Privacy Policy

1.1 We are Passan Fresh Ltd (referred to in this Policy as “we”, “us” or “our”). Our head office is located at 18 St Christophers Way,  Derby, DE24 8JY. We are registered at Companies House with company number 14552321. 

1.2 Personal data is, in simple terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers (collectively, “Personal Data”). We understand that your privacy is important to you and that you care about how your Personal Data is used. 

1.3 We respect and value the privacy of everyone who visits our website bombaysweetcentre.co.uk (“Our Sites”), our social media platforms and/or interact with us in other ways, including accessing wi-fi in our café delis. We will only collect and use Personal Data in ways that are described in this Policy, and in a way that is consistent with our obligations and your rights under the law. 

1.4 For the purposes of applicable data protection law (including the EU law version of the General Data Protection Regulation (EU 2016/679) and the Data Protection Act 2018)(collectively the “Data Protection Legislation”) we are a ‘data controller’ of your Personal Data. 

1.5 Where applicable, this policy should be read alongside our: (i) reservation terms; (ii) shipping policy; (iii) wi-fi terms of use; and (iv) Cookie Policy.  

2.0 What Personal Data do we collect?

2.1 We may collect Personal Data when you visit our Sites, participate in promotional or marketing activity, come to one of our cafes, sign in for our wi-fi or contact us. This information may include: 

• Information you provide when you pre order(contact name, phone number, email address and any additional notes you may provide, for example if you are celebrating a special occasion); 
• Transaction and billing information when you purchase food and drink in our café delis (e.g. your purchase and credit/debit card details used to process a payment); 
• Information you are required to provide when making a purchase from our online store (contact name, phone number, email address, delivery address and transaction and billing information);  

• Records of your communications with us via phone, email or social media; 
• Feedback you provide; 
• Information you provide when entering a competition or promotion, such as name, address, email address, phone number; 
• Information you provide when you buy or redeem vouchers or loyalty cards; and 
• Information we receive from other sources, for example Google Analytics, when you visit our Sites, such as web browser type and version, operating system, the website you came from and exit to, your  Internet Protocol address, your browser settings, the date and time of your visits. 

3.0 How do we use Personal Data?

3.1 We process Personal Data for the following purposes:   

• fulfilling an agreement with you, communicating with you and providing customer services; 
• managing, operating and improving our services online, by email, or phone or in our café delis (including enabling you to manage your marketing preferences); 
• managing access to wi-fi services whilst in the restaurant; 

• monitoring our restaurants via CCTV cameras to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law; 
• communicating, investigating and handling any queries, complaints or feedback; 
• to administer our Sites and for internal operations, including trouble shooting, data analysis, testing and research; 
• in connection with legal claims which concern our company, group or partners, as necessary, including disclosure of information in connection with legal process or litigation; 
• to ensure compliance with applicable laws and regulations, including for regulatory, tax and investigative purposes;  

• to deliver tailored and targeted advertising (including via Facebook look-a-like and custom audiences); 
• to carry out market research and surveys including by using service providers and third-party CRM systems; and 
• with your consent and/or where permitted by law, we may also use your Personal Data for marketing purposes, for example to deliver tailored and targeted marketing and to contact you with information, news and offers. If you change your mind you can always opt out of receiving such communications by clicking the unsubscribe link in an email. 

4.0 Who will your Personal Data be shared with, and where?

4.1 We will share your Personal Data: 

• With our suppliers and service providers working for us such as payment providers, reservations service providers, communications providers, wi-fi service providers and advertising platforms; 
• With our professional advisers and insurers; 
• With third parties engaged in credit verification, fraud prevention or detection; 

• With government, regulatory and law enforcement authorities if required;  
• Purchasers (and prospective purchasers) of shares or business assets or  investors (and prospective investors) in us (together with their professional advisers); 

5.0 What cookies will be used on the website?

5.1 Our Sites uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our Sites,  to collect information to help us improve our Sites and to target marketing and advertising to Site visitors. 

6.0 How long will you hold my Personal Data?

6.1 We also keep a record of your email address if you have unsubscribed, or you have asked us not to send you direct marketing, so that you do not receive marketing emails in future. 

