Privacy policy.
This privacy policy explains;
What personal data we collect about you
Why we collect that personal data
Who we share your personal data with
Why we might contact you and how you can change that
Where we use your personal data
How we keep your personal data secure
The rights you have in relation to your personal data
How we utilise cookies
This privacy policy covers our use of your personal data. When we talk about “personal data” in this policy, we mean any information which could be used to identify you, either directly or indirectly, for example, in combination with any other information we may hold about you. This includes data via our wi-fi, newsletter sign-up, booking enquiries, customer feedback, and app usage. We strictly adhere to the requirements of the data protection legislation in the UK and the EU. The purpose of this statement is to explain to you what personal information we collect and how we may use it.
In this privacy policy, when we refer to “we”, “us” or “our”, we mean Chocolate Dino Company Ltd, Kemp House, 160 City Rd, London, EC1V 2NX
What personal data we collect about you
You may provide us with information that identifies you, including but not limited to your name, phone number, email address or payment method details. This includes information you provide when you make an online purchase, sign up to our newsletter or leave customer feedback.
Why we collect that personal data
We will collect and process your data for the purposes of:
Processing your payments.
Crime/fraud prevention and prosecution of offenders.
Processing your requests
Processing and following up on feedback or enquiries.
Personalising our services to suit your requirements.
We also retain data for statistical analysis for the purposes of monitoring sales, consumer demographics, feedback and website activity. These statistics however will not include information that can be used to identify and will never be passed on to third parties. Chocolate Dino Company Ltd is committed to protecting your privacy and maintaining the security of any personal information received from you. We do not sell, rent or exchange your personal information with any third party for commercial reasons. In certain circumstances, we are required to process your personal data. This applies, for example, where you register with us, make online purchase, or provide feedback, or place enquiries. We will need your personal data in order to provide our services to you, and if you do not provide your data, you may not have access to our services.
Lawful basis for processing
Where we process your personal data this will be justifiable on the basis that it is necessary for the performance of a contract under Article 6(1)(b). Where processing falls outside the scope of this basis, processing this data will be necessary for Chocolate Dino Company Ltd legal obligations under Article 6(1)(c). Where processing goes beyond the scope of both these bases, processing will be justified for for Chocolate Dino Company Ltd legitimate interests under Article 6(1)(f), for example, to promote for Chocolate Dino Company Ltd business aims.
Who we share your personal data with
Your data may, for the purposes outlined above, be disclosed for processing to our payment processors, our data management providers and any other affiliates that we work with in order to provide our business-related services. Your anonymised data may also be provided to:
Analytics and search engine providers that assist us in the optimisation and continual improvement of our website and digital marketing.Consultants or advisors to our business who require demographical statistics for analysis.We will never sell your personal information to any third party for any reason.
Why we might contact you and how you can change that
We will use your personal information for the purpose in which you supplied it to us e.g. responding to an enquiry or guest feedback, a competition entry or booking request. We will use your information, only when you have given us permission, to keep you updated on new products offered by us, special offers and any other information we feel would be relevant to you. Our newsletter and email campaigns will always facilitate an option to unsubscribe and you can check, update or remove your personal details by contacting us at askdino@chocolatedinocompany.co.uk at any time.
Where we use your personal data
We use your personal data in our central company database which allows us to analyse our customer transactions, demographics and behaviours. We use this information, mostly anonymised, to identify successful and unsuccessful campaigns and new products launches.
How we keep your personal data secure
We follow strict security procedures in the storage and disclosure of information which you have given us, to prevent unauthorised access in accordance with the EU data protection legislation. We will not transfer your information outside the EEA (European Economic Area) without first obtaining your consent. We believe that we have the appropriate policies, rules and procedures in place to protect the personal data that we have under our control. Chocolate Dino Company Ltd stores and keeps your data on the emailing system if you are active, meaning interacting with our emails. If a user isn’t active for 12 months, the data is deleted from our system. Payment details must be kept for 6 years for tax purposes under the law. We are committed to keeping data safe and secure.
The rights you have in relation to your personal data
We will always request your permission before using your data for any of the purposes defined in this privacy policy. We will inform you before collecting your data if we intend to use your data for marketing purposes or if, for any reason, we intend to disclose your information to a third party, where we will clearly state the third party applicable. By opting in to any of our permission requests, or submitting any personal information to us, you are consenting to us processing your information within the boundaries defined in this privacy policy. It is your responsibility to check and agree terms and conditions in the privacy policy every time you submit your personal information to us or make a booking or contact request. We will not alter our privacy policy terms for processing information without contacting individuals whom any changes may affect. You can contact us at any time to obtain a copy of your information, by email: askdino@chocolatedinocompany.co.uk or postal address: Chocolate Dino Company Ltd, Kemp House, 160 City Rd, London, EC1V 2NX
We are not responsible for the data protection and privacy policies/practices of alternative websites even in the case that you accessed the website via a link on our website. We strongly recommend that you check the privacy policy of each website you visit and challenge any concerns with them before proceeding to submit your personal information.
Right of access
You are entitled to access your personal data by way of a Subject Access Request and you have the right to obtain: 1) confirmation that your data is being held 2) a copy of your data and 3) other supplementary information that corresponds to the information in this privacy notice. Under the GDPR we will provide this information within one month, or failing this, we will provide reasons for the delay if an extension is required. We will provide this free of charge but if requests are manifestly unfounded or excessive, we may charge a reasonable fee, taking into account the administrative costs of dealing with any SAR. In order to protect your personal data, we will seek to verify your identity before providing any information.
Right of rectification
You are entitled to have personal data rectified if it is inaccurate or incomplete. The Company will respond within one month of your request.
Right of erasure
You may request that we delete or remove your data in certain circumstances which are relevant to Chocolate Dino Company Ltd such as:
1) when you withdraw your consent2) if you object to processing and there is no overriding legitimate interest for continuing the processing3) the personal data has been unlawfully processed4) the personal data has to be erased in order to comply with a legal obligation.
Right to restrict processing
You have the right to block processing of your personal data. Where this is requested, we are permitted to store the personal data but not process it further.
Right to data portability
You can obtain and reuse your personal data for your own purposes across different services. This allows you to move, copy or transfer personal data easily from one environment to another in a safe and secure way. This only applies to 1) personal data you have provided to us 2) where the processing is based on your consent or for the performance of a contract and 3) when processing is carried out by automated means.Right to object: You have the right to object to 1) processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling) 2) direct marketing (including profiling) and 3) processing for purposes of scientific/historical research and statistics.
Automated decision making and profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you, or significantly affects you.
How we utilise cookies
We use a technology called “cookies” as part of a normal business procedure to track patterns of behaviour of visitors to our site. A cookie is an element of data that our website sends to your browser which is then stored on your system. You can set your browser to prevent this happening. Any information collected in this way can be used to identify you unless you change your browser settings.
If you have any questions about our privacy policy or compliance with the data protection act please contact us at askdino@chocolatedinocompany.co.uk