CUSTOMER PRIVACY NOTICE

• This privacy notice tells you what to expect us to do with your personal information.
• Contact details
• What information we collect, use, and why
• Lawful bases and data protection rights
• Where we get personal information from
• How long we keep information
• Who we share information with
• How to complain

Contact details:
EMAIL
ser.sgleiniog@gmail.com

WHAT INFORMATION WE COLLECT, USE, AND WHY
We collect or use the following information to provide services and goods, including delivery:

• Names and contact details
• Addresses
• Purchase or account history
• Health information (including allergies and health conditions)
• Account information
• Photographs or video recordings
• Information relating to compliments or complaints

We also collect or use the following information to provide services and goods, including delivery:

• Health information

LAWFUL BASES AND DATA PROTECTION RIGHTS
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There
is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out
more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access - You have the right to ask us for copies of your personal information. You can request
  other information such as details about where we get personal information from and who we share personal
  information with. There are some exemptions which means you may not receive all the information you ask for.
• Your right to rectification - You have the right to ask us to correct or delete personal information you think is
  inaccurate or incomplete.
• Your right to erasure - You have the right to ask us to delete your personal information.
• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal
  information.
• Your right to object to processing - You have the right to object to the processing of your personal data.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave
  us to another organisation, or to you.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw
  your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

OUR LAWFUL BASES FOR THE COLLECTION AND USE OF YOUR DATA
Our lawful bases for collecting or using personal information to provide services and goods are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of
  your data protection rights may apply except the right to object.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or
  someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply,
  except the right to portability. Our legitimate interests are:
  o Information is gathered to allow the business to carry out the requested duties. This allows the
  business to arrange services to suit the client's requirements. Contact details are stored for use of the
  business to contact the client regarding the service being provided.

WHERE WE GET PERSONAL INFORMATION FROM

• Directly from you

HOW LONG WE KEEP INFORMATION
Retention
Decisions around retention and disposal are to be taken in accordance with this policy.
As and when the retention period for a specific document has expired, a review is always to be carried out prior to the
disposal of the document. This does not have to be time-consuming or complex. If a decision is reached to dispose of a
document, careful consideration is to be given to the method of disposal.

Disposal
Our business must ensure that personal data is securely disposed of when it is no longer needed. This will reduce the
risk that it will become inaccurate, out of date or irrelevant.
The methods of disposal are to be appropriate to the nature and sensitivity of the documents concerned and include:

• Non-Confidential records: place in waste paper bin for disposal
• Confidential records: shred documents
• Deletion of Computer Records
• Transmission of records to an external body
• Cloud storage

The table below contains the retention period that we have assigned to each type of record. This will be adhered to
wherever possible, although it is recognised that there may be exceptional circumstances which require documents to
be kept for either shorter or longer periods.

Document retention schedule
Contracts:
Type of record: Signed Contracts 

Retention period: 1 year after last action 

Where is it stored?: Online / Email 

Method of deletion: Archive

Type of record: Purchase orders and invoices 

Retention period: 2 years after last action

Where is it stored?: Online / Email

Method of deletion: Archive

Operational records:

Type of record: Policies/Procedures

Retention period: 5 years

Where is it stored?: Computer records

Method of deletion: Archive

Type of record: Complaints

Retention period: 1 year from end of fiscal year

Where is it stored?: Email/Computer records

Method of deletion: Archive

Type of record: Website FAQs

Retention period: 3 months from last action

Where is it stored?: Online

Method of deletion: Archive

Type of record: Insurance schedules

Retention period: 1 year after last action

Where is it stored?: Email/Computer records

Method of deletion: Archive

Intellectual property records:

Type of record: Copyright material

Retention period: 50 years from expiry

Where is it stored?: Online/Computer records

Method of deletion: Archive

Communication records:

Type of record: Email correspondence

Retention period: Archive emails after 2 years

Where is it stored?: G-Mail

Method of deletion: Archive

Type of record: Facebook Messenger correspondence

Retention period: 1 year after last action

Where is it stored?: Facebook Messenger

Method of deletion: Archive

Type of record: Instagram Messages

Retention period: 1 year after last action

Where is it stored?: Instagram

Method of deletion: Archive

Type of record: WhatsApp correspondence

Retention period: 1 year after last action

Where is it stored?: WhatsApp

Method of deletion: Archive

Type of record: Text correspondence

Retention period: 1 month after last action

Where is it stored?: Mobile device

Method of deletion: Delete

Client records:

Type of record: Name and Contact Details

Retention period: 2 years after last action

Where is it stored?: Online/Email/Facebook Messenger/Instagram/WhatsApp

Method of deletion: Archive

Type of record: Purchase or account history

Retention period: 2 years after last action

Where is it stored?: Online/Email

Method of deletion: Archive

Type of record: Account information

Retention period: 2 years after last action

Where is it stored?: Online/Email

Method of deletion: Archive

Type of record: Health information

Retention period: 1 month after last action

Where is it stored?: Online/Email/Hard Copy

Method of deletion: Delete/Shred

WHO WE SHARE INFORMATION WITH

Others we share personal information with:

• Emergency services

HOW TO COMPLAIN

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details

at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the

ICO.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

LAST UPDATED

16 January 2026