DATA PROTECTION PRINCIPLES
Processing is lawful, fair, transparent. Our Processing activities have lawful grounds. We always consider your rights before Processing Personal Data. We will provide you information regarding Processing upon request
Processing is limited to the purpose. Our Processing activities fit the purpose for which Personal Data was gathered
Processing is done with minimal data. We only gather and Process the minimal amount of Personal Data required for any purpose
We will do our best to ensure the accuracy of data
We will do our best to ensure the integrity and confidentiality of data
YOUR RIGHTS UNDER GDPR
Right to be Informed
You have to right to know whether your Personal Data is being processed; what data is gathered, from where it is obtained and why and by whom it is processed.
Right of Access
You have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered.
Right to Rectification
You have the right to request rectification or erasure of your Personal Data that is inaccurate or incomplete.
Right to Erasure
In certain circumstances you can request for your Personal Data to be erased from our records.
Right to Restrict Processing
Where certain conditions apply, you have the right to restrict the Processing of your Personal Data.
Right to Object to Processing
In certain cases you have the right to object to Processing of your Personal Data, for example in the case of direct marketing.
Right to Object to Automated Processing
You have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you.
Right to Data Portability
You have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one Processor to another.
Right to Withdraw Consent
You have the right withdraw any given consent for Processing of your Personal Data.
Right to Object
In the event that we refuse your request under the Rights of Access, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled please contact us in the first instance.
Right of Appeal
You have the right to appeal if you are unhappy with our decision. You can contact the ICO who are the supervisory authority tasked with enforcing the new GDPR regulations.
THE DATA WE GATHER
Information You Provide At The Point Of Order
Personal information taken at the point of order as well as during the age verification procedure will be used to set up a user account. We collect information you upload or send through our Services (including information you provide when you request a receipt.) This information is necessary for us to accept, process and deliver your order, while meeting the conditions of our Licence to sell Alcohol. This will include but is not limited to;
Date of Birth
Photo of Government Issued ID
Information You Provide In Order To Enhance Your Experience
You can choose to provide us with additional information in order to help us provide a better user experience. This additional information will be processed with your consent and/or to provide you with services you request.
We collect information that you voluntarily provide to us, including your survey responses; participation in contests, promotions, or other marketing lead forms or devices; suggestions for improvements; referrals; or any other actions performed on our platforms
When you place an order or request a receipt, we collect information about when and where the transactions occur, the names of the transacting parties, a description of the transactions, the payment or transfer amounts, billing and shipping information, and the devices and payment methods used to complete the transactions
Information Automatically Collected About You
We automatically collect information about you and the devices you use to access our platforms in order to personalise our website, products and Services. This will include but is not limited to information that is automatically stored by cookies and other session tools. For example, what pages you visited, your IP address, your shopping history (if there is any) etc.
We use CCTV to record all transactions at the point of delivery. The footage is stored locally for 6 months and will be used:
To prevent, report and prosecute violence or abuse towards our staff, customers & the general public
To prevent, report and prosecute credit card fraud
To use as evidence of our compliance with the conditions of our Licence to sell Alcohol
To use as evidence to help prosecute a major violation of the Licencing Act 2003, such as the attempted purchase of alcohol for a minor
Information From Our Partners
We gather information from our trusted partners with confirmation that they have legal grounds to share that information with us. This is either information you have provided them directly with or that they have gathered about you on other legal grounds.
Publicly Available Information
We might gather information about you that is publicly available.
HOW WE USE YOUR DATA
Processing your order
On the grounds of entering into a contract or fulfilling contractual obligations, we Process your Personal Data for the following purposes:
To verify your identity & date of birth
To communicate updates on orders
To fulfil our various legal obligations
Billing & Accounting
We save your billing information and other information gathered about you for as long as needed for accounting purposes or other obligations deriving from law, but not longer than 6 years.
Legitimate Business Interest
On the grounds of legitimate interest, we Process your Personal Data for the following purposes:
To administer and analyse our client base (purchasing behaviour and history) in order to improve the quality, variety, and availability of products/ services offered/provided
To conduct questionnaires concerning client satisfaction
To offer you products/services based on your previous purchasing history. If you would prefer not to receive such offers you can opt out by clicking on the opt out link provided or by emailing firstname.lastname@example.org
Opt In Services
With your consent we process your Personal Data for the following purposes:
To send you newsletters
For other purposes we have asked your consent for
Anonymisation of Data
We reserve the right to anonymise Personal Data gathered and to use any such data. We will use data outside the scope of this Policy only when it is anonymised.
WHO ELSE CAN ACCESS YOUR DATA
Our Processing Partners
We run our till and payment services through square. If you get a receipt from us it came via Square. They process your payment information in accordance with UK law
Provide our accounting software which is linked to our POS
Keeps the office organised and your data secure
Email marketing and contact forms
SMS marketing & service updates
Connected third parties:
HOW WE SECURE YOUR DATA
Even though we try our best we cannot guarantee the security of information. However, we promise to notify suitable authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur. If you have an account with us, note that you have to keep your username and password secret.
PROCESSING OF MINOR'S DATA
COOKIES & DATA ANALYTICS
A cookie is a tiny text file stored on your computer. Cookies store information that is used to help make sites work. Only we can access the cookies created by our website. You can control your cookies at the browser level. Choosing to disable cookies may hinder your use of certain functions.
Types of Cookies
These cookies are required for you to be able to use some important features on our website, such as logging in. These cookies don’t collect any personal information.
These cookies provide functionality that makes using our service more convenient and makes providing more personalised features possible. For example, they might remember your name and e-mail in comment forms so you don’t have to re-enter this information next time when commenting.
These cookies are used to track the use and performance of our website and services
These cookies are used to deliver advertisements that are relevant to you and to your interests. In addition, they are used to limit the number of times you see an advertisement. They are usually placed to the website by advertising networks with the website operator’s permission. These cookies remember that you have visited a website and this information is shared with other organisations such as advertisers. Often targeting or advertising cookies will be linked to site functionality provided by the other organisation.
You can remove cookies stored in your computer via your browser settings. Alternatively, you can control some 3rd party cookies by using a privacy enhancement platform such as optout.aboutads.info or youronlinechoices.com. For more information about cookies, visit allaboutcookies.org.
CONTACTS FOR DATA PROTECTION
email@example.com FAO: Data Protection Officer.
If you have any questions or concerns regarding our notice or if you believe our notice or applicable laws relating to the protection of your personal information have not been respected, you can file a complaint with our Privacy Department listed above and we will respond to let you know who will be handling your matter and when you can expect a further response. We can request additional details from you regarding your concerns and may need to engage or consult with other parties in order to investigate and address your issue. We will keep records of your request and any resolution.
Supervisory Authority: Information Commissioner’s Office
Last modified 23/08/2018