Wahaca (Oaxaca Limited) is a company registered in England and Wales with company number 05836870. Wahaca is the data controller of your personal data.
Personal data means any information relating to a person who can be identified either directly or indirectly. We will collect and use your personal data when you interact with our website (www.wahaca.co.uk), our social media, contact us, enter into a competition, promotion or survey or, as a customer, request our products or services (together referred to in this policy as the “Services“).
We may collect the following personal data from you when you use our Services:
We may also collect data about you from other sources. This may include the following:
We will only use the personal data that we collect to provide the Services to you which includes the following:
When you give us your consent, we will send you marketing communications concerning Wahaca’s products, services and other promotions (for example, to hear more about the latest Wahaca products). You can opt out at any time after you have given your consent. If you are an existing customer (for example, if you have placed an order with us) we may use the contact details you provided to send you marketing communications about similar Wahaca products or services where permitted by applicable law (unless you have opted out). You can opt out of receiving our marketing communications by following the unsubscribe instructions included in the marketing communications or by contacting us at [email protected].
To process your personal data lawfully we need to rely on one or more valid legal grounds. If you are a customer, our primary legal ground is that we need your personal data to fulfil our contract with you or to take certain steps prior to entering into our contract with you. However, there may be circumstances where we may also rely on other valid legal grounds for the processing of your personal data, such as:
Where the personal data we collect from you is needed to meet our legal or regulatory obligations or to enter into a contract, if we cannot collect this personal data, there is a possibility that we may be unable to provide you with our services or perform all of our obligations under our contract with you.
There are circumstances where we wish to disclose or are compelled to disclose your personal data to third parties. This will only take place in accordance with the applicable law and for the purposes listed above. These scenarios include disclosure:
We may transfer your personal data to third parties in countries that do not have same level of data protection as the UK for further processing in accordance with the purposes set out in this policy. In particular, your personal data may be transferred to our outsourced service providers located abroad. In these circumstances we will, as required by applicable law, ensure that your privacy rights are adequately protected, for example, by signing the standard contractual clauses.
Your personal data is stored in electronic and physical records, which are maintained by Wahaca or our service providers. Your personal data will be retained until your last use or purchase of our Services and normally for a period of 2 years thereafter, unless longer retention is required by applicable local law or where we have a legitimate and lawful purpose to do so. The retention of your personal data will be subject to periodic review.
We may keep an anonymised form of your personal data, which will no longer refer to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.
We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this privacy notice. Unfortunately, the transmission of data via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website and any transmission is therefore at your own risk. Once we have received your data, we will use strict procedures and security features to try to prevent unauthorised access.
Data protection law provides you with numerous rights, including the right to object to our processing of your personal data where permitted by applicable law. You also have the right to request:
These rights are not absolute. Where we have your consent to process your personal data, you have the right to withdraw your consent at any time. If you would like to request a copy of your personal data or exercise any of your other rights please contact us at [email protected].
You also have the right to lodge a complaint about how we treat your personal data. In the first instance, if you would like to make a complaint, we suggest that you contact us using the contact details provided below. You can also lodge a complaint with the Information Commissioner’s Office (ICO) and you can visit their website www.ico.org.uk for more information.
If you have any queries in relation to the processing of your personal data by Wahaca, please contact us on the following contact details: