OUR PRIVACY NOTICE

KEY SUMMARY

This Privacy Notice explains what types of data we collect about you, why we need it, how we use it, and your rights under UK data protection law.

This website collects data that you give direct to us via the website for example to submit an enquiry or register an account. If you subscribe to any of our mailing lists, we will use your personal data to send you the information you have requested such as marketing communications and newsletters. We also collect certain personal data using cookies (if you consent) which tell us how you use our website and how you interact with us. We use this information to analyse usage of our website and its performance, improve its functionality and to personalise content on the website to you.

ABOUT US AND THIS NOTICE

Premier Foods Group Limited ("we", "our", "us") is a member of the Premier Foods group of companies, the ultimate holding company of which is Premier Foods plc (registered in England and Wales with company number 05160050 and registered address Premier House, Centrium Business Park, Griffiths Way, St. Albans, Hertfordshire, AL12RE, United Kingdom). We are the “controller” under data protection legislation of the personal data described in this notice. We ask that you read this Privacy Notice carefully as it contains important information about our processing and your rights.

The website is operated by our third-party e-commerce provider representative, THG Nutrition Limited ("THG"), as agent on our behalf. THG and certain third-party suppliers will process personal data on our behalf for the purposes set out in “HOW WE USE YOUR PERSONAL DATA AND OUR LEGAL BASIS FOR PROCESSING IT”. See “WHO WILL HAVE ACCESS TO YOUR PERSONAL DATA?”

HOW TO CONTACT US

If you have any questions about this Privacy Notice, how your personal data is handled or, want to exercise any of your rights, you can contact our representative, THG:

By email: customer.experience@thehutgroup.com.

By post: Customer Services, Meridian House, Gadbrook Park, Cheshire, CW9 7RA

You can also manage your subscriptions to our marketing communications by contacting us at the details above or, by following the instructions below (see “Managing your marketing communications”).

Changes to the Privacy Notice

We may change this Privacy Notice from time to time. You should check this Privacy Notice occasionally to ensure you are aware of the most recent version that will apply each time you access this website.

Links to other websites

Please note that this website may contain links to third-party websites. Such websites will be governed by their own terms of use, privacy notice and cookie policy. For example, when you click on the Contact Us section, depending on the nature of your query, your information may either be sent directly to our third-party e-commerce provider representative directly via the website or, you may be re-directed to our corporate website: https://www.premierfoods.co.uk/contact-us/ which is governed by separate policies to the ones set out on this website.

WHAT PERSONAL DATA DO WE COLLECT?

Personal data provided by you

Personal data means any information about an individual from which that person can be identified. We will collect certain personal data from you through your use of our website and / or services, including:

Website Usage	Data Collection
Creating an account on our website	Information you provide when setting up your account and creating your profile, such as your name and contact details (i.e. address, email address and phone number) and your password (encrypted)
Making a purchase through our website	Information you provide when you place an order for products through our website, such as your name, billing address, delivery address and credit / debit card details.
Your communication with us	If you contact us via the “Message” or “Live Chat” functions on the website, via our FUEL10K social media platforms or, otherwise using contact details displayed on the website, then we will collect information provided by you with your communication or query, including your name, contact details and the content of your query.
Promotions, competitions, sweepstakes or contests	If you participate in any promotions, competitions, sweepstakes or contests hosted on our website, then we will collect any personal data submitted by you with your entry, including your name and contact details.
Product reviews and surveys	If you participate in any of our surveys or provide information to us as part of product or service review, then we will collect the information submitted with your survey and / or product review (i.e. your name, your personal opinions on the product and any other personal information submitted by you).
Marketing communications	We will collect your data (such as your email address) when you sign up to our newsletter subscription or any other marketing and communications. We will hold records of your subscription or marketing communications preferences. This includes the format in which you would like to receive your marketing communications (e.g. email, SMS etc.) and your contact details for such marketing communications).
Events	If you register for or attend an event hosted or sponsored by us, we may collect information related to your registration for and participation in such events.

Sensitive personal data provided by you

We do not need to collect special category data (health data, religious and philosophical beliefs, political opinions, race, ethnicity, biometric data, sex life or sexual orientation) in order to provide you with our core products or services. If it was necessary to process your special category data (e.g. accessibility requirements in order to fulfil a gift as part of a promotion) we will notify you separately of how this information is collected and which lawful basis is engaged.

CHILDREN

Our website is not intended for, and should not be used by, children under the age of 18. We do not knowingly collect personal data from children under 18 via our website, via targeted marketing or, by providing services.

Personal information about other individuals

If you give us information on behalf of someone else, you must ensure that the other person understands how their information will be used by us and has agreed that you can disclose their information to us.

Personal data collected automatically

We may also collect certain categories of personal data from you through cookies, pixel tags and other online tools when you use our website and interact with us and others. This includes technical information such as information about your IP address, where your computer is located, the web pages your visit and advertisements you click on.

For more information about how cookies and other similar online tools are used on the website, please consult Cookies Policy .

Personal data we receive from third parties

In some circumstances, we may receive personal data from third parties, including:

Verification data	Data received from third party service providers for purposes of enabling us to verify your identity and prevent fraudulent activity.
Social media monitoring	If you visit one Premier Foods’ social media pages (i.e. the FUEL10K social media page) we will collect information such as what you click on and view, your comments, likes and reactions, your location (country/region), details of your device and internet connection, your social media profile details and user ID.
Demographic information	We may receive demographic information from third party advertising partners to help us better personalise ads. To learn more about our use of Cookies, please consult the Cookies Policy.

HOW WE USE YOUR PERSONAL DATA AND OUR LEGAL BASIS FOR PROCESSING IT

Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the context in which we collect it. We describe how we use your personal data and, the legal basis for collecting and using it.

The table below describes the purposes for which we use your personal data and confirmation of which lawful basis we rely on:

Purposes:	Legal Bases:
Online accounts	To register you as a customer and maintain your online account.	Legitimate Interests
Making a purchase through our website	To enable us to process your purchase order.	Contractual necessity
Fulfilment of orders	To fulfil any orders placed by you, including managing payments, charges, refunds and returns.	Contractual necessity
Consumer communications, queries and requests	To manage and respond to any respond to any queries or complaints you submit to our customer service team. We keep a record of these to inform any future communications with us and to demonstrate how we communicated with you throughout.	Contractual necessity Legitimate interests
Managing our relationship with you	To notify you of any service-related matters, such as changes to the website terms or privacy policy. Please be aware, we may not automatically notify you of changes to this policy or, the policies on our website and you should check the policies in place at the time of your visit to the website.	Legal obligation
Personalised content and experiences	To personalise our website and show you content we think you will be most interested in, based on your account information, purchase history and browsing activity. This also includes social media monitoring and demographic data obtained from third parties (see heading "Personal data we receive from third parties" above).	Consent (where we have placed non-essential cookies or similar technologies on your device). Legitimate interests in all other cases.
To operate and improve the website and our services	To improve and maintain the website, to monitor its usage and, to better understand how users access and use the website, our other products and offerings and, for other research and analytical purposes, such as to evaluate and improve our business operations, to develop services and features, and for internal quality control and training purposes. For example, training for the purposes of ensuring you are offered with recommendations best suited for you.	Consent (where we have placed non-essential cookies or similar technologies on your device). Legitimate interests in all other cases.
Events	If we run or sponsor events, we may collect and use personal data in connection with your attendance at the event.	Legitimate interests
Promotions, competitions, sweepstakes or contests	To allow us to enter you into any promotions, competitions, sweepstakes or contests we run on our website.	This is subject to each promotions' separate privacy notice.
Research and customer satisfaction (including product reviews)	For market research and surveys, we may contact you for feedback about our products or for customer satisfaction purposes.	Legitimate interests
Marketing communications and advertising	To send you direct marketing messages and show you targeted, personalised advertising on our website.	For direct marketing, consent or where we have relied on 'soft opt in', legitimate interests. For personalised marketing, consent (where we have placed non-essential cookies or similar technologies on your device).
Security and protection of rights	For security purposes, to prevent, detect, and investigate fraud and other unauthorised activities and access, and where necessary to protect ourselves, our business and third parties.	Legitimate interests
Compliance with law and legal process	To comply with the law and our legal and regulatory obligations, to respond to legal process and, in relation to legal proceedings	Legal obligation
Business Operations	For general business and operational support, such as considering and implementing mergers, acquisitions, reorganisations, bankruptcies, and other business transactions such as financings, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions.	Legitimate interests Legal obligation

