Duncans Sweet Shop is dedicated to protecting and respecting your privacy.
This information is provided as part of our commitment to comply with recent legislation, and to ensure we’re transparent and clear about your privacy when using our website.
For the purpose of the Data Protection Act and the General Data Protection Regulation 2016/679 (the Acts), the data controller is:
Duncans Sweet Shop
Address to follow
Under the EU’s General Data Protection Regulation (“GDPR”): Personal Data is defined as “any information relating to an identified or identifiable natural person (‘data subject’); by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
The Data Controller
The Data Controller is an organisation and/or individual who controls and is responsible for maintaining and using personal data in paper or electronic files. Duncans Sweet Shop is the data controller as defined by relevant data protection laws and regulation.
The lawful bases for processing are set out in Article 6 of the GDPR. At least one of these must apply whenever personal data is to be processed:
a. Consent: you have given Duncans Sweet Shop clear consent for your personal data to be processed for a specific purpose.
b. Contract: the processing is necessary for a contract you have with Duncans Sweet Shop, or because you have asked to take specific steps before entering into a contract.
c. Legal obligation: the processing is necessary for Duncans Sweet Shop to comply with the law (not including contractual obligations).
d. Vital interests: the processing is necessary to protect someone’s life.
e. Public task: the processing is necessary for Duncans Sweet Shop to perform a task in the public interest or for its official functions, and the task or function has a clear basis in law.
f. Legitimate interests: the processing is necessary for Duncans Sweet Shop’s legitimate interests, or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data that overrides those legitimate interests.
You have the following rights regarding our use of your personal data:
- You can access any of your data held by us.
- You can correct any inaccurate data we hold.
- You can request us to erase any of your data held by us.
- You can limit the types of data we hold.
- You can object to our processing any of your personal data.
- You can request that your data be copied or transferred to a third party.
You can exercise any of the above rights by emailing firstname.lastname@example.org.
You can exercise your right to prevent such processing by checking certain boxes in the preference centre, and even where you have consented to our processing of your personal data, you can withdraw your consent at any time by emailing email@example.com.
Personal data we may collect from you
Even though we do not keep or harvest any data, we may temporarily collect and process your data when you visit our site and when you use our site to make a purchase.
When you visit and use our website, you consent to our temporary obtaining and processing the following information about you:
- Location data and online identifiers, including details of your visit to our site and the resources you access;
Information about your device, including your IP address, operating system, and browser.
This information is used for system administration and to ensure your experience is fully optimised. It is statistical, aggregated information and does not identify any specific individual.