Respecting the privacy rights of our customers is very important to us. We are committed to complying with the all applicable data protection and privacy legislation in force currently  including the General Data Protection Regulation ((EU) 2016/679); the Data Protection Acts 1988 – 2018; and the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulation 2011 as amended (the “Data Protection Legislation”). References to “processing”, “personal data”, “processor”, “controller” and “data subject” shall bear their respective meanings given in the Data Protection Legislation.

This privacy notice explains how we collect, store and use personal data about you when you visit our websites (inin.uk) and our mobile, tablet and other applications (our “Sites”). This notice applies to all our Sites regardless of how they are made available to you or accessed by you.

Please read this privacy notice carefully before you start using our Sites, as this notice will apply to your use of our Sites.

If you do not want your data to be used as set out in this privacy notice, you should not use our Sites.

Your use of our Sites, including any orders you place, is governed by our Terms and Conditions of Sale, Terms of Use and our Cookie Policy. Please take the time to read these, as they include important terms which apply to you.

The controller of our Sites is Dabbawal Management Limited (“we”, “us” or “our”) of SME Cofe Business Centre, Main Street, Ponteland, Newcastle upon Tyne, England, NE20 9NH. If you have any questions about how we process your personal data, please contact us.

When you visit our Sites, we may collect:

1. Information such as your browser type and version and anonymous information collected from cookies when you are browsing our Sites. We collect this information to help us understand how to improve our services and our Sites and to ensure that the content on our Sites is presented to you in an effective manner. We have a legitimate interest for this processing: to ensure that our Sites are operating effectively and to provide you with a great service. We will store this personal information for 6 months; and
2. Personal information such as your name, address, IP address, telephone number and email address as provided by you when you register to Dabbawal, enter a competition with us or place an order with us. We collect this information for the following reasons:
   • For product development (for example, call backs for feedback on new products), for statistical analysis, market research, testing and survey purposes, to notify you about changes to our Sites or our services. We may also use your online browsing behaviour and your purchases to help us better understand you as a customer and to ensure our food and services meet your current and future needs. We have a legitimate interest to collect this information: to continue to improve the services we provide to you. We will store this personal information for 25 months;
   • To ensure you receive marketing and offers that are of most interest and relevance to you. To help us achieve this, we may share your data with third party companies to understand your purchasing options and provide you with direct marketing, including online advertising. We have a legitimate interest to collect this information: to get to know your preferences and to personalise our offers to you to improve the marketing you receive from us. We will store this personal information for 25 months. You can opt out of receiving this direct marketing at any time, please see below for further information;
   • To send you service messages relating to order confirmations. We have a legitimate interest to collect this information: to keep you updated on the status of your order. We will store this personal information for 25 months; and
   • To facilitate any competitions you may enter with us. This processing is necessary for the performance of a contract to which you are a party.

When you subscribe to our news mailing list on our Sites, we will send you occasional direct marketing via email and SMS about similar products and services. We have a legitimate interest in sending you this marketing: to promote our products and services to our customers and to make sure you are aware of the best offers and deals available. In addition, we rely on the Privacy and Electronic Communications Regulations in order to send direct marketing to our existing customers, specifically regulation 22, which allows us to send electronic marketing to you about the same or similar products you have ordered from us, as long as you are given an opportunity to opt out at the point of data collection and in every subsequent message we send to you.

Can I stop receiving direct marketing?

Yes. We give you an opportunity to opt out of marketing at the point we collect your data by ticking the relevant boxes on the order checkout page. You are also always free to unsubscribe from direct marketing at any time; this will never have an impact on our commitment to provide you with great service and a quality product. To opt out of marketing, please update your preferences. We will stop sending you marketing messages as soon as possible.

We may share your personal information with third party companies to perform data matching, data analysis or online advertising services on our behalf, including Google, Facebook, Twitter, Instagram or TikTok. These third parties will only be permitted to use your personal information for the purpose of performing the relevant services for us and not for any other purpose. Please see “What information do we collect and why do we collect it?” above for further information. Should you wish to object to us sharing your data with any of the above mentioned companies, please update your preferences.

We may share your personal information with our third-party direct marketing companies for the purpose of sending you promotional SMS and email messages and for sending you service emails or SMS messages.

We may also share your personal information with a purchaser or a potential purchaser of our business. We have a legitimate interest to do this: to assist with the sale or potential sale of our business.

In some circumstances, we may have to disclose your personal information by law, because a court or the police or other legal or regulatory enforcement agency has asked us for it.

We require all third parties that we work with to treat your personal information as confidential and to fully comply with all applicable Data Protection Legislation.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) pursuant to: (a) the model clauses published by the European Commission pursuant to Commission Decision C(2010) 593 Standard Contractual Clauses (Processors) and a copy of the model contract clauses is available here; or (b) the model clauses published by the European Commission pursuant to Commission Decision C 2004/915/EC Standard Contractual Clauses (Controller) and a copy of the model contract clauses is available here; Your data is treated securely and in accordance with this privacy notice.

In the event that any lawful basis were to be invalidated, we shall ensure data is transferred via an alternative, valid transfer mechanism then in existence.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of any data transmitted to our Sites and any transmission is at your own risk.

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. All information you provide to us is stored on our secure servers. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and corporate policies to safeguard and secure the information we receive.

You have a right to request access to or rectification of your personal data which we hold about you. You also have a right to erase your personal data, to restrict the processing of your personal data and the right to receive your personal data that you have provided to us and to transit such personal data to another controller.

You have the right to object at any time to any processing of your personal data where our lawful basis for such processing is legitimate interests.

To exercise any of your rights, please contact us by email to info@dabbawal.com or write to us SME Cofe Business Centre, Main Street, Ponteland, Newcastle upon Tyne, England, NE20 9NH.

Please note, when dealing with a data subject request, we have a duty to take reasonable measures to verify the identity of the data subject who has made the request.

If you are concerned about our processing of your personal data, you have a right to make a complaint to the Information Commissioner’s Office in the UK.

If you think any information we have about you is incorrect or incomplete, please write to us or email us and we will correct or update any information as soon as possible.

We may link to other websites which are not within our control. Once you have left our Sites, we cannot be responsible for the protection and privacy of any information which you provide. You should exercise caution and look at the privacy statement applicable to the website in question.

Any changes we make to this Privacy Notice will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy notice.

If you have any questions about our Privacy notice, please contact us by email to info@dabbawal.com or write to us SME Cofe Business Centre, Main Street, Ponteland, Newcastle upon Tyne, England, NE20 9NH.