At dragonphyre chocolat we are committed to keeping your personal data safe and secure.
This Policy gives you detailed information on when and why we collect your personal information, how we intend to use it and how we keep it secure. This Policy also sets out your right in relation to your personal information. This Policy works in conjunction with our terms and conditions and only applies to the personal information that we obtain, not information that may be collected from your interactions with any third parties.
Any changes we make to our Policy in the future will be posted on this page and, where appropriate, notified to you on our website or by e-mail. It was last updated on 26th March 2019.
This Policy relates to the dragonphyre chocolate ltd so when we mention “dragonphyre chocolat”, “dragonphyre”, “we”, “us”, or “our” in this Policy we are referring to dragonphyre chocolate ltd. References to “you” and “your” are references to customer or potential customers and users of our website.
dragonphyre chocolate ltd, a limited company incorporated in England and Wales with company number 11181081 and registered office at Sovereign House, Sterling Drive, Llantrisant, CF72 8YX is the controller and responsible for this website.
In this Policy the term “Data Protection Legislation” means the EU General Data Protection Regulation 2016/679 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 as may be amended or replaced; together with all other applicable legislation in force from time to time relating to privacy or data protection.
1) How we collect your personal information
We collect your information at the point you decide to interact with us. This could include purchasing online, signing up for our email newsletter, over the telephone, or in person when you sign up in our store to receive information from dragonphyre.
We collect your data when:
- When you register for an account or use dragonphyre.co.uk
- When you sign up for information in our store
- When you register for our loyalty scheme
- When you contact us by telephone or email
- When you book a place at one of our events
- When you enter a prize draw or competition run by dragonphyre.
- When you complete a survey from dragonphyre or give us feedback
- When completing any forms for transactional, employment or other purposes
- When you visit our website
2) The Data we collect
We are committed to only collecting information about you that is necessary to carry out our business, provide the particular products or services you’ve requested and to keep you up to date about all the latest news from dragonphyre. It’s your choice if you want to give us your personal information. However, if you decide not to, you may not be able to buy from our website, and you may not receive the best customer experience.
- Title, Name, Surname, Email address, Date of Birth & Contact phone number
- Purchase and transaction history
- Payments to and from you and other details of products and services you have purchased from us
- Interactions with us through our call centre
- Payment details (i.e.your bank name, account number and sort code, and your card’s security/CVV code. Don’t worry,we don’t keep these)
- Delivery and Billing addresses
- Social media information (i.e. Information collected if you choose to link your social media accounts with us).
- Automatically populated IP address*
- Information from cookies**
- Information about your phone/laptop (including device type and your location data) as well as how you use our website and app
3) How we use your Data and why
We like to get to know our customers and provide them with the best possible experience. We use information we collect about you in a number of ways, including to provide the products and services that you have requested, offering you a personalised experience and informing you about our special events and exciting news, so that we can offer the best possible experience. We will also contact you to give you assurance that your delivery is on its way or if we have a query about your delivery.
We are permitted by Data Protection Legislation to process your personal data in the way that we do because the processing is necessary:
- to provide you with products or services you have purchased
- in order to comply with a legal obligation to which we are subject or
- for the purposes of the legitimate interests that we pursue; which are (i) to give you the best service/products; (ii) to optimise your customer experience and provide you with a safe, smooth, efficient, and customised experience; (iii) to run and administer our business; (iv) to discharge our legal obligations; (v) to prevent and detect fraud; and (vi) to evaluate, develop and improve our products and services.
We’ll make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Your data is also anonymised and then used to optimise our systems and procedures.
4) Sharing Your Information
We will not sell, personal information to third parties. However we may share your data with some companies as an essential part of being able to provide our products and services to you.
The following categories of recipients may receive your personal information and process it for the purposes outlined in this Policy:
- Companies that are linked to when you make a purchase with us, like our payment service providers, delivery companies, credit reference agencies and third party call centres who provide IT and system administration services or other assistance to help us fulfil our orders
- From time to time we may screen our database against recognised data files such as National Change of Address file, so that we keep our database up to date
- Professional service providers, such as marketing agencies, advertising and website hosting businesses that help us to run our business
- Credit reference agencies, law enforcement and fraud prevention agencies, so that we can help tackle fraud.
- Other business entities if we plan to merge with or be acquired by that business entity, or if we undergo a re-organisation with that entity; or if they become a successor in interest, in the event of a liquidation or administration of dragonphyre
5) Will We Transfer Your Information Overseas?
