GDPR
General information
All personal data we collect or are provided with will only be held and stored in accordance with this policy and the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and any other legislation relating to the protection of personal data (data protection laws). The Good Cheese Bone company is the data controller for the personal data we process, unless otherwise stated.
This Policy sets out how your personal data will be processed, stored and used when you visit our website, shop with us online.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during our relationship with you.
Collection of your personal data
We use different methods to collect information from and about you.
We collect personal data when you visit or register on or contact us or you request information from the website, you may be asked to provide information about yourself. This is only used for the purpose of processing any orders you make, or if relevant, if we send you authorised marketing messaging, such as email.
Your data use may also be collected when you purchase products online, engage with us on social media or sign-up to our email marketing communications.
We also collect data if you are a supplier, wholesaler, trade customer or drop shipper.
When you provide personal data to us, we will treat that information in accordance with this Policy.
Information you give us.
This is information about you that you give us by filling in forms on our website, correspond with us via email, post or social media.
It includes information you provide when you register to use our site, subscribe to our service, search for a product, place an order on our site, completing a contact form on our site, enter a competition, promotion or survey and when you report a problem with our site. The information you give us may include your name, address, e-mail address and phone number, financial and credit card information, personal description and photograph.
Information we collect about you.
Personal information or personal data, means any information about an individual from which that person can be identified and is generally referred to throughout this Policy as “personal data”. It does not include data where the identity has been removed (anonymous data).
Personal data we may collect, use, store and transfer about you, are as follows:
- Identity data, which includes your name.
- Contact data which includes postal address including billing and delivery addresses, your location, telephone numbers (including mobile numbers) and e-mail address;
- Transaction data which includes purchases and/or orders made by you and your payment card details;
- Technical data which includes your on-line browsing activities on our Website;
- Profile Data which includes your account login details for website and/or apps including your username and password(s), your interests, preferences, feedback and survey responses;
- Marketing and communications data which includes your marketing preferences from us and our third parties, your communication preferences and your correspondence to and communications with us;
- ·Data that is publicly available personal data, including any which you have shared via a public platform (such as a Twitter feed or public Facebook page).
Our Website is not intended for children and our website does not knowingly collect data relating to children.
This list is not exhaustive, and, in specific instances, we may need to collect additional data for the purposes set out in this Policy. Some of the above personal data is collected directly, for example when you set up an on-line account on our website, or send an email to our customer services team or via social media.
Other personal data is collected indirectly, for example your browsing or shopping activity.
We also may have partnered with third parties to make additional products and services available to you. Some of these products and services can be accessed online though the third party websites.
Third-party links
Our company website may include links to third-party websites, plug-ins and applications, including links to websites of our partner networks. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements or policies. When you leave our company website, we encourage you to read the Privacy Policy of every website you visit.
Payment card information
Our Group or our chosen third-party provider may process your personal data to process any payments made for the provision of services. The information may include information for identification and verification, such as your name, credit, debit or other card number, card expiration date, and CVV code. We do not process this data ourselves, it is operated via our payment providers, including Paypal and Shopify Payments. Therefore, we never have access to your payment card information at any time.
Any payment transactions carried out by us, or our chosen third-party provider of payment processing services will be kept secure and encrypted as per legal requirements.
If you fail to provide personal data
Where we need to collect personal data by law, legitimate interest or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with good and/or services). In this case, we may have to cancel a service you have with us, but we will notify you if this is the case at the time.
Sharing of your personal information
The reasons we may share your data with third parties are:
o if we are under a legal or regulatory duty to do so,
o if it is necessary to do so to enforce terms and conditions of sale or other contractual rights,
o it is necessary to provide you with the goods and/ or services requested
o to lawfully assist the police or security services with the prevention and detection of crime or terrorist activity,
o where such disclosure is necessary to protect the safety or security of any persons or property, and/or
o otherwise as permitted under applicable law.
We will share your personal data when we are required to do so for legal or regulatory purposes or as part of legal proceedings. We may share your personal data with credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you, and to solicitors or debt collection agents in the event of a breach of contract or other such legal proceedings.
