Thyme Food UK Ltd (“Thyme”) respects your privacy and is committed to protecting your personal data. This Privacy Notice explains the type of personal data we collect about you when you interact with us. This could be browsing our online store, buying a product from our site or catalogue, calling a customer services agent or interacting with us on social media.
In this notice we explain the type of personal data we collect, how we store it, how and when we use it, how we keep it safe, and tell you about your privacy rights and how the law protects you.
It is important that you read this Privacy Notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.
OUR LEGAL BASIS FOR COLLECTING YOUR PERSONAL DATA
Thyme is the controller and responsible for your personal data (collectively referred to as “Thyme”, “we”, “us” or “our” in this Privacy Notice).
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
We will use your personal details to contact you in ways that we believe would be of genuine interest to you and as might be reasonably expected as part of running our business.
We may use your address to send you direct marketing material by post telling you about products & services that we believe would be of interest to you. If you have previously purchased from us, we may contact you via email about products or services we believe would be of genuine interest to you based on your previous purchasing behavior.
We will collect your personal data when you tell us we may do so. This will include ticking a box saying that you wish to receive our email newsletters. You can consent for us to send you emails by ticking the consent box during the checkout process. You may also consent to us using your email address when you sign-up to our email newsletter through the homepage pop-up or our newsletter sign up form at the bottom of our homepage.
We will collect your personal details in the form of your name, address, contact phone number and payment details should you place an order with us to ensure we can deliver the product to you at the correct place.
If the law requires us to, we may need to collect and process your data
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need further details.
WHAT INFORMATION DO WE COLLECT ABOUT YOU?
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include anonymous data. We may collect, use, store and transfer the following different kinds of personal data:
- Identity Data includes names, username or similar identifier, marital status, title, date of birth and gender.
- Contact Data includes addresses, email address and telephone numbers.
- Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments to and from you and other details about products and services we have provided to you.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
- Profile Data includes your username and password, your interests, preferences, feedback and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
WHEN DO WE COLLECT YOUR PERSONAL DETAILS?
We collect your personal details when you interact with our website, customer services team or through our social media channels, these include:
- When you buy online and check out as a guest or when you open an account via our website.
- As you interact with our website or your account, we may automatically collect technical data about your equipment, browsing actions and patterns.
- We may collect details when you connect or contact us through social media
- We’ll collect details when you contact us about a previously purchased product or if you raise a complaint.
- We may collect personal details when you enter a competition, request marketing or subscribe to publications.
- When you review a product on our website
- When we meet you face to face at a show or exhibition
- When you contact us via phone requesting product information, placing an order or opening an account.
HOW & WHY WE USE PERSONAL DATA
We use your personal data to assist in the day to day running of our business. This includes:
To comply with our contractual obligations we use your personal details to allow us to:
- Fulfil orders
- Deliver relevant website content.
- To use data analytics to improve our website, products, marketing and customer relationships.
- Respond to questions, queries and complaints
- Tell you about changes to our terms & conditions, privacy notice or to inform you about product recalls
- Make suggestions and recommendations to you about goods or services that may be of interest to you.
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. You will receive marketing communications if you have purchased goods from us or if you have provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing.
You can ask us or third parties to stop sending you marketing messages at any time by contacting us. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product purchase.
HOW WE PROTECT YOUR DATA
We take every reasonable and appropriate action to secure all our personal data to make sure it’s not inappropriately lost, misused, accessed, disclosed, altered or destroyed. This includes:
- All transactional areas of our website are secure and encrypted using SSL (Secure Socket Layer) technology and AES-256 encryption.
- All cloud based, IT solutions and databases are password protected
- We regularly review all systems for areas of vulnerability
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research of statistical purposes in which case we may use this information indefinitely without further notice to you.
You can ask for your data to be deleted, or anonymised if more appropriate, at any time by contacting our Data Protection Officer.
Data Protection Officer, Thyme Foods, Unit 5 Hatton Rock Business Park, Hatton Rock, Stratford-Upon-Avon, CV37 0BX or by emailing email@example.com
Data will be deleted, or anonymised if more appropriate, within 5 working days or we will provide you a reason as to why it can’t, if related to our legal obligations.
WHO DO WE SHARE YOUR PERSONAL DATA WITH?
We share your personal data with trusted third parties whom provide services that assist with the day to day running of our business and for the purposes of our legal bases mentioned above, including:
- Shipping & logistics companies
- Payment providers & processors
- Analytics companies
- Marketing services providers
- Fraud detection & prevention
- Email providers
- Hosting & database providers
- Customer relationship management providers
- Social media platforms
- Retail operation systems
- Mailing houses
- Online marketing & website development providers
Any organisation processing your data on our behalf will only use the exact information needed to perform the tasks that assist in the day to day running of our business and only for that exact purpose.
Before working with, or sharing any of your personal data with, any third party, we work closely with the organisation to ensure that your privacy is secure and protected.
Cookies are small files that are stored on your computer that tell us about your visit to our website. The information collected by cookies includes:
- What website you came from
- What webpage you landed on
- How long you spend on our website
- How long you spend on each page visited
- Which pages you visited
- How many times you visit our website
- The contents of your basket
- Details of the checkout process
- If you’ve visited our site before
We will also share this information with our social media sites. These sites may occasionally show you online adverts of our products that we believe are of interest to you.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set up access cookies.
For further information on cookies please visit our Cookies Policy
You have the right to access all the personal data we hold on you at any time. You can request this information by contacting us at:
Data Protection Officer, Thyme Foods, Unit 5 Hatton Rock Business Park, Hatton Rock, Stratford-Upon-Avon, CV37 0BX
Your right to correct any personal data we hold. You can amend your personal information via your account page on our website or by calling a customer services agent on 01789 507 633
Request erasure of your personal data
This means you can ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data
Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data.
This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
HOW TO STOP US USING YOUR PERSONAL DATA
Your right to withdraw consent. Where we are relying on consent to process your personal data, you can withdraw your consent from any email marketing at anytime:
- Click unsubscribe from any of our email newsletters
- Send an email to firstname.lastname@example.org and ask for consent to be removed
- Write to our Data Protection Officer at the above address
- Call a customer service agent on 01789 507 633
However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Your right to request that we stop sending you direct marketing. You can request that we stop sending you marketing materials by post at anytime using any of the methods above.
CONTACTING THE REGULATOR
If you feel concerned about how your personal data is being handled or are unhappy with any of our responses you have the right to contact, or lodge a complaint with, The Information Commissioner’s Office (ICO)
You can contact them by calling 0303 123 1113
Or visit www.ico.org.uk/concerns