This website is owned and operated on behalf of Allied Bakeries, a trading division of ABF Grain Products Ltd (registered in England and Wales under company number 79590) (called ‘we’, ‘our’ or ‘us’ in this notice). We are committed to ensuring that your privacy is protected and that we comply with all applicable data protection rules (including applicable marketing and cookies laws, together with associated guidance) (the "Data Protection Laws").

This policy explains how we collect, use, store and share the personal information we collect about you, how you can exercise your rights in respect of that information and the procedures that we have in place to safeguard your privacy. This policy supplements any other fair processing or privacy notice that may be provided to you from time to time. Please contact us using the contact details set out at the end of this policy if you have any questions, comments or concerns about this policy or how we handle your personal information, or if such information changes at any time.

For the purpose of the Data Protection Laws, we are the controller of the personal information processed for the purposes set out below and we are responsible for looking after it.

When we refer to "processing" in this policy, we mean any activity concerning your personal information, including collecting, using, disclosing, deleting and anonymising.

The information we collect and how we use it

Under the Data Protection Laws, we are required to explain what information we collect from you and how and why we use your personal information (the "processing activity"). We are also required to have a "lawful basis" on which to process your personal information. This is summarised in the table below.

Processing activity: Why we use your information?	What information is collected?	Lawful basis of processing	Where is the information collected from?	How long do we keep the information for?
To administer our competitions, prize draws, or promotions which you may enter.	Name, email address, postal address.	We process this information as it is necessary for the performance of our contract with you when you enter into a competition. Where we use your information for publicity purposes, we will do so with your consent. We also process this information as it is necessary in order to comply with our legal obligations when running a competition, including compliance with the relevant UK advertising codes of practice in place from time to time.	Directly from you when you enter a competition, prize draw or promotion.	Personal data we hold in connection with the management of competitions, prize draws, and promotions is held for 6 years (or longer, if required by applicable laws). Any information we use for publicity may be held and used for longer (for example where published on our Website). Please see Competitions, Prize-draws, and Promotions below for further information.
To use data analytics to improve our Website, products, marketing, customer relationships and experiences.	Information about your use of our Website, including: duration, frequency and time; pages you have visited, search terms, and use of our check-out process. Technical data, including: internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our Website.	We process this information on the basis of our legitimate interest of running our business, improving our Website for the benefit of you and other customers. We rely on your consent where the data is collected via a cookie (save for strictly necessary cookies).	Directly from you when you visit our Website.	We delete browsing data collected via Google Analytics every 14 months. We may also collect information about your use of our Website for data analytics purposes using our own Website platform (Shopify) and this data may be retained for up to 30 months following collection. Please refer to our Cookies Policy for further information regarding the use and duration of the cookies used.
To help maintain the security of our Website, including troubleshooting, data analysis, testing, system maintenance, and support.	Technical data, including: internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our Website.	As necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).	Directly from you when you visit our Website.	We delete browsing data every 14 months.
To respond to your queries or comments when you correspond with us.	Name, email address, and any other information you supply to us when contacting with us.	For our legitimate business interest in communicating with you in accordance with your wishes and expectations, and for providing good customer service.	Directly from you when you contact us.	We maintain a record of routine queries for 6 months. However, we may need to keep your information for up to 6 years (or longer, if required by applicable laws) where your query relates to a contract between us, or where we need to obtain legal advice.

Where required under applicable data protection laws, we have determined, acting reasonably and considering the circumstances, that we are able to rely on legitimate interests as the lawful basis on which to process your personal information in certain circumstances (we have stated this above and set out our legitimate interests). We have reached this decision by carrying out a balancing exercise to make sure our legitimate interest is not overridden by your privacy rights as an individual.

We consider that it is reasonable for us to process your information for the purposes of our legitimate interests outlined above as: (a) we process your information only so far as is necessary for such purpose; and (b) it can be reasonably expected for us to process your information in this way.

Where we process your personal information on the legal basis of consent (as indicated in the above table), you may refuse consent to our processing and you may also withdraw your consent at any time: (i) in respect of cookies and other tracking mechanisms on our Website, by using the cookie consent manager in our cookie notification banner, (ii) in respect of marketing communications, by clicking 'unsubscribe' in the footer of the relevant emails, or (iii) in respect of other matters, by using the contact details below. This would not affect your ability to use any features of our Website. Withdrawing consent does neither affect any processing carried out without your consent (i.e. where we rely on another legal basis), nor the lawfulness of processing based on consent before its withdrawal.

Cookies

Some of the information identified in the table above, is collected by us through the use of cookies or similar technology when you visit our Website, or other websites or social media sites where we have included a cookie. In some cases, we will need your consent in order to place such cookies on your device. More information on the specific types of cookies we collect, our lawful basis and how to manage them can be found in our Cookies Policy.

Competition, Prize-draws and Promotions

We will process your personal information in connection with the Kingsmill Win with Peppa Pig Promotion. Please refer to the relevant terms and conditions of such competition, prize draw or promotion for further information.

Unless you ask us not to, we may (subject to the laws applicable in your country of residence) make your surname and county of residence available: (a) on request to anyone who sends us a self-addressed envelope within 10 weeks of the closing date of the competition; and (b) to any relevant regulator if they ask us (in the UK, this would be the Advertising Standards Authority (ASA)). We do this because it is necessary for the purpose of our legitimate interests in complying with the laws, regulatory codes and guidelines in force from time to time.

