Privacy Policy

---

This privacy and data policy (Privacy Policy) applies to niassweettreats.co.uk (we, us, our or NST). 

This privacy policy applies and has effect in respect of the the provision of goods and any related online services (together, the Services).

If you have any questions or comments about this Privacy Policy, please contact us by e-mail: niassweettreats@outlook.com

We are committed to protecting and respecting your privacy. This Privacy Policy explains the basis on which personal information we collect from you will be processed by us or on our behalf. We will comply with all applicable data protection laws, including the General Data Protection Regulation 2016/679 and the Data Protection Act 2018.

Please read this Privacy Policy carefully as it contains important information about the following:

- what information we may collect about you;

- how we will use information we collect about you;

- whether we will disclose your details to anyone else; and

- your choices and rights regarding the personal information you have provided to us.

Where we determine the purpose and means for the personal data, we are the "data controller" and the "data processor". 

Please note that the Services may contain hyperlinks to services owned and operated by third parties (e.g. Paypal). These third party services may have their own privacy policies and we recommend that you review them. They will govern the use of personal information that you submit or which is collected by cookies and other tracking technologies whilst using these services. We do not accept any responsibility or liability for the privacy practices of such third party services and your use of these is at your own risk.

To provide our Services to you, we collect and process the following information which may include your personal data. "Personal data" or "personal information" means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect the following information from you:

• Contact details: name, title and e-mail address;

When you access the Services via a third party social media provider such as Facebook, Google, Microsoft  we may collect and store personal and non-personal information which is available on that third party social media provider, such as your name, its URL, your email address. We will also receive technical data in order to ensure the Services connect to the correct third-party account.

When you purchase anything via NST, we use a third party payment system called Paypal which transacts all our payments. We have no access to your card payment information.

We may collect personal information about users of the platform in the following way:

2.1 Directly from you - for example, through purchasing a product or submitting an enquiry.

The main purpose of processing personal information during the provision of the Service is to provide goods to you and respond to your enquiries.

Where we decide the purpose or means for the processing of the personal data that you provide when using the Services, we are the "data controller" for the purposes of Data Protection law. We have provided further detail on our lawful reason for processing your personal information below.

Performance of a contract. To perform the Services.

Pursuit of legitimate interests. In some cases, we may use your personal information to pursue legitimate interests of our own including commercial interests. For example, we need to process personal data in pursuit of our legitimate interests to:

• understand the effectiveness of our marketing to attract new users and re-engage our current users;
• ensure that our Services function properly so that you and other users have the best experience;
• research and statistical analysis (e.g. to review participation patterns).

In all instances we will ensure your interests and fundamental rights do not override those interests.

Consent. NST may also process your personal data on the basis of consent you give, for example to send you certain direct marketing communications.

Compliance with our legal obligations. 

Our Services are not for intended to be purchased by children. In the event that we learn that we have collected personal information from a child under 13 years of age we will delete that information as quickly as possible.

Personal information collected and processed by NST may be shared with the following recipients, or categories of recipients, where necessary:

• we may disclose it to any member of our group (which means our subsidiaries), our personnel, suppliers or subcontractors insofar as it is reasonably necessary for the purposes set out in this Privacy Policy;
• we may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).

Information may be sent to your computer in the form of an Internet “cookie” to allow the NST servers to monitor your requirements. The cookie is stored on your computer. The NST server may request that your computer return a cookie to it. These return cookies do not contain any information supplied by you or any personally identifiable information about you.

Such measures are necessary to allow NST to measure the usability of the systems, which will help in its continuing development to ensure that we understand the requirements of our users. Your browser software should however enable you to block cookies if you wish to. For more information about cookies, please visit www.allaboutcookies.org.

We will only retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

Where we are the data controller, to determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay. 

To make a request, please let us know by contacting our Data Protection Officer with the details below.

• Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information and to check that we are lawfully processing it.
• Request correction of the personal information. This enables you to have any incomplete or inaccurate information we hold about you corrected. It is important that the personal information we hold about you is accurate and current. Please update your personal records for any changes on a timely basis.
• Object to the processing data about you. You can request the restriction, termination of processing or deletion of your personal data if:
  • you consented to other processing the personal data and have withdrawn that consent;
  • there is no longer a need to process that personal data for the reason it was collected;
  • the personal data is being processed because it is in the public interest or it is in order to pursue a legitimate interest of NST or a third party, you do not agree with that processing and there is no overriding legitimate interest the continued processing;
  • the personal data was unlawfully processed;
  • you need the personal data to be deleted in order to comply with legal obligations;
  • the personal data is processed in relation to the offer of a service to a child.
• Obtain a machine readable copy of your personal data, which you can use with another service provider. Where it is technically feasible, you can ask us to send this information directly to another IT system provider if you prefer.

We will take all reasonable technical and organisational precautions to prevent the loss misuse or alteration of your personal information.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Please be aware that, although we endeavour to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

Our information is stored within the EEA on secure databases.

We have appointed a Data Protection Officer to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact the Data Protection Officer: niassweettreats@outlook.com

If you are unhappy with the way we are processing your personal data, please let us know by contacting us.

If you do not agree with the way we have processed your data or responded to your concerns, an alternative is to submit a complaint to a Data Protection Supervisory Authority: www.ico.org.uk

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.

If you have any questions about data protection or this privacy notice, please contact us.