Our contact details
Name: Gwendraeth Organic CIC (trading as Banc Organics)
Address: Penlan Uchaf, Kidwelly Carmarthenshire SA17 5AF
The type of personal information we collect
We currently collect and process the following information:
• Name, address, email address and other contact details.
• Records orders and financial transactions we have with you.
• Emails and messages from you.
• Note: Credit/debit card details stored on the open food network site and our card payment site are NOT accessible to or stored by us.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
• When you make an order from our webshop and provide delivery details.
• When you send us an email or contact us.
• When you supply it through a contact form.
We use the information that you have given us in order to
a) fulfil orders, make deliveries, keep financial/ transaction records and other legal reasons such as food safety
b) inform you of our products, services and information about our organisation and activities.
We will not share your information with anyone else or any other organisations without your express permission
Under the General Data Protection Regulation (GDPR), we rely on different legal basis depending on the nature and purpose of the information retained.
Transaction, delivery and financial records will be retained for Legal Obligation, Contract or Vital Interest. We will keep this information for as long as necessary, but no longer.
The legal basis for keeping and processing contact and marketing information will depend on how we obtained that information:
(a) Legitimate Interest.
When you contact us or buy from us will assume that you are interested in our organisation, it’s mission and the products we sell. We will keep and use your information for up to 6 months on this basis. If you do not contact us or buy from us again for 6 months we will remove that information, we will give you the option at that point to supply your Consent to our continuing to hold and use your data.
(b) Your Consent.
If you have specifically given us you consent to hold and prosses your data for these purposes we will assume your consent continues until you tell us otherwise. You are able to remove your consent at any time. You can do this by contacting firstname.lastname@example.org
How we store your personal information
Your information is securely stored on a cloud-based server with a secure password and on our PC’s where necessary. Only employees with a legitimate reason will be allowed to access this data. All employees who process your data will be trained to keep it secure.
We keep all information except records that we are legally obliged to retain such financial transactions for up to one year. We will then dispose your information by permanently deleting it from all servers and PCs that we use.
We maintain a contact list to inform people of our activities, news and events as well as let to let people know about our products and offers.
We will assume that if you purchase a veg box from us you would like to be on that list but you have the right to opt out at any point. If you have not purchased from us in six months we will remove your name from this list unless you opt to remain on that list. To opt out contact: email@example.com
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase some of your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at firstname.lastname@example.org if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at [Insert your organisation’s contact details for data protection queries].
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk