Richard Wellock & Sons Limited Privacy & Cookies Policy

We're committed to respecting and safeguarding your personal data

We've written this policy because we are committed to safeguarding the privacy of our website users and the confidentiality of any information that we collect about you, and we want you to be informed about how we keep your data safe.

This privacy and cookies policy explains when and how we collect personal information about visitors to our website, how we use that data and keep it secure, and when it may be disclosed to third parties. This policy may change from time to time, so please do check in occasionally and make sure you’re happy with the changes. You can find a link to this policy at the bottom of every page under "Privacy and Cookies Policy".

What's in this policy?

Who we are
When do we collect information about you?
What information do we collect about you?
How and why do we collect information about you?
Third Parties
How do you stop marketing information being sent to you?
Security and International Transfers
Your rights
How long do we retain your personal data?
Cookies
16 or under
What about third party websites that you can access via our website?

1. Who we are

We are Richard Wellock & Sons Limited. We deliver high quality food. We are part of the William Jackson Food Group and you can find out more at https://www.wjfg.co.uk.

We are a limited company in England (number 04296795) whose registered office is The Riverside Building, Livingstone Road, Hessle, East Yorkshire, United Kingdom, HU13 0DZ. We are the data controller in respect of all personal data collected via our website, email, telephone, or in person. Whenever you submit your information to us, by these or any other means, we will collect and use such information in accordance with the terms of this policy, and we will ensure that all personal data we hold is treated properly and in accordance with applicable data protection legislation.

We are registered as a data controller with the Information Commissioner’s Office ("ICO") and our registration number is Z8391980. In accordance with data protection legislation, we are required to explain to you how we will treat any personal data which we collect from or about you. If you have any concerns about the way we have used, shared or processed your data you have the right to lodge a complaint with the ICO. However, we would always appreciate the opportunity to address your concerns before you approach the ICO so please do contact us by email at info@wellocksathome.co.uk or by writing to Data Protection Office, Richard Wellock & Sons Limited, The Riverside Building, Livingstone Road, Hessle, East Yorkshire, United Kingdom, HU13 0DZ.

2. When do we collect information about you?

You may give us information about you:

when you contact us by any means (including via the website, over the phone, by email or by post) with queries, complaints etc.;
when you create an account with us;
when you use your account to buy products or redeem vouchers from us;
when you engage with us on social media;
when you choose to complete any surveys we send you;
when you comment on or review any of our products or our services;
when you opt in to receive our newsletter;
when you take part in a prize draw, competition or survey;
when you've given a third party permission to share with us the information they hold about you (for example, pursuant to a third party prize draw, competition or survey).
When you are selected for re-engagement marketing campaigns we check to ensure we are mailing you at your most up to date address where this data is available to us through third parties. We reflect any changes in your account to ensure we can continue to provide with information that you have consented to receiving.
Our site uses technologies of third-party partners (such as NextRoll) to help us recognize your device and understand how you use our site(s) so that we can improve our services to reflect your interests and serve you advertisements about the products that are likely to be of more interest to you.

3. What information do we collect about you?

The information we may collect, use, store and transfer about you includes the following:

