Mon Bel Amour Cake Craft are committed to the processing personal data transparently, responsibly, and in compliance with GDPR - the latest legislation surrounding data protection.
We will use details collected during the order process to fulfil your order and for direct marketing in the future.
Our lawful basis for processing is based on direct marketing being a legitimate interest.
We will ensure that there is minimal risk of harm or distress from our direct marketing by taking steps to put data subjects in an equivalent position to consent, and by making unsubscribing/managing preferences simple and accessible. Marketing will be related to previous purchases with us or be relevant in a general context, if applicable, to the best of our reasonable knowledge.
We will also use personal data for profiling and analysis purposes. We use a limited amount of automated software to make decisions for the purposes of direct marketing.
We are committed to only using the minimum amount of personal data necessary. We have concluded that the data we collect is the minimum amount we require to fulfil orders and conduct direct marketing.
We have implemented robust security protocols for the storage of all personal data.
We will not sell personal data to any companies outside of Mon Bel Amour Cake Craft.
We will conduct necessary due diligence with any third-parties involved in the processing of personal data and only use established, reputable and compliant partners to the best of our reasonable knowledge.
We will ensure that all data subjects fundamental rights and freedoms are respected at all times.
We may also use data for the purposes of ongoing fraud prevention.
Mon Bel Amour Cake Craft and Your Data
This policy describes how we collect personal data about you, the type of data we collect, how this data is used and how you, a valued customer, can control the use of your data by Mon Bel Amour Cake Craft.
2) What Data Do We Collect
In order to book and process orders and ensure the best possible levels of service, we collect certain personal information from you. This includes:
Your Email Address
Your Telephone Number
Your Payment Details (please note we do not retain this information as all transactions are done via a secure connection with an established payment provider)
3) How We Use Data
We will primarily use your data to:
Keep you updated on booking information
Keep you updated on the status of your order
Fulfil delivery of your order
Contact you if there is a query regarding your order
Contact you in relation to product and / or website reviews
Assist with any customer queries
In addition, your data including Payment Details will be shared with relevant and reputable third-party banking providers including PayPal in order to verify and authorise your payment so your order can be processed. All third-parties used to process payments are under strict obligation to ensure your personal information is kept private.
Cookies are small text files that are placed on your computer by websites that you visit. Cookies are a kind of short term memory for the web. They are stored in your browser and enable a site to 'remember' little bits of information between pages or visits. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Other cookies that are in use on this website assist us with learning which parts of our websites need additional improvements for the betterment of our users. They also gather website testing results so we can ascertain statistical significance that changes to the site are beneficial to our users.
Information stored in the cookies that are issued by the site is not personally identifiable by us. The value stored in the cookies is an anonymous identifier, which is not linked to any other personal information you may give us during your visit.
We share cookie data with advertising and analytical providers such as Google and Bing for the purposes of conducting online analysis and making improvements to our websites. The information stored in the cookies also assist us to market to you with more relevant online advertising.
If you do not wish to receive these cookies you can easily and safely disable them in your browser, though doing so may affect the functionality of our website to the detriment of your browsing experience.
5) Direct Marketing
a) Legitimate Interests
We operate on an opt-in basis as we rely on ‘legitimate interests’ as a lawful basis for processing personal data. We will process your personal data for the purposes of direct marketing of similar products and services from within Mon Bel Amour Cake Craft in the future, only if you opt in to do so on one of our competition forms or order forms. You also have the option to opt out at any point by contacting us.
We have concluded these steps to be reasonable and effective in balancing our interest of direct marketing with customer’s rights and expectations under GDPR.
More information on our legitimate interests assessment and justification for the above is available on request.
In order to improve our direct marketing efforts, we use carefully vetted third-parties to profile our data (further information is available on request). This helps us to ensure that the data we hold is accurate and up to date. It also helps us to classify private individuals and businesses more accurately, which in turn helps us make marketing decisions that are more appropriate to the customer, thus minimising the potential for harm or distress.
The selected partners we work with in order to profile our data have been subject to due diligence checks, hold various accreditations and are also subject to a strict data sharing agreement that prevents the data being illegally sold on to other companies for the purposes of marketing.
We also use automated software to make decisions based on buying history with us and send direct marketing material using personal data. For example, we may send an automated email 1 year after your first purchase with us. In order to minimise the risk of any potential harm or distress, these communications are marketing emails that can be unsubscribed from under the same unsubscribe link as all other marketing emails.
