At Jamie Oliver’s Fifteen Cornwall and the Cornwall Food Foundation, we value your support and we are committed to protecting your right to privacy. We observe high standards of confidentiality and comply with all applicable laws concerning the protection of personal information, including the General Data Protection Regulation May 2018, in respect of which we are a registered data controller and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
This Privacy Notice explains what happens to any personal data that you provide to us, or that we collect from you whilst you visit our sites, and the steps we take to ensure that it is kept secure.
We also explain your rights and how to contact us about your personal information.
References in this policy to ‘we’ or ‘us’ are to Fifteen Cornwall Limited, Registered in England and Wales – Registered number 05653435 and its owner, the Cornwall Food Foundation, Registered in England and Wales, Registered number 5541800, Registered charity number 1119341.
References to website data in this policy covers your personal information collected through www.fifteencornwall.co.uk and www.cornwallfoodfoundation.org only.
There are hyperlinks on www.fifteencornwall.co.uk and www.cornwallfoodfoundation.org to external websites beyond our control and we would recommend that you read the privacy statement for every website that you visit.
If you have any queries about this Privacy Notice please contact the Data Protection Lead at Fifteen Cornwall Ltd, On The Beach, Watergate Bay, Newquay TR8 4AA or email email@example.com
How we collect your data
We collect your personal data when you make a purchase or booking through our website, or via our reservations team, or if you make a donation to, or volunteer with, or engage in the activities of our charity – Cornwall Food Foundation. We may also collect and process your data if you respond to our request for feedback and fill in a feedback form.
Data collected includes your name, postal address, email address, phone number and, if purchasing from our shop, payment card details. We will ask you for dietary requirements to add to your booking notes.
We also collect, store and process your name and email address when you ask to subscribe to our email marketing updates.
Sensitive personal data
Data Protection law recognises that certain categories of personal information are more sensitive. This is known as ‘sensitive personal data’ and covers health information, race, religious beliefs and political opinions.
We do not collect ‘sensitive personal data’ unless there is a clear reason for doing so to help us make sure the Foundation is serving the people who need it the most and to help report to the funders and supporters of the Foundation
We do not knowingly collect any personal information from a child without the consent of the child’s parent(s). Children under the age of 16 should obtain parental consent before donating or ordering from our website.
Data we collect through our website
In addition to the data we collect through our booking or purchasing forms, we may collect and process additional data about you for the effective running and maintenance of our website.
This includes information about your use of our site including details of your visits such as pages viewed, the resources that you access, traffic data, location data and other communication data.
This information is anonymous and only collected to allow us to understand visitor needs and improve the site.
Like most websites, we use “cookies” to help us make our site – and the way you use it – better. Cookies mean that a website will remember you.
They are small text files that sites transfer to your computer (or phone or tablet). They make interacting with a website faster and easier – for example by remembering your preference settings and automatically filling your name and address in text fields.
We collect some data automatically: If you are simply browsing our website as an anonymous visitor, Fifteen Cornwall and Cornwall Food Foundation may still receive certain information from you, such as your IP address (a number that uniquely identifies a specific computer or other network device on the internet). We collect this for security purposes (e.g. to block disruptive use) and to enable us to track the number of visits and visitors’ geographic locations.
Our website is a safe environment for anyone who visits. As such, donations and purchases made to us online are secure.
How we process and store your data
We use your information to process your booking or purchase, and to verify credit card data.
Booking information is held on a secure system, called Quadranet and marketing data is stored securely on MailChimp.
Our reservations process
Whether making a reservation through the website or via phone, your details will be used in the following way:
- We collect your full name in order to reserve your table
- We collect your email address in order to send you a confirmation email which you will receive following your booking
- We collect your mobile phone number so that we can send you a text message 2 – 3 days before your booking to enable you to easily confirm or cancel your reservation
- Following your visit you will receive a further email from us requesting feedback on your experience
Other ways personal information is needed and used include:
- To analyse, improve and update the activities and content offered by the Fifteen Cornwall website to provide you with the most user-friendly navigation experience.
- To personalise the way Fifteen Cornwall content is presented to you; where we provide personalised services, we may analyse the information you supply so that we can offer more relevant, tailored information. For instance, if you are signed-in or subscribed to email newsletters, you will receive a personalised service.
- For “service administration purposes” which means that Fifteen Cornwall may contact you in relation to a booking or purchase you have made.
- To fulfil any sales contracts you have entered into with Fifteen Cornwall
- To invite you to participate in feedback surveys or research about Fifteen Cornwall and/or our service (participation is always voluntary)
- For marketing purposes where you have specifically and freely consented to receive marketing communications from us
- To use IP addresses and device identifiers to identify the location of users, to block disruptive use, to establish the number of visits from different countries and the number of visits
- We may also use and disclose information in aggregate (so no individuals can be identified) for strategic development and marketing purposes
- When we are legally required to hold certain personal information to fulfil statutory obligations, e.g. for the collection of Gift Aid
- We will also hold information about your details so that we can respect your preferences for being contacted by us
How long we store information
We keep your personal information only for as long as is necessary for the relevant activity and in accordance with legal requirements and tax and accounting rules. This will amount to no more than six years from data capture or longer if required by legislation. In these instances, this will be specified at the point of data capture. Where your information is no longer required, we will ensure it is disposed of in a secure manner.
If you request that we stop sending you marketing communications we will keep a record of your contact details together with the information required to enable us to comply with your request not to be contacted by us.
