World Privilege Plus

Privacy Policy

Last Updated: 1 January 2026

World Privilege Plus Limited | 373 Bury New Road, Prestwich, Manchester, M25 1AW

1. About This Privacy Policy

This Privacy Policy applies to World Privilege Plus Limited and its related services provided via the World Privilege Plus website and any associated private-label platforms (together referred to as “World Privilege Plus”, “we”, “us” or “our”).

This document explains how we collect, use, share and protect your personal data when you register for or use our membership programme. It also sets out your data protection rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We encourage you to read this policy carefully. If you have any questions, please contact us using the details in Section 14.

2. Who We Are (Data Controller)

World Privilege Plus Limited is the data controller of your personal data. This means we are responsible for deciding how and why your personal data is used.

We are registered with the UK Information Commissioner’s Office (ICO). Our registered office is 373 Bury New Road, Prestwich, Manchester, M25 1AW.

If you have any questions about this Privacy Policy or how we handle your data, please contact us via the details in Section 14.

3. Personal Data We Collect

We collect and process the following categories of personal data, depending on how you interact with us:

  • Identity data: name, employee ID (where applicable).
  • Contact data: email address, phone number, postal code.
  • Authentication data: username, password, session IDs and similar identifiers.
  • Financial and transaction data: payment and bank information, transaction history, date of birth where required for verification or payment purposes.
  • Usage data: browsing history and activity on the World Privilege Plus platform and private-label subdomains, pages viewed, offers clicked and redemptions made.
  • Communications data: queries, complaints, and other correspondence with our customer service teams.

We may also collect information you choose to provide in surveys, feedback forms, or when entering competitions or events that we host.

4. How We Use Your Personal Data and Legal Bases

We only use your personal data where we have a lawful basis to do so under UK GDPR. The table below summarises our main purposes and legal bases:

Purpose Data Used Lawful Basis
Providing and managing your membership Name, email, employee ID, postal code Performance of contract
Processing transactions and payments Payment data, transaction history, date of birth Performance of contract; legitimate interests
Account management and security Authentication data, session IDs Legitimate interests (fraud prevention and security)
Customer service and communications Name, email, service tickets Performance of contract; legal obligation
Personalising your experience Preferences, browsing and transaction history Legitimate interests; consent (where required for marketing)
Programme analytics and improvement Site and usage activity Legitimate interests
Email marketing Name, email address Consent; or soft opt-in for existing members under PECR

Where we rely on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. See Sections 10 and 12 for more information.

5. How We Collect Your Personal Data

We collect personal data in the following ways:

  • Directly from you when you register, update your account, redeem offers, make purchases through our platform, or contact us.
  • From your employer or sponsoring organisation where they provide information necessary to set up or verify your membership (for example, name or employee ID).
  • Automatically through your use of our digital services, such as logs, security events, cookie data and usage analytics.

We may also receive limited data from payment providers or merchants to confirm that a transaction has been completed or refunded.

6. Sharing Your Personal Data

We do not sell your personal data to any third party under any circumstances.

We may share your data only as follows:

  • With your employer or sponsoring organisation: aggregated anonymised usage data to evaluate programme effectiveness; and confirmation of your registration status to help reduce duplicate communications.
  • With participating merchants: only information necessary to fulfil a transaction you have initiated, for example a shipping address or payment details provided directly by you to the merchant.
  • With event partners and vendors: RSVP information for private in-store or partner events you have registered for.
  • With service providers: trusted third parties who support our IT, hosting, payment processing, security, analytics and customer support functions, under strict contractual data processing obligations.
  • As required by law: where necessary to comply with a legal obligation, court order, or to protect our rights, security, or the rights of our members, partners or the public.
  • With your consent: in any other circumstance, only with your prior explicit consent.

7. International Data Transfers

Your personal data is stored on servers located in the United Kingdom.

Where you transact with merchants or partners located outside the UK or European Economic Area (EEA), data necessary to complete that transaction may be transferred internationally. Any such transfers are made only where the recipient country provides an adequate level of data protection, or where we have put in place appropriate safeguards such as standard contractual clauses approved under UK GDPR.

You may request further information about the safeguards we use for international transfers by contacting us via the details in Section 14.

8. Cookies and Similar Technologies

We use cookies and similar technologies on the World Privilege Plus website and platform. Cookies are small text files placed on your device that help us operate the site, remember your preferences, and understand how our platform is used.

We use the following categories of cookies:

  • Strictly necessary cookies: essential to the operation of the site and cannot be switched off. These include session management and security cookies.
  • Analytics and performance cookies: used to understand how visitors interact with our platform so we can improve it. These cookies collect information in an aggregated, anonymised form.
  • Functional cookies: used to remember your preferences and settings.

When you first visit our website, you will be asked to consent to non-essential cookies via our cookie consent tool. You may withdraw or change your cookie preferences at any time by accessing the cookie settings on our website.

