Privacy Policy TheKefirCompany.co.uk
About our privacy policy
TheKefirCompany.co.uk is committed to your privacy. We therefore only process data that we need for (the improvement of) our services and treat the information we have collected about you and your use of our services with care. We shall never make your data available to third parties for commercial purposes. This privacy policy applies to the use of the website and the services of TheKefirCompany.co.uk made available through it. The initial date of validity of these terms and conditions is 22 June 2018; by publishing a new version, the validity of all previous versions expires. This privacy policy sets out which data about you we collect, what this information is used for and with whom and under what conditions these data may be shared with third parties. We also explain to you how we store your data and how we protect your data against abuse and what rights you have with respect to the personal data you provide us with. If you have any questions about our privacy policy, please contact our contact for privacy matters, whose contact details can be found at the end of our privacy policy.
About the data processing
Below you can read how we process your data, where we store them or have them stored, which security technologies we use and who has access to the data.
Web shop software
WooCommerce
Our web shop is developed with software from WooCommerce, and for our web hosting we have chosen Ulanti. Personal data you make available to us for the purpose of providing our services will be shared with this party. Ulanti has access to your data to provide us with (technical) support, they will never use your data for any other purpose. On the basis of the agreement that we have concluded with them, Ulanti is obliged to take appropriate security measures. These security measures consist of SSL encryption and a strong password policy. Backups are made on a regular basis to prevent loss of data.
WooCommerce
Our web shop is developed with software from WooCommerce, we host our web shop on a server under our own management. We have taken appropriate technical and organisational measures to prevent abuse, loss and corruption of data to the extent possible. These security measures include at least SSL encryption and a strong password policy. Backups are made on a regular basis to prevent loss of data.
Web hosting
Hostnet
We purchase web hosting and email services from Hostnet. Hostnet processes personal data on our behalf and does not use your data for its own purposes. It may, however, collect metadata on the use of the services. These are not personal data. Hostnet has taken appropriate technical and organisational measures to prevent loss and unauthorised use of your personal data. Hostnet is bound by confidentiality under the agreement.
Email and mailing lists
MailChimp
We send our email newsletters using MailChimp. MailChimp will never use your name and email address for their own purposes. At the bottom of every email sent automatically via our website you will see the unsubscribe link. This gives you the option to no longer receive our newsletter. Our personal data are stored securely by MailChimp. MailChimp uses cookies and other internet technologies to monitor whether emails are opened and read. MailChimp reserves the right to use your data to further improve the service and to share data with third parties as part of that service.
Emails for marketing purposes
Existing customers receive two marketing emails from TheKefirCompany.co.uk. An email asking the customer to write a review about their purchase and an email giving the customer a discount code for their next purchase.
Visitors of TheKefirCompany.co.uk receive a marketing email from TheKefirCompany.co.uk when they leave the shopping cart before making a purchase or when they cancel their order.
Business email
For our regular business email we use the services of Hostnet. This party has taken appropriate technical and organisational measures to prevent abuse, loss and corruption of your and our data to the extent possible. Hostnet does not have access to our inbox and we treat all our email traffic confidentially.
Hostnet
For our regular business email we use the services of Hostnet. This party has taken appropriate technical and organisational measures to prevent abuse, loss and corruption of your and our data to the extent possible. Hostnet does not have access to our inbox and we treat all our email traffic confidentially.
Payment processors
Stripe
To process (part of) the payments in our web shop we use the Stripe platform. Stripe processes your name and address details, as well as your payment details such as your bank account or credit card number. Stripe has taken appropriate technical and organisational measures to protect your personal data. Stripe reserves the right to use your data to further improve the service and to share (anonymised) data with third parties as part of that service. In the case of a deferred payment application (credit facility), Stripe shares personal data and data relating to your financial position with credit rating agencies. All the above safeguards with respect to the protection of your personal data are also applicable to the parts of Stripe’s services for which they engage third parties. Stripe will not store your data for longer than permitted by law.
Reviews
We collect reviews via the platform of WooCommerce. If you leave a review via WooCommerce, you will be required to provide your name and email address. TheKefirCompany.co.uk publishes your chosen name on its own website.
Shipping and logistics
PostNL
If you place an order with us, it is our task to have your package delivered to you. We use the services of PostNL for the execution of the deliveries. This requires that we share your name and address details with PostNL. PostNL only uses this data for the performance of the agreement. In the event that PostNL engages subcontractors, PostNL will also make your data available to these parties.
Invoicing and Accounting
Snelstart
To maintain our records and accounts we use the services of Snelstart. We share your name and address details and data relating to your order. These data are used to process sales invoices. To maintain our records and accounts we use the services of Snelstart. We share your name and address details and data relating to your order. These data are used to process sales invoices. Your personal data are sent and stored securely. Snelstart is bound to secrecy and will treat your data confidentially. Snelstart does not use your personal data for purposes other than those described above.
