Cafe 21 are what is known as the ‘Data Controller’ of the personal data that you provide to us.
We collect personal data from our Suppliers which includes name, address, email, phone number and bank account details.
We also collect personal data from our customers which include names, email, phone number and credit card information.
2.0 WHY WE NEED YOUR DATA
Cafe 21 collect and process your personal data so that we can create reservations and process payments for materials ordered and purchased & improve user website experience. We will not collect any personal data from you that we do not need and we go to great lengths to keep your personal data secure.
3.0 WHAT WE DO WITH YOUR DATA
All the personal data is processed within the UK, however, for the purposes of IT hosting and maintenance by certain systems and databases that we use, this information may be located on servers within the European Union.
We do not share your personal data with any one, unless we are required by law to do so.
We have a Data Protection Procedure in place to oversee the effective and secure processing of your personal data. More information on this is available on request.
To continually improve user experience on our website, we use Google Analytics, a service which records website traffic. Google Analytics does not identify individual users. To opt out of google analytics, go here: https://support.google.com/analytics/answer/181881?hl=en
1ST PARTY COOKIES
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
3RD PARTY COOKIES
Our e-Commerce system uses 3 cookies to keep a track of your shopping cart data. These are:
- woocommerce_cart_hash – 1 month expiration
- woocommerce_items_in_cart – 1 month expiration
- wp_woocommerce_session_ – 1 month expiration
Google analytics creates the following cookies to anonymously track users (see section 4.0):
- _ga – 2 years expiration
- _gid – 24 hours expiration
- _gat – 1 minute expiration
- AMP_TOKEN – 30 seconds to 1 year expiration
- _gac_<property-id> – 90 days expiration
We also use a cookie consent plugin to notify the user of the presence of cookies & analytics on the website. The plugin itself will create a cookie to avoid pestering the user by showing the message repeatedly. This is:
- catAccCookies – 1 month expiration
6.0 HOW LONG WE KEEP YOUR DATA
- Customer Phone Numbers for creating reservations – 2 years
- Customer Direct Personal Emails for creating reservations & general enquiries – 2 years
- Contact Forms (name, email & message) for creating reservations & general enquiries through the website (Through gmail 0Auth2.0 or sendgrid SMTP API) – Ongoing – customers have the right to ask for their data to be deleted at any time.
- Comments & Reviews (name, email, website & comment) for social interaction with posts and products on the website – Ongoing – customers have the right to ask for their data to be deleted at any time.
- Customer Newsletter Personal Emails to send marketing emails through mailchimp – Ongoing – customers have the right to opt out at any given time.
- Customer Credit Card Details to make payments – 7 years
- CVs for recruitment of vacant positions – Unsuccessful candidates are deleted. Successful Candidates through till the end of employment.
- Employee Personal Information for employment records – up till 1 year after end of employment.
- Employee Bank Details to pay employee wages – 7 years
- Suppliers Contact Information to contact and order materials – Ongoing during contract period
- Suppliers Billing Information to pay invoices – 7 years
7.0 WHAT ARE YOUR RIGHTS
Data Protection Regulations and Laws ensure that Cafe 21 process your personal data robustly and appropriately. You have the following rights:
- The right to be informed about the personal data that Cafe 21 processes on you.
- The right of access to the personal data that Cafe 21 processes on you.
- The right to rectify your personal data, if it is incorrect/inaccurate or changes.
- The right to erasure of your personal data, in certain circumstances.
- The right to restrict processing of your personal data.
- The right to data portability, in certain circumstances.
- The right to object to the processing of your personal data when it is based on public or legitimate interest.
- The right not to be subjected to automated decision making and profiling.
- The right to withdraw consent at any time.
Where you have consented to Cafe 21 processing your personal data, you have the right to withdraw that consent, at any time, by contacting us (see Section 6.0).
If you wish to raise a complaint on how we have handled your personal data, you can contact us to have the matter investigated.
If you are not satisfied with our response or believe that we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office: https://ico.org.uk/