We rely on the following legal bases under EU / UK data protection law to process an individual’s personal data (as applicable):

Contract	Because the processing is necessary to perform a contract with you or to take steps prior to entering into a contract with you. For example, where you make a purchase from us, we use your personal data to process the payment and fulfil your order.
Consent	Because we have obtained your consent, such as where you have provided your consented to receive marketing from us or, where you have agreed to the use of non-essential cookies. If you have consented to a processing activity, you can withdraw your consent at any time. We explain how to do this “Managing your marketing communications” below or in relation to the use of cookies, in the Cookies Policy .
Legitimate interests	Because it is in in the interests or us or, that of our e-commerce provider representative, to protect our/its business and services. We are always seeking to understand more about our customers in order to offer the best products and customer experience. We use your information to tailor your view of our website, to make it more interesting and relevant in respect of the products and offers on view.
Legal obligation	Because we are obliged to retain data to comply with various legal or regulatory requirements. For instance, we may be required to collect an individual’s name, address, and financial information for tax reporting purposes.

If you have questions or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the details in the ‘How to contact us’ section.

WHO WILL HAVE ACCESS TO YOUR PERSONAL DATA?

Like any business, we may use third party service providers to operate our website, customer service management, or product sales / payment processing functions or, for any of the other purposes set out under “HOW WE USE YOUR PERSONAL DATA AND THE LEGAL BASIS FOR PROCESSING IT” above. Our e-commerce provider representative, THG, operates our website, manages some of our customer services enquiries relating the product orders and facilitates the processing of orders and order fulfilment. We and THG may also subcontract certain services to service providers, who will process your data as part of the services they offer to us. We take steps to ensure that our service providers treat your data in accordance with the law; only use it in accordance with our contract with them; and keep it secure. The circumstances where we use third-party service providers includes:

Group Companies	Your personal information may be shared with other companies in our group of companies for administration. Our third-party service providers to whom we disclose your personal information to (see “Suppliers and service providers” below) may also disclose it to their group companies for administrative purposes.	Legitimate interests
Suppliers and service providers	We may share your personal information with our third-party suppliers, who process the data on our behalf, e.g., the website host, customer services teams dealing with your queries, payment processors to process your payments and delivery companies to fulfil your order etc.	Contractual necessity Legitimate interests
Legal and professional advisors	We may share your personal information for the purposes of seeking legal advice or engagement in legal proceedings.	Legitimate interests
Fraud prevention	We may share your personal information with third parties engaged in fraud prevention and detection.	Legitimate interests
	We may also make personal data, if permitted, available to third parties in support of our marketing, analytics, advertising and campaign management. See Section 6 “Cookies and Personalisation” for more information.
Law enforcement	We may share your personal information with law enforcement or other governmental authorities, e.g., to report a fraud or in response to a lawful request.	Legal obligation
Mergers and acquisitions	In relation to mergers, acquisitions, investments and asset transfers, personal information will be transferred to the other party to the transaction. Certain personal information may also be shared as part of the preparation for the transaction with lenders, auditors, and third-party advisors, including lawyers and consultants.	Legitimate interests
Comply with legal obligations	Your personal information may be shared with third parties for the purpose of complying with legal and compliance obligations and to respond to legal process e.g. in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement and government bodies. This may include responding to national security or law enforcement disclosure requirements and disclosures required to be made under applicable laws, such as the names of sweepstakes and contest winners.	Legal obligation
Other circumstances	Where we have your consent or are legally permitted to do so.	Consent

HOW WE KEEP YOUR DATA SECURE

We have implemented appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data. We follow recognised industry practices for protecting our IT environment and physical facilities.

