Privacy Policy
Miss Windsor’s Delectables understands that your privacy is important to you and that you care about how your personal data is used. I respect and value the privacy of all my patrons and suppliers and will only collect and use personal data in ways that are described here, and in a way that is consistent with my obligations and your rights under the law.
This privacy policy between you and Miss Windsor’s Delectables sets out the basis on which I will process any personal data I collect from you, or which you provide to me. For the purpose of the Data Protection Act 1998 and GDPR I am the data controller. I will take reasonable precautions to safeguard the personal information that you supply to me.
My obligations
I will comply with the Data Protection Act 1998 and the GDPR (2018) in the way I use and share your personal data. Amongst other things, this means that I will only use your personal data:
Information about Miss Windsor’s Delectables
Data Controller/ Data Processor: Miss Windsor
Miss Windsor’s Delectables
Unit 224
3 Ravensbourne Road
London
BR1 1HN
Email address: tallyho@misswindsor.uk
Telephone number: 07581281412
What does this notice cover?
This Privacy Information explains how I use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.
What is personal data?
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’. Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
What are my rights?
Under the GDPR, you have the following rights, which we will always work to uphold:
Complaints
You can complain to the Miss Windsor’s Delectables directly by contacting Miss Windsor (data protection officer) using the details set out above.
If you are not happy with any aspect of how I collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). I would be grateful if you would contact me first, if you do have a complaint, so that I can try to resolve it for you.
What personal data do we collect?
Miss Windsor’s Delectables will only collect personal information when you specifically and knowingly provide it to me. Personal data means any information capable of identifying an individual. It does not include anonymised data. I may process certain types of personal data about you as follows:
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
I use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. I only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help me provide you with a better website, by enabling me to monitor which pages you find useful and which you do not. A cookie in no way gives me access to your computer or any information about you, other than the data you choose to share with me. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
My site uses cookies to distinguish you from other users of my site. A cookie is a small file of letters and numbers that I store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive. I use the following cookies:
I use Google Analytics to analyse the use of this website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated relating to my website is used to create reports about the use of the website. Google will store this information. Google’s privacy policy is available at: http://www.google.com/privacypolicy.html.
Mobile device privacy
The following applies to my site, when viewed on a mobile device:
When accessed with a mobile device, my site may collect information automatically, such as the type of mobile device you have, device identifiers, and information about your use of the site. Regardless of the device you use to access the site, it will also collect information you provide, as well as information about your interaction with the site and its content.
If location services are activated on your mobile device, my site may collect information about the location of your device. Your mobile network service providers may collect device-specific information, such as a device identifier, when you use my website or one of my mobile applications. This information collected by your mobile network service will not be associated with your user account with me, or with your personally identifiable information.
Third party sites
This website contains links to other websites. Please be notified that Miss Windsor’s Delectables cannot be held responsible for the privacy practices of other websites. I encourage all visitors to be aware and read the privacy statements of each and every website that collects personally identifiable information.
Links to other sites
My website contains hyperlinks to many other websites. I am not responsible for the content or functionality of any of those external websites (but please let me know if a link is not working by using the ‘Contact us’ link at the top of the site).
If an external website requests personal information from you (e.g. in connection with an order for goods or services), the information you provide will not be covered by Miss Windsor’s Delectables Privacy Policy. We suggest you read the privacy policy of any website before providing any personal information. When purchasing goods or services from any of the businesses that our site links to, you will be entering into a contract with them (agreeing to their terms and conditions) and not with Miss Windsor’s Delectables.
How we collect your personal data
I collect data about you through a variety of different methods including:
About your data
How do we use your personal data?
Under the GDPR, I must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to my use of your personal data, or because it is in our legitimate business interests to use it. Your personal data will be used for the following purposes:
Marketing
From May 2018, I will ask you to “opt-in” for most communications. This includes all our marketing communications (the term marketing is broadly defined).
This means you’ll have the choice as to whether you want to receive these messages and be able to select how you want to receive them (post, phone, email).
You can decide not to receive communications or change how I contact you at any time.
If you wish to do so please contact me using the details listed towards the bottom of this page.
What does ‘marketing’ mean?
Marketing does not just mean offering things for sale, but also includes news and information about:
When you receive a communication, I may collect information about how you respond to or interact with that communication, and this may affect how I communicate with you in future.
I require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
How long will you keep my personal data?
I will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):
Do you share my personal data?
I will not share any of your personal data with any third parties for any purposes, subject to one important exception. In some limited circumstances, I may be legally required to share certain personal data, which might include yours, if I’m involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
How can you access your personal data?
If you want to know what personal data I have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to the email or postal addresses shown below. I will respond to your subject access request within 7 days and, in any case, not more than one month of receiving it. Normally, I aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
I want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
Please keep in mind that there are exceptions to the rights above and, though I will always try to respond to your satisfaction, there may be situations where I’m unable to do so. Any access request may be subject to a fee of £50 to meet my costs in providing you with details of the information I hold about you.
