Privacy & Cookies
Last updated: 25th May 2018
SPEED READ: WHAT YOU NEED TO KNOW
But just in case you do not want to read it in full we have summarised the key points for you in our ‘speed read’ section below.
- apetito Limited (apetito, we, our or us) is registered as a data controller with the Information Commissioner’s Office and our registration number is Z5944325. Our data protection officer is Lindsay Boxsey and you can contact us at email@example.com.
- We are also known as Wiltshire Farm Foods (WFF). WFF runs a network of franchisees who are responsible for providing our services around the country. If you live in an area run by one of our Franchisees, we will share your personal data with them so that they can provide services to you.
- We only ever collect personal data that you share with us, or that is provided to us by a relative. Where personal data about third party individuals is provided to us, you acknowledge that it is your responsibility to ensure that individual is happy for you to share their personal data with us.
- We process personal data to provide our services to you. Under data protection laws, we are only permitted to process your personal data where we have a legal basis for doing so. We will only ever process your personal data in compliance with applicable law.
- We may share your personal data with our third party suppliers including credit referencing agencies to enable the efficient and secure provision of services to you. We will never sell or share your data with third parties.
- We will keep your data for as long as we provide services to you. We will then keep data for the period of 24 months from the date of your last order.
- You have important rights under laws aimed at protecting your personal data. This policy sets out your rights and how can you exercise them. For more information, see section 9 of this policy. You also have the right to make a complaint to the Information Commissioner’s Office if you are happy with how we have handled your personal data. For more information, see section 10 of this policy.
1. About apetito
apetito Limited (apetito, we, our or us) is a company registered in England and Wales under company number 00233851 whose registered office is at Canal Road, Trowbridge, Wiltshire, BA14 8RJ. You may also know us as Wiltshire Farm Foods.
We are registered as a data controller with the Information Commissioner’s Office and our registration number is Z5944325.
3. What data do we collect about you?
We collect personal data about you if you share your information with us when enquiring about or purchasing our services. We may also ask you to share your personal data with us if it is necessary for us to provide our services to you – for example, we may ask you about your dietary requirements so that we can make sure you are receiving the correct meals.
If you provide us with personal data relating to other people (for example, a relative) then you will need to check with them that they are happy for you to share their data with us.
Personal data we process:
- home address and telephone number
- personal email address
- dietary requirements (which may include health information)
- bank and/or payment card details
No automated decision-making or profiling will take place using your personal data.
If you use our Website:
If you use our Website, we automatically collect the following information:
- web usage information (e.g. IP address), your login information, browser type and version, time zone setting, operating system and platform; and
- information about your visit, including the full Uniform Resource Locators (URLs) clickstream to, through and from our Website (including date and time); time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs).
The Website may, from time to time, contain links to and from the websites of advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
4. HOW WILL WE USE YOUR PERSONAL DATA
We will collect, store and use personal data you provide to us in order to carry out the activities relevant to the provision of our services to you. We will only do this where:
- you have given us consent to do so for the specific purposes which we have told you about – for example, we will need your consent to process any health information you provide to us;
- it is necessary for us to do so to enable us to provide you with the services that you have requested from us – for example, delivery of your meals to your home address;
- it is necessary in order to fulfil our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or
- the law otherwise permits or requires it.
Where we process your personal data on the basis of our legitimate interests, these are our (or our third party’s) interests in providing our services to you in an efficient and secure manner.
5. WHO WILL HAVE ACCESS TO YOUR PERSONAL DATA?
We take your privacy seriously and have implemented appropriate physical, technical and organisational security measures designed to secure your personal data against accidental loss, destruction or damage and unauthorised access, use, alteration or disclosure.
Our Wiltshire Farm Foods Franchisees
- We run a network of franchises throughout the UK and Ireland. Our regional franchises are owned and operated by third parties.
In almost all cases, our services will be provided to you by your local Wiltshire Farm Foods Franchisee (your Local Franchisee). We will share your personal data with your Local Franchisee to enable your Local Franchisee to provide the services to you. When this happens, your Local Franchisee will be a joint data controller with us.
6. WHO ELSE MIGHT WE SHARE YOUR PERSONAL DATA WITH?
We will share your personal data with the following third-party service providers who assist us with administering the provision of our services to you:
- credit referencing agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you;
- companies who provide services to us, for example, suppliers who operate our call centre, who support us in distributing our brochures and marketing materials to you and who provide our information technology systems.
If a business transfer or change of business ownership takes place or is envisaged, we may transfer your personal data to the new owner or a prospective new owner. If this happens, we will inform you of this transfer.
7. HOW DO WE PROTECT YOUR PERSONAL DATA?
We take your privacy seriously and are committed to maintaining the privacy and security of the personal data you provide to us, and the choices you have regarding our collection and use of your personal data.
We follow strict security procedures as to how your personal data is stored and used, and who sees it, to help stop any unauthorised person getting hold of it. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
Unfortunately, the transmission of your personal data via the internet is not completely secure and although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us over the internet and you acknowledge that any transmission is at your own risk.
8. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will keep your personal data for no longer than is necessary for the purposes we have set out above.
If you order services from us, we will keep your personal data for the period for which you remain a customer plus an additional 24 months following your last order with us. If we are required by law to keep any of your personal data, we will only keep such data for as long as the law says we must.
If you enquire about our services but do not place an order with us, we will keep your personal data for 24 months from the date on which you first provided your information to us. If we are required by law to keep any of your personal data, we will only keep your information for as long as the law says we must.
The third parties we engage to provide services on our behalf will keep your data no longer than the periods set out in sections 6.1 and 6.2 above. If we end our relationship with any third party providers, we will make sure they securely delete or return your personal data to us.
We may retain personal data about you for statistical purposes (for example, to help us better advertise our services). Where data is retained for statistical purposes it will always be anonymised meaning that you will not be identifiable from that data.
9. WHAT ARE YOUR RIGHTS?
You have a number of rights in relation to your personal data. There are circumstances in which your rights may not apply. You have the right to request that we:
- provide you with a copy of the information we hold about you;
- update any of your personal information if it is inaccurate or out of date;
- delete the personal data we hold about you – if we are providing services to you and you ask us to delete personal data we hold about you then we may be unable to continue providing those services to you;
- restrict the way in which we process your personal data;
- stop processing your data if you have valid objections to such processing;
- transfer your personal data to a third party.
For more information on your rights and how to use them, or if you would like to make any of the requests set out above, please contact us using the details provided in section 10. We will respond to all such requests within the time period required by law.
Even if you consented to the processing of your personal data for marketing purposes (by ticking the relevant box or by requesting a brochure), you have the right to ask us to stop processing your personal data for such purposes. You can exercise this right at any time by contacting us at firstname.lastname@example.org or calling 01225 753636.
10. WHO CAN YOU ASK FOR MORE INFORMATION?
We and each of our Franchisees are data controllers, because we collect personal data about you and determine how and why it will be used. If you have any questions or concerns about how we handle your personal data, you can contact us using any one (or more) of the following:
Email address: email@example.com
Telephone number: 01225 753636
Alternatively, you can contact us through the “Contact Us” section of the Website.
We have appointed Lindsay Boxsey as our Data Protection Officer (DPO). Our DPO can be contacted by post or telephone using the above contact details, or via email at firstname.lastname@example.org.
If you are unsatisfied with our response to any data protection issues you raise with us or our DPO, you have the right to make a complaint to the Information Commissioner’s Office (ICO). The ICO is the authority in the UK which is tasked with the protection of personal data and privacy.