STORE POLICY

Our contact details

Name: Ian McPherson

Registered Company: Xocolatl Ltd

Address: 31 North Gyle Road, Edinburgh, EH12 8EX

Phone Number: 07590 421629

E-mail: ian@mcphersonchocolatier.co.uk     

​

What we do with your data

We collect a small amount of data from you to enable us to process your orders for chocolate deliveries and services. The type of information we need is:
Your name, contact telephone and/or email, the addressee and postal address for delivery, any dietary/allergy issues (if necessary), the message to be included in the package, the chocolate order itself.

We are committed to protecting this information. The data comes to us in a number of ways – through the online shop, ‘in person’ (by email, phone, face to face and by letter). We do not make this information public and do not share it with anyone else.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

• Your consent.  You are able to remove your consent at any time by sending an email to ian@mcphersonchocolatier.co.uk.

• We have a contractual obligation.  This allows us to process your order and payment.

The data is stored in a number of formats and places, and is managed differently accordingly:

• Online shop: the shop is hosted on the Wix Payments Platform. This is a USA based organisation, and in recognition that it is handling data of EU based businesses and citizens, has committed to compliance with all GDPR regulations required of an organisation of its type https://www.bigcommerce.com/privacy . We are unable to delete information from this platform ourselves, and would need to contact Big Commerce to undertake that. We keep a printed copy of each order (to facilitate planning of production, as well as to record the batch details of chocolates delivered and the date and method of dispatch). We keep these printed records for 12 months, in case of dispute or product recall for any reason, and then destroy them.

• Email: if you have made your order by email, once all details are confirmed we print them as a hard copy (to facilitate planning of production, as well as to record the batch details of chocolates delivered and the date and method of dispatch). We keep these printed records for 12 months, in case of dispute or product recall for any reason; at the end of this time printed records are destroyed and email records deleted.

• Phone, letter, face to face: if you made your order over the phone, by letter or personally with us, the process is similar to that of email. Once all the details are confirmed we produce a paper copy of it with all relevant details. We keep these printed records for 12 months, in case of dispute or product recall for any reason, and then destroy them.

​

Financial details

We do not collect or keep any of your financial details.

If you paid us through Paypal, they will hold the finance details, and they are governed by the GDPR regulations (https://www.paypal.com/uk/webapps/mpp/ua/privacy-full ).

If you have paid us through Stripe they will hold the financial details and are governed by the GDPR regulations (Privacy Policy - United Kingdom | Stripe | United Kingdom). 

If you have paid us through SumUpthey will hold the financial details and are governed by the GDPR regulations (PRIVACY POLICY SumUp Personal Services).

If you are not happy using Paypal or Stripe, we also take payment through BACs or cash.

 

Invoicing

If you would like an invoice, either as an individual or an organisation, we keep a printed copy of that invoice in our Financial Records, for a minimum of 7 years (in compliance with standard accounting practice). The data recorded will be name, address and order details.

 

Keeping in touch

If you would like to hear from us about new flavours, new products, events that we will be at, there are a number of ways you can do this. We use Facebook, Twitter, and Instagram platforms to post information about what we are doing. When you sign up to these, you are agreeing to their terms and conditions. We also have a website, and you can subscribe to our e-newsletter. We use Wix for the newsletter; this is a USA based organisation, and in recognition that it is handling data of EU based businesses and citizens, has committed to compliance with all GDPR regulations required of an organisation of its type https://www.wix.com/about/privacy.

When you subscribe for the newsletter, Wix collect and store a limited set of information about you – your name, email, IP address, date of sign up. You will be understood to have opted into our service and will be informed at that point of our Privacy Policy. We do not ‘mine’ emails from other organisations, or from our own data sources (such as Wix Payments customer records, emails to our Outlook account) unless a customer has specifically asked us to do this.
We do not collect personal data from any other sources, nor do we share the data we have with any other individuals or organisations.

 

Your data protection rights

Under data protection lay, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.

• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate.  You also have the right to ask us to complete information you think is incomplete.

• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

​

You are not required to pay any charge for exercising your rights. If you make a request, we will have one month to respond to you.  Please contact us at ian@mcphersonchocolatier.co.uk, 07590 421629, 31 North Gyle Road, Edinburgh, EH12 8EX if you wish to make a request.

 

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at ian@mcphersonchocolatier.co.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO Website: https://www.ico.org.uk

 

Clarity of information

Our privacy policy is made available to customers when they are about to give their personal data to us; clear and direct links are visible through the order process through the online shop, on the subscribe forms for Mail Chimp, at the base of our emails and on our web-page.
Personal data collected over the phone, by letter and face to face (for example in an order book at a market) is covered by the same policy, and this information will be offered at the point of collection.

 

Changes to the information

We regularly review and, where necessary, update our privacy information.
If we plan to use personal data for a new purpose, we update our privacy information and communicate the changes to individuals before starting any new processing.

 

Cookies:

We use a number of third party partners in delivering services to you

• Paypal (for taking payment),

• Stripe (for the online shop),

• SumUp (for point of sale transactions)

• Wix (host the website), and

• Social media platforms: Facebook, Twitter and Instagram

All use cookies to enable them to deliver these services securely and efficiently to you. Many of these cookies collect anonymous data such as IP address, time of visits, pages visited, etc, which are collated to provide information that we can use to understand how our services are being used.

If you wish to find out more about how these sites use cookies, please find links below to their respective cookie policies.

It is possible to turn some of these off if you would wish to, but by doing so it might affect the functionality of the service provided by our Third Party partners. Each of the sites will indicate how to turn off the relevant cookies

Paypal: https://www.paypal.com/uk/webapps/mpp/ua/cookie-full

SumUp: https:///www.sumup.com/en-gb/consumer/legal/privacy/

Wix:  https://www.wix.com/about/privacy

Facebook: https://www.facebook.com/policies/cookies

Twitter: https://help.twitter.com/en/rules-and-policies/twitter-cookies

Instagram: https://help.instagram.com/1896641480634370?ref=ig

​

Date 27/12/2023