The information that we collect from you may be transferred to or stored at a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.
When we, or our permitted third parties, transfer your information outside the EEA, we or they will impose obligations on the recipients of that data to protect your information to the standard required in the EEA or otherwise require the recipient to subscribe to international frameworks intended to enable secure data sharing. In the case of transfers by us, we will put in place appropriate safeguards to ensure that your information remains adequately protected. If you would like more details about the safe guards that we rely on, please contact us firstname.lastname@example.org
6) Marketing Messages and How To Un-Subscribe
We like to get to know our customers and provide them with the best possible experience. We may use your information to form a view on the products or services we think you would like, or that may be of interest to you.
You’ll receive marketing messages from us if you have requested information from us or purchased products or services from us and, in each case, you have not opted out of receiving that marketing. We may also market to you if we have received your express consent to do so including where we have collected your details in connection with a competition or other promotion and you have agreed to receive marketing from us.
You can stop receiving marketing messages from us at any time. Once you do this, we will update your profile to ensure that you don’t receive further marketing messages. Note that stopping marketing messages will not prevent us from sending you service communications; so you will still receive order updates and delivery information.
You can unsubscribe in a number of ways.
- If you do not wish to receive any further posted mailings from us, please email: email@example.com and ensure you include your full name and address as well as account number if applicable. As printed information is often printed in advance, it may take up to 8 weeks for the process to be complete, for emails it may take up to 4 weeks.
- You can un-subscribe from email and SMS messages, including our newsletters and alerts, at any time by clicking the un-subscribe link that comes within every communication we send to you.
- If you have opted in on our website to receive offers in the post from companies who we think may be of interest to you, but have now changed your mind, please email: firstname.lastname@example.org with “UNSUBSCRIBE REQUEST” in the subject line and the email address that you wish to be removed within the email. We will action any unsubscribe request from you as promptly as possible.
7) Dragonphyre adverts online
Like most companies selling products and services online, we engage in online advertising that appears on third party websites to keep you aware of what we’re up to and to help you see and find our products and access our services. We target Dragonphyre banners and ads to you when you are on other websites and apps. We do this using a variety of digital marketing networks and a variety of advertising technologies like pixels, ad tags, cookies and mobile identifiers, as well as specific services offered by some sites and social networks, such as Facebook Custom Audience Service.
The banners and ads you see will be based on information we hold about you, from what you’ve bought in the past or browsed on our website.
8) Keeping your information
We’ll hold on to your information in line with our customer retention policy. We only retain information for as long as it is required for the purposes set out above or as may be required to comply with a legal or regulatory obligation to which we are subject. If it is reasonably necessary or required to resolve a dispute, prevent fraud and abuse, or enforce our terms and conditions, we may keep hold of some of your information, even after it is no longer needed to provide products or services to you.
9) Data security
We’re committed to keeping your information safe and we take your online security seriously. We’ve put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They’ll only process your personal data on our instructions and they’re subject to a duty of confidentiality.
We’ve put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal information transmitted to us or provided though the website and any transmission is at your own risk.
10) Your legal rights
You have a lot of rights relating to your personal information: And it’s important to us that you understand what these rights are and how you can exercise them.
- The right to be informed about how your personal information is being used
- The right to access the personal information we hold about you
- The right to request the correction of inaccurate personal information we hold about you
- The right to request that we delete your data, or stop processing it or collecting it
- Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- The right to ask us to stop or start sending you direct marketing messages… see Section 6 for more information about your right to un-subscribe from receiving marketing communications
- The right to withdraw consent to our processing of your personal data (to the extent we are relying on consent to process your personal data). If you withdraw your consent, we may not be able to provide certain products or services to you
- The right to request that we transfer or port elements of your data either to you or another service provider in certain circumstances
- The right to complain to your data protection regulator — in the UK, the Information Commissioner’s Office regulates and supervises the use of personal data-via their helpline on 03031231113
If you want to exercise your rights, have a complaint, or just have questions, please contact us:
Telephone: 01873 269053
Write to: Dragonphyre Customer Service, Sovereign House, Sterling Drive, Llantrisant, CF72 8YX
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request in order to speed up our response.
Time limit to respond – Any request for access to a copy of your personal data must be in writing. We try to respond to all legitimate requests within one month in compliance with Data Protection Legislation. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.