Privacy Policy

Privacy Policy

 

This policy is effective as of 01/10/2023. This Privacy Policy applies to the information and data that THE VILLAGE BAKERY (WREXHAM) LIMITED collects when you use our website or our products and services. 

Summary

This policy applies to;

  • Visitors to our website
  • Customers & Partners
  • Users of our products and services

 

The purpose of this Privacy Policy is to let you know how we collect, use, store, share, retain, transfer and process your Personal Information.  This policy also describes your choices and rights with respect to your Personal Information and how to exercise those rights. “Personal Information” is any information relating to an identified or identifiable individual.  

 

We may amend this policy from time to time. We encourage you to review this policy periodically, as changes will be posted on this page. If we make any material changes to this policy we will provide a prominent notice. If you do not agree with this policy, you should not use our website, products or services.

 

This Policy covers:

What Personal Information We Collect

How We Use Your Information

The Legal Basis For Collecting and Processing Information

How We Share Information

How Long We Retain Your Information

Cookies and Other Tracking Technologies

Your Rights Regarding Access to and Control over Personal Information

International Data Transfers

Security

Automated Decision Making and Profiling

Children’s Privacy

Sensitive Information

How to complain

 

What Personal Information We Collect

We collect Personal Information from you when you visit our website or use our products and services.  Some of this information is provided by you and some is collected automatically.  We collect Personal Information in the following ways:

  • Information that you provide by filling in forms on our site www.villagebakery.co.uk (our site). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information [when you enter a competition or promotion sponsored by Village Bakery, and when you report a problem with our site.
  • If you contact us, we may keep a record of that correspondence.
  • We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.        
  • Details of transactions you carry out through our site and of the fulfilment of your orders.
  • Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

We collect various types of information depending on how you interact with us and what products or services you use. 

 

Personal Information you provide to us

If you fill out a form on our website that requires contact information such as signing up for a newsletter, submitting a request for information or products and services we will collect and process that information to provide you with the communication, products or services.  These types of Personal Information may include your name, email address, company name, job title, your physical address, payment and billing information.

 

Personal Information collected when you visit our website 

When you use our website, we may automatically collect Personal Information such as IP address, user - agent information (which is automatically sent by your web browser and may include device type) and information collected by cookies and other similar technologies.  Our cookie policy can be found at www.villagebakery.co.uk/cookies   

 

Personal Information collected when you use our products or services

When you use our products and services, we collect other types of Personal Information.  These types of Personal Information include:

  • Username
  • IP Address
  • Name
  • Email address
  • Street Address
  • Telephone Number
  • Age
  • Gender

We may also collect usage data regarding your use of our products and services and this data may contain Personal Information.

We also collect payment and billing information when you register for the use of our products and services.  For example, we may ask you to provide a billing address for your account and payment information.  We use this information solely to process payments and deliver our products and services.

Unless otherwise noted in this policy, we act as the “controller” of personal data that we collect and process.

 

How We Use Your Information

We use information held about you in the following ways:

  • To ensure that content from our site is presented in the most effective manner for you and for your computer.
  • To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
  • To carry out our obligations arising from any contracts entered into between you and us.
  • To allow you to participate in interactive features of our service, when you choose to do so.
  • To notify you about changes to our service.

If you are an existing customer, we will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those that were the subject of a previous sale to you.

If you are a new customer, and where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this.

 

The Legal Basis For Collecting and Processing Information

 

We use the following legal bases for collecting Personal Information:

 

  • We may collect or process  information with your consent, such as when you subscribe to our newsletter, ask for information, or sign up for services.
  • We may collect or process information we need to provide our services or fulfil a contractual obligation.
  • We may collect or process information to fulfil a legal obligation.
  • We may collect information when we have a legitimate interest to do so, such as for marketing, as long as our legitimate interests are not outweighed by your rights.
  • We may collect or process information if necessary to protect the vital interests of the user or another individual.

 

How We Share Information

 

We may share Personal Information with our any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may also share information with affiliates and partners, as needed to provide our services. We share Personal Information with service providers such as accountants, payment processing companies, and other vendors we use to operate our website and provide our products and services.

Our vendors and service providers are not permitted to use your personal information for any other purpose than to provide contracted services. Vendors are not permitted to use your personal information for their own marketing, and are not allowed to share your information for marketing purposes.

We may share personal information in response to a legal summons or subpoena, or if required by law enforcement agencies.

 

How Long We Retain Your Information

 

How long we keep Personal Information that we have collected depends on the type of information and the purpose for which it was collected.  After a reasonable period of time or the completion of the purpose for which it was collected, we will either delete or anonymise personal information.

We retain Personal Information where we have an ongoing legitimate business purpose to do so, for example to resolve disputes or to comply with ongoing legal obligations.

We retain your personal information for as long as it is needed to provide our services to you and to fulfil our legal obligations and for a reasonable period of time after such services are completed.

When their retention is no longer justified by legal, commercial or customer account management requirements, or if you have made use of a right of modification or erasure, we will delete your Personal Data securely.

