We respect your privacy. We are committed to safeguarding the privacy of visitors to this BAT Science website (“Website”). Please read this document carefully as it sets out how we handle your personal information when visiting this Website.
For the purpose of applicable information protection legislation (including but not limited to the General Information Protection Regulation (Regulation (EU) 2016/679) (the "GDPR"), the company responsible for your personal information is British American Tobacco (Investments) Limited at Globe House, 4 Temple Place, London WC2R 2PG, United Kingdom ("BAT" or "us").
We may amend this Privacy Notice from time to time. Please visit this page if you want to stay up-to-date as we will post any changes here. This Privacy Notice was last updated on June 1st,
If you are dissatisfied with any aspect of our Privacy Notice, you may have legal rights which we have described below where relevant.
1) Information we collect about you
We may collect some or all the information listed below:
Contact details; and
Extra information that you choose to tell us in a contact form.
Some of the personal information we collect about you are required to enable us to fulfil our duties to you or to others. For example, when you contact us and request us to provide you with information, we will to collect your email address, name and country to be able to process your request so that we can respond to you or pass your query to another BAT entity that can assist you. Other items may simply be needed to ensure that our relationship can run smoothly.
Depending on the type of personal information in question and the grounds on which we may be processing it, should you decline to provide us with such information, we may not be able to fulfil the request.
For details of the legal bases that we rely on to be able to use and process your personal information, please see the below section entitled "Legal bases for us processing your information".
2) How do we collect your personal information?
On this Website, we collect your personal information that you provide to us proactively, usually by phone, email or via social media; and/or where we contact you, either by phone or email.
Personal information we receive from other sources
We may seek more information about you from other sources generally including from third parties if you have asked to respond to a request which involves our obtaining such information.
We will not intentionally collect any information about visitors to this website who are under eighteen years of age. If we become aware that a child has provided any information this will immediately be deleted our records.
3) Why do we collect your personal information?
We collect, use and disclose your personal information for a number of reasons, including:
to ensure that we can respond to any queries and contact you if you request us to do so;
for storing your details (and updating them when necessary) on our information base, so that we can contact you in relation to any query you have asked us to answer; and
for other reasons with your consent.
4) Who do we share your information with?
We will share your personal information primarily to ensure we can respond to any query quickly and expeditiously. Unless you specify otherwise, we may share your information with any of the following groups:
Any of our BAT entities, where this is necessary, and in accordance with laws on information transfers;
Tax, audit, or other authorities, when we believe that the law or other regulation requires us to share this information or in order to help prevent fraud or to enforce or protect the rights and properties of British American Tobacco or its subsidiaries; or protect the personal safety of British American Tobacco employees, third party agents or members of the public;
Third party service providers who perform functions on our behalf (including external consultants, investor relations service providers and professional advisers such as lawyers, auditors and accountants, technical support functions and IT consultants carrying out testing and development work on our business technology systems);
Third party outsourced IT providers where we have an appropriate information processing agreement (or similar protections) in place;
If a BAT entity merges with or is acquired by another business or company in the future, we may share your personal information with the new owners of the business or company (and provide you with notice of this disclosure); and
Circumstances may arise where, whether for strategic or other business reasons, British American Tobacco decides to sell, buy, merge or otherwise reorganise businesses in some countries.
We do not share, rent or trade your information with third parties for marketing or promotional purposes.
5) How long do we keep your personal information for?
We will not keep your personal information for longer than is necessary for the purposes for which we collect it unless we believe that the law or other regulation requires us to preserve it (for example, because of a request by a tax authority or in connection with any anticipated litigation).
When it is no longer necessary to retain your information, we will delete the personal information that we hold about you from our systems.
6) How do we keep your personal information secure?
We care about protecting your information. That's why we put in place appropriate measures that are designed to prevent unauthorised access to, and misuse of, your personal information.
We are committed to taking all reasonable and appropriate steps to protect the personal information that we hold from misuse, loss, or unauthorised access. We do this by having in place a range of appropriate technical and organisational measures, including encryption measures and disaster recovery plans.
Unfortunately, there is always risk involved in sending information through any channel over the internet. You send information over the internet entirely at your own risk. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted over the internet and we do not warrant the security of any information, including personal information, which you transmit to us over the internet.
If you suspect any misuse or loss of or unauthorised access to your personal information, please let us know immediately. Please raise your concern by contacting us using the Contact us section of the website, in the first instance, and we will investigate the matter and update you as soon as possible on next steps.
7) Your rights
You have various rights in relation to the information which we hold about you. We have set these out below.
Right to object
In the context of your visit to this Website and any information you provide to us through a contact form, this right enables you to object to us processing your personal information where we do so because it is in our legitimate interests to do so (for further information please see section 10 below) or to enable us to perform a task in the public interest or exercise official authority.
Right to withdraw consent
Where we have obtained your consent to process your personal information for certain activities, you may withdraw this consent at any time and we will cease to use your information for that purpose unless we consider that there is an alternative legal basis to justify our continued processing of your information for this purpose, in which case we will inform you of this condition.
Information Subject Access Requests
You may ask us for a copy of the information we hold about you at any time. Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will always tell you the reasons for doing so.
Right to erasure
You have the right to request that we "erase" your personal information in certain circumstances. Normally, this right exists where:
It is no longer necessary for us to retain the information about you;
You have withdrawn your consent to us using your information, and there is no other valid reason for us to continue;
The information has been processed unlawfully;
It is necessary for the information to be erased in order for us to comply with our obligations under law; or
You object to the processing and we are unable to demonstrate overriding legitimate grounds for our continued processing.
We would only be entitled to refuse to comply with your request for erasure in limited circumstances and we will always tell you our reason for doing so.
When complying with a valid request for the erasure of information we will take all reasonably practicable steps to delete the relevant information.
Right to restrict processing
You have the right to request that we restrict our processing of your personal information in certain circumstances, for example if you dispute the accuracy of the personal information that we hold about you or you object to our processing of your personal information for our legitimate interests.
Right to rectification
You have the right to request that we rectify any inaccurate or incomplete personal information that we hold about you. If we have shared this personal information with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort.
Right of information portability
If you wish, you have the right to transfer your personal information between service providers. In effect, this means that you are able to transfer the details we hold on you to another third party. To allow you to do so, we will provide you with your information in a commonly used machine-readable format so that you can transfer the information. Alternatively, we may directly transfer the information for you.
Right to complain
You also have the right to lodge a complaint with your local supervisory authority which is the Information Commissioner's Office in the UK. You can contact them in the following ways:
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
If you would like to exercise any of these rights, or withdraw your consent to the processing of your personal information (where consent is our legal basis for processing your personal information), please contact us using the Contact us form on the website. Please note that we may keep a record of your communications to help us resolve any issues which you raise.