Village Pizza Kitchen Ltd Privacy Notice
Village Pizza Kitchen Ltd is committed to protecting your privacy. In order to provide our services to the customer and to provide a more personalised shopping experience, we need to collect certain information from you. This Privacy Notice explains when and why we collect personal information about you as well as the types of personal data we may collect when you interact with us. It also explains how we’ll look after your data and keep it safe.
We hope what's below covers everything, but if you have any questions at all, do please drop us a line at firstname.lastname@example.org.
1. Explaining the legal bases we rely on
The GDPR law on data protection sets out a number of different reasons a company may collect and process your personal data, including:
In specific situations, we can collect and process your data with your consent - e.g. when you subscribe to our newsletter or place an order on our website. When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service and have given details on this below.
In some instances, we need your personal data to comply with our contractual obligations. For example, if you place an order with us, we need your address details to deliver your order and we may also need to pass your details to a courier.
We may be legally bound to collect and process your data. For example, if someone is involved in any criminal activity or fraud affecting The Village Kitchen, we need to pass details to law enforcement.
We require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests. For example, we may use your purchase history and shopping preferences to offer more personalised offers or products.
2. How we collect your personal data
3. The type of personal data we collect
The personal data we may collect includes your name, billing/delivery address, email address, telephone number, notes from conversations we have with you, information from voucher redemptions, your IP address, which websites you came from when visiting ours, which of our web pages you visit, any search terms you entered on our website, information gathered by cookies in your web browser, any comments or product reviews, any information that you may have told us that suggests your preferences (e.g. you may have told us that you are vegetarian) and your social media username if you communicate with us. Please note that when you set up an account with us, your password to log in is encrypted and when you place an order, we do not hold your card details, it is collected by PayPal or SumUp, our third party payment processors who use secure online capture and processing methods. If you choose to save your credit card details these will be securely held with PayPal / SumUp.
4. How and why we use your personal data
When you engage with us, we want to give you the best possible experience. By collecting data about you, it allows us to offer a great and tailored service.
We use your data so we can fulfill our contractual obligations to you (such as deliver your food) but also to offer you products and promotions that are more likely to be of interest to you. The data privacy law allows this as part of our contractual obligations and legitimate business interest in understanding our customers and providing the highest levels of service. We will hold your data in our systems for as long as is necessary for each relevant activity or as long as is set out in any contract we have with you.
If you ever wish to change how we use your data, you can do so. Please refer to the 'Your rights over your personal data' section that is below.
If you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you’ve asked for.
Here are some ways that we'll use your personal data and why:
5. Protection of your personal data
The security of your personal data is very important to us and we take a lot of care to handle and store it as best we can and in line with legislation as we know it is important to you as well as us.
Here are some ways we secure your data:
6. How long will we assume your consent for mailings?
After your initial consent to sign up to our mailings, we assume you still want to hear from us if you're engaging with Village Pizza Kitchen by opening our emails, visiting the website or placing an order from us. If you haven't done any of these things for a period of three years, we'll get in touch to reconfirm that you still want to hear from us. If we can't re-establish contact with you, we will opt you out of further communication.
7. Length of time we keep your personal data
We only keep your data for as long as is necessary for the purpose it was collected. After that period, your data is deleted or anonymised and for example aggregated with other data to be used for business planning and analysis.
For instance, if you placed an order with us, we keep your details for 7 years and after that it is anonymised.
If we don't see you online for a period of seven years, we will automatically anonymise your account details.
If you have been issued with a voucher through our 'Introduce a Friend' scheme we'll record the voucher code against your email address until the code expires, at which point if you have not ordered or visited in store your data will be anonymised.
8. Who we need to share your personal data with and why
At times we may need to share your personal data with trusted third parties e.g.credit card processing services. We only provide what they need and they cannot use your data for anything other than the purposes that they have your data for. Your data is deleted or rendered anonymous if we stop working with them.
We want your customer journey with the Village Pizza Kitchen to be as smooth as possible. We may use the following companies who will process your personal data as part of their contracts or terms and conditions with us:
Sharing your data with third parties for their own purposes:
We will never sell or trade your contact details with any third parties, unless you have given us your consent to do.
There are some instances where we may have to share your information based on our legal obligations, for instance:
For further information please email email@example.com.
9. Where your personal data may be processed
Sometimes we will need to share your personal data with third parties and suppliers outside the European Economic Area (EEA), such as Australia or the USA.
Protecting your data outside the EEA
The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway. We may transfer personal data that we collect from you to third-party data processors in countries that are outside the EEA.
For example, this might be required in order to fulfil your order, process your payment details or provide support services.
If we do this, we have procedures in place to ensure your data receives the same protection as if it were being processed inside the EEA by ensuring they are compliant with the EU-US Privacy Shield specification.
Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.
10. Your rights over your personal data
You have a choice as to whether or not you receive marketing information from us and you can withdraw your consent from specific communication channels at any time.
How can you stop the use of your personal data for direct marketing?
There are several ways you can stop direct marketing communications from us:
Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated. We estimate no longer than 2 weeks for email and 8 weeks for postal communications.
Requesting access and making changes to your personal data
You also have the right to access and rectify mistakes in the data we hold about you at any time.
These requests will be handled on a case by case basis and we estimate will be processed in no longer than 1 month depending on our legitimate business interests, legal and contractual obligations. If we refuse your request we will explain to you the reason for our refusal.
In order to keep your information confidential, we will ask you to verify your identity before proceeding with any requests. If there is a third party acting on your behalf, we will check that they have your permission to act.
Legitimate Business Interests
In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.
11. Contacting the Regulator
If you are at all unhappy about the handling of your data, you can send a complaint to the Information Commissioner’s Office by calling 0303 123 1113 or go online to www.ico.org.uk/concerns
Local delivery is available this evening (Saturday 18 September) between 5.30pm & 8.30pm in Hurstpierpoint, Hassocks, Albourne, Sayers Common & Keymer.