Some third-party merchants or partner sites that you access via our platform may use their own cookies and similar technologies. We have no access to or control over those technologies, and their use is governed by those third parties’ own privacy and cookie policies.

9. Profiling and Personalisation

We use profiling to personalise your experience and to surface offers relevant to your browsing history and past activity on the platform. This helps us show you offers and content that are most likely to be relevant to you.

We do not carry out automated decision-making that produces legal or similarly significant effects on you.

You have the right to object to profiling used for direct marketing purposes at any time and without restriction. If you object to this type of profiling, we will stop using your data for that purpose.

Where profiling is used to personalise the core membership experience rather than for direct marketing, we will consider your objection and cease or restrict that processing unless we have compelling legitimate grounds that override your interests. We will inform you of the outcome of any such consideration.

You may raise an objection to profiling via your account settings or by contacting us using the details in Section 14.

10. Email Marketing and Communications

We may send you marketing communications about World Privilege Plus offers, new benefits and partner promotions where:

  • You have given prior consent to receive such communications; or
  • You are an existing member and we are permitted to do so under the Privacy and Electronic Communications Regulations (PECR) soft opt-in rules.

All marketing emails contain a clearly visible unsubscribe link. You may also manage your communication preferences at any time via your account settings or by contacting us.

Operational emails relating to your membership, for example account notices, changes to terms, or security alerts, will continue to be sent regardless of your marketing preferences as they are necessary for the administration of your membership.

11. Data Retention

We retain your personal data for as long as your membership is active and for a period afterwards as set out below:

  • Account and identity data: retained for the duration of your membership and for 6 years after cancellation, in line with the UK statutory limitation period for contract claims.
  • Transaction and financial data: retained for 7 years after the relevant transaction, in line with HMRC requirements.
  • Communications and support data: retained for 3 years after the last interaction.
  • Usage and analytics data: retained for 2 years on a rolling basis.

Where data is retained solely to meet legal or regulatory obligations, it will be held securely and access restricted to those with a specific need. Data no longer required for any lawful purpose will be securely and irreversibly deleted in accordance with our internal data retention schedule.

12. Your Data Protection Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

Right What This Means
Right of Access Request a copy of the personal data we hold about you. This is often called a Subject Access Request (SAR). Please label your enquiry as “SAR” when contacting us. We will respond within one calendar month.
Right to Rectification Request correction of inaccurate or incomplete personal data. You may also update many details directly via your account settings.
Right to Erasure Request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis. Please note this will normally result in closure of your account.
Right to Restrict Processing Request that we limit how we use your data in certain circumstances, for example while a dispute about accuracy is resolved.
Right to Object Object to processing based on legitimate interests or for direct marketing purposes, including profiling. Your right to object to direct marketing is absolute. See also Section 9.
Right to Data Portability Request a machine-readable copy of personal data you have provided to us, where processing is based on consent or contract.
Right to Withdraw Consent Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to Non-Discrimination Exercising your data rights will not affect the price or quality of service you receive, except where the withdrawal of data makes it technically impossible for us to continue providing the service.

To exercise any of these rights, please contact us via the details in Section 14. We will respond within one calendar month of receiving your request. In complex cases or where we receive a high volume of requests, we may extend this by a further two months, in which case we will notify you.

We will not charge a fee for handling your request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to respond.

13. Security of Your Data

We employ industry-standard technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, alteration or disclosure. These measures include encryption of data in transit and at rest, access controls and authentication requirements, third-party security audits, and regular security testing.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) as required by UK GDPR, without undue delay.

14. How to Contact Us and How to Complain

If you have any questions, comments or concerns about this Privacy Policy or how we handle your personal data, please contact us in the first instance:

  • Email: info@worldprivilege.com
  • Telephone: 0161 772 0007
  • Contact form: via the Contact Us page on the World Privilege Plus website
  • Post: World Privilege Plus Limited, 373 Bury New Road, Prestwich, Manchester, M25 1AW

We will aim to respond to general enquiries promptly. For formal data subject rights requests, we will respond within one calendar month as required by UK GDPR.

If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with the relevant supervisory authority:

We would appreciate the opportunity to address your concerns before you contact a supervisory authority, and we encourage you to contact us in the first instance.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law.

Where we make material changes to how we process your personal data, we will notify you in advance by posting a prominent notice on the World Privilege Plus login page and by sending a notification to the email address registered to your account. We will give you reasonable notice before any material changes take effect.

If you do not agree with the changes, you may cancel your membership in accordance with the separate Membership Terms and Conditions before the changes take effect. Continued use of the World Privilege Plus services after that point will indicate your acceptance of the updated policy.

Where material changes affect the legal basis on which we process your data or introduce new uses of your personal data, we will seek fresh consent where required by law.

World Privilege Plus Limited | Registered in England | Registered with the ICO

373 Bury New Road, Prestwich, Manchester, M25 1AW