privacidad
Privacy Policy
Kendal Nutricare respects your privacy and is committed to protecting your personal data. This privacy notice explains how we look after your personal data when you visit our website (regardless of where you visit it from) and informs you of your privacy rights and how the law protects you.
Contents
- Important information and who we are
- The data we collect about you
- How your personal data is collected
- How we use your personal data
- Disclosures of your personal data
- International transfers
- Data security
- Data retention
- Your legal rights
- Glossary
1. Important Information and Who We Are
This privacy notice provides information about how Kendal Nutricare collects and processes your personal data through your use of this website. This includes any data you may provide when you sign up to our newsletter, purchase a product or service, or take part in a competition.
This website is not intended for children and we do not knowingly collect data relating to children.
Please read this privacy notice together with any other privacy or fair processing notice we may provide on specific occasions when we collect or process personal data. This notice supplements those other notices and is not intended to override them.
Controller
Kendal Nutricare Ltd is the controller and is responsible for your personal data (referred to as “Kendal Nutricare”, “we”, “us” or “our” in this notice).
We have appointed a data privacy manager who is responsible for overseeing any questions in relation to this privacy notice. If you have any questions or wish to exercise your legal rights, please contact the data privacy manager using the details below.
Contact details
Legal entity: Kendal Nutricare Ltd
Title: IT Manager
Email: Enquiries@KendalNutricare.com
Postal address: Mint Bridge Road, Kendal, Cumbria, LA9 6NL
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the United Kingdom supervisory authority for data protection (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first.
Changes to this privacy notice
This version was last updated in May 2018. You may obtain a copy by contacting us.
Please keep us informed if your personal data changes during your relationship with us. It is important that the data we hold is accurate and up to date.
Third party links
This website may include links to third party websites, plug-ins and applications. Clicking on these links or enabling connections may allow third parties to collect or share data about you. We do not control these websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy notice of every website you visit.
2. The Data We Collect About You
Personal data, or personal information, refers to any information about an individual from which that person can be identified. It does not include data where identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data, which we have grouped as follows:
-
Identity Data: First name, maiden name, surname, username or similar identifier, marital status, title, date of birth and gender
-
Contact Data: Billing address, delivery address, email address and telephone numbers
-
Financial Data: Bank account and payment card details
-
Transaction Data: Details about payments to and from you, and products and services you have purchased from us
-
Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on devices used to access this website
-
Profile Data: Username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses
-
Usage Data: Information about how you use our website, products and services
-
Marketing and Communications Data: Your preferences in receiving marketing from us and third parties, and your communication preferences
We may also collect and use Aggregated Data such as statistical or demographic data. This data is not considered personal data in law as it does not directly or indirectly reveal your identity. If we combine Aggregated Data with your personal data so that it can identify you, we treat the combined data as personal data and will use it in accordance with this privacy notice.
We do not collect any Special Categories of Personal Data about you. This includes details relating to your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, or biometric and genetic data. Nor do we collect information about criminal convictions and offences.
If you fail to provide personal data
Where we need to collect personal data by law, or under the terms of a contract, and you fail to provide that data when requested, we may be unable to perform the contract. In this case, we may need to cancel a product or service but will notify you if this is the case.
3. How Your Personal Data Is Collected
We use different methods to collect data from and about you:
-
Direct interactions: You may provide your Identity, Contact and Financial Data by filling in forms or communicating with us by post, telephone, email or otherwise. This includes data when you:
-
Apply for our products or services
-
Create an account on our website
-
Subscribe to our service or publications
-
Request marketing to be sent to you
-
Enter a competition, promotion or survey
-
Provide feedback
-
-
Automated technologies or interactions: As you use our website, we may collect Technical Data about your equipment, browsing behaviour and patterns. This is collected using cookies, server logs and similar technologies.
-
Third parties or publicly available sources: We may receive personal data from third parties including:
-
Analytics providers such as Google based outside the UK
-
Advertising networks and search providers based in the UK
-
Technical, payment and delivery service providers
-
Public sources such as Companies House and the Electoral Register
-
4. How We Use Your Personal Data
We will only use your personal data when the law permits. Most commonly, we will use your data in the following situations:
-
Where we need to perform a contract with you
-
Where it is necessary for our legitimate interests and your interests do not override these
-
Where we need to comply with a legal or regulatory obligation
We do not usually rely on consent as a legal basis for processing your personal data, except where we send direct marketing communications by email. You have the right to withdraw your consent to marketing at any time by contacting us.
Sharing your personal data
To prevent, detect and investigate fraud or errors, we may share your information with:
-
Department of Health and Social Care
-
NHS Business Services Authority
Purposes for which we use your data
We have included a table (available upon request) that explains how we use your personal data, the legal basis we rely on and where appropriate, our legitimate interests.
Marketing
We aim to give you options regarding the use of your personal data for marketing. You may receive marketing if you have requested information, purchased products or entered a competition, and have not opted out.
We will seek your express opt-in consent before sharing your personal data with any external company for marketing purposes.
Opting out
You can opt out of marketing communications at any time by following the unsubscribe link or contacting us. This will not affect communications relating to purchases or other transactions.
Cookies
You can configure your browser to refuse some or all cookies. However, this may affect website functionality.
Change of purpose
We will only use your personal data for the purpose for which it was collected, unless we consider it compatible with the original purpose. If we need to use it for another purpose, we will notify you and explain the legal basis.
We may process your personal data without your knowledge or consent where required or permitted by law.
5. Disclosures of Your Personal Data
We may share your personal data with:
-
Other companies in the Kendal Nutricare Group
-
External service providers
-
Professional advisers such as lawyers, bankers, insurers and auditors
-
HM Revenue and Customs, regulators and other authorities
-
Third parties in the event of a business reorganisation, sale or merger
We require all third parties to respect the security of your personal data and to process it lawfully.
6. International Transfers
We do not transfer your personal data outside the United Kingdom or the European Economic Area.
7. Data Security
We have implemented appropriate security measures to prevent unauthorised access to or misuse of your personal data. Access is limited to individuals with a legitimate business need.
We also have procedures in place to handle any suspected data breach and will notify you and relevant authorities where legally required.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for. We are required by law to keep certain information (such as Contact, Identity, Financial and Transaction Data) for six years after you cease being a customer, for tax purposes.
In some circumstances, you may ask us to delete your data. In others, we may anonymise your data for research or statistical purposes, in which case we may use it indefinitely.
9. Your Legal Rights
Under certain circumstances, you have the following rights under data protection law:
-
Request access to your personal data
-
Request correction of your data
-
Request erasure of your data
-
Object to processing
-
Request restriction of processing
-
Request transfer of your data
-
Withdraw consent at any time
You will not have to pay a fee to access your personal data. However, we may charge a reasonable fee or refuse to comply if your request is clearly excessive or unfounded.
We may need to request information to confirm your identity and ensure your rights. We aim to respond to all legitimate requests within one month.
10. Glossary
Legitimate Interest
The interest of our business in providing our services and running efficiently. We consider the potential impact on you and your rights before processing your data on this basis.
Performance of Contract
Processing your data where necessary to perform a contract with you.
Legal or Regulatory Obligation
Processing your data where required by law.
Third Parties
Internal: Companies within Kendal Nutricare providing IT or system support
External: Service providers, professional advisers, regulators, and government bodies
If you have any questions regarding this notice or your data, please contact us at Enquiries@KendalNutricare.com or write to us at Mint Bridge Road, Kendal, Cumbria, LA9 6NL.
