Introduction
This privacy policy describes how Leeds Bread Co-op protects and makes use of the information you give us when you request services from us, in line with the General Data Protection Regulation 2018. If you are asked to provide information to us, it will only be used in the ways described in this policy.
We may update this policy from time to time so please check this policy on our website occasionally to ensure that you’re happy with any changes. When you request services from us, you’re agreeing to be bound by this policy.
This privacy policy was last updated on: 2nd December 2019
If you have any questions about this policy, please email info@leedsbread.coop or write to us at Unit 11, Penraevon Trading Estate, Penraevon Avenue, Leeds, LS7 2AW.
What data we gather
We may collect the following information in order to provide the services you request:
- Name
- Contact information including email address, postal address and phone number
- Relevant information about how to access your property in order to deliver products to you
- Bank account details (should we need to process refunds directly to you)
- Website usage data
- Financial transactions made through PayPal or GoCardless, third party processors who specialise in the secure online capture and processing of financial transactions, are held by them and not by Leeds Bread Co-op.
How we use this data
The data we gather in this way is used to ensure we can deliver our services to you including to:
- Fulfil orders
- Contact you in response to a specific enquiry
- Carry out our obligations arising from any contracts entered into by you and us
- Send you communications about our business which are essential for us to fulfil our obligations to you and, if you have requested them, updates about our business via Mailchimp newsletters
We review our retention periods for personal information on a regular basis. We will hold your personal information on our systems for as long as is necessary for the relevant activity as set out in our data protection policy, or as long as is set out in any relevant agreement you hold with us.
Who has access to your information?
We will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes.
Third Party Service Providers working on our behalf:
We may pass your information to our third party service providers for the purposes of completing tasks and providing services to you on our behalf (for example PayPal to process payments and MailChimp to send you mailings). However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service. Please be reassured that we will not release your information to third parties for them to use for their own direct marketing purposes.
That Old Chestnut
If your order That Old Chestnut products from us, we will share your data shared with That Old Chestnut for the purposes of our business collaboration and in line with our contract terms with That Old Chestnut. Click here to see That Old Chestnut’s Privacy Policy.
MailChimp
Any newsletters you have opted to receive from us are sent using MailChimp, an email marketing service. Your email address will be transferred to and stored with MailChimp only to allow us to send you these emails, and to track interactions. We try to keep these newsletters to a minimum, but you can tell us at any time if you would prefer to stop receiving these communications. To read more about how MailChimp stores and uses your information, click here for the full MailChimp Privacy Policy.
PayPal
Financial transactions made through this website are made via PayPal, a third party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions. This means Leeds Bread Co-op will not receive or store any of your financial information. If you have any questions regarding secure transactions, please contact us, or to read more about how PayPal stores and uses your information, click here for the full PayPal Privacy Policy.
GoCardless
Financial transactions made through this service are made via GoCardless, a third party payment processor, who specialises in the secure online capture and processing of financial transactions. This means Leeds Bread Co-op will not receive or store any of your financial information. If you have any questions regarding secure transactions, please contact us, or to read more about how GoCardless stores and uses your information, click here for the full GoCardless Privacy Policy.
Eventbrite
We use Eventbrite to manage our bread classes. Leeds Bread Co-op does not receive or store any of your financial details. For full details of Eventbrite’s legal terms, including their terms of service and privacy policy please click here.
Quickbooks Online by Intuit
We use Intuit’s Quickbooks Online to store and process information about your orders. This includes customer details, invoices, statements and payment terms. This data feeds into financial reports for our business in line with usual accounting practice. We do not share this information with anyone outside our Co-op unless we are legally obliged to do so. Click here to see the full Intuit Privacy Policy.
Cybake by RedBlack Software
The software we use to store and process information about your wholesale order requirements is called Cybake, operated by RedBlack Software. If you are a subscriber with us, then your order information is processed securely through our website and on our servers (see below). Click here to see the full RedBlack Software Privacy Policy.
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. Further information about Google’s privacy policy may be obtained from http://www.google.com/privacy.html.
WordPress
Our website collects data relating to bread subscriptions which is processed and stored securely through our servers and through the use of Cookies. Our website operates using WordPress. Click here to see WordPress’s Privacy Policy.
Woocommerce
Our online shop operates using Woocommerce. In order to process your purchases through Woocommerce we collect your name, phone number, billing address, and order details. Your credit card number and security code are not stored on the website. Woocommerce payment gateway plugins are designed to ensure credit card data never enters or passes through your website’s database. For more information please click here
Stripe
All purchase made via our online shop are processed using Stripe. To read Stripe’s privacy policy please click here.Please note, if you are buying a subscription Stripe will create a special payment token for future payments
iZettle
We use iZettle to take card payments in the bakery shop. We do not retain any of your card details, and if you opt to have an email receipt sent to you, we do not add your email address to a mailing list. To read iZettle’s Privacy Policy, please click here: https://www.izettle.com/gb/privacy-policy
Applying to work with us
When you apply for any of our vacancies, we store the information you provide on your application and in your interview on our secure servers for the time required to complete our recruitment process and for a period of 1 year afterwards for the purpose of any future recruitment rounds and in line with statutory recommendations. We will only ask you for information relevant to the role and to meet our obligations as an employer. If you would prefer us not to do this, please just let us know when you apply. If your application is successful and you come to work with us, we will process and store your personal information in accordance with our data protection policy.
Security precautions in place to protect the loss, misuse or alteration of your information
We don’t ask you for personal information unless we truly need it. When you share your personal information with us, we take steps to ensure that it’s treated securely. We follow stringent procedures to ensure we work with all personal data in line with the General Data Protection Regulation 2018. Any sensitive information is stored securely on our servers and accessed via Nextcloud, both of which are fully GDPR compliant. We don’t store personal information on our servers unless required for the on-going operation of our services. We have taken all reasonable steps to ensure that access to the data held on these servers is limited to those members of staff who need your information as part of their role at Leeds Bread Co-op. Everyone who works in our Co-op is expected to work within GDPR guidelines and this forms part of their job descriptions.
How you can access and update the information we hold about you
We will never lease, distribute or sell your personal information to third parties except to comply with the law, develop our products, or protect our rights. Any personal information we hold about you is stored and processed under our data protection policy, in line with the General Data Protection Regulation 2018.
The accuracy of your information is important to us. If you change your contact details, or any of the other information we hold about you or your organisation, please email us at: info@leedsbread.coop or write to us at Unit 11, Penraevon Trading Estate, Penraevon Avenue, Leeds, LS7 2AW.
You have the right to ask for a copy of the information Leeds Bread Co-op holds about you, known as making a Subject Access Request (we may charge £10 for information requests to cover our costs in providing you with these details). To do this, email info@leedsbread.coop or write to us at Unit 11, Penraevon Trading Estate, Penraevon Avenue, Leeds, LS7 2AW.
You have the right to have personal data erased if we are no longer required to hold it by law. To make such a request, email info@leedsbread.coop or write to us at Unit 11, Penraevon Trading Estate, Penraevon Avenue, Leeds, LS7 2AW.
