Privacy Statement​​​​​​​

The processing of your personal data is governed by the General Data Protection Regulation (GDPR), which came into force on the 25^th May 2018. This privacy statement tells you what to expect when we process your personal information. This is the main privacy notice for Cropwell Bishop Creamery Limited, however, some of our services may have additional privacy notices which will be provided to you when you engage or register for such a service. It is important for you to read this statement in full to understand how we use your data and your rights in relation to your data.

Cropwell Bishop Creamery Limited needs to process personal data in order to deliver our services to you:

• To allow users to use the contact form on this website
• To process customer orders in our online shop

We are committed to treating your information securely, with respect and in line with data protection law.

We keep this Privacy Statement under regular review and we will place all updates of this page on the website as soon as is practicable.

For further information you can contact us as follows:

Cropwell Bishop Creamery Limited
Nottingham
Nottinghamshire
NG12 3BQ

Telephone: 0115 989 2350

Email: enquiries@cropwellbishopcreamery.co.uk

Please check our Terms of Business

For independent advice about data protection issues, you can contact the Information Commissioner:

Information Commissioner
Wycliffe House, Water Lane
Wilmslow
Cheshire
SK9 5AF

Phone: 0303 123 1113

Email: casework@ico.org.uk

Website: http://www.ico.org.uk

What Information do we collect and how is it used?

We will only collect personal information when we need it and when we ask you for information, we will make it clear why we need it.

Sending us a comment on our contact form:

• we will need your name and email address.
• we will use this information only if we need to reply to your comment.

In our online shop we may collect the following information:

• Name and payment details
• Contact information including email address
• Demographic information such as postcode, preferences and interests
• Other information relevant to customer surveys and/or offers

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

• To process your order and obtain payment
• Internal record keeping
• We may use the information to improve our products and services
• We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided. You can unsubscribe from these at any time by clicking the ‘unsubscribe’ link in the email.

How will we protect information collected about you?

We will apply appropriate technical and organisational measures to ensure your personal information is secure. For example, we have systems in place to ensure that access to personal information is restricted to authorised individuals on a strictly need-to-know basis. Our online shop is hosted by the EKM platform – its servers are housed within a secure datacentre in Manchester which is ISO27001 and PCI-compliant and had BS5979 security on-site.

When we need to share personal data with our contractors and third party suppliers, our relationships are governed by our contracts with them which include strict data sharing and confidentiality protocols.

We will not discuss your personal information with anyone other than you, unless you have given us prior written authorisation to do so or where we have received a clear verbal instruction from you (as a one-off circumstance).

Who will we share your information with?

We never share personal information with any other organisation for third-party marketing purposes.

Sometimes we will need to share personal information we hold about you with other organisations that we work with or who provide services on our behalf. When sharing information we will comply with all aspects current data protection law. All our data sharing relationships are governed by contracts which include strict data sharing and confidentiality protocols.

We may also share information when required by law, for example, where ordered by the Court or to protect an individual from immediate harm.

What are your rights in relation to your data?

We are committed to upholding your rights in respect of your personal data.

The right to be informed

Through the provision of this statement and other privacy notices on the website, we will be open and transparent about how and why we use your personal information.

The right of access

You have a right to ask us what personal information we hold about you and to request a copy of your information. This is known as a ‘subject access request’ (SAR).

SARs need to be made in writing and we ask that your written request is accompanied by proof of your address and identity.

If you are seeking to obtain specific information (e.g. about a particular matter or from a particular time period), it helps if you clarify the details of what you would like to receive in your written request.

If someone is requesting information on your behalf they will need written confirmation from you to evidence your consent for us to release this and proof of ID (both yours and theirs).

We have 30 calendar days within which to provide you with the information you’ve asked for (although we will try to provide this to you as promptly as possible).

The right to rectification

You can ask us to rectify your personal data if it is inaccurate or incomplete. Please help us to keep our records accurate by keeping us informed if your details change.

The right to erasure

The right to erasure is also known as ‘the right to be forgotten’. In some circumstances, you can ask us to delete or remove personal data where there is no compelling reason for its continued processing. This is not an absolute right, and we will need to consider the circumstances of any such request and balance this against our need to continue processing the data. Our response will also be guided by the provisions of our retention schedule.

How long will you keep my data?

We only hold records during the period of our relationship and for a set period afterwards to allow us to meet our legal obligations, including resolving any follow up issues between us.

Please contact us if you would like any more information.

What cookies do you use?

To make this site simpler to use, we sometimes place small files on your computer. These are known as cookies, almost all websites do this too. Cookies have many uses and most are not damaging to your privacy, all of the cookies used on this web site fall into that category. We do not use cookies that collect or transfer your personal data to other web sites for advertising or any other purpose.

Cookies are used on this site purely to improve services for you through, for example:

• enabling a service to recognise your device so you don't have to give the same information several times during one task
• recognising that you may already have given a username and password so you don't need to do it for every web page requested
• measuring how many people are using the site, so it can be made easier to use and there's enough capacity to ensure it is fast enough

We use Google Analytics to measure how many people use this site. We do this to make sure the site is meeting users' needs and to understand how we could improve it.

Google Analytics stores information about what pages you visit, how long you are on the site, how you got here and what you click on. We do not collect or store any personal information (e.g. your name or address) so this information cannot be used to identify who you are. We also do not allow Google to use or share our analytics data.

The following cookies are used by Google Analytics:

• _utma stores a randomly generated number for 2 years
• _utmb stores a randomly generated number for 30 minutes
• _utmc stores a randomly generated number until you close your browser
• _utmz stores a randomly generated number and anonymous information on how the site was reached (e.g. direct or via a link or a search) for 6 months

The following cookie is used to provide other normal website functions:

• net_sessionid stores a randomly generated number until you close your browser

Our online shop uses the following cookies:

If you do not wish to accept any cookies on to your machine you can disable them by adjusting the settings on your browser. However, this is likely to adversely affect the functionality of websites you visit.

Working with Cropwell Bishop Creamery as a customer / supplier

We will keep your data for the purpose of conducting business between Cropwell Bishop Creamery and yourselves. This will include, but is not limited to, invoices, statements, contact and payment details. Please contact us should you require further information.