Privacy Policy

Privacy Policy

About this policy

This privacy policy sets out how Really Awesome Coffee and their franchise partners use and protect any information that you give us and your rights in relation to it. We will always comply with the General Data Protection Regulation (GDPR) when dealing with your personal data.

Really Awesome Coffee and their franchise partners are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this privacy statement.

In this policy “we”, “us” and “our” refer to Haswell Enterprises Ltd. (trading name: Really Awesome Coffee) and the independently owned businesses that form their franchise network.

Really Awesome Coffee may change this privacy policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 24th May 2018.

What personal data we collect, why we collect it and how we use it

We collect details of parties who have requested information regarding our various products and services in order that we can provide relevant information regarding these products and services. This data is collected via direct enquiries by email or telephone or post, via forms on our website, via signup forms hosted by our data processors, or via third party websites on which our products and/or services are advertised and to whom you have submitted an enquiry about one of these products and/or services.

We also collect and process data relating to our customers and suppliers that may be classed as personal.

The general categories of personal data we collect and the legal bases holding and processing that data are laid out below.

We may process data about your use of our website and services (“usage data”). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of analysing the use of the website. The legal basis for this processing is our ‘legitimate interest’.

We may process information contained in any enquiry you submit to us regarding goods and/or services (“enquiry data”). The enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you. The legal basis for this processing is your ‘legitimate interest’ in the products and/or services and/or ‘consent’ (which can be withdrawn at any time).

We may process information relating to our business (customer & supplier) relationships, including contact information (“customer relationship data”). This relationship data may include your name, your employer, your job title or role, your contact details, and information contained in communications between us and you or your employer. The source of the relationship data is you or your employer. The relationship data may be processed for the purposes of managing our relationships with customers & suppliers, communicating with customers & suppliers, keeping records of those communications and promoting our products and services to customers. The legal basis for this processing is to fulfil a ‘contract’ for the provision and/or receipt of products and/or services and/or ‘consent’ (which can be withdrawn at any time).

We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (“notification data”). The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is your ‘legitimate interest’ in the products and/or services and/or ‘consent’ (which can be withdrawn at any time).

We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our ‘legitimate interests’, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.

We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our ‘legitimate interests’.

In addition to the specific purposes listed for which we may process your personal data we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your ‘vital interests’ or the ‘vital interests’ of another natural person.

Please do not supply any other person’s personal data to us, unless we prompt you to do so.

Personal data collected by us as the data controller is held by us or one of our data processors in order that it may be processed in accordance with this privacy policy.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.

How we protect your personal data

We are committed to ensuring that your information is secure and have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction.  For any payments which we take from you online we will use a recognised online secure payment system.  Please note that internet transmissions in any form can never be guaranteed to be 100% secure. We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.

Cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. The file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies. You can read our full cookie policy here.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

How long do we keep your information?

Personal data that we process for any purposes shall not be kept for longer than is necessary for those purposes.

We may also retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

We will review your personal data every year to establish whether we are still entitled to process it. If we decide that we are not entitled to do so, we will stop processing your personal data other than retaining it in an archived form in order to be able to comply with future legal obligations.

We securely destroy all financial information once we have used it and no longer need it.

You have rights under the GDPR to:

  • access your personal data
  • be provided with information about how your personal data is processed
  • have your personal data corrected
  • have your personal data erased in certain circumstances
  • object to or restrict how your personal data is processed
  • have your personal data transferred to yourself or to another business in certain circumstances.

If you wish to exercise any of these rights please contact us by one of the following methods. If you believe your data is held by one of our franchise partners please inform us which franchise partner and we will ensure your request is processed by the correct data controller.

You have the right to take any complaints about how we process your personal data to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.