We are over the moon that you have shown interest in our family business. Data protection is a high priority for everyone at Penningtons.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR). By means of this data protection declaration, our business would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
Name and Address of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
Pennington’s Tea & Coffee Ltd
ADDRESS: Craig Pennington, Director, 12 Kendal Business Park, Appleby Road, Kendal, Cumbria LA9 6ES.
Any data subject may, at any time, contact us with any questions and suggestions concerning data protection.
• your IP address, and details of which version of web browser you used
• information on how you use the site, using cookies and page tagging techniques
• information for the facilitation of order processing and delivery such as delivery addresses
This data can be viewed by authorised people within our business to:
• Fulfil orders placed on this website or repeat orders via our subscription services
• Improve the form and function of our website
• Understand our customers for improvement to delivery of marketing activity
1. For statistical purposes to track how many users we have and how often they visit our websites. We collect information listing which of our pages are most frequently visited, and by which types of users and from which countries.
2. We use other organisations to collect anonymous user information, sometimes through cookies and web beacons, (information embedded in images which allow them to analyse how the website is being used and the number of visitors).
You can turn cookies off but if you do this, you may not be able to use all services on our website. This is because we won’t be able to limit what you see by using cookies. However, you will still be able to see our editorial content.
It is usually possible to stop your browser accepting cookies, or to stop it accepting cookies from a particular website, but you need to be aware that you might lose some of the functionality of that website. All modern browsers allow you to change your cookie settings. These settings will typically be found in the 'options' or 'preferences' menu of your browser. Alternatively, you can revoke your consent to cookies here.
Contact possibility via the website
The website of Penningtons contains information that enables a quick electronic connection to our business, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
Legal basis for the processing
Legitimate interests – if processing is necessary for your interests, for example keeping customers appraised of new product lines relevant to their business, this is done using legitimate interests as a legal basis.
Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, in line with our internal retention policy.
Disclosing your information
We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.
You can find out what information we hold about you, and ask us not to use any of the information we collect.
GDPR and our business customers
A new piece of legislation regarding Data Protection became law In May 2018. General Data Protection Regulations (GDPR) replaced the dated Data Protection previously operated by the ICO.
We shall use appropriate technical and organisational measures to protect against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data. We will keep and use it to enable us to run the business and manage our relationship with you effectively, lawfully and appropriately, whilst we are working with you and past this point. This includes using information to enable us to comply with our customer contract, to comply with any legal requirements, pursue the legitimate interests of the Company and protect our legal position in the event of legal proceedings. If you do not provide this data, we may be unable in some circumstances to comply with our obligations and we will tell you about the implications of that decision.
The criteria used to determine the period of retention of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, in line with our internal data retention policy, as long as it is no longer necessary for the fulfillment of or initiation of the services being provided or is no longer necessary for the specific purpose for which it was obtained.
Under the GDPR data subjects have a number of rights:
• The right to be informed about whether their personal data is being processed by us;
• The right of access to the personal data that we store about them;
• The right to rectification of their personal data should it prove to be inaccurate;
• The right to erasure of their personal data under specified circumstances;
• The right to restrict the processing or their personal data under specified circumstances;
• The right to data portability – the ability to have their personal data transferred to another data controller;
• The right to object to having their personal data processed by us (under specified circumstances); and
• The right not to be subject to automated decision-making, including profiling. (Penningtons does not use automated decision-making or profiling).
More detailed information on data subjects’ rights can be obtained by contacting the company using the contact details at the top of this privacy notice.
As a data subject, if you are not satisfied with the action we have taken in relation to exercising your rights, or if you believe that your data has been misused or that we have not kept it secure, you may complain to the Information Commissioners Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate). https://ico.org.uk/concerns
Penningtons is committed to protecting your privacy and promises not to share any detailed personal information we collect with any third party.
However, as our online shop is mail order, it is necessary for us to gather certain pieces of personal information in order to fulfil our service and make your shopping experience as simple and easy as possible.
Here is a brief summary of how we collect info and use it.
The information we do collect - and how it is collected:
When you place an order, we need to know certain information. To fulfill orders we need to know your name, e-mail address or telephone number and full delivery address and billing address. We store this information securely so that it makes your online shopping quick, and effective. It also allows us to contact you should anything untoward happen with your order.
At our checkout, we ask for your credit or debit card number, expiry and start date, issue number (if applicable) and security code. We ask for this each time and do not retain in accordance with current data protection legislation. We also ask for a despatch address if you require your order to be sent as a gift, or to a place of work.
We may also use the information we collect to occasionally notify you of site updates and also seasonal offerings through the year. If you would rather not receive this information, please tick the relevant field in the 'Your Account' section.
Protecting our customers' financial information:
When you place an order with your credit or debit card, it is done using a secure connection to our payment provider. We do not take or hold your credit card details. If you would rather not send your credit/debit card details over the Internet then please contact us and place your order over the phone by calling us on +44(0) 1539 728090.
We strongly recommend that you do not email an order to us containing credit card information, because most email is un-encrypted and not secure. All our customer data held online is encrypted and held in a secure environment.
Important information about "cookies"
"Cookies" are small pieces of information that are stored by your browser on your computer's hard drive - and are required by our site so you can store items into your shopping basket. We have developed our site so that you can retain items in your shopping basket for another occasion even if you do not wish to buy at that time. Our cookies do not contain any personally identifying information.
You can disable cookies if you wish using the options in your internet browser, but you will not be able to use our online ordering service if you do.
If for whatever reason you feel that Penningtons has not adhered to the principles as stated above, please contact us.