Bittersweet is a controller of your personal data. We at Bittersweet respect your data and we take your privacy very seriously.
This Privacy Notice explains as to what personal data we collect, store, share personal data and how it is used. This Privacy Notice also explains what rights you have over your personal data and how you can use those rights, and how to contact us in the event you have a complaint.
You have the right to object to some of the processing which Bittersweet carries out. This Privacy Notice contains more information about your rights and how to exercise “Your rights”. An overview of how we use your data is contained herein.
Who we are
Bittersweet is a company registered in England and Wales whose registered office is at 8 The Old Town Hall, Parliament Square, Yorkshire Street, Oldham, OL1 1RA. Bittersweet is a casual dining restaurant specialising in Breakfast, Milkshakes and Waffles.
1. Summary of how we use your data and your rights
We use your data to provide and improve our products and services, including for our marketing research, feedback and enquiries, and for our company safety and security purposes.
We will use your data to comply with laws and regulations. We may use your data to prevent and detect crime, i.e such as fraud.
You as an individual have the right to object to some of the processing Bittersweet carries out. More information about your rights and how to exercise these is set out in this Privacy Notice in “Your Rights Section”.
You can unsubscribe from marketing communications at any time. To opt out of marketing email email@example.com.
If you enable location services on your app, or you access the location finder on our sites and your browser settings allow this, your device will identify and alert you to Bittersweet stores nearest to your location.
2. Information we collect from you.
We collect information when you purchase something or use our services.This includes store visits, using our websites or app, joining our Bittersweet rewards, or corresponding with us.
- We keep information you give us such as contact details (including name, email, address and telephone number), your date of birth, frequency of visits, feedback, marketing opinions and competition entries.
- We record and analyse store, web and app visits and details of your purchases and which stores you visit.
- When you sign up to in-store Wifi and the Wifi provider may check this number and keep a record of this.
- If there is an incident, we may need to log information about it.
- If you engage with our company online via our websites or app our cookies and similar technologies will capture your IP address, your location, and record how you use the site or app in order to help improve it and improve your user experience, and this is only where your browser settings or permission allows for this.
- If you post information online about us on social media or provide feedback, we may keep a record.
- We use CCTV in our stores for the prevention and detection of crime, and for safety and security reasons.
- If you contact us directly and or complain or give feedback, or enter a competition, we will record details and all the related information such as emails, letters and phone calls.
3. Information we receive from third parties
We may receive your information from third parties in the course of us providing you our services. Where we obtain this information from another party it is our responsibility to make sure that they will be sharing personal data with us and, where necessary, ask permission before sharing information with us.
4. How we use information and the legal basis
We are allowed to use your data, and this is only if we have a proper reason to do so such as:
- To fulfill a contract you have with us;
- When it is in our legitimate interest;
- When you consent to it; or
- To comply with the law.
A legitimate interest is when we have a business or commercial reason to use your data. For more information on this assessment please feel free to contact us by email.
Below we have set out how and why we may use your personal information and the legal basis we rely on. This is also where we tell you what our legitimate interests are.
When you buy something from us, or join our Bittersweet reward scheme, or enter a competition we run, we use your information to fulfil our contract with you.
We take information to communicate with you, check your identity, take payment, and provide our products and services, including our reward scheme as a member.
To run our business and pursue our legitimate interests, we use your information.
Our legitimate interests include keeping our records up to date, fulfilling our legal, compliance and contractual duties, working out which of our food products you like, improving our site and apps, and services, developing new products and services, and telling you about them and conducting market research.
Additional details of our legitimate interests:
To run and promote our business, we may use your information:
- To record call communications, including incoming and outgoing calls, emails, for staff training, quality improvement purposes and establishing facts.
- To monitor our websites, social media such as Facebook, Twitter and online services including our mobile app and responses to email marketing. If you post comments online or in other media we may retain this information, contact you, and use it to improve our products and services.
- To understand you better as a customer by analysing your transactions and other information you provide to us or which we learn through your interactions with us by contacting us.
- To contact you where you provide us with market research feedback or pass this data to a third-party business partner of ours for panel market research analysis.
- To prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, including where we are required to do so by law we may:
- review CCTV, record call communications and emails.
