1. A full threshold must be met before prizes are awarded.

2. Prizes will not be paid pro rata between the different payment levels.

3. All companies wishing to take part must complete the online registration form.

4. The BSS Rewards Scheme relates only to purchases with BSS (See 'Progress' page to know which sales are included) and no other businesses within the Travis Perkins Group.

5. Only invoiced sales dated between 1st January and 31st December 2023 will count towards the total.

6. Accounts will only be measured on the account number submitted by the BSS Account Manager prior to registration.  Multiple accounts will not be eligible.  Spend must go through on the specified account to be included in the promotion.

7. e-gift cards shown on the BSS Rewards website are the only prizes to be supplied. No cash alternatives can be given.

8. E-gift cards can be claimed by the company representative named on the registration sign up.  Recipients of prizes claimed should be responsible for their own tax liabilities and it is the recipient's responsibility to obtain approval from their employer to take part in the promotion. An online sign-up form will be taken as acceptance of the terms and conditions of this scheme and a willingness to participate therein.

9. Customers can redeem points once they achieve the Level 1 or Level 2 threshold. Once prizes have been claimed, please allow 5 working days for ecard orders.

10. All participating companies will be informed of their incremental sales and any prizes available to claim by 19th January 2024.  Customers can log onto the website after 31st December 2023 to view their final points balance.

11. Customers eligible for a prize will have until 29th February 2024 to redeem their points and claim their prize.  After 29th February 2024 all unclaimed points will be forfeited and cannot be carried over to subsequent schemes.

12. BSS reserves the right to alter or withdraw this promotion at any time.

All enquiries regarding the terms of this scheme to:  bss.marketing@bssgroup.com

INTRODUCTION

This privacy policy together with our terms and conditions (which can be accessed within this website) set out the basis on which you visit and use our website and place orders.

Please read them carefully as they contain important information and by visiting and using our website you agree that you have read, understand and agree to them.

If you want to ask us anything about this privacy policy or have any comments on or complaints about this website then please contact us using the contact details shown on this website.

This website is owned and operated by Park Retail Ltd (trading as Love2shop Business Services) registered in England with company number 402152 ("Park Retail").

Park Retail is a subsidiary of Appreciate Group plc. registered in England with company number 1711939 (“Appreciate Group”).

Both Park Retail and Appreciate Group have their registered office at Valley Road, Birkenhead, Merseyside, CH41 7ED and throughout this privacy policy these companies shall together be referred to as “our/us/we”.

SECURITY AND PRIVACY

We use internet standard encryption technology to scramble your data when you transmit it to us. This process is known as SSL (secure sockets layer) and provides you with the maximum practicable level of security. To check that you are in a secure area of our site look at the bottom of your browser and you will see a closed padlock or an unbroken key.

Your security and peace of mind are of the utmost importance to us and we are constantly striving to safeguard them.

DATA PROTECTION

By placing an order with us and/or giving data to us you confirm that you are over the age of 18 and that you understand and agree that the information you provide will be held on our database and that it will be shared by all subsidiary companies of Appreciate Group.

A full list of these companies is available by writing to the Data Protection Officer, Appreciate Group plc, Valley Road, Birkenhead, Merseyside, CH41 7ED.

Appreciate Group shall be the data controller for the purposes of data protection legislation and Park Retail is the operating company.

The information you provide will be used by us and any necessary third parties to provide you with the products and services you request.

COMMUNICATIONS

We may communicate with you where there is a legitimate business interest to do so. This will include sending you:

operational communications - for example for customer care purposes or to keep you updated about the progress of your order, when it will be delivered and thereafter any changes to the products and services ordered; and

marketing communications – for example to keep you informed about our or carefully selected third party products and services, offers, promotions, prize draws, and competitions etc.

Our communications may be sent by email, telephone (including SMS), via social media platforms (i.e. Facebook/Twitter/Instagram etc.), post, fax and/or any other appropriate means including new technology.

Unless you “opt-out” of our marketing communications, by providing us with your contact details you agree to receive our marketing communications.

We never make your personal details available to third party companies for their purposes alone.

TRACKING EMAILS

We may track our emails by including a tiny image file, known as a tracking pixel/beacon/cookie, within certain emails that we send to you.

