Our Site is owned and operated by Bright Chilli Limited, a Limited Company registered in Scotland under company number SC302114.
- Registered address: 69 Dalkeith Road, Dundee, DD4 7HF, Scotland.
- Address: 69 Dalkeith Road, Dundee, DD4 7HF, Scotland.
- VAT number: GB 886 3536 79
- Our Data Protection Register Number is Z9565739. We are registered as a Data Controller under Bright Chilli Limited. You can contact us by email firstname.lastname@example.org, telephone 0844 736 5611 or by post at 69 Dalkeith Road, Dundee, DD4 7HF.
WHAT IS PERSONAL DATA?
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.
Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
HOW WE USE YOUR PERSONAL INFORMATION
· Supplying our products or services to you. Your personal details are required in order for us to enter into a contract with you.
· Personalising and tailoring our products/ services for you.
· Communicating with you. This may include responding to emails, calls or text messages from you.
· Supplying you with information by email or post that you have opted-in to (you may unsubscribe or opt-out at any time by pressing unsubscribe link on email)
· Analysing your use of Our Site and gathering feedback to enable us to continually improve Our Site and your user experience.
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email, telephone, text message or post with information, news, and offers on our products or services. You will not be sent any unlawful marketing or spam.
WHAT PERSONAL DATA WE COLLECT
Depending upon your use of Our Site, We may collect some or all of the following data:
Visitors to our Website
We record information about how visitors interact with our website and use this data with a 3rd party service, Google Analytics. We use Google Analytics to help us to better understand what content and products visitors want. We do not use analytics data to attempt to track or identify individuals.
When you create an enquiry via our website you may provide us with your name, company name, address, email address and telephone number so that we can contact you, in relation to your enquiry, if the need arises (i.e.to fulfil our contract with you).
We will only send you marketing material with your consent and you can opt out at any time by:
· changing your marketing preferences on our website, or
· clicking the ‘unsubscribe’ link in one or our marketing emails, or
· by sending us an email.
We do not gather sensitive personal data (e.g. health, genetic, biometric data; racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sexual orientation, and criminal convictions). We expressly request that you do not provide any such sensitive data to us.
Our service does not address anyone under the age of 13 (“Children”). If you are a parent or guardian and you are aware that your child or children have provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.
DO WE SHARE YOUR DATA?
We may contract with third parties to supply products and services to you on Our behalf. These may include payment processing, advertising and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.
We currently contract with following third parties:
Third Party - SquareSpace
Personal Data – Name, Email Address, IP Address
Purpose Website Hosting
Lawful Basis – Legitimate Interest
Third Party - Google Analytics
Personal Data- Anonymised website browsing information
Purpose - To improve website content and performance
Lawful Basis- Legitimate Interests
HOW LONG WILL YOU KEEP MY PERSONAL DATA?
We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):
· 7 years to comply with UK tax law, or as long as we have your permission to keep it. Your data will be deleted if we no longer need it.
How and Where Do You Store or Transfer My Personal Data?
Some or all of your data may be stored or transferred outside of the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland and Liechtenstein). You are deemed to accept and agree to this by using Our Site and submitting information to Us. If We do store or transfer data outside the EEA, We will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA and under the GDPR. Such steps may include, but not be limited to, the use of legally binding contractual terms between Us and any third parties We engage and the use of the EU-approved Model Contractual Arrangements.
Where we transfer your data to a third party based in the US, this may be protected if they are part of the EU-US Privacy Shield. This requires that third party to provide data protection to standards similar to those in Europe. More information is available from the European Commission
Data security is of great importance to Us, and to protect your data We have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected through Our Site.
Notwithstanding the security measures that We take, it is important to remember that the transmission of data via the internet may not be completely secure and that you are advised to take suitable precautions when transmitting data to Us via the internet.
WHAT HAPPENS IF OUR BUSINESS CHANGES HANDS?
In the event that any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes.
DATA SUBJECT ACCESS REQUESTS
If you want to see a copy of any personal data we hold about you, or exercise any of your other rights, please send your request to:-
By post – to Bright Chilli, 69 Dalkeith Road, Dundee, DD4 7HF (not open to the public)
By email – to email@example.com
You also have a right to lodge a formal complaint the relevant supervisory authority (the ICO) if you think we've breached your rights.
HOW TO CONTACT US
THIRD PARTY LINKS
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our my business in a way that affects personal data protection.
Updates to our data policy will be published here. This policy was reviewed and updated May 2018.