Privacy Notice

About Us

This Privacy Notice relates to the personal data you give over this website and other data we collect. We are the data controller named in the Contact Us section. We share some or all of your personal data with other businesses, see the Contact Us section for more information for the full list and why we share it with them

The Personal Data we collect from you

We collect the personal data you provide us when you fill in the blanks in the website forms. You have the right to know what we have by asking us see Contact us and your Rights below.

We also collect the following personal data from you:

• When you fill in a contact form online
• Information you provide when you telephone us
• Email us
• Write to us
• Ask any questions
• Make a complaint or any other reason
• The information you provide when you respond to a survey request or enter a competition including whether you win a prize
• The information you put in any emails to us for any reason including your email address



Using your data to fulfil the Contract

To fulfil the request or contract we use your data, to invite you to an online presentation, to decide whether to allocate you brochure, materials or products, manage and track your request or order, update you on progress, generate delivery notes and invoices, process payments and administration generally. We may have to use third parties to help us achieve these aims in accordance with our legitimate interests.

Sharing with others to deliver the contract and for legitimate interests

To help us fulfil the request or contract we share your data with these parties for the reasons below as it is in our legitimate interests to do so having taken into account all relevant factors around your privacy. If we do not engage these external contractors we would not be able to deliver our services. We require them to be GDPR compliant and enter data processor contracts with us or ensure their contracts make appropriate statements.

Our external email provider processes all our incoming and outgoing emails. Email is how we confirm and manage your order, manage the security of access and passwords on your account and deal with any enquiries and complaints.

We may need to use Royal Mail, or other carrier to send you any brochures.

The following is a list of the outside parties we use

Royal Mail group for delivery services - privacy notice https://www.royalmail.com/business/privacy-policy/

Duda for webforms and delivery of enquiry response – privacy notice https://www.duda.co/legal/privacy

Zoom for online presentations – privacy notice https://explore.zoom.us/docs/en-us/privacy.html

This may change from time to time so if you continue to use us or keep in contact with us you will be dealing with us on our updated Privacy Notice. We will endeavor to notify you of any changes but this may not be possible. We will set out on our current Privacy Notice the date it came into force.

Who else we share your personal data with for legitimate interest reasons

We share your personal data with the following parties for reasons of legitimate interest:

- we use a cloud based Customer Relationship Management software which means your personal data is on their cloud servers as our data processor.

- we use an outside party to handle your telephone calls regarding your order, account or complaints. They need to have your data to identify and deal with your query.

- we use Third party vendors who help us to manage and maintain the IT infrastructure, website;

- we use Logistics and delivery providers who enable us to deliver products you request or order on our websites;

- we use professional advisors, such as lawyers, accountants, debt collectors and consultants;

Cookie Policy

We use online behavioural advertising (OBA) which allows us to deliver targeted advertising to visitors. As you browse our site, some of the cookies used are advertising cookies, so we can understand what sort of pages you are interested in. It then generates adverts which we believe may interest you based on your use of our site. The OBA techniques we use will not collect personal information such as your name, email address, postal address or phone number. We may also share anonymised behavioural data with advertising partners. This may mean that when you are on other websites, you will be shown advertising based on your behaviour on our website. We may also show you advertising on our site based on your behaviour on other sites you have visited and where you appear to have given permission. This is known as behavioural retargeting and is another form of OBA that allows us and some of our advertising partners to show you ads based on your browsing patterns and interactions with other sites. You can opt out of this form of marketing, but you will still see adverts when you visit our site, they just will not be personal for you

Special Category Data

We collect Sensitive or Special Category Personal data of the type set out below and the reasons for its necessity:

- about your physical health. We need this information so we can help you use find the best weight loss programme. If you are unable to give your consent we will not be able to give the best advice

We require these details in order to ensure we provide you with the correct service.

Adding Data Together

In order to help us to be efficient with the personal data we have about you we will combine the data we get from the following sources or interactions with you or third parties:

• any paper based documents you have or do provide us with
• data you provide over the telephone (including any text or other messages)
• competition or other entries to surveys or similar interactions from time to time
• any email information

In order to deliver the customer service we want you to have we engage with external providers as listed above and this entails us sharing your personal data with them.

Retention of Data

We will keep your data for 6 months after the request if it does not lead to any order, and if it does for 7 years after the year of order so we can comply with contract law issues, product liability issues, insurance issues, company law obligations, record keeping for accounting and tax audits. If there are any complaints or questions on product liability or insurance issues we will keep your data for 6 years after the matter is dealt with. We may hold onto data were there are legal reasons to retain it.

Where we process your personal data to fulfil:

- a contract with you, we will process such personal data until we fulfil that contract and for so long thereafter as may be necessary to keep a record of that contract, which will typically be for 6 years, and to deal with any complaints or claims relating to that contract, which will be until the final resolution of such complaints or claims (having regard to the nature of any potential claims and the limitation of liability periods that apply to them); or

- a legal obligation (such as anti-Money Laundering, tax and accounting obligations), we will process such personal data for so long as necessary to fulfil that obligation; or

Where we process your personal data based on:

- our legitimate interest, we will process such personal data for so long as necessary to achieve that legitimate interest, which will typically be for 6 years after we collect your personal data or the last time we use your personal data (or longer in relation to any legal claims that might arise having regard to the nature of any potential claims and the limitation of liability periods that apply to them); or

-your consent, for example, to send you marketing information, we will process such personal data until you withdraw that consent. Please bear in mind that it may take a short time to process any withdrawal of your consent. We aim to do this as soon as reasonable after receipt of your request, although you may still receive emails that are already in process around the time of your withdrawal.

Marketing

Where you have given consent to market you we will send you our marketing and promotional materials for services, products, surveys, competitions, events and other activities we think useful to you.

- by telephone to the numbers provided. We ask that you notify us of any changes to your numbers.

- by text or picture message. Please help us by telling us of any changes to your numbers so we can keep our records up to date and deliver you the relevant service.

- by email. We may promote our products to you by email until you unsubscribe. The unsubscribe option will be present in any marketing email we send. We may send you our marketing by email as you have bought goods from us.

Where permitted we may market you with the products of carefully selected third parties.

International Data Transfers

When we send your personal data to a country out of the EU, Iceland, Norway, Lichtenstein, Andorra, Argentina, Canada (commercial organisations), Faeroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland and Uruguay or it may have a lower legal standard of data protection to our country. Where this is the case we ensure we put in place measures to ensure a similar standard to that we require at home.

If any party we use to process or share your data with is based in a country not deemed to have adequate data protection laws we make sure that they apply appropriate security processes to keep it secure.

Your rights regarding your personal information

Data privacy laws provide you with a number of rights over your personal information.

You may be entitled to:

• ask us for access to the personal information we hold about you;
• request the correction and/or deletion of your personal information;
• request the restriction of the processing of your personal information, or object to that processing;
• withdraw your consent to the processing of your personal information (where we are processing your personal information based on your consent);
• request for the receipt or the transfer to another organisation, in a machine-readable form, of the personal information that you have provided to us; and
• complain to your local data protection authority if your privacy rights are violated, or if you have suffered as a result of unlawful processing of your personal information.

If you would like to exercise your rights, please let us know by getting in touch with us as set out in the Contact us section below.

Change of Purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Contact Us

If you have any questions please contact us:

By filling out the contact us form

By email: hello@eatingwithattitude.co.uk

Call: 01244 455121

By Postal address: The Data Protection officer. Eating with Attitude. Unit1 Old Marsh Farm Barns, Old Marsh Farm Road, Flintshire. CH5 2LY

You can contact Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Telephone: 0303 123 1113 Fax: 01625 5245