Privacy Policy

This Privacy Policy describes how Old Porcupine Pantry  (OPC) (We) processes, collects, uses, and shares your personal data when you visit, use, or make a purchase from our website,(the "Site").

OPC is the controller and responsible for your personal data.

• Company Name: Old Porcupine Pantry.
• Registered Address: Pera Business Park, Nottingham Road, Melton Mowbray, LE13 0PD
• Contact Email: info@oldporcupinepantry.co.uk

We are committed to protecting your privacy and handling your data in a transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:

Data Category

Description (Examples)

Identity Data

First name, last name, username or similar identifier.

Contact Data

Billing address, delivery address, email address, and telephone numbers.

Financial Data

Payment card details (though processed securely by third parties like Stripe/PayPal, not stored by us).

Transaction Data

Details about payments to and from you and other details of products or services you have purchased from us.

Technical Data

Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

Usage Data

Information about how you use our website, products, and services (e.g., clicks, navigation paths, duration of visit).

Marketing and Communications Data

Your preferences in receiving marketing from us and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data. Aggregated Data is not considered personal data as it does not directly or indirectly reveal your identity.

We use different methods to collect data from and about you, including:

• Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or corresponding with us by post, phone, email, or otherwise. This includes data you provide when you:
  
  • Apply for our products or services;
  • Create an account on our Site;
  • Subscribe to our service or publications;
  • Request marketing materials; or
  • Give us feedback.
• Automated Technologies or Interactions: As you interact with our website, we will automatically collect Technical Data and Usage Data using cookies and other similar technologies.
• Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties, such as payment processors (e.g., GoDaddy Payments, PayPal) and analytics providers (e.g., Google Analytics).

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

1. Where we need to perform the contract we are about to enter into or have entered into with you (e.g., processing your order).
2. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our website and services).
3. Where we need to comply with a legal or regulatory obligation (e.g., tax law).
4. Where we have your consent to do so (e.g., for specific marketing activities).

Purpose/Activity

Type of Data

Lawful Basis for Processing

To register you as a new customer

Identity, Contact

Performance of a contract

To process and deliver your order, manage payments, fees, and charges

Identity, Contact, Financial, Transaction

Performance of a contract; Necessary for our legitimate interests (to recover debts)

To manage our relationship with you, including notifying you about changes to our terms or privacy policy

Identity, Contact, Marketing and Communications

Performance of a contract; Necessary to comply with a legal obligation; Necessary for our legitimate interests (to keep our records updated)

To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

Identity, Technical

Necessary for our legitimate interests (for running our business, network security); Necessary to comply with a legal obligation.

We may share your personal data with the parties set out below for the purposes set out in Section 4:

• External Third Parties: Service providers who provide IT and system administration services (e.g., GoDaddy, hosting providers), professional advisors (lawyers, bankers, auditors), and regulatory bodies.
• Payment Processors: Such as Stripe or PayPal, to facilitate payment processing.
• Shipping and Delivery Companies: To fulfill your orders.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

We may transfer your personal data outside the UK or the European Economic Area (EEA). Whenever we transfer your personal data, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK government.
• We use specific contracts approved by the UK government that give personal data the same protection it has in the UK.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

• Request access to your personal data (commonly known as a "data subject access request").
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data to you or a third party.
• Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us at info@oldporcupinepantry.co.uk

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

• Our website uses cookies (small files placed on your device) to collect Technical and Usage Data. Please refer to our separate [Cookie Policy Link] for detailed information on the types of cookies we use, the purposes for which we use them, and how you can manage your cookie preferences.