We track our emails to help us improve the performance of our email campaigns and to help ensure that our emails have been read by you and/or are of interest to you.

Tracking our emails in this way may enable us to gather the following personal data from your device (this list is not exhaustive): confirmation that you opened our email; when you opened our email; how many times you opened our email; from which server you opened our email, including the server’s IP address (and therefore location); which type of device, operating system and/or software you used to open the email; which link(s) to our website(s) you clicked within the email; and when combined with Google Analytics data, certain activity you subsequently carry out on our website(s).

By using our website or otherwise submitting your email address to us, you agree to us tracking our emails, as detailed above.

If you do not want us to track our marketing emails you should “opt-out” of our marketing communications, as detailed directly below.

“OPTING-OUT” OF MARKETING COMMUNICATIONS

When you first provide us with your personal data, you will be provided the option to “opt-out” of marketing communications relating to the reward programme.

After that, each marketing communication that you receive will include instructions on how you can “opt-out” of future marketing communications. Accordingly, if you want to “opt-out” of future marketing communications please follow those instructions.

Otherwise you can “opt-out” of future marketing communications at any time by contacting us using the contact details shown on our website or alternatively you may write to us (providing your contact details and any customer/order number) at the following address: Engagement Services Team, Love2shop Business Services, Floor 4, 20 Chapel Street, Liverpool, L3 9AG.

PERSONAL DATA BELONGING TO OTHERS

If you provide us with any personal data that does not belong to you:

• the data owner must be over the age of 18;
• you do so having first obtained the data owner’s consent, in accordance with all applicable data protection laws;
• the terms of this privacy policy shall apply to such personal data as if the data owner had provided us with their personal data directly; and
• you agree that we may inform the data owner that you have provided us with their personal data.

GDPR COMPLIANCE

The following information is provided in accordance with Article 13 of the General Data Protection Regulations 2016 (“GDPRs”).

The joint data controllers for this website are Appreciate Group plc and the Client.

You may contact the data controllers by writing to: Data Protection Officer, Appreciate Group plc, Valley Road, Birkenhead, Merseyside, CH41 7ED.

Your personal data will be processed internally by Appreciate Group and Client companies in order to enable us to deliver the products and services you have purchased and/or requested from us.

Your personal data may also be processed by carefully selected third parties (acting as our data processors) so that they can provide us with their products and services which, in turn, enables us to deliver our products and services to you.

We intend to process your personal data where there is a legitimate business interest to do so. This may involve sending you communications, as detailed within the above section headed “communications” as well as for one or more of the following non-exhaustive reasons:

• to provide you with the products and services you have ordered, including from third parties;
• to provide you with information about other products and services that either we or carefully selected third parties offer, which are similar to those that you have purchased or enquired about;
• to notify you about changes to our products and services;
• to improve the performance of our products and services or our website (including search engine optimization); or
• to carry out market research, business analysis and to collate management information.

The personal data that we (including any of our subsidiaries companies) collect from you may be transferred, processed and/or stored outside of the European Economic Area (“EEA”). This may take place by ourselves or one of our sub-contractors or suppliers in accordance with all applicable data protection law.

By using our website or otherwise submitting personal information to us, you agree to this transfer, storing or processing and acknowledge that this may mean that your personal information may not be protected to standards similar to those in the EEA.

Your personal data will be processed by us for a period consistent with the GDPRs, and for no longer than is necessary.

You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning your personal data or to object to processing as well as the right to data portability, details are set out below.

You may withdraw your consent for us to process your personal data at any time. However, if we need to process your personal data to deliver a product or service to you then we may have to stop providing such product or service to you.

You have the right to complain to the UK’s Information Commissioners Office.

The provision of personal data by you is a contractual requirement in order for us to deliver a product or service to you.

Your Rights under the GDPRs

If your personal data is transferred, processed and/or stored outside of the EEA you have the right to be informed of the appropriate safeguards relating to the transfer.

Please note that your rights under the GDPR are set out below:

Article 15

Right of access

Further to the information that is set out within this privacy policy, you have the right to obtain from us without undue delay whether or not your personal data is being processed by us, and, where that is the case, access to the personal data and the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
• the right to lodge a complaint with a supervisory authority (this being UK’s Information Commissioners Office);
• where the personal data are not collected from you, any available information as to their source;
• the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Article 16

Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you, in accordance with the GDPRs. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Article 17

Right to erasure (‘right to be forgotten’)

You have the right to obtain from us the erasure of personal data concerning you without undue delay, in accordance with the GDPRs. This shall not apply to the extent that processing is necessary; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.

