Privacy Policy

Our Privacy Principles

At Nenette Chocolates we have 5 Privacy Promises which explain how we use and look after your information. We will:

  1. ALWAYS use your personal data in line with data protection law.
  2. ALWAYS tell you what information we collect, what we do with it, who we share it with and who to contact if you have any concerns.
  3. ALWAYS provide options to say ‘STOP’ if you don’t want marketing communications.
  4. ALWAYS take steps to protect your information and make sure no unauthorised person accesses it.
  5. ALWAYS respond to questions about your personal data without delay.

Our Privacy Policy

Last Updated: October 2022

We are committed to safeguarding your privacy rights and ensuring that your personal data is protected.

This Privacy Policy explains the types of personal data we collect and how we process and protect that data in connection with the services we offer. This includes information collected offline i.e. through conversation with you by phone or at selling events and online through our website.

This Privacy Policy also applies to our targeted content, including online offers and advertisements for products and services, which you may see on third party websites, platforms and applications (“Third Party Sites”) based on your online activity. These Third Party Sites may have their own privacy policies and terms and conditions. We encourage you to read them before using those Third Party Sites.

Who is Responsible for what happens to your data?

Nenette Chocolates are responsible for processing your personal data on our website.

How do I contact the Data Protection Officer?

Nenette Chocolates is not legally required to appoint a Data Protection Officer.  However, if you have a question in relation to how we process your personal data you can contact us by email at info@nenettechocolates.co.uk or via post at Nenette Chocolates, Carew, Cranmer Ln, North Kilworth, Leicestershire LE17 6EX.

What is Personal Data?

Personal Data means information that can directly or indirectly identify you (“Personal Data“). This typically includes information such as your name, address, email address, and telephone number, but can also include other information such as IP address, shopping habits, information about your lifestyle or preferences such as your hobbies and interests.

What happens when we receive your data or when we otherwise receive your data?

We collect your Personal Data directly in a number of ways, for example when you provide us with your information to register as a customer, register for prize draws or competitions, subscribe to our newsletter, receive information or mailings, use our applications, buy a product or service from us, complete a survey, make a comment or enquiry or contact us via the website.

When you provide us with your Personal Data, we will process it in accordance with this Privacy Policy. If you do not wish us to process your Personal Data in this way, please do not provide us with your personal information.

We process your Personal Data to provide you with our services as further explained below. In certain instances, we only process your Personal Data if you have given us permission to do so, for example in most cases where we process your Personal Data for marketing purposes, use cookies or location data or where we process your sensitive personal information. In other instances we may rely on other legal grounds for processing your personal data, such as performance of the contract with you or legitimate interests, like fraud prevention.

Where we process your Personal Data on the basis of your consent, we will ask for your consent explicitly and only for a particular purpose. We will also ask you to provide additional consent if we need to use your Personal Data for purposes not covered by this Privacy Policy.

What happens if our customer is a child?

Our Sites are intended for adults, but there could be instances where some customers under the age of 16 view or purchase products on our Sites. If we know a customer is under the age of 16, we will not use such customer’s Personal Data for marketing purposes unless parental consent is provided to us.

To provide parental consent to marketing, please ask your parent or guardian to contact us via email at info@nenettechocolates.co.uk.  In some cases, we will infer from your actions that you obtained parental consent. We then reserve the right to decide whether you will receive our marketing until you reach the eligible age.

Note however that access to certain parts of our Sites and/or eligibility to receive prizes, samples or other rewards may be limited to users over a certain age. We may use your Personal Data to carry out age verification checks and enforce any such age restrictions.

For which purposes do we process your personal data?

To see which categories of personal data we collect for which purposes, see the headings below

Browsing on our website

What personal information may we collect?

Information about the type of browser you use when visiting our Sites, your IP and device address, hyperlinks that you have clicked, websites you visited before arriving at our Site and information collected by cookies or similar tracking devices. Your user name, profile picture, gender, networks and any other information you choose to share when using Third Party Sites (such as when you use the “Like” functionality on Facebook).

What is the purpose of the processing?

We use cookies and similar technologies to process data about you when you visit our Site. We would like to know whether you have visited us before and your preferences to provide you with a tailored experience of our Sites.

How long do we store your personal data?

Please check the Cookie Consent Tool to learn about the storage periods for each cookie.

What is the legal basis for the processing?

