Updated: May 2018
This Privacy Notice is to let you know how we handle your personal data. This includes what you tell us about yourself, what we learn by having you as a customer, and the choices you give us about what marketing you want us to send to you. This Privacy Notice explains how we do this and tells you about your privacy rights and how the law protects you.
Your personal data is any data relating to you from which you can be identified.
This notice sets out:
- How we will process any personal data that we collect from you and what it will be used for
- The information you are entitled to receive from us when we collect your personal data
- Your rights under the General Data Protection Regulation (GDPR) in connection with the way we handle your personal data
Where you provide personal data about another person, this notice still applies so you will be required to show them this notice. This Privacy Notice applies to any personal data which you may provide us in person, over the phone, by email, on our website and/or by post. This Privacy Notice also applies to any personal data which we may collect from third parties about you and/or which we may collect when you access our website and/or in the course of our relationship.
You can choose not to give personal data. We may need to collect personal data by law, or under the terms of a contract and/or relationship that we have with you. If you choose not to give us this personal data, it may delay or prevent us from meeting our obligations. It may also mean that we cannot perform services so we cancel a product or service you have with us.
Wherever we refer to ‘processing’ of personal data in this Privacy Notice this includes any combination of the following activities: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
This Privacy Notice only applies to personal data collected by or on behalf of The Maldon Brewing Company Ltd via the company’s website or by any other means. The company’s website may from time to time contain links to and from other websites (partner networks, advertisers and affiliates). If you follow a link to any external website or alternatively reach our website from a third-party website, please be aware that these websites will have their own privacy policies, separate from ours, and we therefore do not accept any responsibility or liability for these policies. Please check their policies before you submit any personal data to these websites.
Our Commitments to you
- To keep your personal data safe and only process it for legitimate business reasons
- To only process your personal data when there is a lawful basis for doing so
- We will not retain your personal data after the purpose has ended
- We will never sell your personal data to a third party
Who we are
The Maldon Brewing Company Ltd is registered at Companies House UK under the number 04416722.
For any GDPR 2018 related matters, please contact:
Maldon Brewing Co
Or by email to email@example.com
Legal basis for processing your data
We need to have a proper reason under the GDPR whenever we process your personal data ourselves or share it with others. These reasons are:-
- To fulfil a contract we have with you or to take steps at your request prior to entering into a contract with you, or
- When it is our legal duty, or
- When there is a legitimate business interest or the legitimate interest of a third party except where such interests are overridden by your interests or your fundamental rights or freedoms, or
- When you consent to it.
A legitimate business interest is when we have a business or commercial reason to process your personal data, but this must not unfairly go against your rights.
The data we collect and how we collect it
We may collect personal data from you in the following ways:
- When we make an enquiry and register your interest via our website
- When you contact us in person, over the telephone, by email or by post
- When you use our services
The type of information we may ask you to provide about yourself and therefore collect included, but is not limited to:
- Contact Details: Name, address, contact telephone number (mobile and landline), email address
- Your Company’s Name, address and telephone number
Please note that we may require this information to be able to respond to your enquiry or to provide our services or marketing information to you. You can however at any time tell us to change or remove any personal data or to stop or restrict the processing of your personal data.
How we use your Personal Data
We may use the personal data collected/provided by you as follows:
- To respond to your enquiry.
- To send you information about our services, including any changes to the services we provide.
- To keep our records up to date.
- To develop and carry out marketing activities.
- To comply with law and regulation that applies to us.
- To monitor customer satisfaction.
- To run our business in an efficient and proper way. This includes managing our financial position, business capability, planning, communications, corporate governance and audit.
Where we have stated above that we have your consent as a legal basis for processing your data, we will understand your consent to have been given when you expressly accept these terms. You can withhold or withdraw your consent at any time using the contact details for our Data Protection Officer in this Notice.
If we intend to use your personal data for any purpose not stated above, we will first notify you of the intended use and the legal grounds of use under GDPR 2018.
Sharing your Personal Data
We may disclose your personal data within our company.
Protecting your Personal Data
We will seek to keep your personal data secure by taking appropriate technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Only authorised personnel and third parties will have access to your personal data.
We will retain your personal data for no longer than the period of time needed for the purposes that we collected the data and for as long as we have legal grounds to retain it. There is no fixed period after which all record of your personal data will be deleted as this will depend on the circumstances and the purposes of the processing but we will take steps and maintain policies to keep retention under proper review. We will not seek your consent before deleting any personal data.
Changes to this Privacy Notice
Any changes we may make to this Privacy Notice in the future will be posted on this website and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to this Privacy Notice.
Your right of access to your Personal Data
You have the right to access your personal data including us providing to you, without charge, a copy (which may be in electronic form) of any of your personal data that we are holding or using (referred to as ‘processing’) or that third parties are processing on our behalf.
Requests for this information or a copy of your personal data should be in writing, enclosing proof of identification, confirming your name, your employer’s name and address and should be addressed to:-
Maldon Brewing Co
Or by email to firstname.lastname@example.org
Your right to removal, correction or restriction of processing of your Personal Data
You have the following rights under GDPR:
- A right to request us to correct inaccurate or incomplete data (‘Right to rectification’),
- A right to request us to delete any of your personal data. In certain circumstances, we may wish to retain data and if GDPR allows us to do so we will inform you of our grounds (‘Right to erasure’ or ‘Right to be forgotten’)
- A right to request us to stop or to restrict any aspect of the processing of your personal data. In certain circumstances, we may wish to continue and if GDPR allows us to do so we will inform you of our grounds (‘Right to restriction of processing’).
In each case, we will tell you what action we are taking and we will also notify any third party to whom the data has been disclosed.
Your right to complain to the Regulator
Please let us know if you are unhappy with how we have processed your personal data. You can contact us by writing or emailing the Data Protection Officer at the email/office addresses given above.
You have the right to lodge a complaint with the Information Commissioners Office (ICO) which is the UK supervisory authority for the processing of personal data.
Further details are available on ICO’s website.
Enquiries and exercise of rights
If you have any questions, or want more details about how we process your personal data, or if you wish to exercise any of your rights you can contact us by writing or email the Data Protection Officer at the email/office address given above.