Business sharing my personal data to other businesses

EllieJade1995

Ergates said:

EllieJade1995 said:

Ergates said:

EllieJade1995 said:

It’s now a few weeks later & the retailer has reached out to say they’ve contacted a number of other small retail businesses to see if I have made claims against them & they’re threatening to report me

They've contacted who?  There are literally *thousands* of small retail businesses in the UK - they just contacted some of them, picked at random?

And report you to.. who? 

Literally no idea! I guess similar businesses to them? They do different bits like party decor, kids stuff. No idea who they would report to as they haven’t said, they just said they’d “report” me if they heard back from another business to say I’d made a claim. Police? I don’t know! Which in my eyes is madness, as over the course of years I could have of course made a claim and secondly my area has a problem with a particular delivery driver.

The main thing is I’m trying to work out if this goes against GDPR regulations, essentially they’re admitting to sharing my data with people outside of the business which I would say is not allowed. 

Emailing your name and address to a random selection of businesses would be a breach of GDPR, yes.

Threatening to report you to the police for having raised missing item claims would be *beyond* madness - of the level of the person who dialed 999 to report their icecream didn't have enough sprinkles.

The person who is emailing you is either a liar or they're insane.

I thought so! I can’t believe they have just said that in an email chain.

I know, I don’t know for sure but I would assume that’s what they mean. I think it’s madness becuase I haven’t even made a claim with them! They didn’t need to make a claim because I contacted them to say I had the order. Which makes me think, why are they even doing that and even if they didn’t complain would it go anywhere because they haven’t had to make a claim against me? 

Jenni_D

born_again said:

So is this in relation to your other thread & DPD flagging your address?

https://forums.moneysavingexpert.com/discussion/6595794/dpd-have-flagged-my-address-what-does-this-mean#latest

Given that @EllieJade1995 seems to have overlooked this query, I've quoted it here.  

born_again

Jenni_D said:

born_again said:

So is this in relation to your other thread & DPD flagging your address?

https://forums.moneysavingexpert.com/discussion/6595794/dpd-have-flagged-my-address-what-does-this-mean#latest

Given that @EllieJade1995 seems to have overlooked this query, I've quoted it here.  

I had noticed. 🤷‍♀️

DullGreyGuy

EllieJade1995 said:

Ergates said:

EllieJade1995 said:

It’s now a few weeks later & the retailer has reached out to say they’ve contacted a number of other small retail businesses to see if I have made claims against them & they’re threatening to report me

They've contacted who?  There are literally *thousands* of small retail businesses in the UK - they just contacted some of them, picked at random?

And report you to.. who? 

Literally no idea! I guess similar businesses to them? They do different bits like party decor, kids stuff. No idea who they would report to as they haven’t said, they just said they’d “report” me if they heard back from another business to say I’d made a claim. Police? I don’t know! Which in my eyes is madness, as over the course of years I could have of course made a claim and secondly my area has a problem with a particular delivery driver.

The main thing is I’m trying to work out if this goes against GDPR regulations, essentially they’re admitting to sharing my data with people outside of the business which I would say is not allowed. 

Hadn't clocked you'd split your thread into multiple ones... also not good practice.

No they haven't talked to anyone, DPD has flagged you are a customer of concern and the business are just claiming they've talked to other businesses when really they are just relaying DPD's concerns.

EllieJade1995

DullGreyGuy said:

EllieJade1995 said:

Ergates said:

EllieJade1995 said:

It’s now a few weeks later & the retailer has reached out to say they’ve contacted a number of other small retail businesses to see if I have made claims against them & they’re threatening to report me

They've contacted who?  There are literally *thousands* of small retail businesses in the UK - they just contacted some of them, picked at random?

And report you to.. who? 

Literally no idea! I guess similar businesses to them? They do different bits like party decor, kids stuff. No idea who they would report to as they haven’t said, they just said they’d “report” me if they heard back from another business to say I’d made a claim. Police? I don’t know! Which in my eyes is madness, as over the course of years I could have of course made a claim and secondly my area has a problem with a particular delivery driver.

