Pandora

pandora.net · retail

The loyalty card turns every basket into a named record, merged with data bought from outside firms and sorted into groups by income and lifestyle. The discount is the payment for it, and the record is kept for as long as you keep shopping there.

The verified route

privacy@pandora.net
Privacy Recommended

Where data goes

What Pandora likely holds

What shops typically hold about you, from our industry research, the most sensitive first.

Pick a folder to see where it goes.

Most sensitive

Sensitive

Everyday

Where it goes

Pandora pandora.net Your data goes from here to the companies and services built around it. 1 event

On Pandora's behalf

They handle your data on Pandora's instructions. If Pandora uses them, a request to Pandora should reach them.

Inferred services

Services shops typically use.

Security, CCTV and facial recognition providers Most shops
Payment, analytics, hosting and support providers Most shops
ID and age checks where self-checkouts estimate age by camera
Couriers and delivery companies Most shops
Call recording and analysis tools where calls are recorded
AI providers Some shops

Get their own copy

A request to Pandora doesn't reach them. Each needs its own, and some keep records under a legal duty.

Inferred recipients

Who shops typically pass your data to, from our industry research. Where the company names a partner, we show the partner in place of the inferred one.

Loyalty, data-insight and footfall partners Most shops
Ad platforms and tracking Most shops
Data brokers and enrichment Some shops
Fraud databases where returns are checked by a returns-fraud service
Insurers and claims registers if they buy a warranty or protection plan
Lenders and pay-later providers if they buy on store credit, pay later or interest-free finance

Inferred practices

What shops typically do with your data, from our industry research.

Your shopping used to sell advertising Most shops
Faces matched against a watchlist Some shops
Traits worked out about you Most shops
Offers and prices set by what you buy Most shops
Tracked around the shop Most shops
Kept after you leave Most shops

What has gone wrong

Pandora Incident · 2025 Customer contact details taken through an outside platform it uses On the map: Pandora The report

Elsewhere in retail

The same kind of data, at other shops.

ASOS Notice · 2026 Customer profiles with addresses and site searches taken through a phished staff login The report
ASOS Incident · 2026 Attackers sent a push alert through its own app, threatening to leak its data The report
Masterofmalt Incident · 2026 Shoppers' details taken through a BigCommerce add-on The report
Brown Thomas Arnotts Enforcement · 2026 Admitted sending marketing emails people could not unsubscribe from The report
Carhartt Incident · 2026 12.9 million customers' details published after a ransom was refused The report
Walmart Notice · 2026 Sued in Illinois over voiceprints allegedly built from customer service calls The report
Mango Incident · 2025 Customer contact details taken from an outside marketing service The report
Harrods Incident · 2025 Online customers' records taken in a breach at an outside supplier The report
Chanel Incident · 2025 US clients' contact details taken from a database held at an outside provider The report

DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.