Version 3.0, October 2019
This policy explains how we and our featured retailers (Retailers) collect and use personal data from and about visitors and customers through browsing and buying goods through www.goodsixty.co.uk (Website).
This policy does not apply to any websites of any other organisations that you may access through links on our website. It also does not apply to how Retailers may use your personal data for purposes that are not described in this policy; however we restrict what Retailers are allowed to do with the personal data they can access about you through our Website in our contracts with them.
Our objective is to ensure that you are never surprised by how your personal data has been used by us or any Retailers. You are therefore encouraged to read this policy, which sits alongside our Terms & Conditions (Terms).
As we make changes to our Website, we may need to update this policy. If we make any important changes that affect your rights and interests, we will make sure we bring this to your attention and explain what this means for you.
If you have any questions or comments on this policy, please contact us by email at support@goodsixty.co.uk or by phone on 0117 456 6803.
Information about us
The Website is owned and operated by Good Sixty Limited (we, us, our). We are a limited company registered in England and Wales under company number 10061371. Our registered office is located at 7 Clare Avenue, Bishopston, Bristol BS7 8JF, United Kingdom. We are registered with the Information Commissioner’s Office as a controller in relation to personal data under registration number CSN0526618.
The personal data we collect about you
Personal data means any data that identifies or can be used to identify a person. It does not include data where the identity has been removed (anonymous data).
You may provide the following kinds of personal data to us:
- your name and contact details when you order goods, complete a survey or give us feedback or other correspond with us
- your identification if your order includes alcohol or any other age-restricted items (although neither we nor our delivery partners will take a copy)
- your location, if you grant us permission to access it
- your login details when you create an account
- the contact details of another person when you have purchased goods on their behalf or asked for us to attempt delivery to them if you are not available
- your payment card details when you order goods (though we are unable to see these details)
- information about your orders including details of the goods you ordered, payment method, delivery or other issues and any refunds
- the content of any messages you exchange with us by email or online chat and any posts and messages directed to us on social media
We collect the following kinds of data about you:
- the IP address assigned to you or to someone who provides you with Internet access
- the unique identifier of the device used by you to visit our Website
- technical data about the device used by you to visit our Website including the type of device, operating software, browser and browser plug-ins and the screen resolution and time zone setting of your device
- data about how you browsed and searched our Website including how you arrived at our website, the time and frequency of your visits, the time spent by you on each page, how you interacted with our Website, the links that you click, documents you download and content that you view
- your location (if you do not grant us access to it, the IP address assigned to you or to someone who provides you with Internet access may indicate the region or city from which you visited our website)
We may also collect and use data that is derived from your personal data but which does not directly or indirectly reveal your identity. This data may be combined with data collected about other visitors to our Website to calculate the percentage of visitors that view a particular page or the most popular time of day when our website is viewed, for example. This is not considered personal data unless we combine it with other data that can be used to directly or indirectly identify you.
How we collect your personal data
The personal data that you provide to us will generally be collected when you fill in forms and place orders for goods through our website. However we may also collect personal data about you from our Retailers and delivery partners in respect of your orders.
The data that we collect about you may be obtained:
- through the use of cookies, beacons, pixels and server logs
- from third party analytics providers such as Google Analytics
How your personal data will be used
We and our Retailers will generally rely on one of three legal grounds for using your personal data:
- where we need to perform the contract we are about to enter into or have entered into with you in accordance with our Terms
- where necessary for our legitimate interests or those of our Retailers or any other third party, provided those interests do not override your fundamental rights and interests
- where we need to comply with a legal or regulatory obligation
Generally, we do not rely on consent as a legal ground for using your personal data, except in relation to sending you marketing by email or text message. You have the right to withdraw your consent to marketing at any time either by contacting us, clicking the unsubscribe link in an email or replying to a text message with the required words notified to you in each text message.
Specifically, we and our Retailers will use your personal data as follows:
| Purpose | Legal Basis |
|---|---|
| Creating your account and processing orders for goods from our Retailers, including making arrangements for collection and delivery and processing any refunds | Performance of the contract between us and you and between you and our Retailers in accordance with our Terms |
| Checking whether we are legally able to sell goods to you at the time of delivery | Complying with our legal obligations |
| Personalising and optimising your experience when using our Website | The legitimate interests of us and our Retailers in providing a positive experience when using and ordering goods through our Website and displaying goods that are relevant to you based on your location or purchase history |
| Communicating with you in response to any enquiries, feedback or social media posts and notifying you of any changes to our Website | The legitimate interests of us and our Retailers in responding to you and improving the way we operate |
| Developing, testing and improving our Website and systems | The legitimate interests of us and our Retailers in improving the way we operate and providing a positive experience when using and ordering goods through our Website |
| Providing you with information about our Website and information and offers about goods offered by our Retailers | Consent (note: we do not permit our Retailers to send you any marketing directly) |
| Detecting and preventing fraud or other crime | Our legitimate interests in protecting the integrity and security our Website and complying with our contractual obligations to our payment merchant, banking and financial services entities |
| Defending legal claims or exercising our legal rights | The legitimate interests of us and our Retailers in doing so |
| Maintaining records and complying with any requirements imposed on us by law or by court order | Enabling us and our Retailers to comply with our legal obligations, including in relation to product recalls and tax |
Who we share your personal data with
We do not sell any personal data for commercial purposes.
