1. ABOUT THIS PRIVACY NOTICE
We,Carte Blanche Dining, operate this website Carte Blanche Dining (this site). In this Privacy Notice, references to "Carte Blanche Dining", “we”, “us” and "our" are to Carte Blanche Dining.
The purpose of this site is to provide you, as a customer or supplier (or prospective customer or supplier), with information about Carte Blanche Dining and the products and services we offer. This Privacy Notice is designed to provide you with information about how we obtain and process your personal data in connection with your use of this site and/or when you purchase or supply products and services from or to us.
We may collect, use, store and transfer different kinds of personal data about you when you use this site and/or purchase our products and services. In respect of all users of this site, the personal data we may collect includes information you send us when you make an enquiry. If you are a business representative for one of our customers or suppliers, or prospective customers or suppliers, the personal data we collect about you is likely to be more limited, but could include, for example, your name and contact details.
We will process your personal data as a “data controller”. This means that we are responsible for deciding how we hold and use personal data relating to you.
Please read this Privacy Notice carefully together with our Terms and Conditions of Service if you are purchasing or supplying products and services from or to us. From time to time we may also issue other privacy or fair processing notices to you relating to the way in which we collect personal data about you which we will bring to your attention.
2. HOW TO CONTACT US
To contact us, please email here.
3. THE DATA WE COLLECT AND PROCESS ABOUT
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (i.e. anonymous data). It also does not include information relating solely to a business or other organisation, rather than to a person.
We have grouped together the types of personal information we may collect, store and use about you. This includes (but is not an exhaustive list) the following types and categories of personal information about you:
4. HOW WE COLLECT PERSONAL DATA
We mostly obtain your personal information directly from you, for example when you correspond or interact with us directly by post, telephone, email or otherwise. This includes personal data you provide when you make an enquiry, provide us with feedback or contact us on behalf of a customer or supplier in (as a business representative).
We may sometimes obtain additional information from third parties including your employer or colleagues (where you are a business representative) and information in the public domain (including on social media websites, such as LinkedIn). If you use your personal payment details to pay for an order, we may also obtain information from third party payment providers.
5. HOW AND WHY WE USE PERSONAL DATA
We will only collect and process your personal information where we have a legal basis to do so. The legal basis will vary depending on the manner and purpose for which we are collecting your personal information. Most commonly, we will use your personal data in the following circumstances:
Where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract;
Our legitimate interests in processing your personal data for our own business purposes, include (without limitation):
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you require further detail about the specific legal ground we are relying on to process your personal data.
If you fail to provide certain information to us when requested, we may not be able to perform the contract we have entered into with you (such as paying you or providing a benefit), or we may be prevented from complying with our legal obligations (such as to ensure the health and safety of our workers), or you may be unable to exercise your statutory rights (such as in relation to statutory leave entitlements or tax benefits).
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We may from time to time send you marketing communications by email if you:
have purchased or supplied products or services from or to us (or you are a business representative acting on behalf of a customer or supplier who has purchased or supplied products or services from or to us) and you have not opted out of receiving marketing communications from us; and/or
We will not sell your personal data to third parties for marketing purposes. You can ask us to stop sending you marketing communications at any time, by:
7. WHO HAS ACCESS TO MY PERSONAL DATA?
We may share your personal data with third parties, including third party service providers who provide the following services to us:
Where these third parties process personal data on our behalf, they will only be permitted to process your personal data for specified purposes and, where they are processing personal data on our behalf, in accordance with our instructions.
We may also share your personal information with:
Where we share data with third parties such as the HMRC, those third parties may also be controllers of your data. We shall not be responsible or liable for the way in which other data controllers hold or process your personal data. Please contact those third parties for further information regarding how they will use your data. We shall only share your personal data with third parties in accordance with this Privacy Notice.
8. INTERNATIONAL TRANFERS
If we have a business need to transfer or store your personal data at a destination outside the European Economic Area (EEA), we shall ensure a similar degree of protection is afforded to your personal data by ensuring appropriate safeguards are implemented in accordance with applicable laws.
9. HOW DO WE PROTECT PERSONAL DATA?
We take the security of your data seriously. We have put in place security measures, including internal policies and controls, to ensure that your data is not lost, accidentally destroyed, misused or disclosed.
We also limit access to your personal information to our personnel and other third parties who have a business need to know such information. They are subject to a duty of confidentiality.
10. CHANGE OF PURPOSE
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we wish to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
We may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
11. HOW LONG DO WE KEEP PERSONAL DATA?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
As a general rule, we will retain business records (and personal data contained within them) for a period of seven years following the end of our relationship with that customer or supplier. We will keep this under review and may periodically delete personal data which we no longer require. In some circumstances we may be entitled or required to retain your data for a longer period where we are under a legal obligation to do so or in order to commence or defend legal proceedings in future.
We shall not have any liability whatsoever to you for the deletion of personal data in accordance with our data retention policy.
12. YOUR RIGHTS
You have the following rights in respect of the personal data that we process about you (where we determine the purpose and means for which that personal data shall be processed):
If you wish to exercise any of the rights set out above in respect of your personal data, please contact us by email.
We may ask you to verify your identity if you make a request to us to exercise any of the rights set out above.
If you believe that we have not complied with your data protection rights, you have the right to make a complaint to the Information Commissioner’s Office, the ICO (the supervisory authority for data protection in the UK). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please do contact us in the first instance.
We reserve the right to update this Privacy Notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
We encourage you to help us to comply with our obligations by telling us promptly if you change your contact details or other personal information. You have the right to question any information we hold about you that you think is wrong or incomplete. Please contact us if you want to do this. If you do, we will take reasonable steps to check its accuracy and correct it.