Data Processing Laws
The Roasting Shed stores and processes your data for the following legal reasons:
Legitimate interests – We store and process your data in a way in which you would reasonably expect us to and with minimal impact on your privacy and for reasons of legitimate interest. This legitimate interest is where data processing is necessary to fulfill your order.
Contractual interests – We store and process your data where there are contractual obligations to do so (e.g. send out an invoice) or when you have asked us to do something before entering into a contract (e.g.provide a quote)
Legal Obligation – We store and process your data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.
We collect the following information:
Personal – Name, email address, delivery address, telephone number
Financial – Billing address
Technical – Browser, location, device, how you got here, how long you stay (collected via Google Analytics)
We use the information we collect about you to process orders in a timely and efficient manner. Without this information will will not be able to process or fulfil your orders. We also use your information to notify you of delivery status and updates or problems processing your order.
When you enquire or create an account as a wholesale customer we ask for:
Contact details – Name, business name, delivery address, ordering email address, telephone number
Financial – Name, invoice/accounts email address, accounts telephone number, VAT number, purchase order numbers
Internal marketing – Business activity, equipment, weekly order quantities and preferences
We use the information we collect about you to process orders; manage payments; inform you weekly of ordering and delivery schedules and changes due to holidays; and give you status updates of your deliveries.
We store and process your financial data outlined above for invoicing, account statements and credit control.
Without this information will will not be able to fulfil your orders.
All payments through our website are processed through PayPal. We do not have access to the debit or credit card details of web orders.
All wholesale payments are made through BACS or card payment via invoice. Financial data concerning these payments will be stored and processed by partnering banks and financial software.
Third parties access to your information
The Roasting Shed does not and will not sell, trade, license or disclose your personal information to others.
In order to fulfil the delivery, your name, address, email address and telephone number will be processed through one of the third party delivery services such as The Royal Mail, UK Mail, DPD, CSM Logistics.
Wholesale customer details will be stored and processed by MailChimp for the purposes of order reminders, changes in delivery schedule or ordering updates. We do not spam or use this service for unwanted marketing newsletters.
Your data may also be shared with professional advisers acting as processors including, IT and administration specialists, lawyers, bankers, auditors, insurers, business consultants, accountants, HM Revenue & Customs, regulators and other authorities. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
If you do not want your cookies stored, please delete them after visiting this site or use an anonymous browser such as Chrome incognito.
You have the right to request:
A copy of the date which we hold about you
A correction of any personal data should it be inaccurate or out of date
The complete removal or restriction of access to your data
If you would like to see, update, correct, or delete the personal data we hold about you, please contact firstname.lastname@example.org
We store personal information for only as long as we have a reason to keep it, after which, it will be deleted.
Your data will only ever be stored in places where appropriate security measures have been taken. These security measures prevent your data from unauthorised use, alteration or disclosure. Access to your data by employees of The Roasting Shed will only be given for the purposes for the fulfilment of your order or contract.
Access by children
This website is not intended for children and we do not knowingly collect data relating to children. If you believe that a child has provided personal information to The Roasting Shed, please contact us promptly and we will delete this information from our databases immediately.