Effective Date: 30/06/2023
1. Introduction
1.1 We are Regal Fish Supplies Limited, an online food delivery company based in the UK. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website www.regalfish.co.uk and related services (collectively, the "Services"). We are committed to protecting your privacy and ensuring the security of your personal information. If we change any of the terms of our Privacy Policy we will post the revised policy on our website at www.regalfish.co.uk behind the ‘Privacy Policy’ link at the bottom of each page.
1.2 Whenever you submit your information to us, whether it be by using our website, by email, over the telephone, in person or by any other means, you acknowledge that we will collect and use such information in accordance with the terms of this Privacy Policy. You will also be opting to be added to our mailing list for receiving direct marketing messages from us (a) by email and/or telephone if you specifically opt in to receive such communications (e.g. using our website), and/or (b) by email if you purchase any goods via our website and do not (when requested during our website’s ordering process) untick the corresponding box to not receive such communications by email. Please see section 5 below for further information if you no longer wish to receive such marketing communications from us.
1.3 We are committed to ensuring that all personal information we hold is treated properly and in accordance with applicable data protection legislation. We are registered as a data controller with the Information Commissioner’s Office (“ICO”) and our registration number is Z1812495. In accordance with applicable data protection legislation, we are required to explain to you how we will treat any personal data which we collect from you. Our registered company number is 02813471 and our registered office address is Regal Fish Supplies Limited, Ardent Road, Barton-Upon-Humber, DN18 5FA.
1.4 You have the right to lodge a complaint with the ICO if you have any concerns with regard to the way in which we process your personal data. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
1.5 You warrant that any information you supply to us is accurate and up to date (whether or not the information is about you), that you will inform us if any information that you provide us with requires updating (e.g. email address/mobile number), and that if you submit a third party’s details to us (including but not limited to as mentioned in section 3.10 below) you have that third party’s permission or an alternative legal basis to do so.
1.6 This Privacy Policy does not apply to personal data processed by us in relation to any recruitment process or any subsequent employment.
2. Information We Collect
2.1 It is possible to visit and browse some sections of our website without being required to tell us who you are or reveal any information about yourself.
2.2 Personal Information You Provide: If you request to create an account with us (either online, by telephone or in person via our door-to-door team) or register with our website, place an order, enter a promotion or competition with us or otherwise interact with our Services, we will ask for certain personal information which may include your name, email address, phone number(s), delivery address, invoice address and payment information (e.g. credit or debit card details or details of any other payment account that you may use such as PayPal, Apple Pay, Google Play or Shop Pay).
2.3 Order and Transaction Information: We collect information related to your orders with us, including order details, delivery preferences, and payment history.
2.4 Usage Information: We may collect information about your interactions with our website, including your IP address, browser type, device information, and browsing activities. This information helps us analyse and improve the performance and functionality of our Services.
2.5 Communications: When you contact our customer support or communicate with us through email or other channels (e.g. social media, surveys and reviews), we may collect and retain the content of your communications (including any related social media user name) along with any attachments or related information.
3. Use of Personal Information
3.1 We may use the information about you referred to in sections 2.2 to 2.5 above where necessary for our legitimate interests in the following ways (so long as our interests are not overridden by any related impact on you):
a. to create a customer account for you (which will be used to manage and administer our relationship with you);
c. to send you email marketing from time to time where you purchase any goods via our website and do not untick the corresponding box to not receive such communications by email (when requested during our website’s ordering process) or click on any subsequent ‘unsubscribe’ link in any related email;
d. to develop our systems and services and ensure that content from our website is presented in the most effective manner for you and for your electronic device used to access our website;
e. to provide you with information, goods or services that you request from us or access (including but not limited to via our website and/or using your postal address to send you one of our brochures by post if you request);
f. to monitor your compliance with the terms and conditions applicable to any contracts entered into between us (including our Terms of Service);
g. to carry out market research (e.g. product reviews) so that we can improve the goods and services that we offer (please note that you have the right to opt-out of receiving or participating this process at any time);
h. to comply with any applicable laws, regulations and legal processes;
i. to protect our rights, property and safety of us, our employees, our customers and the general public;
j. to allow you to participate in interactive features of our website;
k. to allow you to participate in our loyalty scheme (Smile.io) should you register for that scheme;
l. to notify you about changes or prospective changes to our goods, services and/or our website; and
m. to create aggregated and anonymised statistical or demographic data that does not identify you individually. We may use this data for various legitimate purposes, including research, analysis, and improving our Services.
