Introduction

This privacy policy describes how Leeds Bread Co-op protects and makes use of the information you give us when you request services from us, in line with the General Data Protection Regulation 2018. If you are asked to provide information to us, it will only be used in the ways described in this policy.

We may update this policy from time to time so please check this policy on our website occasionally to ensure that you’re happy with any changes. When you request services from us, you’re agreeing to be bound by this policy. This privacy policy was last updated on: 24th May 2018.

If you have any questions about this policy, please email info@leedsbread.coop or write to us at Unit 11, Penraevon Trading Estate, Penraevon Avenue, Leeds, LS7 2AW.

What data we gather

We may collect the following information in order to provide the services you request:

  • – Name
  • – Contact information including email address, postal address and phone number
  • – Relevant information about how to access your property in order to deliver products to you
  • – Bank account details (should we need to process refunds directly to you)
  • – Website usage data (when we launch our new website later this year)
  • – Financial transactions made through PayPal or GoCardless, third party processors who specialise in the secure online capture and processing of financial transactions, are held by them and not by Leeds Bread Co-op.

How we use this data

The data we gather in this way is used to ensure we can deliver our services to you including to:

  • – Fulfil orders
  • – Contact you in response to a specific enquiry
  • – Carry out our obligations arising from any contracts entered into by you and us
  • – Send you communications about our business which are essential for us to fulfil our obligations to you and, if you have requested them, updates about our business via Mailchimp newsletters

We review our retention periods for personal information on a regular basis. We will hold your personal information on our systems for as long as is necessary for the relevant activity as set out in our data protection policy, or as long as is set out in any relevant agreement you hold with us.

Who has access to your information?

We will not sell or rent your information to third parties.

We will not share your information with third parties for marketing purposes.

Third Party Service Providers working on our behalf:

We may pass your information to our third party service providers for the purposes of completing tasks and providing services to you on our behalf (for example PayPal to process payments and MailChimp to send you mailings). However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service. Please be reassured that we will not release your information to third parties for them to use for their own direct marketing purposes.

MailChimp

Any newsletters you have opted to receive from us are sent using MailChimp, an email marketing service. Your email address will be transferred to and stored with MailChimp only to allow us to send you these emails, and to track interactions. We try to keep these newsletters to a minimum, but you can tell us at any time if you would prefer to stop receiving these communications. To read more about how MailChimp stores and uses your information, click here for the full MailChimp Privacy Policy.

PayPal

Financial transactions made through this website are made via PayPal, a third party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions. This means Leeds Bread Co-op will not receive or store any of your financial information. If you have any questions regarding secure transactions, please contact us, or to read more about how PayPal stores and uses your information, click here for the full PayPal Privacy Policy.

GoCardless

Financial transactions made through this service are made via GoCardless, a third party payment processor, who specialises in the secure online capture and processing of financial transactions. This means Leeds Bread Co-op will not receive or store any of your financial information. If you have any questions regarding secure transactions, please contact us, or to read more about how GoCardless stores and uses your information, click here for the full GoCardless Privacy Policy.

Quickbooks Online by Intuit

We use Intuit’s Quickbooks Online to store and process information about your orders. This includes customer details, invoices, statements and payment terms. This data feeds into financial reports for our business in line with usual accounting practice. We do not share this information with anyone outside our Co-op unless we are legally obliged to do so. Click here to see the full Intuit Privacy Policy.

Mountain Stream

The software we use to store and process information about your wholesale order requirements is called Mountain Stream. If you are a subscriber with us, then your order information is processed securely through our website and on our servers (see below). Click here to see Mountain Stream’s Privacy Policy.

Website and Bread Subscriptions

Our new website is currently under development. We will amend this policy accordingly and contact you with further information in due course. In the meantime, our existing website collects data relating to bread subscriptions which is processed and stored securely through our servers and through the use of Cookies. Our website operates using WordPress. Click here to see WordPress’s Privacy Policy.

Applying to work with us

When you apply for any of our vacancies, we store the information you provide on your application and in your interview on our secure servers for the time required to complete our recruitment process and for a period of 1 year afterwards for the purpose of any future recruitment rounds and in line with statutory recommendations. We will only ask you for information relevant to the role and to meet our obligations as an employer. If you would prefer us not to do this, please just let us know when you apply. If your application is successful and you come to work with us, we will process and store your personal information in accordance with our data protection policy.

Security precautions in place to protect the loss, misuse or alteration of your information

We don’t ask you for personal information unless we truly need it. When you share your personal information with us, we take steps to ensure that it’s treated securely. We follow stringent procedures to ensure we work with all personal data in line with the General Data Protection Regulation 2018. Any sensitive information is stored securely on our servers and accessed via Nextcloud, both of which are fully GDPR compliant. We don’t store personal information on our servers unless required for the on-going operation of our services. We have taken all reasonable steps to ensure that access to the data held on these servers is limited to those members of staff who need your information as part of their role at Leeds Bread Co-op. Everyone who works in our Co-op is expected to work within GDPR guidelines and this forms part of their job descriptions.

How you can access and update the information we hold about you

We will never lease, distribute or sell your personal information to third parties except to comply with the law, develop our products, or protect our rights. Any personal information we hold about you is stored and processed under our data protection policy, in line with the General Data Protection Regulation 2018.

The accuracy of your information is important to us. If you change your contact details, or any of the other information we hold about you or your organisation, please email us at: info@leedsbread.coop or write to us at Unit 11, Penraevon Trading Estate, Penraevon Avenue, Leeds, LS7 2AW.

You have the right to ask for a copy of the information Leeds Bread Co-op holds about you, known as making a Subject Access Request (we may charge £10 for information requests to cover our costs in providing you with these details). To do this, email info@leedsbread.coop or write to us at Unit 11, Penraevon Trading Estate, Penraevon Avenue, Leeds, LS7 2AW.

You have the right to have personal data erased if we are no longer required to hold it by law. To make such a request, email info@leedsbread.coop or write to us at Unit 11, Penraevon Trading Estate, Penraevon Avenue, Leeds, LS7 2AW.