name, username or similar identifier (such as social media username), title, date of birth and gender (“Identity Data”);
delivery address, billing address, email address and telephone number(s) ("Contact Data");
bank/payment account and credit/debit card information (“Financial Data”);
details of your interactions with us, including interactions through our website, by telephone, email, in person and through social media ("Transaction Data"). For example, we may make notes of our conversations with you, log details of any complaints or comments you make and record where any deliveries have been left for you;
details of your shopping preferences and personal details (such as purchase history and dietary requirements) which help us to recommend items of interest to you or to send you or make available personalised offers (“Profile Data”);
your preferences in receiving marketing from us and your communication preferences (“Marketing Data”); and
your comments and product reviews.
We may collect data regarding your address for mailing purposes if you are opted into postal marketing communications. We use third party services such as Royal Mail to update your address in your account if you have registered yourself to have moved house. This also includes third party services that tell us you have moved house but with no new address. In this case we do not make changes to your personal data but we do ensure that you are no longer mailed. We do this to ensure we can continue to provide with information that you have consented to receiving.
We use a service called Hotjar, who use cookies and other technologies to automatically collect data regarding your behaviour on our website and your devices. We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
Our site uses technologies from third party partners, specifically NextRoll, to help us recognize your device and understand how you use our site so that we can improve our services to reflect your interests and serve you advertisements about the products that are likely to be of more interest to you. Specifically, NextRoll collects information about your activity on our site(s) to enable us to:
- measure and analyze traffic and browsing activity on our site;
- show advertisements for our products and/or services to you on third-party sites
- measure and analyze the performance of our advertising campaigns;
- We may share data, such as hashed email derived from emails or other online identifiers collected on our site with our advertising partners. This allows our partners to recognize and deliver you ads across devices and browsers. To read more about the technologies used by NextRoll and their cross device capabilities please refer to NextRoll’s Privacy Notice.
- We may also automatically collect data about you such as internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website ("Technical Data") as you interact with our website. We collect Technical data by using cookies and other similar technologies. Please refer to section 8 for further information regarding the cookies used on our website.

4. How and why do we collect information about you?

We have set out below a description of how and why we may use personal data you give us and which of the legal bases we rely on to do so. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us by emailing us at hello@wellocksathome.co.uk or by writing to Data Protection Office, Richard Wellock & Sons Limited, The Riverside Building, Livingstone Road, Hessle, East Yorkshire, United Kingdom, HU13 0DZ if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

Purpose/Activity	Type of Data	Lawful basis for processing
To set up an account for you so that you can order products from us.	Identity Data; Contact Data; Financial Data; Profile Data; Marketing Data.	Performance of a contract with you; Necessary for our legitimate interests (in order that we can provide you with the best customer experience and improve the services we are able to offer); Consent (in respect of your marketing preferences).
To process and deliver your order including: Manage payments, fees and charges; Collect and recover money owed to us.	Identity Data; Contact Data; Financial Data; Transaction Data.	Performance of a contract with you; Necessary for our legitimate interests (to recover debts due to us).
To respond to an enquiry made by you (whether via the website, over the phone, by email or by post). We may also keep a record of our communications with you to inform any future communication we have with you and to demonstrate how we communicated with you throughout.	Identity Data; Contact Data; Transaction Data.	Necessary for our legitimate interests (to respond to your enquiry and provide you with the information requested regarding our business and our products and services).
To provide you with marketing information regarding our business.	Identity Data; Contact Data; Profile Data; Marketing Data.	Consent; Legitimate Interests (where legally permitted to do so in order to promote our business and our products - for example, we may use your address details to send you direct personalised marketing information by post telling you about products and services we think may interest you). If you decide that you do not wish to receive such mailings please see section 6 below.
To enable you to partake in a prize draw, competition or complete a survey (survey messages will not contain any promotional content and do not require prior consent).	Identity Data; Contact Data; Profile Data; Marketing Data.	Performance of a contract with you; Necessary for our legitimate interests (to study how customers use our products, to develop them and grow our business).
To send communications required by law or which are necessary to inform you about our changes to the services we provide you. For example, updates to this Privacy Policy and product recall notices.	Identity Data; Contact data.	Necessary to comply with a legal obligation.
To administer and protect our business and our website from fraud and other illegal activities (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).	Identity Data; Contact Data; Financial Data; Technical Data.	Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise); Necessary to comply with a legal obligation.
To use data analytics to improve our website, customer relationships and experiences.	Technical Data	Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).
To make suggestions and recommendations to you about products that may be of interest to you.	Identity Data; Contact Data; Technical Data; Profile Data.	Necessary for our legitimate interests (to develop our products/services and grow our business).

If we require your information for the purposes of performing a contract with you and you fail to provide this information, or if the information you provide is not accurate, we may not be able to perform the contract we have or are trying to enter into with you.

