We use your personal information for the purposes set out in the table below. In this table any reference to “our legitimate interests” will be replaced with “reasonable and legitimate purposes as permitted by law” in respect of Canada only.

Please also see the section below "Legal bases for processing your information" for an explanation of the lawful bases relied upon to process your personal data, as well as the section entitled "Special categories of personal data" for information about the additional lawful bases for our use of such data.

Purpose	Lawful basis
To administer our website and apps, business and Centres	Our legitimate interests (in efficiently operating our website, apps, business, and Centres).
To enable your use of the products and services available on our website and apps or otherwise made available offline or on our in-Centre computers and devices	Our legitimate interests (in promoting our business)
To provide our gift card programmes	Performance of a contract
To administer our gift card programmes	Our legitimate interests (in promoting our business and the business of our tenants)
To provide our Privilege Club or the replacement for Privilege Club, known as McArthurGlen Club	Performance of a contract
To administer our Privilege Club or the replacement for Privilege Club, known as McArthurGlen Club, including to personalise and improve the service you receive through these programmes (e.g. birthday offers, promotions at your local Centre)	Our legitimate interests (in promoting our business and the business of our tenants)
To manage and run advertisement campaigns, competitions or offers by email, phone, SMS or post	Consent or our legitimate interests (in promoting our business)
To confirm orders and fulfil orders placed on our website or apps	Performance of a contract
To respond to your questions or requests for additional information and communicate with you about the website or apps and the Centres	Our legitimate interests in managing and promoting our business and providing services to our customers
To provide you with information that you have specifically requested or that we have asked if you would like to receive	Our legitimate interests in managing and promoting our business and providing services to our customers
To respond to your questions or provide you with information that you have specifically requested or that we have asked if you would like to receive or take steps at your request in relation to a contract with you or prior to entering into a contract	Performance of a contract
To take payments for use of our car parks	Performance of a contract
To operate and manage our car parks	Our legitimate interests in efficiently operating our car parks
For internal research and analysis so that we can see how our website, apps and the Centres’ products and services are being used, understand how we can improve our website or apps and the Centres’ products and services and decide our marketing strategies	Our legitimate interests in optimising our business and the services we provide
To deal with enquiries and complaints made by you or on your behalf relating to us, our services, website or apps and the Centres	Our legitimate interests in promoting and managing our business, solving problems and providing good customer service
To keep our website, apps and systems secure and prevent fraud	Our legitimate interests in reducing cybersecurity risks
To keep our website, apps and systems secure and prevent fraud as required by law	Compliance with a legal obligation
Where relevant, to meet legal, regulatory and compliance requirements	Compliance with a legal obligation
Where relevant, for the establishment, exercise or defence of legal claims	Our legitimate interests in managing our legal rights and obligations or compliance with a legal obligation
In order to carry out tasks or achieve objectives in relation to the management of our business in our legitimate commercial interests	Our legitimate interests in running our business
To monitor and analyse the use of any account to prevent, investigate and/or report security incidents or crime	Our legitimate interests in reducing cybersecurity risks
To monitor and analyse the use of any account to prevent, investigate and/or report security incidents or crime where required by law	Compliance with a legal obligation
To verify compliance with the terms and conditions governing the use of our website, apps and in-Centre computers and devices	Our legitimate interests in managing our business and our legal rights and obligations
To protect the rights, property, security or safety of us (including our employees and contractors), our customers, Centre Owners or others and to protect the security of our Centres and including the prevention and detection of crime	Our legitimate interests in reducing damage and risks to our employees and third parties within in our sphere of influence, public interest or compliance with a legal obligation
To deal with accidents or injuries to visitors to our Centres	Our legitimate interests in managing such incidents and reducing damage and risks
To understand your interests and preferences we may combine information we collect about you through transactions or interactions offline or on our in-Centre terminals or our email and SMS communications with the customer profile we hold about you so we can tailor the content, offers and promotions we surface on our website or apps to better match your interests and preferences and provide you with a better customer experience – see also our Cookies Notice. If we do not carry out such data processing, you will still see ads and other content, but they will not be tailored to your specific interests and preferences	Our legitimate interests in promoting our business and the business of our tenants and in managing our business
To understand and identify the features of our customer base for insight purposes (including from social media sources) and in order to better target our advertising, also referred to as "profiling" (e.g. reaching out to a similar demographic on social media)	Consent or our legitimate interests
to enforce or apply our terms and conditions or other agreements	Performance of a contract or our legitimate interests
to protect the rights, property, or safety of McArthurGlen, our customers or others	Our legitimate interests
To send customer satisfaction surveys to you	Consent or our legitimate interests
For the purposes described in the WiFi Annex.	Please see table in the WiFi Annex for relevant lawful bases

See the following provisions of GDPR/UK GDPR (as applicable) for reference to lawful bases:

Legitimate interests	Art 6(1)(f)
Contract	Art 6(1)(b)
Legal obligation	Art 6(1)(c)
Consent	Art 6(1)(a)

We will also inform you from time to time of other products and/or services we offer which we consider may be of interest to you by email, phone, SMS or post, where permitted by applicable law (which may require that we obtain your consent).

As well as unsubscribing within communications, you may email us at any time at dataprotection@mcarthurglen.com to indicate that you do not want to receive direct marketing communications from us. We will make commercially reasonable efforts to implement your unsubscribe / opt-out requests promptly, but you may still receive communications from us that were already underway before we process your request and update our systems.