We may share your personal information with:
- Retailers for the purposes of processing and communicating with you in relation to your orders
- organisations that represent groups of Retailers such as food markets where, under the terms of our agreement with them, they have the right to step-in and manage the provision of our services or take over the running of our services after our agreement with them has ended
- if you opt into the newsletter via the third-party food market homepage, you also opt in to sign in to their own mailing list
- payment card processors to process credit and debit card payments and refunds
- delivery partners, for the purposes of delivering the goods you have ordered
- website developers and marketing agencies, who help us with the development, testing and improvement of our Website and systems
- research and survey companies who may contact you to provide feedback about your experience, if you have agreed to do so
- technical service providers such as our hosting provider, content delivery networks, analytics and search engine providers that assist in the improvement and optimisation of our Website and marketing
- any actual or prospective buyer of our business or its assets
- as required by law or any order of a court or other competent authority, including HM Revenue & Custom, crime prevention agencies and fraud prevention and detection service provider
In each case, we will only share as much personal data as is necessary in the circumstances.
Where we store your personal data
Where possible, we will ensure that your personal data are stored within the United Kingdom and the European Economic Area (EEA). However many of the technical service providers that we use in connection with our website are based outside the EEA, which means that your personal data may be transferred outside the EEA.
Where your personal data are transferred outside the EEA, we ensure that a similar degree of protection applies to your personal data in one or more of the following ways:
- ensuring that the country to which your personal data are transferred is recognised by the European Commission to provide a similar degree of protection for your personal data
- entering into a contract in a form that has been approved by the European Commission as providing a similar degree of protection for your personal data
- where any organisation is based in the US, confirming whether they have self-certified under the EU-US Privacy Shield Framework which requires them to provide a similar degree of protection for your personal data
How we keep your personal data secure
We have put in place security measures (for example, access to our website us secured using ‘https’ technology and access to payment card details is encrypted) to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We also limit access to your personal data to those within our organisation that have a need to access it. They will only process your personal data on our instructions and they are required to keep your personal data confidential.
We have put in place procedures to deal with any suspected personal data breach and will notify you and the Information Commissioner’s Office or any other relevant regulator where we are legally required to do so.
How long we keep your data for
We will only keep your personal data for as long as necessary in connection with the purposes we collected it for and to comply with any legal, accounting or reporting requirements. To determine how long we keep your personal data for, we consider the amount, nature and sensitivity of the personal data, the purposes for which it was collected and the potential risk of harm from us continuing to keep it.
If you have ordered any goods through our Website we and our Retailers will retain details of your order for a period of six years from the date of your order.
We will retain personal data relating to email marketing until you unsubscribe or your email address has become permanently unavailable.
We will retain the analytical data collected about your use of our website for a period of 26 months.
We may retain any data that does not identify you indefinitely.
Cookies
Our website uses small text files, called cookies, which are automatically stored on your device when you access and use certain features of our website. As cookies are unique, we can use them to distinguish you from other users for the purposes described above. To find out more about cookies, how to refuse them and how to change your device’s cookie settings, you should visit All About Cookies.
Please note that if you refuse to accept cookies or change your device’s cookie settings, you may not be able to use all of our website’s features.
Our website uses the following categories of cookies:
- Strictly necessary cookies – These are cookies that are required for the operation of our website.
- Analytical/performance cookies – These cookies allow us to recognise new and returning visitors to our website and see how they move around our website.
- Functionality cookies – These are used to recognise you when you return to our website. This enables us to personalise our content for you and remember any preferences set by you.
Our website uses the following cookies (called first party cookies) which are stored on your device by the server that hosts our website:
| Cookies | Type | Identifiers | Duration | Further info |
|---|---|---|---|---|
| Google Universal Analytics | 2 | _ga | 2 years | We use Google Analytics to see how you found your way to our website and to measure how you interact with our website’s content. These cookies doe not store any personal information about you. Please see the Google Analytics Privacy Policy for further information. |
| _gat | 10 minutes | |||
| Good Sixty session | 1 | _goodsixty_session | Session | This cookie is used to identify you as a user each time you access our website for security purposes and to remember any preferences that you have set. |
| Basket | 3 | basket | 30 days | This cookie is used to remember the items that you have added to your basket. The cookie is cleared once you have completed your purchase. |
| Location | 3 | location | Session | This cookie is used to remember your location based on the postcode that you have entered or the location detected from your device. |
| Delivery Preference | 3 | shopping_method | Session | This cookie remembers whether you have chosen to collect or deliver you goods from a specific Retailer during your shopping session. |
Your rights
You have a number of rights in relation to the personal data we hold about you:
- Access: You have the right to request access to and be provided with a copy of the personal data held about you together with certain information about the processing of such personal data to check that are holding it lawfully
- Correction: You have the right to ask us to correct any inaccurate or incomplete personal data held about you
- Deletion: You have the right to ask us to delete or remove any personal data held about you where there is no good reason for us to continue holding it or where you have exercised your right to object
- Restriction: You have the right to ask us to restrict how we hold your personal data, for example, to confirm its accuracy or our reasons for holding it
- Objection: You have the right to object to our holding of any personal data about you which is based on our legitimate interests or those of a third party based on your particular circumstances. You also have the right to object to our holding your personal data for direct marketing purposes
- Portability: You have the right to receive or request that we transfer a copy of the personal data we hold about you in an electronic format where the basis of our holding such information is your consent or the performance of a contract and the information is processed by automated means
- Automated decision-making: You have the right not to be subject to a decision based solely on automated processing if it affects your legal rights or other equally important matters
- Complaints: You have the right to complain to the Information Commissioner’s Office (ICO)" or any other EU supervisory authority in relation to how we collect and use your personal data
You will not have to pay any fee to exercise any of the above rights though we may charge a reasonable fee or refuse to comply with your request if any request is clearly unfounded or excessive. Where this is the case, we will let you know. To protect the confidentiality of your personal data we may ask you to verify your identity before fulfilling any request in relation to your personal data.