You warrant that any information you supply to us is accurate and up to date, that you will inform us if any such information requires updating, and that if you submit a third party’s details to us you have that third party’s permission to do so.

We will not sell any of your personal data to any third party.

5. Third Parties

We may share personal data about you:

with third parties who are directly involved in dealing with any request or enquiry made by you;
where such disclosure is required by law;
with third parties who are providing us with professional advice;
where the disclosure is in connection with any criminal investigation, legal proceedings or prospective legal proceedings where permitted by law;
where the disclosure is in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
where we are required to enforce our Terms and Conditions of Sale or our Terms of Use; or
where we have stated or informed you otherwise (e.g. in this policy or on our website).

We will not pass on your information to any third party for the purpose of marketing.

We may also disclose your personal data to third parties in the event that we sell or buy any business or assets (in which case we may disclose your personal data to the prospective seller or buyer of such business or assets) or if we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our clients and subscribers will be one of the transferred assets.

6. How do you stop marketing information being sent to you?

You can ask that marketing information is no longer sent to you by opting out via the footer of one of our emails, emailing us at hello@wellocksathome.co.uk, or by writing to Data Protection Office, Richard Wellock & Sons Limited, The Riverside Building, Livingstone Road, Hessle, East Yorkshire, United Kingdom, HU13 0DZ. It may take up to 15 working days to remove you from our marketing lists.

Our third-party partners, specifically NextRoll, may use non-cookie technologies that may not be impacted by browser settings that block cookies. Your browser may not permit you to block such technologies. For this reason you can use the following third party tools to decline the collection and use of information for the purpose of serving you interest based advertising:

The NAI’s opt-out platform: http://www.networkadvertising.org/choices/
The EDAA’s opt-out platform http://www.youronlinechoices.com/
The DAA’s opt-out platform: http://optout.aboutads.info/?c=2&lang=EN

7. Security and International Transfers

We will take all reasonable steps to protect your personal data. However, the Internet is global and no data transmitted via the Internet can be guaranteed by us to be completely secure during transmission. We cannot guarantee the security of any data that you disclose online and we will not be responsible for any breach of security unless this is due to our negligence or wilful default.

Our website is hosted on a leading commercial web platform called Shopify, you can find out more about Shopify here, https://www.shopify.com/legal/privacy.

For subscription customers we use a integrated add on application called ‘ReCharge’ which gives customers the ability to change their details, order, etc via secure portal. You can find out more about this software at https://rechargepayments.com/privacy-policy.

Sometimes we may need to transfer personal data we collect from you to third-party data processors in countries that are outside the EEA - for example, this might be required in order to fulfil your order, process your payment details or provide support services. If we do this, we will ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

The transfer is to a third party located in a country that has been deemed to provide an adequate level of protection for personal data by the European Commission.
The transfer is subject to use of a contract approved by the European Commission which gives personal data the same protection it has in Europe.
The transfer is to a third party based in the US which is part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US.

In the absence of an adequacy decision in respect of the relevant country, or appropriate safeguards as detailed above, we will not transfer your personal data outside of the EEA unless we have a lawful basis for doing so (for example, because you have explicitly consented to the proposed transfer).

8. Your rights

If we are sending marketing materials to you by any means, you may ask us to stop sending such marketing materials at any time. Please see section 6 above for further information on how to do this.

You have a legal right to see a copy of the personal data that we keep about you, subject to certain exemptions. Requests for such information should be made by email to info@wellocksathome.co.uk or in writing to Data Protection Office, Richard Wellock & Sons Limited, The Riverside Building, Livingstone Road, Hessle, East Yorkshire, United Kingdom, HU13 0DZ.

In some circumstances you may also have a right to:

rectify or erase any personal data we hold about you;
restrict our processing of your personal data;
object to us processing your personal data (for example, where we are processing your personal data based on our legitimate interests, you can ask us to stop processing your personal data. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data);
data portability in respect of your personal data.

In accordance with applicable data protection legislation, we follow security procedures when we process your personal data. We may therefore request proof of your identity before disclosing certain information to you or acting on any requests pursuant to this section 8.