We will retain your Personal Data long as it is necessary to meet our legal obligations according to the main retention periods for EU Member State law or Union law, we are subject to.

 

 

Cookies and Other Tracking Technologies

Cookies  are small files stored on your web browser when you visit our website. Some cookies last only as long as you remain on the website; others, called “persistent cookies” may be stored for longer periods of time. These cookies can make browsing easier by storing your password or your preferences regarding how you use the website. Cookies collect information such as the IP address of your computer, your browser settings, and information about how you use the website. Your general location may be estimated from your IP address. Some cookies track users’ activity on our website, apps, and services in order to deliver personalized advertising to you on this and other websites. 

 

If you would like to opt out of cookies, you may change the settings on your web browser to reject or delete cookies. You may also find more information about cookies, including how to opt out of interest-based advertising, at www.cookiesandyou.com

 

More information about how we use cookies may be found here: www.villagebakery.co.uk/cookies

 

Your Rights Regarding Access to and Control over Personal Information

 

If you reside in the EU/EEA, you may have the following rights with regard to your personal information:

  • Right of information and access - You have the right to access your Personal Information we have about you and to be provided with a copy of your Personal Information.
  • Right to rectification - You have the right to correct or update your inaccurate or out of date Personal Information.
  • Right of erasure - You have the right to request that your Personal Information be permanently erased/deleted.
  • Right to restrict processing - You have the right to restrict the processing of your Personal Information.
  • Right to object to processing - You have the right to object to specific types of processing of your Personal Information.
  • Right to portability - You may ask to receive a portable copy of your personal information in a format that may be transferred to another organization.
  • Right not to be subject to decisions based solely on Automated Decision Making - You have the right not to be subject to decisions based solely on automated processing.
  • Right to complain to a data protection authority - You have the right to complain to a supervisory authority in the country in which you reside, details of which can be provided upon request or to the lead supervisory authority for The Village Bakery (WREXHAM) LIMITED  which is the Data Protection Officer.
  • Right to withdraw consent - If you have given us consent to collect or process your Personal Information, you may withdraw that consent at any time. 
  • The Right to Non-Discrimination - We may not discriminate against you if you exercise your privacy rights.

 

If you wish to exercise any of these rights please submit a Data Subject Access Request to privacy@villagebakery.co.uk

We may charge a reasonable fee if your request is not valid under applicable law, repetitive or excessive.  We may also request additional information from you in order to verify your identity before processing your request.

 

International Data Transfers

Personal Information may be transferred from users residing in the European Union to our servers, partners, or vendors located in the United States and other non-EU countries where there may not be an adequacy opinion issued with respect to that country. We have taken appropriate safeguards to ensure that Personal Information remains protected wherever it is transferred.  When we transfer Personal Information of individuals in the European Economic Area (“EEA”), Switzerland or the United Kingdom (“UK”) to the US, we make use of the Standard Contractual Clauses and the UK Addendum as well as additional safeguards where appropriate.  To obtain a copy of our Standard Contractual Clauses, please contact our data protection officer at Privacy@villagebakery.co.uk.

 

Security

We take all reasonable steps to protect the information we receive from you from accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access. We have put in place appropriate physical, technical, and administrative measures to safeguard and secure your information, but no security measures are perfect; the risk of a data breach is possible. 

  • Personal data is encrypted during transmission.
  • Personal information is encrypted at rest at our data centers.
  • Employees are given access to users’ personal information only on a “need to know” basis.
  • All employees are required to receive training on information security.
  • All employees with access to personal information are required to sign a binding confidentiality agreement.

Before sharing personal information with our vendors, we make sure they have implemented security procedures to protect your data. Our vendors and partners are not permitted to use or share your information for any purpose other than to provide the services for which they have been contracted. 

 

Automated Decision Making and Profiling

We do not conduct any solely automated decision making, including profiling.

 

Children’s Privacy

We do not knowingly collect or solicit personal information from children under age 13 without parental consent, unless permitted by law.  If we become aware that we have collected personal information from children under the age of 13 without parental consent (or as permitted by law), we will delete it.  If you believe that a child may have provided us with personal information without such parental consent, please contact us.

EU residents: We do not collect or process personal information of data subjects in the EU under the age of 16 without explicit consent from a parent or guardian. 

 

Sensitive Information

Unless specifically requested, we ask that you not send us, and you not disclose on or through our websites or otherwise to us sensitive personal Information unless specifically requested by us or required by law.

 

How to complain

If you have any concerns, questions or if you would like to exercise any of your rights with respect to your Personal Data, you may contact us at Privacy@VillageBakery.co.uk

Our contact details

Name: c/o Data Protection Officer, THE VILLAGE BAKERY (WREXHAM) LIMITED

Address: ASH ROAD SOUTH, WREXHAM INDUSTRIAL ESTATE, WREXHAM, LL13 9UG.

Phone Number: 01978 720558

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk

Our ICO Registration reference: ZA143486