Your consent when you click “agree and proceed” in our Cookie Consent Tool in our Sites. In some cases, and always when permitted by law, we will infer from your actions that you agree to Cookies. Please note that we need to process certain basic surfing data in order to provide core Sites functionalities such as secure log-in or remember how far you are through an order.

You can always revisit your cookie preferences via our Cookie Consent Tool or by changing your browser settings.

Purchasing or agreeing to a service

What personal information may we collect?

Name, title, postal address, email address, home telephone, mobile number, passwords, order history, order history, information on the handling of your request and other Personal Data you voluntarily provide to us.

What is the purpose of the processing?

We process Personal Data to provide you with our products or services that you request from us, including sending you products you have purchased or samples that you have requested.

How long do we store your personal data?

As long as you keep shopping with us. If after three years, you have no transactions, we delete or anonymize your Personal Data, unless we are required by law to store it for a longer period.

What is the legal basis for the processing?

We need this information to process your order or any other service you request from us (performance of a contract).

Customer Service

What personal information may we collect?

Name, title, postal address, email address, home telephone, mobile number, passwords, order history, order history, information on the handling of your query, posts and other content you submit to our Site, and further information submitted by you in relation to a purchase or service request or other query (including sensitive personal information).

What is the purpose of the processing?

We process your Personal Data whenever you contact us and when we respond to your enquiries and comments.

How long do we store your personal data?

As long as you keep shopping with us. If after three years, you have no transactions, we delete or anonymize your Personal Data, unless we are required by law to store it for a longer period.

What is the legal basis for the processing?

General enquiries and comments relating to service issues, stock availability etc. three years from last communication with you.

What personal information may we collect?

To process your enquiries, comments or complaints at your request (performance of a contract or quasi-contract).

What personal information may we collect?

Name, title, postal address, email address, mobile number, order history (including purchases you make on our site), products you view on our Site, products you prefer, actions you take on our website or when viewing our emails, answers you provide in surveys or competitions, your shopping habits and preferences and information about your lifestyle, such as your hobbies and interests.

What is the purpose of the processing?

To suggest tailored products or services that we think may be of interest to you based on your shopping history and behaviour, your preferences, and our market segmentation strategies. We may do this by sending you – via post, email, newsletter – details of products, services, special offers, promotions and other information. We may also contact you to offer the opportunity to take part in customer research surveys, promotions, prize draws or competitions.

How long do we store your personal data?

As long as you keep shopping with us. If after three years, you have no transactions, we delete or anonymize your Personal Data, unless we are required by the law to store it for a longer period. If you purchase online through guest check-out, we will retain your data for one year from the date of transaction. If you have signed up to any of our newsletters, we will retain your Personal Data until you unsubscribe.

What is the legal basis for the processing?

You may authorise us to do so by signing up to our newsletters or creating an online account.

If you purchase online through guest check-out we will contact you with related offers based on legitimate interest and always within the limits of the law, including spamming laws.

You can always opt-out of our marketing via your “Privacy Preferences” in your profile (if you have one), by sending an email to info@nenettechocolates.co.uk or via the unsubscribe button in any our marketing communications.

Competitions and Prize Draws

What personal information may we collect?

Name, title, postal address, email address, home telephone or mobile number, user generated content or any other Personal Data that you submit – as required for the competition or prize draw.

What is the purpose of the processing?

To carry out prize draws or competitions which you chose to participate in and to determine the winner or to provide the prize if you win.

How long do we store your personal data?

Three months after the competition or game was completed, unless we are required by law to store them for a longer period.

What is the legal basis for the processing?

We may need this information for identification purposes and to provide you with the prize if applicable (performance of a contract). Where we intend to use your personal data for marketing purposes, we will clearly inform you before we collect your personal data and ask you for your consent.

Online Shopping

What personal information may we collect?

Name, title, postal address, email address, home telephone or mobile number, information about products you order, order history, details about your purchase .

What is the purpose of the processing?

To process your online purchase and deliver the product to you as ordered. Your payment related Personal Data may be transferred to payment providers to process your payments.

How long do we store your personal data?

As long as you keep shopping with us. If after three years, you have no transactions, we delete or anonymize your Personal Data, unless we are required by law to store it for a longer period. If you check out as a guest, we will retain your Personal Data for one year from the date of transaction.

What is the legal basis for the processing?

We need this information to provide you with your online order (performance of a contract).

Fraud prevention and other administrative processes

What personal information may we collect?