3.2 If you order any products or services using our website, we will use your name, contact and delivery details, bank account details, payment card details and/or chosen payment account details (e.g. PayPal, Shop Pay or Google Pay where relevant) where necessary for the performance of any contract between us (for example, to take payment from you of the price of the relevant goods/services, to deliver any goods that you order, to send you delivery updates via SMS and/or email and to issue any refunds that may become payable). Where you are paying by card or by any other payment method, [you will be redirected to the website of our (each a “Payment Service Provider”) in order to make your payment (for card payments this will be Braintree (Braintree Privacy Statement | Braintree Payments); we do not store any card details on our servers). For PayPal payments this will be PayPal (PayPal Privacy Statement). For Apple Pay this will be Apple Pay (Apple Pay security and privacy overview – Apple Support (UK)). For Google Pay this will be Google Pay (Privacy, terms & policies - Google Pay Help) After the payment has been completed you will be redirected back to our website. Please note that each chosen Payment Service Provider may collect personal information from you which will be used in accordance with their own privacy policy (which you should read). More information regarding each Payment Service Provider can be accessed via the relevant Payment Service Provider’s website. We are not liable for the practices of any Payment Service Provider in respect of your personal information.
3.3 If you enter into a promotion or competition (e.g. using our website), we will use your name and contact details for our legitimate interests in processing your entry in accordance with the relevant promotion/competition terms and conditions (which you should familiarise yourself with before entering).
3.4 In the event that you provide us with feedback regarding our website or any of our goods and Services, we may use and disclose that feedback to our suppliers and other users of our website where it is in our legitimate interests to do so in order to improve our website and the goods and Services that we provide. This includes any information that you provide to us if you report a problem with our website or any of our goods and Services.
3.5 Where you have given consent or where you purchase any goods via our website and do not opt out of receiving marketing emails from us during the order process, we may use your information to inform you of special offers, promotions, new products, competitions and changes to our website via email. Where you have provided consent to receive telephone calls from us we may also send you such information via telephone call. If you subsequently decide that you no longer wish to receive any such mailings please see section 5 below.
3.6 If you correspond with us (e.g. using email), we may retain a record of or the content of your correspondence together with your contact details and our responses where necessary for our and your legitimate interests in order that we can appropriately manage your relationship with us, to reply to your correspondence and for training and quality purposes. This may include us recording and monitoring our telephone calls with you for such purposes.
3.7 Where we need to collect personal information in connection with any goods or Services which you request or order from us and you fail to provide that data when requested, we may not be able to provide such goods or Services or perform any related contract that we have or are trying to enter into with you.
3.8 In limited circumstances, we may approach you for your consent to allow us to process certain information for purposes not referred to in this Privacy Statement. If we do so, we will provide you with full details of the information we would like and the reason we need it, so that you can carefully consider whether you wish to consent. You should be aware that it is not a condition of any contract with us that you agree to any such request for consent from us. If you do provide us with consent, you will be able to withdraw it at any time via the method that we notify you of when obtaining your consent. Any such withdrawal will not affect the lawfulness of our processing of your personal information for the relevant purpose(s) before you withdrew consent.
Customer Referral Scheme / ‘Recommend a Friend’
3.9 Online Referrals made by you: If you refer any person to us using our website’s customer referral scheme we will generate a link for you to send to that other person. We will not ask you to provide any personal data of any other person to us. Full details of this scheme can be found in our Terms and Conditions here.
3.10 Telephone Referrals made by you: If you refer any person to us via our call centre, we will request that you provide us with the name, telephone number and postal address (including postcode) of the person who you refer to us.
3.11 Referred Customers: If you have been referred to us by an existing customer (either online or via telephone) and subsequently create an account with us or make a purchase from us, the person who provided you with the related link or provided us with your contact details may be notified that they have received a credit from us in connection with the referral, but we will not share any of your personal information with them.
