2. The data we collect about youPersonal data means any information capable of identifying an individual. It does not include anonymised data. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data may include your first name, maiden name, last name, title, and gender.
- Contact Data may include your billing address, delivery address, email address and telephone numbers.
- Financial Data may include your bank account and credit card details.
- Transaction Data may include details about payments to and from you and other details of purchases made by you from us.
- Technical Data may include, internet protocol (IP) address, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access our website.
- Profile Data may include registration for our events, your dietary requirements, preferences, feedback, and survey responses.
- Usage Data may include information about how you use our website, products, or services.
- Marketing and Communications Data may include your preferences in receiving marketing communications from us and our third parties and your communication preferences.
3. How we collect your dataWe collect personal data about you through a variety of different methods including:
- Direct interactions: You may provide your Identity, Contact and Financial Data by filling in forms or by communicating with us by post, phone, email, or otherwise, including when you:
- apply for our products or services;
- subscribe to our service or publications;
- request marketing material to be sent to you;
- enter a competition, promotion or survey; or
- give us feedback and contact us.
- Third parties or publicly available sources: We may receive Technical Data about you from various third parties and public sources including analytics providers such as Google based outside the EU and Identity and Contact Data from publicly available sources such as LinkedIn.
4. Our data protection principlesIn relation to your personal data, we will:
- Process it fairly, lawfully and in a clear, transparent way;
- collect it only for specified and specific purposes;
- only collect the minimum information needed to fulfil the purpose;
- ensure it is correct and up to date;
- keep it only as long as we need it; and
- process it securely, reducing the risk of it being lost or stolen.
5. How we use your personal dataWe will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal obligation.
- External Third Parties as set out in the Glossary.
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
- Right to withdraw consent.
- Service providers acting as processors based in England and Wales who provide IT and system administration services.
- Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in England and Wales who provide consultancy, banking, legal, insurance and accounting services.
- HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in England and Wales who require reporting of processing activities in certain circumstances.
- If you want us to establish the data’s accuracy.
- Where our use of the data is unlawful, but you do not want us to erase it.
- Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
- You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.