Introduction
Brickhill Cafe ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
Information We Collect
We may collect and process the following data about you:
- Personal Identification Information: Name, email address, phone number, and address.
- Financial Information: Payment details for transactions.
- Technical Data: IP address, browser type, and version, time zone setting, browser plug-in types and versions, operating system and platform.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
How We Use Your Information
We use the information we collect in the following ways:
- To provide our services: Processing orders and delivering services you request.
- To manage your account: Managing registrations, accounts, and customer service interactions.
- To improve our services: Enhancing and optimizing our website and services based on your feedback.
- To communicate with you: Sending notifications, updates, and promotional materials if you have opted in to receive them.
- To comply with legal obligations: Meeting legal requirements and protecting our legal rights.
Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal data to third parties without your consent, except:
- Service Providers: We may share your data with third-party service providers who assist us in operating our business, such as payment processors and IT service providers.
- Legal Obligations: If required by law, to protect our rights, or to comply with judicial proceedings, court orders, or legal processes.
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of personal data we process. These measures include:
- Encryption of data.
- Regular security assessments.
- Restricted access to personal data.
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Your Rights
Under the Data Protection Act 2018 and GDPR, you have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Erase your personal data.
- Restrict the processing of your data.
- Object to the processing of your data.
- Data portability.
- Withdraw consent at any time where we are relying on consent to process your personal data.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.