We also maintain ISO 27001 and PCI DSS (Payment Card Industry - Data Security Standard) security certifications. However, please be aware that it is impossible for any company to guarantee the absolute security and integrity of the information that has been transmitted to its website.

MARKETING

We love communicating with our customers. Depending on your marketing preferences, we may use your personal information to send you marketing messages by email, SMS, phone and post. Some of these messages may be tailored to you, based on your previous browsing or purchase activity, and other information we hold about you.

Managing your marketing communications

If you no longer want to receive marketing communications from us (or would like to opt back in!), you can change your preferences at any time, by contacting us using the contact details above under “How to Contact Us”, by clicking on the ‘unsubscribe’ link in any email from us, or, by updating your settings in your account. Please note, if you unsubscribe from receiving marketing, you may still be contacted with service messages from time to time, such as site maintenance schedules, order and delivery confirmations, information about your legal rights etc.

TRANSFERS OF PERSONAL DATA TO OTHER COUNTRIES

We use service providers and / or have companies or branches in countries around the world. Your personal data may therefore be processed in countries outside of the UK / EU, including in countries where there may be fewer legal rights in respect of their personal data.

If we transfer your personal data outside the UK / EU, we will ensure that your privacy rights are adequately protected by appropriate legal and technical safeguards in accordance with applicable data protection law. For example, where we transfer your personal data to a country outside of the UK which is formally recognised by the UK Secretary of State as providing an adequate level of protection (e.g. due to a data bridge or adequacy regulations), then we may rely on these to legitimize the transfer. Where we are unable to rely on adequacy regulations or equivalent, we will rely on other recognized safeguards, such as the standard contractual clauses (or UK equivalent) or, in limited circumstances, derogations. For more information about the types of safeguards we have implemented, please contact us using the details "CONTACT US" above.

HOW LONG WILL WE RETAIN YOUR DATA?

We keep your personal data for as long as we need it for the purposes set out under “HOW WE USE YOUR PERSONAL DATA AND OUR LEGAL BASIS FOR PROCESSING IT” so this period will vary depending on an individual’s interactions with us. We have the following specific data retention periods for the below:

Purposes for which the Personal Data was collected /used :	Retention Period:
Purchase made through the website	6 years from the date of the transaction
Complaint / query submitted to the customer services team, via the website and records of correspondence relating to such query / complaint	6 years from the last date of contact
For market research and surveys	3 years from when the Personal Data was collected.
A product review submitted on our website	For as long as the product review remains live on the website and for 1 year thereafter (unless we are required to retain the Personal Data longer by law or to comply with a legal process).

YOUR RIGHTS

If you wish to access, correct, update or request deletionof your personal information, you can do so at any time by contacting us, see ‘How to contact us’section.

• In addition, you can object to processingof your personal information, ask us to restrict processingof your personal information or request portabilityof your personal You can exercise these rights by contacting us, see the ‘How to contact us’section.
• You have the right to opt-out of marketing communicationswe send you at any To exercise this right, you can click the unsubscribe link in any of our email marketing communications, or you can contact us using the 'How to Contact us' section or by updating your marketing preferences in your account settings. For more information, please see “Manage your marketing communications” above.
• Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consentat any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. To withdraw your consent for the purposes of receiving marketing communications, please refer to our heading 'Managing your marketing communications' above. To withdraw your consent in relation to our use of cookies, please refer to the Cookies Policy.

We respond to all requests we receive in accordance with applicable data protection laws.

COMPLAINTS TO THE REGULATOR

If you do not think that we have processed your data in accordance with this Privacy Notice, you should let us know as soon as possible. You also have the right to complain to the Information Commissioner's Office. Information about how to do this is available on their website at www.ico.org.uk.