Privacy Policy

Introduction 

When we say ‘personal data’ we mean identifiable information about you, like your name, email, address, telephone number, bank account details, payment information, support queries and so on. If you can’t be identified (for example, when personal data has been aggregated and anonymised) then this notice doesn’t apply. 

We may need to update this notice from time to time. Where a change is significant, we’ll make sure we let you know – usually by sending you an email.

Who are ‘we’? 

When we refer to ‘we’ (or ‘our’ or ‘us’), that means Sweet as…. 

We provide confectionery.

Our principles of data protection 

Our approach to data protection is built around four key principles. They’re at the heart of everything we do relating to personal data.

Transparency: We take a human approach to how we process personal data by being open, honest and transparent.

Enablement: We enable connections and efficient use of personal data to empower productivity and growth.

Security: We champion industry leading approaches to securing the personal data entrusted to us.

Stewardship: We accept the responsibility that comes with processing personal data.

How we collect your data 

The ways we collect it can be broadly categorised into the following:

Information you provide to us directly: This is the main way in which we collect your personal data. When you contact us for our services we might ask you to provide personal data to us. 

Where we collect personal data, we’ll only process it:

• to perform a contract with you, or
• in accordance with a legal obligation, or 
• where we have your consent.

If we don’t collect your personal data, we will be unable to provide you with our services due to the nature of the service we provide.

How we use your data 

First and foremost, we use your personal data to provide you with any services you’ve requested and to manage our relationship with you. We also use your personal data for other purposes:

To communicate with you. This may include:

• providing you with information you’ve requested from us (like training or education materials) or information we are required to send to you
• operational communications, like changes to our websites and services, security updates, or assistance with using our websites and services
• marketing communications (about Sweet as… or another product or service we think you might be interested in) in accordance with your marketing preferences
• asking you for feedback or to take part in any research we are conducting 

How we can share your data 

There will be times when we need to share your personal data with third parties. We will only disclose your personal data to:

• regulators, law enforcement bodies, government agencies, courts or other third parties where we think it’s necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights. Where possible and appropriate, we will notify you of this type of disclosure and obtain your consent
• other people where we have your consent.

Security 

Security is a priority for us when it comes to your personal data. We’re committed to protecting your personal data and have appropriate technical and organisational measures in place to make sure that happens. 

Retention 

The length of time we keep your personal data depends on what it is and whether we have an ongoing business need to retain it (for example, to provide you with a service you’ve requested or to comply with applicable legal, tax or accounting requirements).

We’ll retain your personal data for as long as we have a relationship with you and for a period of time afterwards where we have an ongoing business need to retain it, in accordance with our data retention policies and practices. Following that period, we’ll make sure it’s deleted or anonymised.

Your rights 

It’s your personal data and you have certain rights relating to it. When it comes to marketing communications, you can ask us not to send you these at any time – just follow the unsubscribe instructions contained in the marketing communication, or send your request to info@sweetas.org,.uk 

You also have rights to:

• know what personal data we hold about you, and to make sure it’s correct and up to date
• request a copy of your personal data, or ask us to restrict processing your personal data or delete it
• object to our continued processing of your personal data

You can exercise these rights at any time by sending an email to tinfo@sweetas.org.uk 

If you’re not happy with how we are processing your personal data, please let us know by sending an email to info@sweetas.org.uk. We will review and investigate your complaint and try to get back to you within a reasonable time frame. You can also complain to your local data protection authority. They will be able to advise you how to submit a complaint.

How to contact us 

We’re always keen to hear from you. If you’re curious about what personal data we hold about you or you have a question or feedback for us on this notice, our website or services, please get in touch.

We prefer to communicate with you by email – this ensures that you’re put in contact with the right person, in the right location, and in accordance with any regulatory time frames.

Our email is info@sweetas.org.uk