Data storage and security
How and where do we store or transfer your personal data?
Unfortunately, the transmission of information via the internet is not completely secure. Although I will do my best to protect your personal data, I cannot guarantee the security of your data transmitted to my site; any transmission is at your own risk. Once I have received your information, I will use strict procedures and security features to try to prevent unauthorised access. I am committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, I have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
When you give me personal information such as data, I take steps to ensure that it’s treated securely. Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while I strive to protect your personal information, I cannot guarantee the security of any information you transmit to me, and you do so at your own risk. Once I receive your information, I make my best effort to ensure its security.
Contacting us
How do I contact you?
To contact me about anything to do with your personal data and data protection, including to make a subject access request, please use the following details – for the attention of Miss Windsor
Postal Address:
Miss Windsor’s Delectables
Unit 224
3 Ravensbourne Road
London
BR1 1HN
Data Controller/ Data Processor: Miss Windsor
Email address: tallyho@misswindsor.uk
Telephone number: 07581281412
Changes to this Privacy Notice
I may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if I change my business in a way that affects personal data protection. Any changes will be made available on my website. www.misswindsor.uk
This privacy policy between you and Miss Windsor’s Delectables sets out the basis on which I will process any personal data I collect from you, or which you provide to me. For the purpose of the Data Protection Act 1998 and GDPR I am the data controller. I will take reasonable precautions to safeguard the personal information that you supply to me.
My obligations
I will comply with the Data Protection Act 1998 and the GDPR (2018) in the way I use and share your personal data. Amongst other things, this means that I will only use your personal data:
- Fairly and lawfully
- As set out in the legislation and this policy
- To the extent necessary for these purposes
- I will process your personal data ourselves as the data processor.
Information about Miss Windsor’s Delectables
Data Controller/ Data Processor: Miss Windsor
Miss Windsor’s Delectables
Unit 224
3 Ravensbourne Road
London
BR1 1HN
Email address: tallyho@misswindsor.uk
Telephone number: 07581281412
What does this notice cover?
This Privacy Information explains how I use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.
What is personal data?
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’. Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
What are my rights?
Under the GDPR, you have the following rights, which we will always work to uphold:
- The right to be informed about our collection and use of your personal data.
- The right to access the personal data I hold about you.
- The right to have your personal data rectified if any of your personal data held by me is inaccurate or incomplete.
- The right to be forgotten, i.e. the right to ask me to delete or otherwise dispose of any of your personal data.
- The right to restrict (i.e. prevent) the processing of your personal data.
- The right to object to me using your personal data for a particular purpose or purposes.
- The right to data portability. This means that you can ask me for a copy of your personal data held by me to re-use with another service or business in many cases.
- Rights relating to automated decision-making and profiling. I do not use your personal data in this way
Complaints
You can complain to the Miss Windsor’s Delectables directly by contacting Miss Windsor (data protection officer) using the details set out above.
If you are not happy with any aspect of how I collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). I would be grateful if you would contact me first, if you do have a complaint, so that I can try to resolve it for you.
What personal data do we collect?
Miss Windsor’s Delectables will only collect personal information when you specifically and knowingly provide it to me. Personal data means any information capable of identifying an individual. It does not include anonymised data. I may process certain types of personal data about you as follows:
- Identity Data may include your first name, maiden name, last name, username, marital status, title, date of birth and gender.
- Contact Data may include your delivery address, email address and telephone numbers.
- Marketing and Communications Data may include your preferences in receiving marketing communications from us and our third parties and your communication preferences.
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
I use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. I only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help me provide you with a better website, by enabling me to monitor which pages you find useful and which you do not. A cookie in no way gives me access to your computer or any information about you, other than the data you choose to share with me. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
My site uses cookies to distinguish you from other users of my site. A cookie is a small file of letters and numbers that I store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive. I use the following cookies:
- Strictly necessary cookies are cookies that are required for the operation of my site.
- Analytical/performance cookies allow me to recognise and count the number of visitors and to see how visitors move around my site when they are using it. This helps me to improve the way my site works, for example by ensuring that users are finding what they are looking for easily.
- Functionality cookies are used to recognise you when you return to my site. This enables me to personalise my content for you and remember your preferences.
I use Google Analytics to analyse the use of this website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated relating to my website is used to create reports about the use of the website. Google will store this information. Google’s privacy policy is available at: http://www.google.com/privacypolicy.html.
Mobile device privacy
The following applies to my site, when viewed on a mobile device:
When accessed with a mobile device, my site may collect information automatically, such as the type of mobile device you have, device identifiers, and information about your use of the site. Regardless of the device you use to access the site, it will also collect information you provide, as well as information about your interaction with the site and its content.
If location services are activated on your mobile device, my site may collect information about the location of your device. Your mobile network service providers may collect device-specific information, such as a device identifier, when you use my website or one of my mobile applications. This information collected by your mobile network service will not be associated with your user account with me, or with your personally identifiable information.