External Sales Channels
Amazon.co.uk
We sell (part of) our products via the Amazon.co.uk platform. If you place an order via this platform, Amazon.co.uk will share your order and personal data with us. We use these data to process your order. We treat your data confidentially and have taken appropriate technical and organisational measures to protect your data against loss and unauthorised use.
Purpose of the processing
General purpose of the processing
We only use your data for the purpose of providing our services. This means that the purpose of the processing is always directly related to the order you place. We do not use your data for (targeted) marketing purposes. If you share data with us and we use these data to contact you at a later stage – other than at your request – we will ask you for your explicit consent to do so. Your data will not be shared with third parties other than for the purpose of meeting accounting and other administrative obligations.
These third parties are all bound to secrecy on the basis of the agreement between them and us or an oath or legal obligation.
Automatically collected data
Data automatically collected by our website are processed for the purpose of further improving our services. These data (e.g. your IP address, web browser and operating system) are not personal data.
Cooperation in tax and criminal investigations
In some cases, TheKefirCompany.co.uk may be under a legal obligation to share your data in connection with fiscal or criminal investigations carried out by the government. In such a case, we shall be required to share your data, but we will object to it within the limits of the law.
Retention periods
We will store your data for as long as you are our customer. This means that we will keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also regard this as a request to be forgotten. Pursuant to applicable administrative obligations we must retain invoices with your (personal) data, so we will store these data for as long as the applicable term runs. However, employees no longer have access to your customer profile and the documents we have created based on your order.
Your rights
Pursuant to applicable Dutch and European legislation, you, as the data subject, have certain rights with respect to the personal data that are processed by or on behalf of us. We will explain below what these rights are and how you can exercise them. In principle, in order to prevent abuse, we only send statements and copies of your data to your email address already known to us. In the event that you wish to receive the information via another email address or, for example, by post, we will ask you to furnish proof of identity. We keep records of completed requests; in the event of a request to be forgotten, we process anonymised data. You will receive all statements and copies of data in the machine-readable data format we use within our systems. You have the right to lodge a complaint with the Data Protection Authority at any time if you suspect that we have handled your personal data improperly.
Right to access
You have the right to access the data that we process (or have processed) and that are person-specific or are traceable for that purpose, at any time. You can submit a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the email address known to us containing an overview of the processors in possession of these data, stating the category in which we have stored these data.
Right to rectification
You have the right to have the data that we process (or have processed) and that are person-specific or are traceable for that purpose rectified, at any time. You can submit a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the details have been modified, to the email address known to us.
Right to restriction of processing
You have the right to restrict the processing of the data that we process (or have processed) and that are person-specific or are traceable for that purpose, at any time. You can submit a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data will no longer be processed until you lift the restriction, to the email address known to us.
Right to portability
You have the right to have the data that we process (or have processed) and that are person-specific or are traceable for that purpose processed by another party, at any time. You can submit a request to this effect to our contact person for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you statements or copies of all data about you that we have processed or that have been processed by other processors or third parties on our behalf, to the email address known to us. In all probability, in such a case, we will no longer be able to continue to provide services because the secure linking of databases can no longer be guaranteed.
Right to object and other rights
In some cases, you have the right to object to the processing of your personal data by or on behalf of TheKefirCompany.co.uk. If you object, we will immediately cease data processing in anticipation of the handling of your objection. If your objection is well-founded, we shall make statements and/or copies of data that we process or have processed available to you and shall permanently cease processing. Moreover, you have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a manner that this right applies. If you believe that this is the case, please contact our contact for privacy matters.
Cookies
Google Analytics
Our website is used to place cookies belonging to the US firm Google, as part of the Analytics services. We use this service to keep track of and receive reports on how visitors use the website. This processor may be obliged to allow access to these data under applicable legislation and regulations. We collect data about your browsing behaviour and share these with Google. Google can interpret these data in conjunction with other datasets and thus follow your movements on the internet. Google will use these data to offer, among other things, targeted advertisements (Adwords) and other Google services and products.
Third-party cookies
In the event that third-party software solutions use cookies, this will be stated in the cookie policy.
For more information about cookies, read our cookie policy.
Amendments to the privacy policy
We reserve the right to amend our privacy policy at any time. However, on this page you will always find the most recent version. If the new privacy policy affects the way in which we process data about you already collected, we shall notify you by email.
Contact details
The Kefir Company
Blauwkapelseweg 99
3572KD Utrecht
The Netherlands
E service@thekefircompany.co.uk
Contact person for privacy matters
Bert Mol