World Privilege Plus Privacy Policy
Last Updated: 1st January 2026
World Privilege Plus Limited | 373 Bury New Road, Prestwich, Manchester, M25 1AW
1. About This Privacy Policy
This Privacy Policy applies to World Privilege Plus Limited and its related services provided via the World Privilege Plus website and any associated private-label platforms (together referred to as “World Privilege Plus”, “we”, “us” or “our”).
This document explains how we collect, use, share and protect your personal data when you register for or use our membership programme. It also sets out your data protection rights under UK law.
By using the World Privilege Plus services, you confirm that you have read and agree to this Privacy Policy.
2. Who We Are (Data Controller)
World Privilege Plus Limited is the data controller of your personal data.
We are registered with the UK Information Commissioner’s Office (ICO). Our registered office is 373 Bury New Road, Prestwich, Manchester, M25 1AW.
If you have any questions about this Privacy Policy, please contact us via the details in Section 14.
3. Personal Data We Collect
We collect and process the following categories of personal data, depending on how you interact with us:
- Identity data: name, employee ID (where applicable).
- Contact data: email address, postal code.
- Authentication data: username, password, session IDs and similar identifiers.
- Financial and transaction data: payment and bank information, transaction history, date of birth where required for verification or payment purposes.
- Usage data: browsing history and activity on the World Privilege Plus platform and private-label subdomains, pages viewed, offers clicked and redemptions made.
- Communications data: queries, complaints, and other correspondence with our customer service teams.
We may also collect information you choose to provide in surveys, feedback forms, or when entering competitions or events that we host.
4. How We Use Your Personal Data and Legal Bases
We only use your personal data where we have a lawful basis to do so.
The table below summarises our main purposes and legal bases:
| Purpose | Data Used | Lawful Basis |
| Providing and managing your membership | Name, email, employee ID, postal code | Performance of contract |
| Processing transactions and payments | Payment data, transaction history, date of birth | Performance of contract; legitimate interests |
| Account management and security | Authentication data, session IDs | Legitimate interests (fraud prevention and security) |
| Customer service and communications | Name, email, service tickets | Performance of contract; legal obligation |
| Personalising your experience | Preferences, browsing and transaction history | Legitimate interests; consent (marketing) |
| Programme analytics and improvement | Site and usage activity | Legitimate interests |
Where we rely on consent (for example, for certain types of marketing), you may withdraw that consent at any time (see Section 10 and 12).
5. How We Collect Your Personal Data
We collect personal data in the following ways:
- Directly from you when you register, update your account, redeem offers, make purchases through our platform, or contact us.
- From your employer or sponsoring organisation where they provide information necessary to set up or verify your membership (for example, name or employee ID).
- Automatically through your use of our digital services (such as logs, security events and usage analytics).
We may also receive limited data from payment providers or merchants to confirm that a transaction has been completed or refunded.
6. Sharing Your Personal Data
We do not sell your personal data to any third party under any circumstances.
We may share your data only as follows:
- With your employer or sponsoring organisation: aggregated anonymised usage data to evaluate programme effectiveness; confirmation of your registration status to help reduce duplicate communications.
- With participating merchants: only information necessary to fulfil a transaction you have initiated (for example, shipping address or payment details provided directly by you to the merchant).
- With event partners and vendors: RSVP information for private in-store or partner events you have registered for.
- With service providers: trusted third parties who support our IT, hosting, payment processing, security, analytics and customer support functions, under strict contractual obligations.
- As required by law: where necessary to comply with a legal obligation, court order, or to protect our rights, security, or the rights of our members, partners or the public.
- With your consent: in any other circumstance only with your prior explicit consent.
7. International Data Transfers
Your personal data is stored on servers located in the United Kingdom.
Where you transact with merchants or partners located outside the UK or European Economic Area (EEA), data necessary to complete that transaction may be transferred internationally.
We ensure appropriate safeguards are in place for all international transfers in accordance with UK GDPR, including adequacy decisions, standard contractual clauses or equivalent mechanisms.
8. Cookies and Similar Technologies
We do not use cookies on the World Privilege Plus website or our core programme platform.
Some third-party merchants or partner sites that you access via our platform may use cookies, web beacons or similar technologies on their own sites. We have no access to or control over those technologies.
This Privacy Policy covers only our own use of cookies and similar technologies on the World Privilege Plus platform and its private-label subdomains.
9. Profiling and Personalisation
We use profiling to personalise your experience and to surface offers relevant to your browsing history and past purchases.
We do not carry out automated decision-making that produces legal or similarly significant effects.
If you object to profiling, you may do so via your account settings or by contacting us. However, because profiling is fundamental to how the programme operates, we may be unable to continue providing the service if you exercise this right.
10. Email Marketing and Communications
We may send you marketing communications about World Privilege Plus offers, new benefits and partner promotions where:
- You have given prior consent to receive such communications; or
- You are an existing member and we are permitted to do so under applicable law (soft opt-in).
All marketing emails contain a clearly visible unsubscribe link. You may also manage your communication preferences at any time via your account settings or by contacting us.
Operational emails relating to your membership (for example, account notices, changes to terms or security alerts) will continue regardless of your marketing preferences.
11. Data Retention
We retain your personal data for as long as your membership is active.
Following cancellation, we retain certain data as required to meet legal and regulatory obligations, resolve disputes, and enforce our agreements.
Data no longer required for these purposes will be securely deleted in accordance with our retention policy.
12. Your Data Protection Rights
Under UK GDPR and other applicable laws, you have the following rights in relation to your personal data:
| Right | What This Means |
| Right of Access | Request a copy of the personal data we hold about you (often referred to as a Subject Access Request or “SAR”). Please label enquiries as “SAR”. |
| Right to Rectification | Request correction of inaccurate or incomplete personal data. You may also update many details via your account. |
| Right to Erasure | Request deletion of your personal data. Please note that this will normally close your account and end access to the programme. |
| Right to Object | Object to certain types of processing, including profiling (see Section 9). |
| Right to Data Portability | Request a machine-readable copy of personal data you have provided to us. |
| Right to Non-Discrimination | Exercising your data rights will not affect the price or quality of service you receive. |
To exercise any of these rights, please contact us via the details in Section 14.
13. Security of Your Data
We employ industry-standard technical and organisational security measures, including encryption, access controls, third-party security audits and regular security testing, to protect your personal data.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
14. Complaints and How to Contact Us
If you have any questions, comments or concerns about this Privacy Policy or how we handle your personal data, please contact us in the first instance using the details below:
- Email: Info@worldprivilegeplus.com
- Contact form: via the Contact Us page on the World Privilege Plus website
- Post: World Privilege Plus Limited, 373 Bury New Road, Prestwich, Manchester, M25 1AW
We will respond within 72 hours. If you remain dissatisfied, you have the right to lodge a complaint with the relevant supervisory authority:
- United Kingdom: Information Commissioner’s Office (ICO) ico.org.uk
- European Union: EU Data Protection Authorities Panel ec-dppanel-secr@ec.europa.eu
We request that you contact us before making a formal regulatory complaint so we have the opportunity to resolve your concern directly.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law.
Where material changes are made, we will notify you by posting a notice on the World Privilege Plus login page or via email before the changes take effect.
Continued use of the World Privilege Plus services following notification constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may cancel your membership in accordance with the separate Membership Terms and Conditions.
World Privilege Plus Limited — Registered in England — Registered with the ICO — Confidential
