During the course of our activities we will process personal data (which may be held on paper, electronically, or otherwise) about our customers and we recognise the need to treat it in an appropriate and lawful manner, in accordance with GDPR. The purpose of this policy is to make you aware of how we will handle your personal data.
However data technology and rules change regularly, so we reserve the right to amend it at any time.
2. Data protection principles
We will comply with the seven data protection principles according to GDPR which say that personal data must be:
Processed fairly and lawfully.
Processed for limited purposes and in an appropriate way.
Adequate, relevant and not excessive for the purpose.
Accurate.
Not kept longer than necessary for the purpose.
Processed in line with individuals’ rights.
Be kept secure.
“Personal data” means recorded information we hold about you from which you can be identified. It may include your contact details, other personal information, photographs, expressions of opinion about you or indications as to our intentions about you. “Processing” means doing anything with the data, such as accessing, disclosing, destroying or using the data in any way.
3. How we are likely to use your personal data
We will usually only process your personal data where you have given us your explicit consent for example to register for access to our website, or for entry into a prize promotion, or where the processing is necessary to comply with our legal obligations. In other cases, processing may be necessary for the protection of your vital interests, for our legitimate interests or the legitimate interests of others. The full list of conditions is set out in GDPR.
We will only process your personal data for the specific purpose or purposes notified to you or for any other purposes specifically permitted by GDPR.
Your personal data will only be processed to the extent that it is necessary for the specific purposes notified to you.
We will seek to keep the personal data we store about you accurate and up to date. Data that is inaccurate or out of date will be deleted. However, it is your obligation to keep us informed of any changes to your personal data, eg if you move house, or if you become aware of any inaccuracies in the personal data we hold about you. You may do this by sending an email as indicated in section six.
We will not keep your personal data for longer than is necessary for the purpose. This means that data will be destroyed or erased from our systems when it is no longer required, which is typically two years from your last interaction with us, by email, website or other means.
We will only process your data in line with your data rights.
You have the right to:
Request access to any personal data we hold about you.
Prevent the processing of your data for direct-marketing purposes.
Ask to have inaccurate data held about you amended.
Prevent processing that is likely to cause unwarranted substantial damage or distress to you or anyone else.
Object to any decision that significantly affects you being taken solely by a computer or other automated process.
To exercise any of these rights, please send us an email to the contact addresses in section six with your full name and contact details. We will respond within the timeframes set out by The GDPR. But do please understand that changes may not be immediate.
We will ensure that appropriate measures are taken against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, personal data.
We will ensure that we have in place procedures and technologies to maintain the security of all personal data from the point of collection to the point of deletion.
4. Providing information to third parties
Unless we have obtained your specific consent, we will never transfer your data to third parties for them to communicate directly with you. The only exception is where it is necessary to fulfil our obligations to you, for example to give a fulfilment company your address to send you a prize. But we will only transfer personal data if the other company agrees to comply with our data procedures and policies, and if they put in place adequate data security measures.
5. Subject access requests
If you wish to know what personal data we hold about you, you may make a request in writing by post or email. Send all such requests to the address in section 6.
For written requests : Roberts Bakery, Rudheath, Northwich, Cheshire, CW9 7RQ
Full Address of the Data Controller : Roberts Bakery, Rudheath, Northwich, Cheshire, CW9 7RQ
Our company registration number is 00170133
Written communications should be marked for the data controller.
7. Children
We are always particularly mindful about maintaining the privacy of children who visit our website. Roberts encourages parents to instruct their children in the safe and responsible use of personal data whilst using the internet.
8. About this Policy
This policy was written and approved on 24th May 2018. Any amendments will be available on this page.
