Privacy Policy and GDPR Compliance

Effective Date: 08/01/25

Welcome to the Howdles Family Butchers’ website. As the data controller, we are committed to protecting your personal data and ensuring that our processing practices comply with the General Data Protection Regulation (GDPR) and UK data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal data, as well as your rights under GDPR.

1. Who is responsible for data processing?

Data Controller: Howdles Family Butchers

38 High St, Clayhanger, Walsall WS8 7EA, United Kingdom

Email: info@howdlesfamilybutchers.co.uk

Phone: 01543 375046

2. How can I contact the data protection officer?

For any inquiries related to data protection, please contact our Data Protection Officer at:

Howdles Family Butchers

38 High St, Clayhanger, Walsall WS8 7EA, United Kingdom

Email: info@howdlesfamilybutchers.co.uk

Phone: 01543 375046

3. What personal data do we collect and process?

We process the following types of personal data in accordance with GDPR:

Identity Data: Name, title, date of birth, and gender.

Contact Data: Billing address, delivery address, email address, and phone numbers.

Financial Data: Bank account details and payment card information.

Transaction Data: Details about payments, orders, and purchases.

Technical Data: IP address, browser type, time zone settings, and browsing behavior on our website.

Profile Data: Username, passwords, purchase preferences, and feedback.

Usage Data: Information on how you use our website, products, and services.

Marketing Data: Communication preferences and consent for marketing materials.

We do not process any special categories of personal data (such as race, religious beliefs, or health data).

4. Why and on what legal basis do we process personal data?

We process your personal data in compliance with GDPR and relevant UK data protection laws. The legal bases for processing include:

Consent (Article 6.1a): For sending marketing emails and promotions, if you have explicitly opted in.

Contractual necessity (Article 6.1b): To fulfill our contractual obligations, such as delivering your meat subscription boxes.

Legal obligations (Article 6.1c): To comply with legal obligations (e.g., verifying age for restricted products).

Legitimate interests (Article 6.1f): To improve our services, manage customer relationships, and send relevant updates and newsletters.

5. How do we process personal data?

5.1 Customer Account & Subscription Service

When you subscribe to our meat box service, we collect personal data to manage your account, including contact details, delivery preferences, payment information, and order history. Your account is password-protected, and you may deactivate it at any time.

5.2 Payment Processing

We use secure third-party payment providers to process payments. Your financial data, including card details, is encrypted using SSL technology. Our payment providers include:

Stripe: For more information, please review Stripe’s Privacy Policy.

5.3 Customer Support

If you contact us via email, phone, or social media, we will use the personal data you provide to respond to your inquiries. This may include information like your name, email address, and order details.

5.4 Marketing & Newsletters

With your consent, we may send you promotional offers, product updates, and recipe ideas. You can unsubscribe from our newsletter at any time by clicking the “unsubscribe” link or adjusting your preferences in your account settings.

6. Do we share your data with third parties?

We may share your personal data with trusted third-party service providers for specific purposes, such as:

Payment Processors: Stripe, for secure payments.

Delivery Partners: For fulfilling orders.

Web Hosting and IT Providers: For operating and maintaining our website.

These third parties are GDPR-compliant and only process your data under our instructions. We do not sell or share your data for third-party marketing.

7. International Data Transfers

If we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other legally accepted transfer mechanisms, to protect your data in accordance with GDPR.

8. How long do we retain your data?

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal or accounting requirements. For example:

Customer data: Retained for the duration of the customer relationship, plus up to 6 years for legal and financial record-keeping.

Marketing data: Retained until you withdraw your consent.

After these periods, your data will be securely deleted or anonymized.

9. What are your rights under GDPR?

Under GDPR, you have the following rights regarding your personal data:

Right to Access: You may request a copy of the personal data we hold about you.

Right to Rectification: You may request that we correct inaccurate or incomplete data.

Right to Erasure: You may request that we delete your personal data (subject to certain legal exceptions).

Right to Restrict Processing: You can request that we limit how we process your data.

Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.

Right to Object: You can object to certain types of processing, such as direct marketing.

Right to Withdraw Consent: You can withdraw your consent for marketing at any time.

Right to Lodge a Complaint: You can file a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.

To exercise these rights, please contact us at info@longmanfamilybutchers.co.uk

10. How do we protect your data?

We employ strict security measures to protect your personal data from unauthorized access, loss, or misuse. These measures include:

Encryption: Sensitive data, such as payment details, is encrypted using industry-standard SSL technology.

Access Controls: Only authorized personnel have access to your personal data.

Secure Storage: All personal data is stored securely in protected systems.

11. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling.

12. Children’s Data

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware of such data, we will delete it immediately.

13. Changes to this Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website, and you are encouraged to review the policy periodically.

If you have any questions or concerns about our Privacy Policy or GDPR compliance, please contact us at info@howdlesfamilybutchers.co.uk