6.2 By law we have to keep some information about our customers for extended periods after they cease to be a customer.  This might be for contractual, financial, tax or regulatory purposes.  We may also keep a record of correspondence relating to queries and complaints for as long as reasonably necessary if we believe there is a prospect of litigation or an insurance claim.   

6.3 In some circumstances you have a right to ask us to delete your Personal Data: see paragraph 11 below for further information. 

6.4 In some circumstances we will anonymise your Personal Data (so it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without the need to notify you. 

7.0 Where will we send your Personal Data?

7.1 All personal data will be kept within the U.K 

7.2 Where this is the case and we transfer Personal Data outside of the UK/EEA we use specific approved contracts which ensure the same levels of Personal Data protection that apply under the Data Protection Legislation. Please email info@bombaysweetcentre.co.uk  if you would like more details.

8.0 Telephone call monitoring

8.1 If you contact us by telephone we may monitor or record the call for training purposes, and to improve the quality of services that we provide to you. 

9.0  Minors

9.1 We do not knowingly collect or store any Personal Data about children under the age of 13 and we do not offer any of our products or services directly to children under the age of 13. 

10.0 How can you access your Personal Data?

10.1 If you want to know what Personal Data we hold about you, you can ask us for details and a copy of it. This is known as a “subject access request”. 

10.2 All subject access requests should be made in writing and sent: 

• By email to info@bombaysweetcentre.co.uk ; or 

We will respond to your subject access request in accordance with the ICO guidelines.  Please see: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/ for more information.  

11.0 What rights do you have regarding Personal Data?

11.1 Under Data Protection Legislation, subject to some exceptions, you have the following rights: 

• The right to be informed about our collection and use of your Personal Data;  
• The right to access the Personal Data we hold about you;  
• The right to have your Personal Data rectified if any of your Personal Data held by us is inaccurate or incomplete;  
• The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your Personal Data that we hold;  
• The right to restrict (i.e. prevent) the processing of your Personal Data; 

• The right to object to us using your Personal Data for a particular purpose or purposes; 
• The right to withdraw consent. This means that, if we are relying on your consent as the legal basis for using your Personal Data, you are free to withdraw that consent at any time; 
• The right to data portability. This means that, if you have provided Personal Data to us directly, you can ask us for a copy of that Personal Data to re-use it elsewhere or ask us to transfer it to a third party; and 
• Rights relating to automated decision-making and profiling. 

11.2 For more information about our use of your Personal Data or exercising your rights as outlined above, please contact us using the details provided in paragraph 14. 

11.3 Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau. 

11.4 If you have any cause for complaint about our use of your Personal Data, you have the right to lodge a complaint with the Information Commissioner’s Office. We would hope however that you give us the chance to resolve any complaint before you do this.  

12.0 Facebook Ads

12.1 We may use Facebook advertising services to deliver content to you while you are using the Facebook platform. You can control how Facebook uses data to show you ads by turning off ads which may be based on interests and / or your relationship with specific advertisers, in your ad preference settings. For further information, please visit the various Facebook pages which allow you to learn more about Facebook ads and tracking technologies and to update your settings: 

• https://www.facebook.com/policies/cookies/ 
• https://www.facebook.com/about/ads 
• https://www.facebook.com/ads/preferences/edit/ 

Further, by visiting ‘Your Online Choices’, you can opt-out from seeing Facebook’s interest-based ads. You can also use your mobile device settings to configure your advertising preferences. 

13.2 Please note that even when you have opted out via the methods described above, you may still see our non-targeted adverts whilst you are online if your interests’ settings on Facebook are aligned to an audience segment (pre-defined by Facebook) which our business is also associated with. We do not control this. 

13.0 Contact us

13.1 If you have any questions or concerns about how we use your Personal Data or this Privacy Policy, please get in touch with us: 

By email at: info@bombaysweetcentre.co.uk  

14.0 Changes to this policy

14.1 We may change this policy from time to time.  The latest version will be uploaded to the Bombay website and will take precedence over earlier versions.  If we consider any changes represent an important change to how we use your Personal Data we will notify you.  

This policy was last updated on 26th April 2023.