Third party sites
This website contains links to other websites. Please be notified that Miss Windsor’s Delectables cannot be held responsible for the privacy practices of other websites. I encourage all visitors to be aware and read the privacy statements of each and every website that collects personally identifiable information.
Links to other sites
My website contains hyperlinks to many other websites. I am not responsible for the content or functionality of any of those external websites (but please let me know if a link is not working by using the ‘Contact us’ link at the top of the site).
If an external website requests personal information from you (e.g. in connection with an order for goods or services), the information you provide will not be covered by Miss Windsor’s Delectables Privacy Policy. We suggest you read the privacy policy of any website before providing any personal information. When purchasing goods or services from any of the businesses that our site links to, you will be entering into a contract with them (agreeing to their terms and conditions) and not with Miss Windsor’s Delectables.
How we collect your personal data
I collect data about you through a variety of different methods including:
- Direct interactions: You may provide data by filling in forms on my site (or otherwise) or by communicating with me by post, phone, email or otherwise
- Request for my services
- Email communications
- Subscribe to my newsletter
- Enter a competition, prize draw, promotion or survey
- Give me feedback – i.e. leave comments for my blog and recipe posts
- Automated technologies or interactions: As you use my site, you may automatically collect Technical Data about your equipment, browsing actions and usage patterns. I collect this data by using cookies, server logs and similar technologies.
About your data
How do we use your personal data?
Under the GDPR, I must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to my use of your personal data, or because it is in our legitimate business interests to use it. Your personal data will be used for the following purposes:
- To respond to your queries and requests;
- To communicate with you;
- Supplying my services to you. Your personal details are required in order for me to enter into a contract with you.
- Personalising and tailoring my services for you.
- Supplying you with information by email or post that you have opted-in to (you may unsubscribe or opt-out at any time by emailing us or unsubscribing from the email.
Marketing
From May 2018, I will ask you to “opt-in” for most communications. This includes all our marketing communications (the term marketing is broadly defined).
This means you’ll have the choice as to whether you want to receive these messages and be able to select how you want to receive them (post, phone, email).
You can decide not to receive communications or change how I contact you at any time.
If you wish to do so please contact me using the details listed towards the bottom of this page.
What does ‘marketing’ mean?
Marketing does not just mean offering things for sale, but also includes news and information about:
- benefits and offers;
- my events;
- products, services and offers (my own, and those of third parties which may interest you);
- changes in legislation regarding the service I offer;
- changes in the world of marketing which may affect your business and my service.
When you receive a communication, I may collect information about how you respond to or interact with that communication, and this may affect how I communicate with you in future.
I require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- Internal record keeping.
- I may use the information to improve our products and services.
- I may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
- From time to time, I may also use your information to contact you for market research purposes. I may contact you by email, phone, fax or mail.
How long will you keep my personal data?
I will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):
Do you share my personal data?
I will not share any of your personal data with any third parties for any purposes, subject to one important exception. In some limited circumstances, I may be legally required to share certain personal data, which might include yours, if I’m involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
How can you access your personal data?
If you want to know what personal data I have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to the email or postal addresses shown below. I will respond to your subject access request within 7 days and, in any case, not more than one month of receiving it. Normally, I aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
I want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
- the right to confirmation as to whether or not I have your personal data and, if I do, to obtain a copy of the personal information we hold (this is known as subject access request);
- the right to have your data erased (though this will not apply where it is necessary for me to continue to use the data for a lawful reason);
- the right to have inaccurate data rectified;
- the right to object to your data being used for marketing or profiling; and
- where technically feasible, you have the right to personal data you have provided to me which we process automatically on the basis of your consent or the performance of a contract. This information will be provided in a common electronic format.
Please keep in mind that there are exceptions to the rights above and, though I will always try to respond to your satisfaction, there may be situations where I’m unable to do so. Any access request may be subject to a fee of £50 to meet my costs in providing you with details of the information I hold about you.
Data storage and security
How and where do we store or transfer your personal data?
Unfortunately, the transmission of information via the internet is not completely secure. Although I will do my best to protect your personal data, I cannot guarantee the security of your data transmitted to my site; any transmission is at your own risk. Once I have received your information, I will use strict procedures and security features to try to prevent unauthorised access. I am committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, I have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
When you give me personal information such as data, I take steps to ensure that it’s treated securely. Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while I strive to protect your personal information, I cannot guarantee the security of any information you transmit to me, and you do so at your own risk. Once I receive your information, I make my best effort to ensure its security.
Contacting us
How do I contact you?
To contact me about anything to do with your personal data and data protection, including to make a subject access request, please use the following details – for the attention of Miss Windsor
Postal Address:
Miss Windsor’s Delectables
Unit 224
3 Ravensbourne Road
London
BR1 1HN
Data Controller/ Data Processor: Miss Windsor
Email address: tallyho@misswindsor.uk
Telephone number: 07581281412
Changes to this Privacy Notice
I may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if I change my business in a way that affects personal data protection. Any changes will be made available on my website. www.misswindsor.uk