1 ABOUT APETITO
3 WHAT DATA DO WE COLLECT ABOUT YOU?
We collect personal data about you if you share your information with us when enquiring about or purchasing our services. We may also ask you to share your personal data with us if it is necessary for us to provide our services to you – for example, we may ask you about your dietary requirements so that we can make sure you are receiving the correct meals. If you provide us with personal data relating to other people (for example, a relative) then you will need to check with them that they are happy for you to share their data with us. Personal data we process:
- home address and telephone number
- personal email address
- dietary requirements (which may include health information)
- bank and/or payment card details
No automated decision-making will take place using your personal data. Calls to numbers published on our websites, may be recorded for training and quality purposes. If you use our Website: If you use our Website, we automatically collect the following information: web usage information (e.g. IP address), your login information, browser type and version, time zone setting, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URLs) clickstream to, through and from our Website (including date and time); time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs). The Website may, from time to time, contain links to and from the websites of advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
4 HOW WILL WE USE YOUR PERSONAL DATA
We will collect, store and use personal data you provide to us in order to carry out the activities relevant to the provision of our services to you. We will only do this where:
- you have given us consent to do so for the specific purposes which we have told you about – for example, we will need your consent to process any health information you provide to us;
- it is necessary for us to do so to enable us to provide you with the services that you have requested from us - for example, delivery of your meals to your home address;
- it is necessary in order to fulfil our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or
- the law otherwise permits or requires it.
- We may obtain additional information about you from other reputable data sources. This information may relate to your demographics and lifestyle interests and be matched to our records to enhance our understanding of the sorts of products and services you may be interested in and to provide you with a more personalised experience.
- The data these companies might hold about you may be personal data such as names and addresses collected from publicly available sources, such as the Edited Electoral Register. It might also include non-personal anonymised data from research surveys. Where we process your personal data on the basis of our legitimate interests, these are our (or our third party’s) interests in providing our services to you in an efficient and secure manner.
5 WHO WILL HAVE ACCESS TO YOUR PERSONAL DATA?
- We run a network of franchises throughout the UK. Our regional franchises are owned and operated by third parties.
- In almost all cases, our services will be provided to you by your local Wiltshire Farm Foods Franchisee (your Local Franchisee). We will share your personal data with your Local Franchisee to enable
- your Local Franchisee to provide the services to you. When this happens, your Local Franchisee will be a joint data controller with us.
6 WHO ELSE MIGHT WE SHARE YOUR PERSONAL DATA WITH?
- credit referencing agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you;
7 HOW DO WE PROTECT YOUR PERSONAL DATA?
We take your privacy seriously and are committed to maintaining the privacy and security of the personal data you provide to us, and the choices you have regarding our collection and use of your personal data. We follow strict security procedures as to how your personal data is stored and used, and who sees it, to help stop any unauthorised person getting hold of it. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access. Unfortunately, the transmission of your personal data via the internet is not completely secure and although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us over the internet and you acknowledge that any transmission is at your own risk.
8 HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will keep your personal data for no longer than is necessary for the purposes we have set out above. If you order services from us, we will keep your personal data for the period for which you remain a customer plus an additional 12 months following your last order with us. If we are required by law to keep any of your personal data, we will only keep such data for as long as the law says we must. If you enquire about our services but do not place an order with us, we will keep your personal data for 12 months from the date on which you first provided your information to us. If we are required by law to keep any of your personal data, we will only keep your information for as long as the law says we must. The third parties we engage to provide services on our behalf will keep your data no longer than the periods set out in sections 6.1 and 6.2 above. If we end our relationship with any third party providers, we will make sure they securely delete or return your personal data to us. We may retain personal data about you for statistical purposes (for example, to help us better advertise our services). Where data is retained for statistical purposes it will always be anonymised meaning that you will not be identifiable from that data.
9 WHAT ARE YOUR RIGHTS?
You have a number of rights in relation to your personal data. There are circumstances in which your rights may not apply. You have the right to request that we:
- provide you with a copy of the information we hold about you;
- update any of your personal information if it is inaccurate or out of date;
- delete the personal data we hold about you - if we are providing services to you and you ask us to delete personal data we hold about you then we may be unable to continue providing those services to you;
- restrict the way in which we process your personal data;
- stop processing your data if you have valid objections to such processing;
- transfer your personal data to a third party. For more information on your rights and how to use them, or if you would like to make any of the requests set out above, please contact us using the details provided in section 10. We will respond to all such requests within the time period required by law. Even if you consented to the processing of your personal data for marketing purposes (by ticking the relevant box or by requesting a brochure), you have the right to ask us to stop processing your personal data for such purposes. You can exercise this right at any time by contacting us firstname.lastname@example.org or 01225 562 849.
10 WHO CAN YOU ASK FOR MORE INFORMATION?
We and each of our Franchisees are data controllers, because we collect personal data about you and determine how and why it will be used. If you have any questions or concerns about how we handle your personal data, you can contact us using any one (or more) of the following: Post: apetito Limited Canal Road Trowbridge Wiltshire BA14 8RJ Email address: email@example.com Telephone number: 01225 562 849 Alternatively, you can contact us through the “Contact Us” section of the Website. We have appointed Lindsay Boxsey as our Data Protection Officer (DPO). Our DPO can be contacted by post or telephone using the above contact details, or via email at firstname.lastname@example.org If you are unsatisfied with our response to any data protection issues you raise with us or our DPO, you have the right to make a complaint to the Information Commissioner’s Office (ICO). The ICO is the authority in the UK which is tasked with the protection of personal data and privacy.