Loyalty Scheme (Smile.io)
3.12 If you register with our customer loyalty scheme Smile.io - Easy-to-use loyalty programs for small businesses, we may collect additional personal information from you including; Customer First Name, Customer Last Name, Customer Email, Customer External (your eCommerce platform) ID, Customer Smile ID, Customer Date of Birth, if provided, Customer IP Address, Customer Account Creation Date, Customer Transactional Data (order data), Customer First Name, Customer Last Name, Customer Email, Customer External (your eCommerce platform) ID, Customer IP Address, Customer Account Creation Date, Customer Transactional Data (order data), Customer "Accepts Marketing" preference. Stored in Smile.io: Customer Smile ID, Customer Date of Birth, if provided. We will use such information (in addition to details of orders placed and any other relevant details referred to in section 2 above) for our legitimate interests in maintaining and administering your loyalty scheme account with us and to make available to you any related benefits (e.g. loyalty points) to which you become entitled in accordance with the scheme).
4. Information Sharing and Disclosure
4.1 We may share your personal information with third parties in the following circumstances:
a. Service Providers: We may engage trusted third-party service providers to assist us in dealing with any request, enquiry, order, competition/promotion entry, complaint or other correspondence submitted by you or in the performance of any contract between us and you, such as food vendors, delivery partners, payment processors, and customer support service providers.
b. Data Processors: To any third parties who are processing your information on our behalf for specified purposes in accordance with our instructions.
c. Compliance with Law: We may disclose your personal information if required by law.
d. Professional Advice: We may disclose your personal information to third parties who are providing us with professional advice where necessary for our legitimate interest in obtaining such advice and permitted by law.
e. Legal Proceedings: In connection with criminal investigations, legal proceedings or prospective legal proceedings where necessary for our legitimate interests and where permitted by law.
f. Legal Rights: Where necessary for our legitimate interests and permitted by law in establishing, exercising or defending our legal rights (including providing information to others for the purposes of fraud prevention, debt collection and debt tracing actions) and protecting the rights, property and safety of Regal Fish Supplies Limited, our customers, our employees, suppliers or others.
g. Where we have stated or informed you otherwise (e.g. in this Privacy Policy or on our website).
4.2 Business Transfers: We may also disclose your personal information to third parties in the event that we propose to dispose of or acquire any business or assets (in which casewe may disclose your personal information to the prospective acquirer or seller of such business or assets and/or their professional advisors) or if we or substantially all of our assets are proposed to be acquired by a third party. Any such disclosure will be made where necessary for the legitimate interests of us and/or the third party in respect of the proposed transaction; however we will not transfer your personal information to any such third party unless we are satisfied that they are able to provide an adequate level of protection in respect of your personal information.
4.3 Consent: Except as otherwise provided in this Privacy Policy, we will not provide or disclose your personal information to third parties without your express consent for any purpose (including but not limited to direct marketing). We do not sell personal information under any circumstances.
5. How do you stop marketing information being sent to you?
You can ask that such information is no longer sent to you by (i) emailing us at info@regalfish.co.uk, (ii) writing to us at Regal Fish Supplies Limited, Ardent Road, Barton Upon Humber, DN18 5FA, United Kingdom, or (iii) (in relation to emails only) clicking on the appropriate link in the footer of any of our marketing emails. Insofar as we may have previously relied on your consent to send marketing information to you, any related withdrawal of consent will not affect the lawfulness of our processing based on your consent before you withdrew it.
6. Data Security
6.1 We implement appropriate technical and organisational measures to protect your personal information from unauthorised or accidental access, loss, misuse, alteration, disclosure and destruction. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know that information. However, the Internet is global and no method of transmission over the internet or electronic storage can be guaranteed by us to be entirely secure. Therefore, while we strive to protect your information, we cannot guarantee the security of any information that you disclose online and we will not be responsible for any breach of security unless this is due to our negligence or willful default. It is possible that the information you provide to us will be temporarily transferred via a route outside the United Kingdom and the European Economic Area as it passes between us.
6.2 We have put in place procedures to deal with any suspected data security breach and will notify you and/or any applicable regulator of a suspected breach where we are legally required to do so.
6.3 All direct payment gateways used by our website adhere to the encryption and other standards of the Payment Card Industry Data Security Standard (PCI-DSS).
7. Your Rights
7.1 You have a legal right to see a copy of the personal information that we keep about you and to correct any inaccuracies, subject to certain exemptions. In some circumstances you may also have the right to:
a. request that we erase any personal information held about you;
b. restrict our processing of your personal information (for example, to ask to suspend the processing of personal information to establish its accuracy or the reasons for processing it);
c. data portability (i.e. to request the transfer of personal information to a third party); and
d. object to our processing of your personal information where we are relying on a legitimate interest (or those of a third party).
