Ordered a bike, 2 business days later I get an email from… Trustpilot??? With my personal information in it. I don't recall giving Brompton permission to share my personal information with anyone, so seeing my firstname lastname and email address in a random e-mail from a third party immediately pissed me off.
I'll be making a data privacy complaint to my national data protection office, and the Information Commissioner's Office of the UK.
Please be wary that the GDPR disallows business entities from sharing your PII with third parties unrelated to their primary business relation with you, without your clear and explicit consent as to the type and scope of data shared. You can find templates for information removal under the GDPR here: https://github.com/gdpraid/GDPR-claims-and-complaint-templates
by Consistent-Hat-8008
4 Comments
Fighting the good fight 👍
Wow that sucks! Thanks for sharing
I don’t think this violates GDPR.
Looking at [**Brompton’s Privacy policy**](https://www.brompton.com/legal/privacy-policy), this seems to be covered in Sections 4 and 5.
***Relevant extract form Section 4: How we use your personal data***
>Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
***Relevant extract form Section 5: Purposes for which we will use your personal data***
>To manage our relationship with you which will include:
>(a) Notifying you about changes to our terms or privacy policy
>(b) Asking you to leave a review or take a survey
>*Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services and provide support to our customers)*
There are a lot of things that Brompton are generally doing wrong from a strategic point of view, but I think they are within their rights in this instance.
Please be aware, it is Trustpilot that is the unscrupulous operator, and it is Brompton that is more the victim than you are.