1. Who Are We
Our Privacy Policy covers the activities of Bobby’s Foods Limited and any subsidiaries or group companies (Bobbys Foods). The data controller is the relevant company whose services are being used (collectively referred to in this notice as “Bobby’s Foods” or “we” “our” or “us”). This policy refers to anyone trading with Bobby’s Foods, referred to as ‘customer’ within this policy.
As a company, we are committed to doing the right thing when it comes to how we collect and use customer data which includes how we store personal data. This privacy policy sets out:
- The types of personal data that we collect
- How and why we collect and use personal data
- When and why we will share personal data within our group or outside of our group of companies
- The rights and choices you have when it comes to personal data
Bobby’s Foods serve a variety of customers in different ways, this notice applies to all customers or individuals that trade or work with Bobby’s Foods.
Individuals or organisations may shop with us in a variety of ways: face-to-face with one of our sales representatives via our direct to store van sales operation or via group apps or ecommerce sites.
2. What Personal Data Do We Collect
As a customer of the Bobby’s Foods, you may be asked to provide:
- Personal details, including the name of the proposed account holder, the business address, email addresses, data of birth, photo ID (in some cases) phone numbers and title
- The names and telephone numbers of any additional card holders. You will be given an account number which identifies the customer account and used by us
- Purchase information (what a customer has bought, when and where they bought it and how they paid for it)
- Trading names, including proof of trading address and sales information will also be captured
- CCTV images of you may be captured at our premises
In addition to the above, if you shop with us online via our App or Desktop Site we may collect:
Account Password
Google analytics and information regarding URL, Java and Flash enabling, and other browser information. Information about online browsing behaviour on our websites, information about interactions with our adverts (including those shown on other organisations’ websites), information about any devices you have used to access our services (including the make, model and operating system, IP address, browser type and mobile device identifiers). Location information is based on IP address and language.
If you apply for a credit account with us, we may also require the following:
- Bank account details
- Credit history and other financial information either via credit searches that have been authorised or provided as part of an application, including information provided from the Land Registry, Companies House, or other relevant organisations
Whenever an account is used, we will collect transactional information regarding the goods purchased, payment method, date, and time of purchase.
When a customer contacts us or we contact them or a customer takes part in any promotions, competitions, or questionnaires, we may collect:
- Personal data they provide about themselves, information about our services or products including by phone, email, or post or social media channels
- Details of the emails and other digital communications we send to customers that are opened, including any links they have interacted with
- Feedback and contributions to customer surveys and questionnaires
3. Non-Customers or Members of the Public
From time-to-time we may be contacted by individuals who are not a registered customer or account holder with us. In those circumstances, we will gather sufficient information to address the query or issue (such as name, address and contact details). In some cases, we may need to pass that information on to a third party, such as a supplier (in the event of a product-related query) or a third-party advisor in order to address the matter in question. Any information obtained will be processed purely for the purpose of the single issue or query raised and will be deleted in-line with our retention policy once the matter has been closed.
4. Why and How do we use Personal Data
We collect data to ensure we can deliver the service or products to you. We hold and manage this data to allow us to:
- Manage customer accounts
- Process orders and/or refunds
- Administer loyalty schemes we may have in place
- Deliver goods that have been ordered
- Communicate with customers about their account
- Produce invoices and statements
- Consider any applications for credit
- Maintain a credit account
- Communicate with customers in emergencies, for example, a product recall
- Identify high-cash transactions and for granting credit
- Review purchase history to enhance the online or instore shopping experience via tools, for example, reviewing previous purchases
- Market applicable products or services
- Ensure the security and safety of our customers and colleagues through CCTV imagery
We need to process personal data to trade with our customers, providing goods and/or services requested to fulfil our obligations as a supplier. We use this data to continually review our product offerings, as well as reviewing interactions with customers both in-store and online, to improve our performance.
We also have an obligation to ensure that our services are safe. Required data may be processed to detect and prevent fraud and/or other crimes – this also includes misuse of our services.
