Last updated: 21 May 2023
OWNER AND DATA CONTROLLER
Melissa Lee (“us”, “we”, or “our”) operates https://biscuitsandcompany.com (the “Site”).
Address: Unit 14073, PO Box 92, Cardiff, CF11 1NB
Contact email: firstname.lastname@example.org
We are committed to protecting and respecting your privacy.
This Site collects some personal data from its users.
By submitting personal data to us, you agree to us using your personal data as follows.
INFORMATION COLLECTION, PURPOSE AND USE
While using our Site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to name, email address, cookies, usage data, password.
We may use your personal information to
• send you our newsletters from time to time
• manage contacts and send messages
• ensure that content from our site is presented in the most effective manner for you and for your computer
• provide you with information, products or services that you request from us which may be of interest to you
• carry out our obligations arising from any contracts entered into between you and us
• interact with external social networks and platforms
• allow access to third party services’ accounts
• monitor infrastructure
• manage hosting and backend infrastructure
• interact with live chat platforms
• carry out remarketing and behavioural targeting (including display ads)
• display content from external platforms
• carry out commercial affiliation (including display ads)
• interact with support and feedback platforms
• manage user database
Like many site operators, we collect information that your browser sends whenever you visit our Site.
This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics.
In addition, we may use third party services such as Google Analytics that collect, monitor and analyse this data.
Cookies are text files with a small amount of data, which may include an anonymous unique identifier.
Cookies are sent to your browser from a web site and stored on your computer’s or tablet device’s or mobile device’s part of the hard drive specifically designated for cookies.
Like many sites, we use “cookies” to recognize, collect, and/or track information about, and relevant to, your usage of the Site.
These cookies are known as “first-party cookies”. We may also recognize, collect, and/or track information through cookies set by third parties. These cookies are known as “third-party cookies”. Third-party cookies are used to perform tasks related to advertising, and analytics, and to enable interactive features such as sharing or commenting. Some third parties collect statistics in an anonymized and aggregated form and may not require the consent of the user.
The information that our first-party cookies or third-party cookies recognize, collect, and/or track may include information about your devices, browsing actions, and patterns, such as among others, the type of computer you use, your internet service provider, your browser type, your location, your IP address, the date and time of your visit, the pages viewed, your traffic pattern through the Site.
WHAT COOKIES WE USE
We use the following categories of cookies on the Site:
Strictly necessary cookies
These cookies collect information about your use of the Site, such as for instance, browsing actions, and patterns, the date and time of your visit, the pages viewed, your traffic pattern through the Site.
Through the collection of this information, we are able to monitor and analyze web traffic to the Site. User behaviours may be recognized, collected, and/or tracked.
We use Google Analytics to monitor and analyze web traffic to the Site. Google utilizes the data recognized, collected, and/or tracked on the Site to prepare reports on traffic activities.
This integration of Google Analytics anonymizes your IP address.
Google may use the information recognized, collected, and/or tracked to personalize the ads of its advertising network and may share the information recognized, collected, and/or tracked with other services.
These cookies allow the Site to save information and details such as your username to optimize your experience on the Site and provide personal features.
Social media cookies and pixels
These cookies allow you to share your activity on the Site on social media such as Facebook, LinkedIn, and Twitter, or other external platforms directly from the Site.
Cookies may still be recognized, collected, and/or tracked on the pages where buttons, widgets, or other applications are installed, even when you do not actively use it.
The interaction and information recognized, collected, and/or tracked through the Site are always subject to your privacy settings for each social network and external platform.
Facebook Like button and Facebook social widgets
The Facebook Like button and Facebook social widgets are application allowing interaction with the Facebook social network.
Twitter Tweet button and Twitter social widgets
The Twitter Tweet button and Twitter social widgets are applications allowing interaction with the Twitter social network.
YouTube video widget
YouTube is a video sharing website that allows this Site to incorporate video content on its pages and posts.
Social media pixels
Facebook pixel connects the activity performed on the Site with the Facebook advertising network, including Instagram and Audience ads.
Targeting or advertising cookies
These cookies record your browsing actions and patterns on the Site, such as among others, the pages you have visited and the links you have followed. The information recognized, collected, and/or tracked by these cookies is used to make our Site and the advertising displayed by way of links or banners on the Site more relevant to your interests. For the same purpose, this information may also be shared with third parties, such as AdSense and Medianet.
HOW TO CONTROL COOKIES
Strictly necessary cookies may not be rejected since they are essential to enable you to browse the Site and use its features.
Should you reject cookies, you will still be able to use the Site although certain features and functionalities may not be available to you and/or certain areas may be restricted.
Through browser preferences, it is also possible to delete cookies installed in the past, including the cookies that may have saved the initial consent for the installation of cookies by this Site.
You can find information about how to manage cookies in the most commonly used browsers (e.g. Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Internet Explorer) on the website of the browser of choice.
Your personal data may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”).
LAWFUL BASIS OF PROCESSING PERSONAL DATA
We may process personal data relating to users if one of the following applies:
• users have given their consent for one or more specific purposes;
• provision of data is necessary for the performance of an agreement with the user and/or for any pre-contractual obligations thereof;
• processing is necessary for compliance with a legal obligation to which we are subject;
• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us;
• processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.
We process and store your personal data for as long as required by the purpose they have been collected for.
• personal data collected for purposes related to the performance of a contract between us and the user will be retained until such contract has been fully performed;
• personal data collected for the purposes of our legitimate interests will be retained as long as needed to fulfil such purposes;
• we may be allowed to retain personal data for a longer period whenever the user has given consent to such processing, as long as such consent is not withdrawn;
• we may be obliged to retain personal data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
We do not sell, trade, or otherwise transfer to outside parties your personal information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users (such as, for example, Lyrical Host), so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Users have the right to do the following:
• Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their personal data.
• Object to processing of their data. Users have the right to object to the processing of their data if the processing is carried out on a legal basis other than consent.
• Access their data. Users have the right to learn if data is being processed by us, obtain disclosure regarding certain aspects of the processing and obtain a copy of the data undergoing processing.
• Verify and seek rectification. Users have the right to verify the accuracy of their data and ask for it to be updated or corrected.
• Restrict the processing of their data. Users have the right, under certain circumstances, to restrict the processing of their data. In this case, we will not process their data for any purpose other than storing it.
• Have their personal data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their data from us.
• Receive their data and have it transferred to another controller. Users have the right to receive their data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any undue delay.
• Lodge a complaint. Users have the right to bring a claim before their competent data protection supervisory authority.
You can exercise your right to prevent such processing by contacting us here.
These requests can be exercised free of charge and will be addressed by us as soon as possible and always within 30 days.
The security of your personal information is important to us.
Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our Site as safe as possible.
We use regular Malware Scanning.
Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential.
In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user places an order enters, submits, or accesses their information to maintain the safety of your personal information.
All transactions are processed through a gateway provider and are not stored or processed on our servers.
Unfortunately, no method of transmission over the internet is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.