How we protect your data
We place great importance on the security of your personal information and take appropriate measures to ensure that the information disclosed to us is kept secure, accurate and up to date, and retained only for as long as is necessary for the purposes for which it is intended.
Despite all of our precautions however, no data transmission over the internet (including email) can be guaranteed to be 100% secure. So, whilst we strive to protect your personal information, we cannot guarantee the security of any information which you disclose to us online or otherwise, and you must understand that you do so at your own risk.
It is our policy not to sell, trade or rent your personal information to anyone. So you will not receive communications from other companies or organisations as a result of giving your details to us.
We may need to share limited information with companies that provide a service to us (e.g. helping us prepare and send you communications, or processing direct debit payments). We require these third party companies and agencies to comply strictly with our instructions and with data protection laws and we make sure appropriate controls are in place.
If we run an event in partnership with other organisations your details may need to be shared. In such cases, data will be collected at the point of registration and we will make it clear what would happen to your data should we need to share it with other organisations. We will ensure that the partner organisation keeps your data secure, and does not use it for their own purposes.
We will also comply with legal requests where disclosure is required by law (for example to government bodies for tax purposes, or to law enforcement agencies for the prevention and detection of crime), subject to such bodies providing us with a formal and relevant request in writing.
Security–confidential financial information
If you use your credit or debit card to make a purchase online or over the phone, or to take a deposit for your booking for group bookings of tables more than twelve, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).
This is a set of requirements that must be complied with by all organisations that collect, batch, transmit and process credit and debit card transactions, to ensure procedures are in place to protect personal and sensitive information from theft and fraud.
We do not store your credit or debit card details at all, following the completion of your transaction. All card details and security codes are securely destroyed once the payment or donation has been processed by staff who are authorised and trained to process payments.
When fundraising, the Cornwall Food Foundation follows the principals set out by the Fundraising Regulator.
Cornwall Food Foundation does not use donor information in case studies or other types of publicity without explicit consent and complies at all times with the duties of confidentiality as laid out in the General Data Protection Regulation 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
If you have made a donation to the Cornwall Food Foundation, we do not automatically add your details to a marketing database without your specific and express consent.
Our legal basis for processing your information
Although in many cases we will seek consent to process your personal data, in some instances we may process your information without consent when we are legally allowed to do so. This will only be where it is necessary to do so to fulfil a contract with you or where it is in in our legitimate interests to do so and where we are confident that such processing is not likely to prejudice your legitimate interests or rights and freedoms.
Where we are processing your personal data on the basis of consent that you have given us, you are entitled to withdraw that consent at any time such that we can no longer rely on it as a basis for continuing to process your personal information.
You retain control of how we use your data and you have the right to ask us to stop processing your personal information, which we will do. In some circumstances, we may legally be required to retain your personal information for audit purposes. Please contact firstname.lastname@example.org if you have any concerns.
You also have the right to request a copy of the information Fifteen Cornwall hold about you. If you want to access your information, please contact: email@example.com
This will be processed within 28 days.
Under the General Data Protection Regulation you are also granted a number of additional rights. These include:
- The right to rectification
- The right to erasure
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
For more information on these rights please read the relevant guidance issued by the ICO at https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/individuals-rights/
If you would like to make a complaint about how we process your personal data, please contact us at firstname.lastname@example.org. You will receive a response to your complaint within 28 days.
If you are not happy with how your complaint is dealt with, you should contact the Information Commissioner’s Office. Alternatively, you are entitled to make a complaint to the Information Commissioner’s Office without first referring your complaint to us.
For further information please see the Information Commissioner’s guidance.
Changing your communication choices
You can unsubscribe from Fifteen Cornwall and/or Cornwall Food Foundation emails at any time using the button in the email footer. You can also update your marketing preferences from the email footer.
If at any time you wish to discuss how we communicate with you, or update the information we hold, please get in touch with our Marketing and Communications Team:
- Write to: Marketing and Communications, Jamie Oliver’s Fifteen Cornwall, On The Beach, Watergate Bay, Newquay TR8 4AA
- Email: email@example.com
- Call: 01637 861000
Fifteen Cornwall and Cornwall Food Foundation will only contact you for marketing purposes if you have provided us with specific and freely given consent to do so.
When we collect any personal information on our website you will be given the option to opt-in to receive communications from us by email. We use a process called double opt in, which means you will receive an email from us to confirm your subscription before you are added to the list. You will then be given the opportunity to select your communication preferences.
If at any time you want to alter your preferences, or request that we stop communicating with you, please let us know by calling our marketing team on 01637 861000 or by sending an email to firstname.lastname@example.org or email@example.com.
Cookies are small text files that are stored on a visitor’s computer and enable information to be remembered by a website during a visitor’s current visit and in some cases are stored to be used on future visits to a particular website.
Depending on the web browsing program used cookies can be deleted or disabled but this may prevent you from using the website in the way you expected. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
When someone visits our website we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make any attempt to find out the identities of those visiting our website.
More information about how Google uses Analytics data is available at https://support.google.com/analytics/answer/6004245
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
How do I change my cookie settings?
Most web browsers allow some control of most cookies through the browser settings. To find out more, including how to see what cookies have been set and how to manage and delete them, we would suggest the following reference sites:
- Information Commissioner’s Office – https://ico.org.uk/
- Org – http://www.aboutcookies.org/
- Wikipedia – https://en.wikipedia.org/wiki/HTTP_cookie