We may also disclose or share your personal data if we are under a duty in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements, or to protect the rights, property, or safety of us, our customers, consumers, suppliers, retailers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Cookies
Our company website use cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site, make it run more quickly for you and to enhance your shopping experience.
A cookie is a piece of data stored locally on your computer containing information about your activities on the Internet. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.
How we use your information
The law on data protection sets out a number of different reasons for which a company may collect and process your personal data.
We will only use your personal data when the law allows us to do so.
For more information about the lawful bases for processing personal data please see the ICO website: Link - https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/
Lawful Basis for processing personal data
We have set our lawful basis for processing of persona data, and we will use your personal data in the following circumstances:
- Where you have consented before the processing.
- Where we need to perform a contract, we are about to enter or have entered with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation; and
- Where there is a substantial public interest in processing information, for the purposes of detecting and preventing crime.
Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
Marketing
We strive to provide you with choices regarding certain personal information uses, particularly around marketing and advertising.
If you have given your consent to receive marketing emails you can withdraw this at any time, or if we are relying on our legitimate interests to send you marketing you can object. In either case, just let us know. If you have received a direct marketing email from us and no longer wish to do so, the easiest way to let us know is to click on the unsubscribe link at the bottom of our marketing emails.
Data Storage and how we protect your information
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy.
We work hard to keep your information and personal data safe. We use a combination of technical, administrative, and physical controls to maintain the security of your personal information and protect against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.
All information you provide to us is stored securely via our website platform and in a controlled environment in the case of wholesale and trade customers. .
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website or app you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Data retention
How long we will retain your personal data?
We will only retain your personal data for as long as is necessary for the purpose or purposes for which we have collected it.
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for analytical or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Where your personal data may be processed
Your personal data will be stored on systems with technical and organisational security measures and controls located within the UK.
Any transfer of your personal data will follow applicable laws and we will follow the guiding principles of this Privacy Policy.
Your rights
You are also able to exercise your rights which include:
The right to be informed.
We aim to be transparent within our Privacy Policy and provide you with information about how we use your personal data.
Right of access.
You have the right to request a copy of any information that we hold about you. We try to be as open as possible as we can be in terms of giving people access to their personal data.
Individuals can find out if we hold any personal data by making a subject access request.
The right to rectification.
You have the right to request the correction of your personal data when it is incorrect, out of date or incomplete. You can contact us, and we can amend inaccurate personal data, however, please note that in some circumstances we may ask for the documentary proof that the amendment is necessary.
The right to erasure.
You can request the erasure of your personal data when it is no longer necessary, you withdraw consent, or you object to its processing. Some information held by us is required by law to be held for a period of time. You can contact us if you wish to make a requestThe right to restrict data.
You can request that we restrict the processing of your personal data. This can be done in circumstances where we need to verify the accuracy of personal data, if you do not wish to have personal data erased or you object to the processing and we are considering this request.
The right to data portability.
Under some circumstances you can request a copy of the personal data you provided to us in a machine-readable format or ask that this data be transferred another third party.
The right to object.
In some circumstances you can stop the processing of your personal data for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data. Where your details are used for marketing, you can opt out at any time.
Automated decision making and profiling.
You will be notified if we a solely automated decision which produces a legal effect or significantly affects you.
You have the right to ask what personal data that we hold about you at any time. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. .
If you wish to exercise any of the above rights, please contact us. Please address requests to the Data Protection Officer, Glenfield 2, Blackburn xxxxx or via email at dataprotectionofficer@thegoodcheesebone.com
We will ask for confirmation of identity before we disclose any personal data.
How can we help?
If you have any questions that haven’t been covered, or would like us to address any complaints, questions, comments or requests regarding this privacy policy please contact the Data Protection Officer.
For further information on data protection please visit the Information Commissioner Office (ICO) website.
The Information Commissioner Office regulates data protection. If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office.
You can contact them by calling 0303 123 1113 or visit the website.
Changes to our Privacy Policy
Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Policy.
