UCC Europe Limited - privacy notice for ucc-coffee-direct.co.uk (the “Website”)

Last updated: 09.02.21

This is the Privacy Notice of UCC Europe Limited (company number 08016911) whose registered office is at 8th Floor, 20 Farringdon Street, London, EC4A 4AB (“UCC”, “we”, “us” or “our”) and sets out how we collect and process your personal data in connection with the Website. This Privacy Notice also provides certain information that is legally required and lists your rights in relation to your personal data. Please read this Privacy Notice to understand how we may use your personal data.

Please note that this privacy notice relates only to the Website and any personal data we obtain through your use of the Website. Other websites owned and operated by us or our group companies may have their own separate privacy notice which will apply to your use of those websites.

We are committed to protecting your privacy and security. We will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

Personal data - what is it and what do we collect

Personal data is any information about you (as a customer of our Website) that enables you to be identified.

We may collect some or all of the following personal data: name; email address; home address; phone number; mobile number; date of birth; account and profile data (e.g. username and password, purchase history and feedback); information technology data relating to your use of our Website (e.g. internet protocol (IP) address, login data, traffic data, weblogs and other communication data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our Website); and personal data which relates to your advertising preferences, such as information about your preferences in receiving marketing materials from us and our third parties and your communication preferences.

Where we get your personal data from

We obtain your personal data from the following sources:

• Directly from you, via our Website or by telephone or email. This could include personal data which you provide when you: place an order for our products or services; create an account on our Website; or enter into a competition or promotion;

• Via automated technologies, such as cookies, server logs and other similar technologies. We may automatically collect information technology data (as listed above) about your equipment, browsing actions and patterns by using cookies, server logs and other similar technologies. We may also receive information technology data about you if you visit other websites employing our cookies. Please see our cookie section below for further details; and

• From someone else, such as: analytics providers (such as Google Analytics or similar); advertising networks; providers of technical, payment and delivery services (such as Shopify); providers of social media platforms (such as Facebook, Twitter and Instagram) for example where you share our content through social media, for example by liking us on Facebook, following or tweeting about us on Twitter.

How we use personal data

We must always have a lawful basis for using personal data. This may be because our processing of personal data is necessary in order to perform our contractual obligations to you (e.g. to fulfil orders you make), to comply with our legal obligations, for the establishment, exercise or defence of legal claims or for the pursuit of our legitimate interests. In certain circumstances we will ask for your consent to allow us to process your personal data (e.g. for marketing purposes or where we process personal data as a result of cookies or other similar technologies we use). Your personal data may be used for one of the following purposes:

• Providing and managing your account and orders

• Supplying our products and/or services to you

• Personalising and tailoring our products and/or services for you

• Improving our Website and our customer offering

• Communicating with you

• Marketing by email, phone, text message, post, offers, news promotions and other activities

Where we ask for your consent you will always have the opportunity to opt out.

Who we share your personal data with

We may disclose your personal data to:

• our group companies and affiliates or third party data processers who may process data on our behalf to enable us to carry out our usual business practices. Any such disclosure will only be so that we can process your personal data for the purposes set out in this Privacy Notice. For example, we use Shopify to process your personal data in connection with the purchases you make via our Website and you can read more about their security practices here: https://help.shopify.com/manual/your-account/GDPR;

• HMRC, legal and other regulators or authorities, including those who request your personal data or to report any potential or actual breach of applicable law or regulation;

• law enforcement agencies, courts or other relevant party, to the extent necessary for the establishment, exercise or defence of legal rights;

• third parties where necessary for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties;

• third parties operating plugins or content (such as Facebook, Twitter, Instagram) on our website which you choose to interact with.

International transfers of your personal data

It is possible that personal data we collect from you may be transferred, stored and/or processed outside of the UK.

In connection with such transfers we will ensure that:

• there are appropriate safeguards in place such as binding corporate rules or the approved model contractual clauses between us and the recipient (as per Article 46 GDPR (or English law equivalent)). A copy of the appropriate safeguard can be obtained by contacting us using the contact details set out below;

• the transfer is to a country that the UK has decided provides an adequate level of protection (as per Article 45 GDPR (or English law equivalent)); or

• one of the derogations for specific situations in the first sub-paragraph of Article 49(1) GDPR (or English law equivalent) applies to the transfer including explicit consent or necessary for the performance of a contract or exercise or defence of legal claims.

Storing your personal data

We will not keep your personal data for any longer than is necessary. We keep the length of time that we hold your personal data for under review. These reviews take place annually.

Contractual requirements on you to provide personal data

In certain circumstances the provision of personal data by you is a requirement to comply with the law or a contract, or necessary to enter into a contract.

It is your choice as to whether you provide us with your personal data necessary to enter into a contract or as part of a contractual requirement. If you do not provide your personal data then the consequences of failing to provide your personal data are that we may not be able to perform to the level you expect under our contract with you. An example of this would be where we are unable to provide you with certain products or services as we do not have your full details, or where we cannot perform our contract with you at all because we rely on the personal data you provide in order to do so. Please see our terms and conditions on our Website for further details.

Your rights

By law and in certain circumstances, you may have a number of rights in relation to your personal data, which we will always work to uphold:

•The right to be informed about our collection and use of your personal data. This Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions.

• The right to access the personal data we hold about you.

• The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.

• The right to ask us to delete or otherwise dispose of any of your personal data that we have.

• The right to restrict (i.e. prevent) the processing of your personal data.

• The right to object to us using your personal data for a particular purpose or purposes.

• The right to receive your personal data in a structured, commonly used and machine-readable format and to have your personal data transferred to another controller, to the extent applicable in law.

• The right to lodge a complaint with the Information Commissioner’s Office. Please see https://ico.org.uk/concerns/ for how to do this.

For more information about our use of your personal data or exercising your rights, please contact us using the details provided below.

Cookies

Our Website uses cookies (small text files) to improve your experience on our Website.

We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

We are legally entitled to set cookies on your device if they are strictly necessary for the operation of or Website, although you may be able to disable such cookies through your web browser (however, if you do so you may not receive some or all of the functionality of our Website). For all other types of cookies we need your consent and we request this via our Cookie Declaration on our Website.

You can at any time change or withdraw your consent from Cookies used on our website by visiting Cookie Settings page: https://ucc-coffee-direct-co-uk/pages/cookies

Changes to Privacy Notice

We may change this page to reflect how we are processing your data. If we make significant changes to how we use your data, we will provide an opportunity for you to review before you use our Website.

Contact us

We always want to hear from our customers (especially if you feel we could do better).

If you have any questions about this notice, would like us to stop using your information, want to exercise your rights (as outlined above) or have a complaint please contact us in writing by email.

We will respond to your request in a timely manner and in accordance with applicable laws.

UCCDirectEnquiries@ucc-coffee.co.uk