5. Marketing, Promotions, Competitions and Research – Customer Preferences
We communicate with customers to promote offers, promotions and competitions, as well as obtaining feedback. We may do this via email, text, phone, post or via social media channels.
When registering with us, customers both online and in-store, are asked about their marketing preferences. They have the right to change this by contacting us via email, phone, or in-store.
It is also important we improve our services and offerings by gaining feedback from customers. We will from time-to-time communicate to give the opportunity to feedback to us.
We may at times supply details to our selected third-party partners so they can share details of information or products/services that we think could be of interest to customers.
6. Sharing of Data
We may share the personal data we collect with other companies within the World of Sweets Group, of which Bobby’s is a part. For example, customer details from our direct-to-store customers may be shared with our warehouse to facilitate order fulfilment.
We also share data with some third-party organisations, some of this data is anonymised (pseudonymised or anonymised where possible) but in some instances, we must share personal data, some of these have already been set out within this policy but for clarity, we may do this:
- To fulfil orders by passing details onto our transport partners to deliver orders
- To process payments from customers through our third-party partners e.g. credit card payment processing
- To provide improved service of our websites or stores by working with third parties or suppliers to enhance product offerings
- To allow for investigations or audits to take place, e.g. product recalls, complaints or HMRC
- To market products or services that may be of interest to you from third parties.
- To provide Symbol Groups with details of their members
- To allow us to market our services or products to customers
We work with various service providers to carry out certain functions on our behalf, these may be companies that provide technology solutions to us, the processing of payments, credit checking or provide us with market research data. We only share the necessary personal data to enable these partners to provide their services.
We may also share data for legal reasons in certain circumstances, such as:
- If a public authority states we must share data with them, or if by law we have to do so
- For legal proceedings in which we need to defend, establish, or exercise our legal rights, this may also be for the purposes of fraud or fraud detection
- If any organisations in which we sell or transfer any of our subsidiary businesses to (including negotiating with), they may use personal data in the same way as set out by us
7. Protecting Personal Data
We take the security of personal data seriously and have implemented measures to protect and manage the personal data of our customers. We:
- Use measures we have deemed necessary and appropriate to protect data both electronically and physically
- Have implemented measures with the goal of increased network and data security regarding digital infrastructure
- Have implemented measures to protect data stored on-site with physical security at the forefront
- Use appropriate security protocols when sharing data with third parties, suppliers, and service providers
Whilst we take technical, organisational, and physical measures to try and ensure data is kept secure, we cannot guarantee the security of any data that a customer may transfer or send to us.
8. Cookies and Similar Technologies
We use Cookies and similar technologies, such as tags and pixels (“Cookies”), to personalise and improve customers’ experience as they use our websites to provide them with relevant online advertising. This section provides more information about Cookies, including how we use them and how you can exercise your choices about our use of Cookies. Cookies are small data files used for a variety of reasons including security e.g. to enable you to sign in, collate and manage site errors, store information (customers’ shopping baskets online or to remember individuals’ preferences), to track and monitor analytics from the sites e.g. to monitor promotions and offers to understand their success and to enable payments. Cookies also allow us to ensure the performance of our website is at its best and monitor issues and downtime.
If you choose to disable some or all Cookies, you may not be able to make full use of our websites. For example, you may not be able to add items to a shopping basket or proceed to checkout.
9. Your Rights
Under the General Data Protection Regulation, you have the right to see the personal data we hold about you. This is called a Subject Access Request.
If you would like a copy of the personal data we hold about you, please write to: Zach Towers, Data Protection Officer, Bobbys Foods Limited, 25 Jubilee Drive, Loughborough, LE11 5TX or by emailing: hr@bobbysfoods.co.uk
We want to make sure that the personal data we hold about you is accurate and up to date. If any of the details are incorrect, please let us know and we will amend them.
10. Changes to This Privacy Notice
We reserve the right to make changes to this Privacy Notice from time-to-time, so please take the time to review it periodically.