also share your personal data if we are required to do so by law, including in response to a legal process, such as a court order or subpoena, or to comply with other national, state, provincial or local laws.

Finally, in the process of purchasing a Dyson product you may interact with a third party who will be independently responsible for the personal data that you provide. For example, if you purchase a Dyson product under finance, your finance agreement will be directly with that third party and you should read their privacy notice(s) separately.

The relevant Dyson group company or companies will collect personal data from you in the country in which you live. We, and those third parties that we share your personal data with, then host, store and otherwise handle that information in the UK, in the countries within the European Economic Area (EEA) or in any country outside of the EEA, including those listed in the Contacts page.

We will make sure that any transfers of your personal data from one country to another comply with those data protection and privacy laws which apply to us.

European data protection laws, in particular, include specific rules on transferring personal data outside the EEA. Transfers of personal data between Dyson entities (including those outside of the EEA) are governed by Dyson’s Intercompany Agreement.

When transferring personal data outside the EEA, we will:

• include standard data protection clauses approved by the European Commission for transferring personal data outside the EEA into our contracts with those third parties; or

• ensure that the country in which your personal data will be handled has been deemed "adequate" by the European Commission.

In any case, our transfer, storage and handling of your personal data will continue to be governed by this privacy notice.

We have added functionality to some of our connected products which allows your Dyson product to interact with certain third party products that you have in your home (such as Amazon Echo, otherwise known as Alexa). This functionality allows you to take full advantage of a “smart home” environment. However, the products will only interact if you want them to, by enabling the relevant functionality.

If you choose to allow your Dyson connected product to interact with a third party product, certain information (including potentially personal data) will need to be shared with the third party product and the relevant third party provider. Generally, we will need to share a unique reference number to connect the two products, and information about your product and how you use it. We only share the minimum amount of personal data that we need to, to enable the two products to interact. Details of how the third party uses your personal data (as well as any personal data which it collects through its own product) are set out in the third party's privacy notice. You should carefully review third parties' privacy notice(s) before using their products, and before connecting them with your Dyson connected product. You can stop your Dyson connected product from sharing information with the third party product at any time by disabling the connection between the two.

See the Dyson smart machines page for information specific to your product.

We provide links to other websites which are not operated and controlled by Dyson. We have no control over and are not responsible for the content of those sites or how the third parties responsible for them collect and use your personal data. We do not endorse or make any representations about third party websites.

Third party websites usually have their own privacy notices explaining how they use and share your personal data. You should carefully review those privacy notices before you use these websites to make sure that you are happy with how your personal data is being collected and shared.