The main thing is I’m trying to work out if this goes against GDPR regulations, essentially they’re admitting to sharing my data with people outside of the business which I would say is not allowed. 

Hadn't clocked you'd split your thread into multiple ones... also not good practice.

No they haven't talked to anyone, DPD has flagged you are a customer of concern and the business are just claiming they've talked to other businesses when really they are just relaying DPD's concerns.

I haven’t, it’s a different thread but it’s what is making me think they have spoken to someone. My DPD thread was about a different business who I actually have had a missing item with, the one from this current thread is a company where the box just wasn’t sealed properly and the item has fallen out, but I got it and reported it to the retailer before they even made a claim. What I’m thinking is that they have spoken to this particular company though, as they are the only ones I can think of.

Ive just contacted the DPD query company and have asked whether they’ve been sharing data and to be truthful otherwise I will send a request for where my data has been used. 

Jenni_D

If they say they haven't been sharing your data (outwith the purposes for which it was provided), will you automatically assume they're being untruthful? Or will they only be being truthful (in your eyes) if they confirm sharing your data?

You've basically put them in a lose-lose position. 🤷‍♀️

EllieJade1995

Jenni_D said:

If they say they haven't been sharing your data (outwith the purposes for which it was provided), will you automatically assume they're being untruthful? Or will they only be being truthful (in your eyes) if they confirm sharing your data?

You've basically put them in a lose-lose position. 🤷‍♀️

I would think given that I’ve said I can request them to share data if they need to, that they would be honest if they had and if they hadn’t, they’d welcome any request for data. I think you’d realistically be able to tell if someone hadn’t and was being truthful, as they’d welcome me putting in a data request. 

Ergates

EllieJade1995 said:

Ive just contacted the DPD query company and have asked whether they’ve been sharing data and to be truthful otherwise I will send a request for where my data has been used. 

Whilst DPD don't have the best reputation for successfully delivering ever single parcel they're asked to, they're a large national company run by people who aren't insane, so are far more likely to have a grasp of their responsibilities under GDPR.

It's probably unlikely they'll have breached it at the behest of some rando who emails them asking for data.

EllieJade1995

Ergates said:

EllieJade1995 said:

Ive just contacted the DPD query company and have asked whether they’ve been sharing data and to be truthful otherwise I will send a request for where my data has been used. 

Whilst DPD don't have the best reputation for successfully delivering ever single parcel they're asked to, they're a large national company run by people who aren't insane, so are far more likely to have a grasp of their responsibilities under GDPR.

It's probably unlikely they'll have breached it at the behest of some rando who emails them asking for data.

Yeah I don’t think it’s DPD, I think it’s the one claim I had with them and they’ve possibly asked them. But again I’d be seriously surprised if 2 companies broke GDPR laws like that, I get they are small businesses so maybe wouldn’t have as much understanding as the big companies, but still! 

I’ve said I’ll complain to the ICO & trading standards and can easily request the data of who they’ve asked, because if there are any other companies that have then they have landed them in it too! 

Grumpy_chap

DE_612183 said:

So you think t hat Business A who you had a problem with ( hoever minor ) has phoned up Businesses B, C & D and said - "Have you had an issue with Ellie Jade of Number 7 Nowhere St?"

EllieJade1995 said:

I would assume that’s what they’re insinuating too but it’s concerning someone can just do that, as of course there will have been problems with deliveries. 

 

I am failing to understand this - and DE_612183 expressed the issue as I understood from the OP.

Business A (selling party goods) experienced an issue with the OP possibly making a hasty claim for non-delivery / partial delivery / goods missing.
How would Business A select the other Businesses B, C & D to ask?
If Business A did make such a request, how would the other Businesses B, C & D respond?  Or even have an interest to find out?

Would B, C & D be other businesses selling party goods (so competitors of A)?
Would B, C & D be other businesses local to A or acquaintances of A (but quite possibly wholly different nature businesses of no interest to the OP)