Please contact us at the above address if you have any reason to believe that information we hold about you is inaccurate.

9. How long do we retain your personal data?

We only retain your personal data for as long as we need it for the purpose for which is was collected. Whilst taking in to consideration our legal obligations, we will on an ongoing basis: review the length of time we retain your personal data; consider the purpose or purposes for which we hold your personal data for in deciding whether (and for how long) to retain it; securely delete your personal data if it is no longer needed for such purpose or purposes; and update, archive or securely delete your personal data if it goes out of date. For further information on how long we retain your personal data please contact our Privacy team using the contact details set out in section 8 above.

10. Cookies

Our website uses "cookies" to ensure you receive the best possible visitor experience. Cookies are small files which are sent by a web server to an individual's computer which are then stored on that computer's hard drive. A cookie contains text, and is like an identification card which can only be translated by the server it originated from.

Cookies cannot tell us information such as your email address, which we can only collect where you tell us, for example if you submit an inquiry to us.

Our website uses the following cookies for the following purposes:

Cookie Name	Cookie Description
Universal Analytics (Google)	These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the website from and the pages they visited. Read Google's overview of privacy and safeguarding data.
AdWords & AdSense (Google)	AdWords remarketing is a remarketing and behavioural targeting service provided by Google that connects a user's activity with the AdWords advertising network and the DoubleClick cookie. AdSense cookies are used by Google to check advertising efficiency across their services. Read Google's overview of privacy and safeguarding data.
Twitter	Twitter Remarketing is a remarketing and behavioural targeting service provided by Twitter, Inc. that connects the user’s activity with the Twitter advertising network Twitter Tailored Audiences is a remarketing and behavioural targeting service provided by Twitter, Inc. that connects the user’s activity with the Twitter advertising network. Read Twitter's privacy policy here.
Facebook Ads remarketing and conversion tracking	Facebook Ads conversion tracking is an analytics service provided by Facebook that connects data from the Facebook advertising network with actions performed on this application. Facebook remarketing is a remarketing and behavioural targeting service provided by Facebook, Inc. that connects the user’s activity with the Facebook advertising network. The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc. You can read Facebook's privacy policy here.
HotJar	HotJar is an analytical tool that aggregates data on how our visitors use our website; it does not collect personal or sensitive data. Data collected includes, but is not limited to, the country a user is in, which pages are visited, how pages are used, and browser and device details. For more information on Hotjar, how it collects data, what data it collects and how to opt out of your information being collected, you can read Hotjar's privacy policy here.
All Response Media	ARM Cookies are used to track when users visit Richard Wellock & Sons site. All pages are tracked. These are 1st party cookies that are set on the domain of your website.

Most internet browsers allow you to prevent cookies being stored on your computer. Alternatively you may be able to configure your browser to accept all cookies or to notify you when a cookie is offered by our server. You may also be able to delete all cookies currently stored on your web browser. Therefore unless you change your browser settings you will automatically accept cookies from our website. We may also collect information about where you are on the Internet (e.g. the URL you came from, IP address, and domain types like .co.uk and .com), your browser type, the country where your computer is located, the pages of our website that were viewed during your visit and any search terms that you entered on our website. We will use this information to administer our website, for internal operations (including troubleshooting, data analysis, testing, research, statistical and survey purposes) and as part of our efforts to keep our website safe and secure. For further information about cookies and how they are used, please visit www.aboutcookies.org.

11. 16 or under

Our website is not intended for children and we do not knowingly collect data relating to children.

12. What about third party websites that you can access via our website?

Our website contains links to other websites which are outside our control and are not covered by this Privacy and Cookies Policy. If you access other websites using the links provided, the operators of those websites may collect personal data from you which will be used in accordance with their respective privacy policies which you should read. We are not liable for the practices of such third party website operators in respect of your personal data.

You acknowledge that any information that you post using our social media facilities will be viewable by anybody who visits those websites and that such information is also subject to the relevant provider’s privacy policy. You are advised to consult each such privacy policy to see how they will use your data.