PRIVICY POLICY

Privacy notice for SwiftOrder Limited

SwiftOrder Limited, (we or us) are registered in England and Wales under company number 13279927 and registered office at Elliston House, Clevedon Road, BS8 3UL.

• What is the purpose of this document?

1. We are committed to protecting and respecting your privacy. This privacy notice sets out the basis on which any personal data we collect about our customers and clients all users of our site (you), or that you provide to us through www.SwiftOrder.co.uk or any of our menu portals (our site), will be processed by us.
2. SwiftOrder are the data controller of your personal data in connection with the services. SwiftOrder and the businesses operating on our platform are joint controllers in respect of any personal data that is processed for placing and completing orders made with them via the the SwiftOrder platform. If you are a customer and have have a query regarding how they are using your data, please contact the business directly.
3. Please read this privacy notice carefully to understand what we do with your personal data and what rights you have in relation to our activities.
4. This privacy notice applies to our Clients, contractors, visitors to our site including employees, officers and representatives of Clients to whom we provide services.

• What is personal data and our lawful basis for processing

1. Personal data means any information relating to an individual from which that person can be identified. There are special categories of more sensitive personal data which require a higher level of protection (see further at section 4, below).
2. We will only use your personal data when the law allows us to. Our principal lawful basis for processing is set out in the table below. However, some of our grounds for processing will overlap and there may be several grounds which justify our use of your personal data.
3. We may only rely on our legitimate interests (or those of a third party, such as our Clients) to process your personal data, if your interests and fundamental rights do not override those interests. Where we rely on legitimate interests for our processing, we have set out the relevant interests, below.
4. We will only use your personal data for the purpose or purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose(s).
5. Please note that we may process your personal data without your knowledge or consent where this is required or permitted by law.
6. This notice applies to personal data processed by us as a data controller. We also process personal data on behalf of our Clients, as a data processor and in accordance with our Clients’ privacy notices.

• Personal data we collect from you and about you and how our use complies with the law 

• Sensitive personal data

1. “Sensitive” or “Special category data” includes information about your health or medical conditions, genetic or biometric data, information about your race or ethnicity, religious or political beliefs or information relating to criminal convictions).
2. We do not generally process special category data for our own purposes. However, we may process personal data:

4.2.1 relating to a health condition or disability in order to meet our legal obligation to make reasonable adjustments in the provision of our services;

4.2.2 relating to racial or ethnic origin, religious or other beliefs and sexual orientation to ensure meaningful equal opportunity and diversity and inclusion monitoring and reporting. Such information will be anonymised to the fullest extent possible;

4.2.3 where it is needed to protect your interests (or someone else’s interests) and you are not capable of giving your consent;

4.2.4 where it is necessary to establish, exercise or defend a legal claim;

4.2.5 where you have manifestly made the information public; or

4.2.6 otherwise with your explicit consent.

1. We may process special category information as part of our services to Clients, and we do so in accordance with their privacy notice.

• Sharing your personal data

1. We share personal data within the Group.
2. We share personal data with our Clients for the purposes set out above. Our Clients are data controllers in their own rights of any personal data we share with them, and they are responsible to you for their use of your personal data.
3. We may share your personal data with third party data controllers where necessary, as follows:
1. HMRC or other government or law enforcement agencies;
2. our insurance provider, our professional advisers and our professional indemnity insurance broker;
3. if we sell any business or assets, in which case we may disclose your personal data to the prospective buyer or such business or assets; and
4. we may share your personal data if we have a legal obligation to do so, including (but not limited to) for the purposes of fraud protection and credit risk reduction.
4. Where we share personal data with other data controllers, they are responsible to you for their use of your personal data and compliance with the law.
5. If you object to our sharing or continuing to use your personal data with any specific third- party, please contact us at support@SwiftOrder.co.uk
6. We share your personal data with third-party service providers who process it on our behalf (our data processors).
1. The following activities are carried out by third-party service providers on our behalf: IT support and maintenance, cloud service providers, IT hosting services, and confidential waste disposal.
7. All our third-party service providers are required to take appropriate security measures to protect your personal data in line with our policies. We only permit third-party service providers to process your personal data for specified purposes and in accordance with our instructions.

• Automated decision-making

1. Automated decision-making takes place when an electronic system uses personal data to make decisions which could have significant effect on the individual, without human intervention.
2. We do not anticipate using your personal data for automated decision-making but we update our privacy policy on www.SwiftOrder.co.uk if this changes.

• Data security

1. We have put in place:
1. appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
2. procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
2. Any personal data we process is held on secure servers, based within the UK or the European Economic Area (EEA).
3. We may transfer personal data to any Client or Group companies based outside the UK or the EEA.
4. If we are required to transfer personal data outside the UK or the EEA, we have put in place appropriate measures to ensure that your personal data is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection.

• How long will we keep your personal data for?

1. We will only retain your personal data for as long as is necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
2. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

• Your rights

1. Under certain circumstances, by law you have the right to:
1. Request access to your personal data (commonly known as a “subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
2. Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
3. Request erasure of your personal data (known as “the right to be forgotten”). This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
4. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.
5. Request the restriction of processing your personal data. This enables you to ask us to suspend the processing of your personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
6. Request the transfer of your personal data to another party.
7. Withdraw consent in the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your personal data for the purpose or purposes you originally agreed to, unless we are required to in accordance with another lawful basis which has been notified to you.
8. Complain to the Information Commissioner’s Office if you are unhappy with our use of your personal data: you can do this at https://ico.org.uk/make-a-complaint/. Do contact us straight away if you consider that we are not handling your personal data properly so we can try and sort the problem out.
2. To exercise any of the above rights, please contact support@SwiftOrder.co.uk.
3. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
4. We may need to request specific information from you to help us confirm your identity and ensure your right to access the personal data (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
5. If you request us to delete your personal data or restrict our use of it, we may not be able to provide our services to you.

• Cookies policy

1. Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Information about our use of cookies

1. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
2. You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
3. Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
4. We use the following cookies:
1. to manage your login to the website if you are a Client; 
2. to optionally remember your username; and
3. to fulfil our contractual commitments with clients

Google Analytics:

1. We and other Group companies may use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics sets a cookie in order to evaluate visitors’ use of our site.
2. For more information on Google Analytics please visit https://www.google.com/analytics/analytics/#?modal_active=none.