Food at Twelve Privacy Notice and Policy
Food at Twelve is committed to protecting your privacy. In order to provide our services to the customer, we need to collect certain information from you. This Privacy Notice explains when and why we collect personal information about you as well as the types of personal data we may collect when you interact with us at classes, online or over the phone. It also explains how we’ll look after your data and keep it safe.
We hope what's below covers everything, but if you have any questions at all, please drop us a line at firstname.lastname@example.org. It’s likely that we’ll need to update this Privacy Notice from time to time to make sure it's accurate. We’ll let you know of any major changes, but the most up-to-date version will always be here for you to check.
About Food At Twelve
Food at Twelve is used throughout this document to refer to the company, however for simplicity throughout this notice, ‘we’ and ‘us’ to refer to the company also.
When you are using the Food at Twelve website or attending our classes, Food At Twelve Ltd is the data controller.
1. Explaining the legal bases we rely on
The GDPR law on data protection sets out a number of different reasons a company may collect and process your personal data, including:
In specific situations, we can collect and process your data with your consent - e.g. when you tick a box online to receive email or postal communication from Food At Twelve. When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service.
In some instances, we need your personal data to comply with our contractual obligations.
We may be legally bound to collect and process your data. For example, if someone is involved in any criminal activity or fraud affecting Food At Twelve, we need to pass details to law enforcement.
We require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests. For example, we may use your purchase history to offer more personalized offers.
2. How we collect your personal data
There are a number of ways in which we may collect information about you:
When you visit our website and book our services
When you call us or fill in a website contact form
When you enter a competition or prize draw or fill in a survey
When you fill in any forms during classes e.g. allergy declaration or photo consent
When you engage with us on social media
3. The type of personal data we collect
The personal data we may collect includes your name, billing/postal address, email address, telephone number, notes from conversations we have with you, information from voucher redemptions, allergy information, photo consent, your IP address, which websites you came from when visiting ours, which of our web pages you visit, any search terms you entered on our website, information gathered by cookies in your web browser, any comments or product reviews, any information that you may have told us that suggests your preferences (e.g. you may have told us that you are vegetarian) and your social media username if you communicate with us.
4. How and why we use your personal data
When you engage with us, we want to give you the best possible experience. By collecting data about you, it allows us to offer a great and tailored service.
We use your data so we can keep you informed of upcoming classes and to inform on the cookery school, as well as to ensure that classes are carried out as safely as possible (as is the case with allergy information).
The data privacy law allows this as part of our contractual obligations and legitimate business interest in understanding our customers and providing the highest levels of service. We will hold your data in our systems for as long as is necessary for each relevant activity or as long as is set out in any contract we have with you.
If you ever wish to change how we use your data, you can do so. Please refer to the 'Your rights over your personal data' section that is below.
If you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide some services you’ve asked for.
5. Protection of your personal data
The security of your personal data is very important to us and we take a lot of care to handle and store it as best we can and in line with new legislation as we know it is important to you as well as us.
Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
6. How long will we assume your consent for mailings?
After your initial consent to sign up to our mailings, we assume you still want to hear from us if you're engaging with Food At Twelve by opening our emails, visiting the website or placing an order from us. If you haven't done any of these things for a period of three years, we'll get in touch to reconfirm that you still want to hear from us. If we can't re-establish contact with you, we will opt you out of further communication.
7. Length of time we keep your personal data
We only keep your data for as long as is necessary for the purpose it was collected. After that period, your data is deleted or anonymised and for example aggregated with other data to be used for business planning and analysis.
8. Your rights over your personal data
You have a choice as to whether or not you receive marketing information from us and you can withdraw your consent from specific communication channels at any time.
How can you stop the use of your personal data for direct marketing?
There are two main ways you can stop direct marketing communications from us:
Click the ‘unsubscribe’ link in any email communication that we send you. We will then stop any further emails
Contact us at email@example.com
Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated. We estimate no longer than 2 weeks for email.
Requesting access and making changes to your personal data
You also have the right to access and rectify mistakes in the data we hold about you at any time.
These requests will be handled on a case by case basis and we estimate will be processed in no longer than 8 weeks depending on our legitimate business interests, legal and contractual obligations. If we refuse your request we will explain to you the reason for our refusal.
You can also make any changes to your personal information by contacting us at firstname.lastname@example.org
9. Contacting the Regulator
If you are at all unhappy about the handling of your data, you can send a complaint to the Information Commissioner’s Office by calling 0303 123 1113 or go online to www.ico.org.uk/concerns
If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.
We hope this Privacy Notice has been helpful in setting out the way we handle your personal data and your rights to control it.
If you have any questions that haven’t been covered, email us at email@example.com.