Further information on profiling is available on request.
c) What You May Receive
The privacy of your personal data is of the highest importance to us. We will not share or sell your personal details to any company outside of Mon Bel Amour Cake Craft or our parent group for the purposes of sending direct marketing, only to profile data in the interests of accuracy as explained above.
Unless you have requested not to receive promotional material from Mon Bel Amour Cake Craft, have unsubscribed, or chosen to opt out at the point of purchase, we may use your personal information to provide you with other relevant offers and details of promotions relating to your transaction history. We may contact you in a number of ways using the personal data supplied when placing an order which includes Email, Post and Telephone.
These communications may or may not be under the Mon Bel Amour Cake Craft brand that you have purchased from, but will still be owned by Mon Bel Amour Cake Craft and it will supply products that may be of interest to you or your organisation.
You may be marketed to under the website you have purchased from, and as part of the wider Mon Bel Amour Cake Craft customer database.
Direct Marketing Continued...
d) Data Retention & Security
When someone books a photoshoot with us their details will be inputted to our ERP system and be stored on secure servers.
All customer personal data is stored on secure servers employing extensive security measures to ensure it remains fully protected at all times. All servers used for data storage are also physically secured and provided by reputable companies that meet the highest standards of security. We do not store any payment card information on any of our own servers.
e) General Retention Periods
Mon Bel Amour Cake Craft will retain customer data for as long as is reasonable and necessary. For the purposes of direct marketing, ongoing customer profiling, suppression management and fraud prevention this may be a permanent basis.
However, we do acknowledge that private individuals purchase from us and under GDPR we have an obligation to ensure that data is kept up to date and accurate. We take this seriously and therefore have a number of controls in place to ensure that data can be amended easily, and that we take steps to ensure out of date data is not used for direct marketing.
f) During The Retention Period
Mon Bel Amour Cake Craft may use retained customer data for the purposes of ongoing direct marketing as well as enhancing the user experience and customer service. The data we collect and use:
Your Email Address
Your Telephone Number
Your Payment Details (please note we do not retain this information as all transactions are done via a secure connection with an established payment provider.)
g) Expiration Of The Retention Period
There is currently no expiration of the retention period – all data is held in perpetuity as has been deemed reasonable and necessary – further information is available on request.
h) Data Minimisation
Mon Bel Amour Cake Craft will not collect more personal data than the bare minimum for the purposes of direct marketing. Nor will we retain irrelevant information. We have concluded that the data we collect during the order process is the minimum amount we require in order to conduct direct marketing.
6) Managing Your Personal Data & How It Is Processed
As a valued customer and in line with GDPR, you have full control over your data and how it is used by Mon Bel Amour Cake Craft. We offer a number of ways our customers can manage their personal data in order to ensure that our interest of direct marketing does not override fundamental rights and freedoms or fall outside of a data subject’s expectations.
Your right to object and your right to restrict processing:
Respecting your rights is important to us. We have no desire to send marketing material that is intrusive or not of interest. To remove your data from email marketing please email our customer marketing team to email@example.com with 'Remove' as the email subject.
Updating Your Details – Your Right To Rectification
Should any of the information you have provided to us change, or require amending, please let us know the correct details by sending an email stating "Change Details" as the email subject, to firstname.lastname@example.org
Subject Access Requests – Your Right To Access
We respect an individual’s right to access any personal data that we hold on them. As such we have an internal process in place in order to handle subject access requests expediently and in accordance with GDPR requirements.
Mon Bel Amour Cake Craft will:
Provide a copy of the information free of charge. However, we will charge a reasonable fee based on administrative costs when a request is manifestly unfounded, excessive, or repetitive.
Provide a response within one month of receipt.
Take reasonable steps to verify the identity of the person making the request.
Provide the information in a commonly used electronic format.
Where possible, we will provide the information in a secure self-service system, such as a private link to the information hosted on a secure server.
Deletion Of Personal Data – Your Right To Erasure
We respect an individual’s right to delete any personal data that we hold on them. We recommend that a global suppression may be more benefit to a data subject as opposed to a deletion. This is where we still store a minimal amount of individual’s personal data on our system, but mark it as not to be processed for any purpose. This is because it may be that we market to someone that has previously been deleted as part of a prospect list, which would obviously cause undue distress, however there would be no way for us to avoid it as we will have no record of the deleted details to suppress against.
Keeping the minimal amount of personal data we need in order to ensure that we do not contact an individual again may therefore by a preferable option. In this case we will explain to the data subject and offer a clear choice.
7) Data Breaches
Mon Bel Amour Cake Craft have a breach reporting procedure in place and in the unlikely event of a breach, will act as per requirements under GDPR.
9) Sale of Business