Key summary
This Privacy Notice applies to users of our website (www.ormobakery.co.uk) (the ‘Website’), individuals who submit general enquiries or complaints through the Website or who contact us by phone, social media or email. We take your privacy very seriously. We ask that you read this Privacy Notice carefully as it contains important information about our processing and your rights.
We use cookies which collect information in relation to your use of the Website to improve the contents and usability of our Website. For further information about our cookies, please refer to our Cookies Policy.
This Privacy Notice explains what data we process, why we process it, how it is legal and your rights in relation to your personal data.
ABOUT US AND THIS NOTICE
This Privacy Notice is provided by Hovis Limited (registered in England and Wales with company number 08846838) whose registered address is Hovis Limited, The Lord Rank Centre, Lincoln Road, High Wycombe, Buckinghamshire, HP12 3QS, United Kingdom (‘we’, ‘us’ or ‘our’). We are a ‘controller’ for the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (‘UK GDPR’) and the Data Protection Act 2018 (‘Data Protection Laws’). We are registered with the Information Commissioner’s Office (‘ICO’) as a data controller with reference ZA076053.
Hovis is owned by Endless LLP, who shall act as a data controller of any Hovis data that is provided in connection with their investment and ongoing relationship with Hovis. Personal data will be processed by Endless LLP in accordance with the Endless Portfolio Privacy statement, accessible here: https://www.endlessllp.com/portfolio-privacy-statement. Endless LLP is a company incorporated in England and Wales with Company Reg. No. OC316569.
How to contact us
If you have any questions about this Privacy Notice, how we handle your personal data, or want to exercise any of your rights, please contact:
● Head of Privacy: Clive Browne
● Address: Hovis Limited, The Lord Rank Centre, Lincoln Road, High Wycombe, HP12 3QS
● Telephone number: 01494 428000
● Email: Data.Protection@hovis.co.uk
Changes to the Privacy Notice
We may change this Privacy Notice from time to time. You should check this Privacy Notice occasionally to ensure you are aware of the most recent version that will apply each time you access this Website. You can see when this Notice was last updated by checking the “last updated” date displayed at the bottom of the Notice.
WHAT PERSONAL DATA DO WE COLLECT AND WHY?
Personal data provided by you:
● The majority of the personal data we process about you comes directly from you, where you engage with us through the Website enquiry or complaints process, or contact us via other means.
Information we automatically collect about you:
● When you use or interact with the Website, we may automatically collect information from your device, such as your IP address and information about your visit (including the date and time of your visit, page response times and length of visit to certain pages).
We may process the following personal information about you when you contact us by filling in our Website enquiry form and/or complaints form, call us with queries or complaints or contact us via social media, in order to communicate with you and respond to the enquiry and/or complaint you have made:
• your name;
• address;
• email address;
• telephone number;
• nature of your message, enquiry or complaint;
• social medial handle or username or any information you have publicly posted on such accounts which may relate to us; and
• anything else that you provide to us.
We may also collect the personal information listed above when you contact us, send us feedback or complete customer satisfaction surveys which we use to improve our services and products in the future.
We record all calls made to and from our contact centre so that we can use them for training our operatives and to ensure high standards of customer service.
We may collect and store personal information relating to your visits to our Website (such as your IP address and traffic data) and the resources that you access.
Sensitive personal data provided by you
We do not collect any sensitive personal data about you unless you decide to provide it to us and give us your explicit consent to process this. Where you have provided us with your consent, you may withdraw this at any time by contacting us on the details above. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal.
Personal information about other individuals
If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on their behalf and has agreed that you can.
WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
We process your personal data on the basis that it is in our legitimate interests to:
● respond to enquiries, complaints and requests in order to serve our customers or potential customers;
● provide and improve our customer service and support;
● improve our products and services and grow our business;
● ensure the continued operation of the business in a commercial and compliant manner; and
● administer the Website and monitor how it is used, in order to improve it.
We may also collect and process your personal data for compliance with any legal or regulatory obligation we may have.
Please be aware that you have the right to object to the processing of your data in relation to the legitimate interests identified – see below for further information about your rights.
WHO WILL HAVE ACCESS TO YOUR PERSONAL DATA?
Like any business, we use service providers to operate our Website, such as website hosting and enquiry functionality. Some of these service providers will process your personal data as part of the services they offer to us. We take steps to ensure that our service providers treat your data in accordance with the law, only use it in accordance with our contract with them and keep it secure.
We also share data as necessary to enforce our legal rights, defend legal claims and if required by law to disclose to government bodies, courts, police, law enforcement agencies or regulators.
We may share your personal data with any actual or potential buyers or professional advisers in connection with any actual or proposed purchase, merger or acquisition of any part of our business or any corporate restructuring.
How we keep your data secure
We strive to keep your data secure and have implemented appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data. We follow recognised industry practices for protecting our IT environment and physical facilities.
International data transfers
We will not transfer your personal data outside of the UK.
WHEN WILL WE DELETE YOUR DATA?
The table below provides details about how long we will process your data.
For all other types of personal data, we will keep this for so long as is reasonably necessary for the purpose for which it was obtained, and in accordance with our legal obligations.
YOUR RIGHTS
As a data subject, you have the following legal rights:
● Right of access to personal data relating to you.
● Right to correct any mistakes in your information.
● Right to prevent your personal data being processed in some circumstances.
● Right to object to processing of your data where it is processed on the grounds of legitimate interests.
● Right to erasure in some circumstances.
If you would like to exercise your rights, please contact us at the details set out above in the section headed “How to contact us”.
We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months.
Please note that exceptions apply to some of these rights which we will apply in accordance with the law.
What will happen if your rights are breached?
You may be entitled to compensation for damage caused by contravention of any Data Protection Laws.
Complaints to the regulator
If you have any complaints about how we process your personal data, please let us know as soon as possible. You also have the right to complain to the ICO. Information about how to do this is available on its website at www.ico.org.uk.
Last updated: [29th November 2023].
