Privacy Policy
How are we use your personal data
- Your personal data is used by us to contact you through text message/email/phone call to inform you of our terms and conditions, any service issues or delays or to notify you of your meal plan expiry.
- Your personal data is stored by us on a spreadsheet which is saved and secured in a business account of Dropbox that is GDPR compliant.
- There are only two individuals that have access to your data – both the director and one shareholder.
- We aim to hold your personal data for no more than three months in the event of you contacting us again. Following three months, we will delete your data from our business spreadsheet.
- Whilst placing an order you enter the details on our website. You receive a copy of the personal data you submitted to us and we hold the email either for the length of your order or for three months maximum.
- You may receive email or text message or phone call from us for marketing purposes if you have indicated that you are happy for us to contact you. If you do not confirm to us before 25 May then we will be unable to contact you for any concerns.
- You can withdraw your consent at any point of time by contacting 07886371131 through text message or email us on tiffinplanet@live.com.
Rights for individuals
The right to be informed
Please read the Privacy notice.
The right of access
GDPR gives people the right to receive a copy of any personal information a company holds on them. If an individual requests for their data then the requests will be dealt without delay and within one month, unless the request is particularly complex in which case a further two months may be allowed.
The right of rectification & the right to erasure
GDPR gives people the right to have their personal data erased or amend the data without undue delay.
The right to restrict processing
GDPR gives people the right to ‘block’ or suppress the processing of their personal data if, for example, they are disputing its accuracy.
The right to data portability
GDPR gives people the right to obtain their personal data in a format that will enable them to move, copy or transfer their information from one IT system to another.
The right to object
GDPR gives people a right to object to certain types of processing such as for direct marketing purposes. This means that if someone receives material via e-mail, post or text, they can contact the company that sends out the material and ask them to stop, which the company must do immediately and free of charge.
Automated decision-making
GDPR gives people the right not be subject to an automated decision-making process where those decisions have “a legal effect” or “a similar, significant effect” on them.
However, this right does not apply if an automated decision is necessary for entering into a contract between the company and the individual, is authorised by law or was based on explicit consent.
GDPR has identified eight specific rights for individuals that must be complied with by companies. This gives people the right to:
- be informed about how their personal information will be used
- receive a copy of any personal information a company holds on them
- have their personal data rectified if it is inaccurate or incomplete
- have their personal data erased without undue delay
- ‘block’ or suppress the processing of their personal data
- obtain their personal data in a format that will enable them to move, copy or transfer their information from one IT system to another
- object to certain types of processing such as for direct marketing purposes
- not be subject to an automated decision-making process where those decisions have “a legal effect” or “a similar, significant effect” on them.