This policy applies to information we collect when you choose to use this website, and also to personal information which we process further to supplying goods to our customers and receiving personal data from our suppliers.
Who we are
This website is owned by The Maltings Taphouse Ltd and our registered office c/o Edwin Tucker & Sons, Commercial Road, Crediton, Devon, United Kingdom, EX17 1ER, United Kingdom. The Maltings Taphouse Ltd (‘we’ or ‘us’) is a ‘data controller’ for the purposes of the General Data Protection Regulation (‘GDPR’) where we control the purposes for which we process your personal information e.g. when we take your personal information to supply you with our goods. Otherwise we are the data processor. We will take all appropriate steps to ensure compliance with the GDPR and all other laws which protect your personal data (the ‘Legislation’).
Any questions about our data protection policy or how we handle your personal data should be addressed to us at The Maltings Taphouse Ltd. (See ‘How to contact us’ below.)
What information do we collect?
We collect personal information about you (such as your name, delivery address, email address and telephone number), when you contact us via our website or purchase goods from us. We also collect personal information when you visit our website as explained below in the Cookies section.
For example, we may monitor how many times you visit the website, which pages you go to, traffic data, location data and the originating domain name of a user’s internet service provider, to improve the user’s experience whilst visiting the website, and better understand how you use it. This information helps us to build a profile of our users. Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually.
You can set your browser not to accept cookies and the websites below tell you how to remove cookies from your browser. However, some of our website features may not function as a result.
For further information on cookies generally visit www.aboutcookies.org or www.allaboutcookies.org.
Any comments you make on these social media platforms in general must be not offensive, insulting or defamatory. You are responsible for ensuring that any comments you make comply with any relevant policy on acceptable use.
How will we use the information about you?
We process information about you so that we can:
- provide the goods or information you have requested
- identify you and manage any accounts you hold with us
- let you know about goods or services that may be of interest to you (see further information in our ‘Marketing’ section below)
- detect and prevent fraud
- customise our website and its content to your particular preferences
- notify you of any changes to our website or to our goods or services that may affect you
- improve our service
Lawful basis for processing your personal data
The reasons why we process your personal data are listed above and the lawful basis for such processing is one or more of the following:
- it is necessary for us to perform the contract you wish to enter into with us or in order to take steps you have requested us to take prior to entering into a contract with us (e.g. using our chat room facility to find out more about our goods etc.)
- it is necessary for us to comply with a legal obligation (e.g. keeping information which HMRC requires us to keep)
- it is in our legitimate business interest to carry out such processing (e.g. reminding you of an “abandoned on-line cart”) except where such an interest is overridden by your interests or fundamental rights and freedoms which require your personal data to be protected
- you have given your consent for one or more specific purposes.
Who do we share your personal information with?
We may send information about you to other parties to help us to fulfil your order with us and to law enforcement agencies in connection with any investigation to help prevent unlawful activity.
We may use the following third-party service providers named below to process and store your data:
- Mailchimp (The Rocket Science Group, LLC), which we use to manage email marketing subscriber lists and send emails to our subscribers.
- Google LLC, which provides our email service. We also use Google Analytics service to measure the performance of this website.
- Just Applications Ltd, which hosts this website and manage this WordPress software (and associated add-ons) on our behalf.
Payment and third-party services
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
We use the following payment options:
PayPal and PaymentSense
Where you submit a payment via the Site, you will be providing your credit card details to one of these service providers. Your credit card details are not stored by the service provider and cannot be accessed by The Maltings Taphouse Ltd staff.
Marketing and email newsletter
We use any information submitted to us by you to provide you with further information by email about the goods and services we offer which you have requested and/or which may be of interest to you. You can choose to unsubscribe at any point by clicking on the link at the bottom of the email.
Email marketing campaigns published by us may contain tracking facilities within the actual email. Subscribed activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include: the opening of emails, forwarding of emails, the clicking of links within the email consent, times, dates and frequency of activity (this is by no means a comprehensive list).
Keeping your data secure
Our staff and associates are bound by obligations of confidentiality and trained in the protection of personal data. We will take all reasonable steps to comply with the Legislation and use the appropriate technical and organisational measures necessary to safeguard your personal data. As we mention above we only share your personal data with third parties who also comply with the Legislation.
Our secure server software (SSL) is the industry standard and among the best software available today for secure commerce transactions. It encrypts all of your personal information, including your name and address, so that it cannot be read as the information travels over the Internet.
While we will use all appropriate efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that is transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us (see ‘How can you contact us?’ below).
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
We only send your personal data outside the European Economic Area where we have in place a legal agreement which complies with the Legislation or where you have given your express consent.
We store your personal data on secure servers for a period of:
- 3 years from the date on which you cease to be a customer or supplier of ours.
- until you ask us to destroy it.
This will be the case for each unless the law requires us to store the data for a longer period.
What rights do you have?
The GDPR provides the following rights for individuals whose personal data is processed:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object to processing
- Rights in relation to automated decision making and profiling (Note that we do not carry out automated decision making and profiling)
To exercise any of your rights
You can request a copy of the personal information which we hold or amend it or ask us not to use it for particular purposes by:
- emailing or writing to us (see ‘How can you contact us?’ below);
- providing us with proof of your identity (a copy of your driving licence or passport); and
- letting us know what information you want or what you want us to do.
- let us know the information that is incorrect and what it should be replaced with.
You can ask us to stop contacting you for particular purposes or remove your information completely from our records. There may be a legal reason why we need to keep your personal data and in that circumstance we will destroy your personal information as soon as we are legally entitled to do so.
Right to lodge a complaint with the Supervisory Authority
If you have any concerns or complaints about how we use your personal data we hope you will alert us to these directly (see the Contact information below). You are entitled to complain to the Information Commissioners Office (ICO) which is the supervisory authority in the UK. Their contact details and the procedure can be found at www.ico.gov.uk
How to contact us
The Maltings Taphouse Ltd