This policy may be updated from time to time and we recommend you check this page regularly to ensure you are happy with using our website in line with our policies.
For the purpose of the Data Protection Act (the "Act"), the data controller is Candy Bar Espresso ("Candy Bar Espresso", "us", "our" or "we").
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
Candy Bar Espresso may monitor visits to the Website, in order principally, to ensure that it is easy to navigate, identify the areas that are of particular interest to visitors and generally improve the Website and services offered. The information Candy Bar Espresso collects in this process, will not identify you as an individual and it does not seek to identify individual visitors unless they volunteer their contact details through one of the forms on the Website which submits data to us.
In some circumstances, Candy Bar Espresso' records may identify organisations visiting the Website and Candy Bar Espresso may use that information in managing its relationship with those organisations, for example, in considering how to develop the services that it offers.
We may collect the following information from you regarding:
The above information may include any personal information that relates to and identifies you, including but not limited to your name, postal address, e-mail address, telephone number, and any other information collected as set out in the above list.
Candy Bar Espresso may check some of the information that you provide against third party databases to confirm that it is accurate.
We may process this information for the purpose of:
We may also use your personal information, or permit selected third parties to use your data, to provide you with information about goods and services which may be of interest to you and we or they may contact you about these by email, post or telephone.
If you prefer not to receive information from Candy Bar Espresso or from its selected third parties for marketing purposes, please tick the relevant box situated on the form on which we collect your data, (e.g. the order form or registration form) if applicable, or send an e-mail message to email@example.com at any time.
We may also gather information and statistics, for the purposes of monitoring the usage of the Website and our services and may provide such aggregate information to third parties. These statistics will not include information that can be used to identify you.
We store credit card information and personal data gathered in store or via our online store for a period of up to 7 years in line with our accounting policies. The primary reason for storing this data is to contact customers about purchases they have made (in store or online), respond to queries or discuss issues or repairs/refunds. Information such as name, postal address, telephone are also used if we send products to customers at their place of work or at home. Information gathered via our website marketing tools such as forms or social media offer the relevant information for users to decide if they would like to share data with us.
We have put in place various security procedures with regards to the Website and your electronic communications with us, as set out in this policy.
Please be aware that communications over the internet, such as emails/webmails are not secure unless they have been encrypted. Your communications may route through a number of countries before being delivered - this is the nature of the World Wide Web/internet.
We cannot accept responsibility for any unauthorised access or loss of personal information that is beyond our control.
We believe that we have appropriate policies, rules and technical measures to protect the personal data that we have under our control (having regard to the type and amount of that data) from unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction or accidental loss.
All of our employees and data processors that have access to, and are associated with, the processing of your personal information are obliged to respect the confidentiality of our visitors' information.
If you believe there has been a data breach where your personal information may have been shared or processed by unauthorised third parties you can contact us via email firstname.lastname@example.org, call us on 07786268849 or visit us in store at Candy Bar Espresso, Pipps Hill Road, Crays Hill CM11 2UJ.
To whom will your information be disclosed?
Candy Bar Espresso takes reasonable precautions to ensure that any personal information which you provide, is used only for the purposes set out in these conditions. However, the internet is not a completely secure network and Candy Bar Espresso cannot guarantee that such information will not be intercepted by other parties.
You can write to us at any time to obtain a copy of your information and to have any inaccuracies corrected. Where appropriate, you may have your personal information erased, rectified, amended or completed. Please email us to email@example.com and please quote your name and address or write to Candy Bar Espresso, Pipps Hill Road, Crays Hill CM11 2UJ. We will act on your request within one calendar month.
We should be grateful if you would also provide brief details of the information of which you would like a copy or which you would like to be corrected (this helps us to more readily locate your data).
We may require proof of your identity before providing you with details of any personal information we may hold about you. We may charge a reasonable fee to cover the administration costs involved in providing you with a copy of your information if the request is manifestly unfounded or deemed excessive.
You may disable cookie support on your browser but be aware that by doing so, you may lose certain features that require a cookie to work properly. We may use the information collected by the cookie to provide us with various statistics without identifying any individual.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org
In the event that the purposes for processing your personal information change, we will contact you as soon as practicable and seek your consent for the new purposes, where such new purposes relate to a new additional purpose for processing, which is not compatible or similar to the originally specified purposes.
The Data Protection Act 1998
Candy Bar Espresso is registered as a Data Controller under the terms of the Data Protection Act 1998 (the "Act") and we ensure we comply with all the protections the Act affords to you.
We are not responsible for the privacy policies and practices of other websites, even if you accessed the third party website using links from our Website.
We recommend that you check the policy of each website you visit and contact the owner or operator of such website if you have concerns or questions.