If you exercise your right to erasure, you understand, agree and acknowledge that we may be unable to deliver some or all of the products and services that you have ordered and/or enquired about.

Article 18

Right to restriction of processing

You have the right to obtain from us the restriction of processing, in accordance with the GDPRs. Where processing has been so restricted such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a European Member State.

If you exercise your right to restriction of processing, you understand, agree and acknowledge that we may be unable to deliver some or all of the products and services that you have ordered and/or enquired about.

Article 20

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another without hindrance from us where:

• the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant Article 6(1)(b); and
• the processing is carried out by automated means.

Article 21

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data, in accordance with the GDPRs. In such circumstances we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

If you exercise your right to object, you understand, agree and acknowledge that we may be unable to deliver some or all of the products and services that you have ordered and/or enquired about.

We shall provide a copy of the personal data undergoing processing. For any further copies requested by you, we may charge a reasonable fee based on administrative costs. Where you make the request by electronic means, and unless otherwise requested by you, the information shall be provided in a commonly used electronic form.

VARIATIONS

We may vary this policy at any time and any variations that we make will be displayed on this page by uploading an updated version of the policy.

You should check this page frequently for any variations and you agree that this is an appropriate method to vary this policy.

Cookie Policy

The portal uses cookies. We use cookies both to provide essential functionality of the portal, and to collect anonymous statistics to help us measure performance of the site and to make improvements.

What is a cookie?

A cookie is a small text file that is stored by your browser (eg Google Chrome, FireFox or Internet Explorer) on your mobile device or computer. They are used by websites to store small amounts of data for things like user preferences, or your current login details.

How does the portal use cookies?

A visit to the portal may generate the following types of cookies:

Session cookies

A session cookie is a cookie which lasts until you close your browser and then is removed. We use this cookie for essential functionality, for example to let you log in to the site, or to remember some settings while you use the site.

Persistent cookies

A persistent cookie is a cookie which remains stored by your browser when you leave the site. We use persistent cookies to remember that you are logged in to the  portal, which means that you don’t need to log in again if you come back to the site within 24 hours. This cookie is set to expire after 24 hours, and will also be removed if you manually log off from the portal “Log out” in the user menu. We also use a cookie to record whether you have read and agreed to the use of cookies on this site, to prevent the banner showing again.

Summary of first party cookies

Cookie type	Cookie source	Cookie name	Duration	Description
Necessary	Portal	session-hep	Session	This session cookie lets us provide essential functionality while you are logged in to the portal
Necessary	Portal	Login_tk_hepr	1 day	This persistent cookie allows us to keep you logged in to the site for 1 day after you log in. It is cleared if you log out of the site.
Necessary	Portal	CookieControl	90 days	This persistent cookie allows us to record that you have read and agreed to the use of cookies on this site, and stops the cookie banner showing.
Analytics	Google Analytics	_gat _gid _ga	1 min (_gat), 1 hour (_gid), 24 months (_ga)	These cookies are used to collect information on how visitors use our site. The cookies collect anonymous information, including visitor numbers, where visitors have come to our site from, and which pages they visited. We use this information for reporting purposes and to allow us to understand how visitors find our site. Find out more at the Google Analytics privacy policy

Third party cookies

In addition to the cookies that we set ourselves, other organisations which have content that appears on our site may set cookies. Because of the way cookies work, we cannot access the cookies those organisations set, nor can they access information from cookies we set on our website. The third party organisations which may set cookies on our site are:

• Facebook Cookie policy
• Vimeo Cookie policy
• Youtube Cookie policy

How do I control cookies?

In most cases, it is possible to tell your browser to not accept cookies, or prevent cookies being set from a particular website. However, if you disable first-party cookies on this site, you will prevent us from being able to log you on to the site. The following links may be useful to find out how to control cookies in your browser:

• Cookie settings in Internet Explorer
• Cookie settings in Firefox
• Cookie settings in Chrome
• Cookie settings in Safari (OS X) and iOS.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org, or www.aboutcookies.org.