7.2 Requests of the nature set out in section 7.1 above should be made in writing to the Customer Support Team, Regal Fish Supplies Limited, Ardent Road, Barton Upon Humber, DN18 5FA, or via email to[info@regalfish.co.uk]. Please contact the same address if you have any reason to believe that any information we hold about you is inaccurate. We will respond to your request as soon as possible and, in any event, within one month from the date of receiving the request. Please note that we may, where legally permitted, reject any such request or limit the scope of our response (e.g. if, in the circumstances, the right does not apply to you).
7.3 In accordance with applicable data protection legislation, we follow security procedures in the storage and disclosure of your information. We may therefore request proof of your identity before disclosing certain information to you or complying with any other request of or a nature described in section 7.1 above.
7.4 You will not generally have to pay a fee to exercise any of your rights described in section 7.1 above. However, we may charge a reasonable fee if you make a request to see a copy of your personal information which is clearly unfounded or excessive. Alternatively we may refuse to comply with your request in such circumstances.
8. Cookies and Tracking Technologies
In addition to collecting and using your personal data as set out in this Privacy Policy, we use cookies and tracking technologies where necessary for our legitimate interests or where we have your consent (see our Cookie Policy here) for more information on how we use cookies and other tracking technologies and our legal basis for doing so). You can manage your related preferences as described in our Cookies Policy.
9. Retention and Destruction of your Personal Information
9.1 Any personal information held by us in relation to any of the purposes described in this Privacy Policy will be retained by us for as long as we need it to fulfil the purpose(s) for which it was collected, subject to any longer retention periods that may be required or permitted by law. Further details of our specific retention periods are available on request via the contact details given in section 13 below.
9.2 Save for any marketing contact preferences suppressed if you withdraw consent or opt out as referred to in section 5 above (which will be retained indefinitely), your information will be securely destroyed at the end of the relevant retention period described or otherwise referred to in this section 9.
9.3 Whilst taking into consideration our legal obligations, we will on an ongoing basis: review the length of time that we retain personal data for; consider the purpose or purposes for which we hold the personal data in deciding whether (and for how long) to retain it for; securely delete personal data that is no longer needed for such purpose or purposes; and update, archive or securely delete information if it goes out of date.
10. Children's Privacy
Our website and our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from or relating to children. If you believe that we have inadvertently collected personal information from or relating to a child, please contact us.
11. Changes to this Privacy Policy
We may amend or update this Privacy Policy from time to time, such as to reflect changes in our practices or legal obligations. You are bound by any changes we make to this Privacy Policy with effect from the date of the change. We will notify you of any material changes to the way in which we use your personal information by posting a notice on our website’s homepage. You can view the current version of our Privacy Policy at any time by clicking on the ‘Privacy Policy’ link on our website’s homepage.
12. What about third party websites that you can access via our website?
12.1 Our website contains links to other websites which are outside our control and are not covered by this Privacy Policy. If you access other websites using the links provided, the operators of those websites will be the controller of any information that you provide to them and will assume corresponding responsibilities under applicable data protection legislation. Such information will be subject to the relevant third party’s privacy policy, which you should read. We are not liable for the privacy policies or practices of such third parties in respect of your personal information.
12.2 You acknowledge that any information that you post using our social media facilities (such as Facebook, Pinterest and Instagram) will be viewable by anybody who visits those facilities and that such information is also subject to the relevant provider’s privacy policy You are advised to consult each such privacy policy to see how they will use your data.
12.3 You acknowledge that any content that you post using our social media facilities will be considered non-confidential and non-proprietary, and that we have the right to monitor, remove, use, copy, distribute and disclose to third parties any such content for any purpose permitted by law.
12.4 You acknowledge that we will cooperate with any person, law enforcement authority or court order requesting or directing us to disclose the identity of anyone posting or sending material using any of our social media facilities in breach of any law (whether civil or criminal) or the legal rights of any party (including but not limited to intellectual property rights and rights to privacy).
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our handling of your personal information, please contact us using any of the following details:
• Email us on info@regalfish.co.uk;
• Call us on 01652662100; or
• Write to us at Regal Fish Supplies Ltd, Ardent Road, Barton Upon Humber, DN18 5FA