Introduction

Burton’s Biscuit Company (a trading name of Burton’s Foods Limited) (“we”, “us” or “our”) is committed to protecting and respecting your privacy.

This policy (together with our terms of use at http://www.burtonsbiscuits.com/wp-content/uploads/2017/08/NEW-Standard-Terms-and-Conditions-of-Purchase-May-2018.pdf , our cookies policy at http://www.burtonsbiscuits.com/policies/cookies-policy/ and any other documents referred to in those documents) sets out the basis on which any personal information we may collect from or about you, through the website (“Website”) or when you otherwise contact us will be processed by us.

We will be the data controller of your personal data which you provide to us or which is collected by us via our Website. This means that we are responsible for deciding how we hold and use personal information about you and that we are required to notify you of the information contained in this Privacy Policy (“Policy”). It is important that you read this Policy so that you are aware of how and why we are using such information and how we will treat it. You can contact us using the details provided at the end of this Policy in the “Contacting Us” section.

This Website may, from time to time, contain links to other websites. Please note that we are not responsible for the privacy practices of other websites. This Policy applies solely to information collected by this Website.

If we change this Policy we will post changes on this page and we will email you to inform you of any material changes. If you are not happy with any change to the Policy, we must ask that you stop using the Website.

Personal information we collect from you and how we use it

We will collect various types of personal information from you when use our Website or when you otherwise contact us. Further details of the personal data we use and how we use it are set out below.

In this section, we have indicated with asterisks whether we need to process your personal data:

  • * = to enter into and/or to perform our contract with you to provide the products or services you request from us;
  • ** = to pursue legitimate interests of our own or of third parties, provided your interests and fundamental rights do not override those interests;
  • *** = to enable us to comply with our legal obligations; and/or
  • ****= with your consent.

When you apply for a job advertised on our Website

To apply for a job advertised on our Website, you will be directed to an online applicant tracking system hosted by Easyweb Recruitment (a trading style of Verticality Ltd).You are required to give your contact information (full name, address, email address, telephone number, CV, current salary, expected salary, employment status, current employer, current job title, notice period, availability, RTW status, disability defined by equality act 2010, diversity information, gender, religion, ethnic origin, and you may be invited to send us your curriculum vitae. Any information you send us for the purpose of a job application will be used for that purpose only and will be treated by us as confidential. We will retain this data for one calendar year.****

When you contact us

When you contact us using the ‘contact us’ form on the Website, we will collect from you your name, company name (if relevant), telephone number, email address and any message you leave. We will only use and keep these details for the purpose of and duration of dealing with your enquiry **.

Competitions

We may ask you for information when you enter any competition or promotion sponsored by us such as your name, age and contact details. This data may be shared with a third party agency for prize fulfilment purposes only. We will only use the data for the purpose of the competition/promotion and the data will then be permanently deleted.****

Automatic Personal Data Collection

When you visit our Website we will automatically collect technical information including, where available, your IP address, operating system and browser type.

We will use the above information in order to:

  • to administer our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes to comply with our legal obligations**/***;
  • to improve our Website to ensure that content is presented in the most effective manner for you and for your computer / device**; and
  • as part of our efforts to keep our Website safe and secure to comply with our legal obligations**/***.

We will not carry out any solely automated decision-making using your personal data.

Other information

We may also collect and disclose aggregate information to third parties. This information will not include data that can be used to identify any individual and is used for statistical analysis and strategic development purposes.

Change of Purpose

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will usually notify you and we will explain the legal basis which allows us to do so.


 

Transferring information overseas

In instances where to our knowledge personal data collected via the website is transferred or accessed outside of the EEA we will ensure safeguards are put in place with the service provider based outside of the EEA.

Disclosure of your information

We will share your data with Parade Brand Support (trading name of Pinnacle Supplies Limited), our consumer care services provider. When you contact us by telephone, email or post, your enquiry may be dealt with by Parade Brand Support on our behalf, where they may collect your data.

We enter into agreements with such third parties to ensure that they respect the security of your data and use it only in accordance with data protection laws.

We may also disclose your personal information to third parties:

  • In the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets (and their advisors);
  • If Burton’s Biscuit Company or substantially all of its assets are acquired by a third party, in which case personal information held by it about its customers will be one of the transferred assets;
  • If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Burton’s Biscuit Company, our customers, or others.; or
  • If we are obliged to do so by law, and/or pursuant to government or regulatory requests, by a law enforcement agency requesting it in connection with the commission of any offence (once we are reasonably satisfied as to the circumstances surrounding the request); to protect our users and ourselves or to ensure the proper operation of our systems.

Your rights

Data protection laws provide you with the following rights to:

 

  • request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it;
  • request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;

 

  • request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below);

 

  • request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it;

 

  • request the transfer of your personal information to another party; and
  • complain to the supervisory authority, which in the United Kingdom is the Information Commissioner’s Office.

 

You also have the right to object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

 

You will not have to pay a fee to access your personal information (or to exercise any of the other rights above). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

 

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If we rely on your consent to process your personal data, for example if we need your consent to send you direct marketing, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us using any of the details set out below in the “Contacting Us” section. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

Contacting Us

Questions, comments and requests regarding this Policy are welcomed and should be sent by email to dpo@burtonsbiscuits.com or by post addressed to Head of IS, Burton’s Biscuit Company, PO Box 39, Devonshire Road, Blackpool, FY3 7AN.

You can obtain further information about data protection and privacy laws by visiting the Information Commissioner’s website at: https://ico.org.uk