Kaspa's Desserts Privacy Policy

1. Introduction:
At Kaspa’s Franchise Ltd, we are committed to protecting the privacy and confidentiality of your personal information. This comprehensive privacy notice aims to provide you with detailed information on how we collect, use, share, and protect your personal data in compliance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and other applicable data protection laws, including those of England and English law.

2. Data Controller:
Kaspa’s Franchise Ltd, registered in England, is the data controller responsible for the processing of your personal data. For any inquiries regarding the processing of your personal information or to exercise your data protection rights, please contact us using the details provided at the end of this notice.

3. Information We Collect:We collect and process various categories of personal information about you, including but not limited to:

• Contact Information: Name, address, email address, telephone number
•  Financial Information: Payment details, billing information
• Technical Information: Internet Protocol (IP) address, browser type, device identifiers
• Usage Information: Information about how you interact with our website, products, and services
• Marketing Preferences: Your preferences for receiving marketing communications and promotional offers

4. Purposes of Processing Your Personal Information:
We process your personal information for the following purposes:

•  Customer Support: Responding to inquiries, providing assistance, and resolving issues
• Marketing and Promotions: Sending marketing communications, newsletters, and promotional offers, subject to your consent
• Personalisation: Tailoring our products, services, and marketing communications to your preferences and interests
• Analytics and Improvement: Analysing usage data, conducting research, and improving the quality and performance of our products and services
• Legal and Regulatory Compliance: Complying with legal obligations, regulatory requirements, and industry standards
• Fraud Prevention and Security: Detecting and preventing fraud, unauthorised access, and other security incidents

5. Legal Basis for Processing Your Personal Information:
We process your personal information based on one or more of the following legal grounds:

• Performance of a Contract: Processing necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract
• Consent: Processing based on your consent, which you may withdraw at any time by contacting us
• Legal Obligation: Processing necessary to comply with legal obligations or regulatory requirements
• Legitimate Interests: Processing necessary for our legitimate interests or those of third parties, provided your interests and fundamental rights do not override those interests

6. Sharing Your Personal Information:
We may share your personal information with the following categories of recipients:

• Service Providers: Third-party service providers who assist us in providing our products and services (e.g., payment processors, shipping carriers, IT service providers)
• Business Partners: Affiliates, franchisees, and business partners with whom we collaborate to deliver products and services
• Legal and Regulatory Authorities: Law enforcement agencies, government authorities, and regulatory bodies as required by law or to protect our legal rights
• Professional Advisors: Legal advisors, auditors, and consultants who assist us in managing our business operations

7. International Transfers of Your Personal Information:
Some of our service providers and partners may be located outside the European Economic Area (EEA) or your home country, and your personal information may be transferred to jurisdictions that may not provide the same level of data protection as your country of residence. In such cases, we ensure that appropriate safeguards are in place to protect your personal data, including the use of standard contractual clauses or other legal mechanisms.

8. Data Security Measures:
We implement and maintain appropriate technical and organisational measures to ensure the security, confidentiality, and integrity of your personal information. These measures include encryption, access controls, data minimisation, and regular security assessments.

9. Your Rights:
You have the following rights regarding your personal information, subject to applicable legal restrictions:

• Right of Access: Request access to and obtain a copy of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request restriction of processing of your personal data under certain circumstances
• Right to Data Portability: Request transfer of your personal data to another controller under certain circumstances
• Right to Object: Object to processing of your personal data under certain circumstances, including processing for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent to processing of your personal data where consent is the legal basis for processing

10. Automated Decision-Making and Profiling:
We do not use automated decision-making or profiling that significantly affects you without your explicit consent.

11. Retention of Your Personal Information:
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law.

12. Changes to This Privacy Notice:
We reserve the right to update or amend this privacy notice from time to time to reflect changes in our practices, legal requirements, or industry standards. We encourage you to review this notice periodically for any updates or changes.

13. Contact Us:
If you have any questions, concerns, or requests regarding this privacy notice or our handling of your personal information, or if you wish to exercise your data protection rights, please contact us at:

Kaspa’s Franchise Ltd
73 Park Lane, Croydon, Surrey, CR0 1JG. United Kingdom

customerservices@kaspas.co.uk