Name, title, postal address, email address, home telephone or mobile number.

What is the purpose of the processing?

To carry out administrative services, including processing any application you submit to us for providing the services, preventing or detecting fraud or other crimes.

How long do we store your personal data?

As long as you keep shopping with us. If after three years, you have no transactions, we delete or anonymize your Personal Data, unless we are required by the law to store them for a longer period.

What is the legal basis for the processing?

For the prevention and detection of fraud to ensure that your identity and transactions are secured (balancing of interest with our interest being to prevent fraud and protect our customers).

We perform other administrative services to provide you with the respective underlying services (performance of a contract).

Cookies and similar technologies

We use cookies and similar technologies (“Cookies”) to improve our products and your experience on our Sites by collecting information on how you use our Sites. Some of the Cookies we use are required to enable core site functionality, for example to provide secure log-in or to remember how far you are through an order, but we also use Cookies that allow us to analyse site usage (so we can measure and improve performance), and advertisement Cookies which are used by advertising companies to serve ads that are relevant to your interests.

We may also tailor our Site and our products to your interests and needs, by collecting information about your device and linking this to your Personal Data so as to ensure that our Sites present the best web experience for you.

Where we use Google Analytics, we have set up the service to anonymize your IP address as soon as data is received by the Analytics Collection Network before any storage or processing takes place. To opt out of being tracked by Google Analytics across the website please visit [          ]

You can view more information on the Cookies we use and adjust your preferences via the Cookie Consent Tool on our Sites. Please note, however, that without cookies you may not be able to use all of the features of our Sites or online services.

Who do we share your personal data with?

Our Service Providers

We share your Personal Data with the following data processors (i.e. service providers that help us to perform the above tasks):

  • if you order a product or service from us, trusted third parties to allow payment and delivery of the products and services you have ordered.  Unless you provided consent, any such trusted third parties are not authorised by us to use your Personal Data in any other way and will be required by us to implement adequate technical and organisational measures to protect your Personal Data.

Other Recipients

Please note that we never share your Personal Data with social media platforms. When we engage in audience building or customer matching activities with social media platforms like Facebook or Google, your Personal Data is always anonymized before the transfer. If there are any changes in the future and we have to share your Personal Data with a social media platform, we will ask for your consent.

How long do we retain your data?

We will store your Personal Data only until the aforementioned purposes for which we have collected or received your Personal Data are fulfilled and once our statutory obligations to preserve records have expired.

What are your rights?

If certain requirements are fulfilled, you have the right to:

  • Obtain from us confirmation as to whether or not we process Personal Data from you and, where that is the case, access to your Personal Data;
  • Rectification of inaccurate Personal Data;
  • Erasure of Personal Data;
  • Objection to the processing of Personal Data;
  • Restriction of processing of Personal Data; and
  • Portability of Personal Data – receive the Personal Data you have provided to us in a structured, commonly used and machine-readable form and transmit it to another data controller.

To exercise your rights, please contact Nenette Chocolates via email at info@nenettechocolates.co.uk

Note that you do not need to contact us to exercise your rights to stop receiving marketing communications from us. You can opt out of receiving such communications by going to the Privacy Preferences section of your ‘My Account’ if you have an account with us, directly from the communications we send you or by contacting us via email at info@nenettechocolates.co.uk

How can you unsubscribe or withdraw your consent to the processing of your data?

Where your consent is the legal basis for the processing of your Personal Data, you can withdraw your consent for:

  • Marketing communications: by logging into your account or using the unsubscribe link in any of our marketing communications.
  • Use of Cookies: via our Cookie Consent Tool at the bottom of our Sites.
  • By sending an email to info@nenettechocolates.co.uk with the subject UNSUBSCRIBE

Please note that withdrawing your consent will not affect the lawfulness of the processing before the withdrawal. Please allow upto 48hrs for your data to be removed from our systems.

Can you complain to the Data Protection authorities?

If you think that the processing of Personal Data by us violates data protection laws, you can lodge a complaint with the Information Commissioner in the UK (www.ico.org.uk) or the Data Protection Commissioner in the Republic of Ireland (www.dataprotection.ie).

How do we protect your personal data?

We maintain appropriate technical and organisational measures to protect the Personal Data you provide to us against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your Personal Data.

Can we change our privacy policy?

We may change this Privacy Policy from time to time by posting the updated version of the Privacy Policy here. We encourage you to visit this area frequently to stay informed.