Privacy policy
1. Who we are
This privacy policy explains how Wilsons of Doveridge (“we”, “us”, “our”) collects and uses personal information when you visit our website, join our mailing list, contact us or buy from our online shop. We are the data controller for that information.
| Business | Wilsons of Doveridge |
|---|---|
| Address | Deepmoor Grange, Doveridge, Derbyshire, DE6 5NS |
| Contact for privacy questions | Joe@WilsonsofDoveridge.co.uk |
| Phone | 07864 323980 |
2. The information we collect
| Type | What it includes | Where it comes from |
|---|---|---|
| Order details | What you ordered, quantities, packed weights, prices, order number, order history, any pre-orders and their expected delivery dates | You, when you place an order; us, when we pack it |
| Delivery details | Name, delivery address, postcode, phone number, chosen delivery date and time slot, delivery notes (e.g. where to leave a parcel) | You, at checkout |
| Contact details | Name, email address, phone number | You |
| Payment information | Payment status and amounts. Card details are entered directly with our payment provider; we do not see or store your full card number | You, via our payment provider |
| Mailing-list sign-up | Email address, the date and wording of your consent, and whether you have unsubscribed | You, when you sign up |
| “Notify me” requests | Email address and the product you asked about | You, when you ask to be told when an item is back in stock |
| Messages | Anything you tell us in the contact form, by email, phone or social media | You |
| Website and technical data | We do not use analytics. Our website hosting provider (Cloudflare) processes basic technical information, such as your IP address and browser type, to deliver the website and keep it secure | Your browser |
We do not intentionally collect special category data (for example health information). If you tell us about an allergy or dietary need so that we can help with your order, we will only use it for that purpose.
3. How we use your information and our lawful bases
UK data protection law requires us to have a lawful basis for each way we use personal information.
| Purpose | Lawful basis |
|---|---|
| Taking, preparing, weighing, packing and delivering your order, including pre-orders | Contract – we need it to fulfil your order |
| Taking payment, including pre-authorising an estimated amount and charging the actual packed weight | Contract |
| Contacting you about your order or delivery (for example a change of date or an item being unavailable) | Contract, and our legitimate interest in running the business smoothly |
| Keeping accounting, tax and food-traceability records | Legal obligation |
| Sending our newsletter and opening or offers news | Consent – you can withdraw it at any time |
| Telling you when an item is back in stock (“notify me”) | Consent |
| Replying to your messages and enquiries | Legitimate interests (answering people who contact us), or steps before a contract |
| Keeping the website secure and working, and understanding how it is used | Legitimate interests; we will ask for your consent before using any non-essential cookies or analytics |
| Dealing with complaints, refunds, product recalls and legal claims | Legal obligation and legitimate interests |
We do not sell your personal information, and we do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.
4. How long we keep it
| Information | How long |
|---|---|
| Orders, invoices and payment records (including delivery details on the order) | 6 years after the end of the financial year they relate to, for tax and accounting purposes |
| Mailing list | Until you unsubscribe. We then keep your email address on a “do not contact” list so that we do not email you again |
| “Notify me” requests | Until we have told you the item is back, or 12 months, whichever is sooner |
| Contact-form messages and emails | Only as long as we need them to deal with your enquiry, unless they relate to an order (in which case we keep them with the order records) |
| Website and analytics data | We do not collect analytics data. Basic technical logs are kept by our hosting provider only for its standard short period |
5. Who we share it with
We only share personal information with organisations that help us run the business, and only what they need. They act as our processors and must keep it secure and use it only on our instructions.
| Service | Provider | Why |
|---|---|---|
| Payment provider | Our card payment provider | To take card payments securely |
| Courier or delivery | Our own delivery service or our courier | To deliver your order |
| Email and mailing platform | Our email provider (Microsoft 365) and, if you join our mailing list, our mailing-list provider | To send order emails and, if you agreed, our newsletter |
| Website hosting | Our website hosting provider (Cloudflare) | To run the website and store orders |
| Professional advisers | Our accountant and other professional advisers | Accounting and legal obligations |
We may also share information if the law requires it, for example with HMRC, the police or a food-safety authority.
6. International transfers
Some of our providers may store or process information outside the UK. Where they do, we will make sure it is protected, for example by using countries covered by UK “adequacy regulations” or by using the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. Keeping it secure
We use reputable providers, limit who can see your information, and use secure (HTTPS) connections.
8. Your rights
You have the right to:
- access the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information (we may need to keep some records, such as invoices, for legal reasons);
- ask us to restrict how we use your information;
- object to us using your information on the basis of legitimate interests, and to object at any time to direct marketing;
- data portability – receive information you gave us in a commonly used format, where we rely on consent or contract;
- withdraw consent at any time, for example by using the unsubscribe link in any email. This does not affect anything we did before you withdrew it.
To use any of these rights, contact us at Joe@WilsonsofDoveridge.co.uk, call us on 07864 323980 or write to us at the address above. There is normally no charge, and we will respond within one month.
9. Cookies and website data
Cookies and similar technologies (such as your browser’s local storage) save small pieces of information on your device.
- Holding page: sets no cookies and does not use analytics.
- Online shop: uses your browser’s local storage to remember your basket and your progress through checkout. This is strictly necessary for the shop to work, so it does not need consent.
- Analytics and advertising: none at present. If we add non-essential cookies, such as analytics, we will ask for your consent first and update this section.
- Links to social media: our Instagram and Facebook links take you to those sites, which have their own privacy and cookie policies.
You can clear cookies and site data at any time in your browser settings.
10. Children
Our shop is intended for adults. We do not knowingly collect information from children.
11. Complaints
If you have a concern about how we use your information, please contact us first at Joe@WilsonsofDoveridge.co.uk or on 07864 323980 so that we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.