You have the right to object to our publication of your information. To do so, please contact us as soon as possible, and within a week of receiving your winner’s notification should wish you wish to object.

If we haven’t heard from you within a week, and we are asked to publish your information, we will do so. If you object later, we may have already published your information.

Where we are asked to disclose your information to a relevant regulator, and you object before we have done so, we will consider your reasons for objecting and aim to comply with your request (where we are able to do so). However, please note that we may still be required by law or regulation to disclose your information, if for example, we are required to demonstrate that a valid award took place.

Should you win, we may also write to you to request your agreement to reasonable publicity and the use of your initial, surname, county of residence and any photograph provided by you as part of that publicity on our Website and any of our social media accounts. We may also write to request your agreement to the creation of further materials based on competition entries which will be hosted on our Website. We use your information in this way on the basis of your consent. You can withdraw your consent at any time after you’ve agreed but please bear in mind that, due to the nature of social media, once your information has been made publicly available for promotional purposes, it will be public and potentially copied or otherwise further distributed beyond our control.

Security

We have in place appropriate policies, rules and technical and organisational measures to protect your personal information from unauthorised or unlawful processing, and against accidental loss, destruction or damage.

We also have procedures in place to deal with any data security breach. We will notify you and any applicable regulator of a data security breach where we are legally required to do so.

However, the internet and email are not secure. Your communications may route through a number of countries before being delivered, may be intercepted by third parties and may not always reach the intended recipient – this is the nature of the World Wide Web/Internet. We cannot accept responsibility for any such unauthorised access or loss of personal information that is beyond our control.

You are responsible for protecting your username and password and must not share it with, or disclose it, to anyone.

If you want you to learn more about how to protect your data and your devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Sharing your personal information

We will only disclose your personal information to:

• companies within ABF Grains Products Limited for internal business purposed such as management, accounting and marketing;
• other third-party suppliers, including business partners and sub-contractors for business administration, support, processing, services, or IT purposes;
• our third-party logistics and delivery providers who deliver products to you on our behalf;
• analytics or search engines, that enable us to optimise and improve your experience of our Website;
• our regulators, law enforcement or fraud prevention agencies, as well as our legal advisers, courts, the police and any other authorised bodies, for the purposes of investigating any actual or suspected criminal activity or other regulatory or legal matters;
• our professional advisors (including without limitation tax, legal, insurance, or other corporate advisors who provide professional services to us); and
• HMRC or other tax bodies or agencies to comply with our legal and regulatory obligations.

To the extent authorised by applicable laws, we will disclose your personal information to third parties:

• in the event that we consider selling or buying any business or assets, merging with another business, financing our business, granting a charge over our assets or leasing or licensing our assets, we may disclose your personal information to any prospective sellers or buyers of such business or assets;
• in the event we are the subject of any insolvency situation (e.g., the administration or liquidation);
• if we, or substantially all of our assets, are acquired by a third party, in which case personal information held by us about our customers will be one of the transferred assets;
• in order to enforce or apply our terms and conditions;
• to protect our rights, property, or safety, or that of our staff, our customers, or others. This includes exchanging information with other companies and organisations (including without limitation HMRC, the local police or other local law enforcement agencies) for the purposes of staff and customer safety, crime prevention, fraud protection and credit risk reduction; and
• if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime.

International transfers of your personal information

We may transfer personal information to countries other than the country in which the data was originally collected (for example, outside the UK) in order to provide you with our products. These countries may not have the same data protection laws as the country in which you initially provided the information and may not provide the same level of protection. Your personal information may be subject to the laws of such foreign jurisdiction and may be accessible without notice to you by the courts, law enforcement and national security authorities of such foreign jurisdiction.

If we transfer personal information to countries outside of the UK, we will ensure (in accordance with applicable laws) an adequate degree of protection is afforded to your personal information by ensuring at least one of the following safeguards is implemented:

• we may transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data;
• for transfers to the US, any transfers would be under the UK Extension to the EU-US Data Privacy Framework. Further information about the UK Extension to the EU-US Data Privacy Framework can be found here.;
• we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK. Further information regarding such contracts are available on the ICO's website here.

Your Rights

If you think the personal data we hold about you is inaccurate or incomplete, you can ask us to correct it or complete it. In some circumstances you also have the right to object to our processing of your data and can ask us to restrict our use of your data and to delete it.

There are some exceptions to these rights, however. For example, it will not be possible for us to delete your data if we are required by law to keep it or if we hold it in connection with a contract with you. Similarly, access to your data may be refused if making the information available would reveal personal information about another person or if we are legally prevented from disclosing such information.

If you wish to exercise any of these rights you should contact our Data Protection team via e-mail on dataprotection@alliedbakeries.co.uk

Contacting us and your rights of complaint Questions, comments or requests concerning this privacy notice are welcomed and should be addressed to the Data Protection Coordinator at dataprotection@alliedbakeries.co.uk.

If you have a concern about the way we handle your personal data you have the right to complain to the Information Commissioner (ICO). You can find details of how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.