- Use other organisations to check the validity of the credit or debit card details you use to pay (further details please see “Data sharing” below).
- To comply with law, assess and uphold legal or contractual rights and claims, and for monitoring, auditing and training on compliance matters:
- We keep records and pass your data to our insurers if and when necessary (for further details see Data sharing below).
- We monitor, and record call communications, including incoming and outgoing calls and emails.
- We may verify your identity.
We keep records to comply with health and safety legislation.
We may, if you give us consent
- Through the settings on your device, send you push notifications through the apps.
- Use data for other purposes where we explain that purpose when we ask for your consent.
When you give consent, you are able to withdraw that consent at any time by contacting us, for instance by emailing firstname.lastname@example.org. If you do so we can only continue to use your data if another legal basis applies, such as when we’re required to do something by law.
However, you have an absolute right to opt-out of direct marketing at any time.
When the law requires us to process your data we will do so. This can include
- Legal, compliance, regulatory and investigative purposes, including for government agencies and law enforcement.
- When you exercise your rights under data protection legislation, including when you ask to subscribe or unsubscribe from our marketing communications.
5. Data sharing
Bittersweet shares data with our IT, safety and security, including CCTV, and other services.
For some activities Bittersweet uses third party service providers, for instance network provider BT for Wifi in our stores and. When these service providers ask for customer data from you we may share information with them.
We use third party providers for the following services:
- Wifi BT
- Sending promotional offers
- Customer feedback surveys
- IT development, support, maintenance and hosting, including the provision of applications and website hosting
- Payments’ processing to enable you to pay by credit or debit card
- CCTV system provision and maintenance
If our business is to be merged with another business or sold, your details would be shared with our advisers and any prospective purchaser’s advisers. Your information may be passed to the new owners.
Personal data may be shared with government authorities and/or law enforcement officials for the prevention or detection of crime, if required by law or if required for a legal or contractual claim.
6. Cookies and similar technologies
7. Data retention
We keep your data to enable us to fulfil our contract with you or to provide services, whilst you are an active user of our site, apps, and where required by law or to protect legal rights.
We constantly look to keep your data for the minimum time in line with data protection principles and our processes. For example, we keep:
- Records of payment information in line with tax law and audit requirements.
- Customer feedback and correspondence with our customer services teams for up to 3 years afterwards, depending on the nature of the interaction and any applicable law, such as health and safety. This enables us to respond to any questions or complaints.
- Information to maintain records according to rules that apply to us.
If you unsubscribe from marketing communications we keep a record of this request indefinitely to ensure we do not send you direct marketing again.
We may keep your data for longer if we cannot delete it for legal, regulatory or technical reasons.
8. Your rights
You have rights over your personal data.
- ask for a copy of your information;
- ask for information to be amended;
- ask for information to be erased or deleted;
- ask for us to limit or restrict processing;
- object to us processing your data, in particular where we use the data for direct marketing. The right to object does not apply if we must process the data to meet a contractual or legal requirement;
- ask us to send you a copy or ask for us to send it to another party.
Some rights, however, may be limited. We may be obliged by law or regulation to keep information. We must respect other people’s privacy as well, which means we may need to redact or remove information where it includes personal data about someone else, even if it is connected to your data. On occasion there may be a compelling legitimate interest to keep processing data.
If you want a copy of your data, to object to how we use your data, or ask us to delete it or restrict how we use it or, please contact us by emailing to email@example.com. To process a request from you, we may need to confirm your identity to ensure we’re accessing the right data.
You have a right to complain to the Information Commissioner’s Office (the “ICO”).
9. Contact details
To exercise any of your rights or to withdraw consent you can email: firstname.lastname@example.org.
For any queries relating to data protection please contact by emailing Hello@enjoybittersweet.com or by writing to us at Bittersweet 8 The Old Town Hall, Parliament Square, Yorkshire Street, Oldham, OL1 1RA.
If we make any changes or updates to this notice we will communicate these.
10. Who is the controller of your data
Bittersweet is the controller for your information and our registered office is at 8 The Old Town Hall, Parliament Square, Yorkshire Street, Oldham, OL1 1RA.