We may also create personal data about you, for example, if you contact us by telephone to make a complaint about our products or services, then we may make a written record of key details of the conversation so that we can take steps to address the complaint.
WHERE WE GET YOUR DATA FROM
We obtain your personal data from the following sources:
• Directly from you, either in person, via our website or email or by telephone.
• When you register for our newsletter
• When you request information on our services or products or for other marketing to be sent to you
• When you enter into a competition or promotion
• When you complete a survey from us or give us feedback
• Third parties, such as:
– Analytics providers (such as Google).
– Providers of technical, payment and food delivery services (such as Verifone, mastercard, Deliveroo, Uber eats).
– Social media platforms (such as Facebook, Twitter and Instagram) e.g. when you share our content through social media, by liking us on Facebook, following or tweeting about us on Twitter.
– Publicly available sources (mainly applying to businesses and suppliers).
HOW WE USE YOUR PERSONAL DATA
We use your personal data for the following reasons:
• In order to perform our contractual obligations to you, including: processing and performing any food order placed by you; orders placed by us where you are a supplier; making or receiving payments, fees and charges; and collecting and recovering money owed.
• To comply with our own legal obligations i.e. health and safety legislation or to assist in a legal investigation.
• To protect our business, deal with misuse of our website and comply with our security policies.
• To help ensure that our website delivers relevant content and advertisements to you and to measure the effectiveness of our advertising.
• To communicate with you about products or services that may be of interest to you, special events, promotions or prize draws and competitions and provide you with promotional offers (e.g. on your birthday). Only applicable when you have explicitly signed up to receive marketing communications from us (see point 4).
• For the use of data analytics in order to identify trends and measure effectiveness of promotional campaigns and advertising and in order to improve our website.
WHO RECEIVES THE PERSONAL DATA YOU PROVIDE TO US?
We do not sell your personal information or share personal information with third parties for their own direct marketing purposes, unless you give us permission to do so. When we give you notice, and you consent, we will share your personal information as you direct us to.
We may disclose the personal data you provide to us to:
• HMRC, legal and other regulatory authorities, including those who request your personal data or to report any potential or actual breach of applicable law or regulation.
• External professional advisers such as accountants, auditors, bankers, insurers and lawyers.
• Law enforcement agencies, courts or other relevant party, to the extent necessary for the establishment, exercise or defence of legal rights.
• Third parties, where necessary, for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties.
• Third parties operating plugins or content (such as Facebook, Twitter, Instagram) on our website which you choose to interact with.
We may, for strategic or other business reasons, decide to sell or transfer all or part of our business. As part of that sale or transfer, we may pass information we have collected and stored, including personal information, to anyone involved in the sale or transfer.
If you have agreed to receive marketing communications from us, you can later opt out by following the opt-out instructions in the marketing communications we send you.
You can also opt out by contacting us via email at: email@example.com or post to: 4 Clay Pit Lane, Roecliffe, North Yorkshire, YO51 9LS
If you do opt out of receiving marketing communications from us, we may still send communications to you about your transactions, any accounts you have with us, and any contests, competitions, prize draws or sweepstakes you have entered.
HOW LONG DO WE STORE YOUR PERSONAL DATA FOR?
We will store your personal data for the time period which is appropriate in accordance with our data retention policy. We will only hold your personal data for so long as is necessary for us to do so. We keep the length of time that we hold your personal data for under continual review. These reviews take place annually.
KEEPING YOUR DATA SECURE
We will use technical and organisational measures to ensure that we safeguard your data, including measures to deal with any suspected data breach. If you suspect any misuse, loss or unauthorised access to your data please contact firstname.lastname@example.org immediately.
YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA
Subject to applicable law including relevant data protection laws, you have a number of rights in connection with the processing of your personal data, including:
1. The right to access. To request access to the personal data that we process or control.at any time. We will not charge you for any such data provided, unless your request is “manifestly unfounded or excessive”. Where we are legally permitted to do so, we may refuse your request and provide reasons why your request has been refused.
2. The right to correct. To request the correction of any inaccuracies in your personal data or to request that incomplete data is completed.
3. The right to erase. To request, on legitimate grounds as specified in law, the erasure of your personal data that we process or control.
4. The right to restrict. To request restriction of the processing of your personal data that we control or limit the way in which we use it.
5. The right to object. To object on legitimate grounds, as specified in law, to the processing of your personal data, including where we use it for our legitimate interests..
6. The right to data portability. The right to receive your personal data in a structured, commonly used and machine-readable format and to have your personal data transferred to another controller, to the extent applicable in law.
7. The right to complain. You have the right to lodge complaints regarding the processing of your personal data with the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at ico.org.uk.