Coffi Crefftwyr Cymreig / Welsh Artisan Coffee
This Privacy Policy applies to the personal data that Ffa Da collects and uses.
Ffa Da is a company based in Llandanwg, Harlech, Gwynedd LL46 2SD.
We control the ways your personal data are collected and the purposes for which your personal data are used. We are the “data controller” and “data processor” for the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679).
We also have contracts in place with “data processors” who receive your personal data from us for the sole purpose of fulfilling the services we offer (see Section 3).
Our Privacy Policy refers to any personal data collected, used or stored through our websites www.ffada.co.uk.
We collect personal data from you when you use our platform. We may also acquire personal data via third parties where you have consented to them sharing the data with us or from publicly available information. We do not buy personal data from third parties.
When using the term “personal data” in our Privacy Policy, we mean information that relates to you and allows us to identify you, either directly or in combination with other information that we may hold. Your personal data may include for example your name, your contact details or information on how you use our Platform.
The table below outlines what personal data we collect, when we collect it and why.
| What we collect | When we collect it | Why we collect it |
| Your name, address, email address and telephone number | When you place an order with us for a physical product requiring delivery | To fulfil an order of a physical product |
| Your email address | When you explicitly opt-in and ask us to send you this information | To send you relevant information and offers |
| Your email address | When you explicitly register to create an account on our Platform | To allow you to interact with our Platform in a personalised manner (i.e. setting your preferences, favourite products) |
| Your email address | When you contact us directly for advice, help or information | To respond to any emails you send us |
| Your phone number | When you provide us with your phone number to return a phone call | To respond to any phone calls you make to us |
| Your IP address | When you use certain parts of our Platform | We collect log files of some activities in order to operate and support the Platform. We do not store or analyze this information, and the log files are regularly purged. |
| Your name, address, email address and telephone number | If and when you explicitly send us personal data of your own accord for other purposes (e.g. employment enquiries) | To process your request or enquiry; personal data will not be sent to a third party processor without your consent |
As a data controller we require the use of third party processors to ensure a smooth running of our Platforms. We use third party processors to collect and/or process your data on our behalf to deliver services (detailed in Section 4). We only provide them with the data needed to deliver the specific service.
We only use trusted partners and suppliers as our third party processors. We have audited all of our third party processors to ensure they store data securely and are contractually obliged to adhere to all the data regulations required by law. We continually monitor our data processors to ensure they are adhering to the required standards.
We use your personal data for the following purposes and reasons:
To provide services to you and manage your account
When you choose to use our Platform, we will use the information you have given us to fulfil any services you have requested. This may include the fulfilment and mailing of physical goods you have ordered, taking and processing payment for services
To communicate with you and manage our relationship with you
We may need to contact you by phone, email or text message for administrative or operational reasons. This may include confirming details of an order you have made or services you have requested, or notifying you of any unanticipated issues with our ability to fulfil our service to you. We may also email you to request your feedback on the services we have provided.
These communications are not made for marketing purposes and you will continue to receive them if you opt-out of marketing communications but continue to use our Platform.
To share news, updates and promotional offers with you – if you have consented.
If you have consented to receiving marketing communications from us by marking a checkbox when signing up or as part of a checkout purchase, we may occasionally send you emails with news, updates and promotional offers. We will not send you these emails unless you have given your consent for us to do so, and all emails include an opt-out link to prevent future emails being sent to you..
We will not transfer or sell your personal data to third parties for the purposes of marketing.
To personalise your experience on our Platform
If you choose to create an account with us, or through the use of cookies (see Section 7) we may personalise your experience on our Platform. This may include showing you information, products or services that you have expressed an interest in, purchased before, or are related to something you have done on our Platform previously.
To improve our services, fulfil our administrative purposes and protect our business interests.
Your information may also be used within our business to fulfil our accounting, billing, audit, fraud screening, safety, security and legal requirements. Your activity on our Platform may also be statistically analysed to help us operate our Platform more efficiently and effectively. Note that personal data is not used in this statistical analysis.
As required by applicable law, legal process or regulation.
There may be other legal or regulatory processes that require the use of your personal data that have not been explicitly documented here. To understand these requirements please visit www.eugdpr.org .
You have rights in relation to the personal data that we hold about you. In summary you have the rights to be informed, of access, of rectification, of erasure, to restrict processing, to data portability, of objection and related to automated decision making including profiling of the personal data we hold on you.
To fully understand your rights please see https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ .
If you wish to exercise these rights, please contact info@ffada.co.uk We will confirm receipt of your request as a matter of urgency, and may require further communications to ensure we, and you, understand the scope of the request. We are then obliged to honour your request within one month of your initial communication.
There may be circumstances where your request cannot be honoured due to legal or financial reasons.
We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss
As described in this Privacy Policy, we may in some instances disclose your personal data to third party data processors (see Section 3). Where we disclose your personal data to a third party, we require that third party to have appropriate technical and organisational measures in place to protect your personal data;
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers or third party data processors. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. Where your personal data are transferred outside of the EEA, we will make sure that your personal data is stored and transferred in a way that is secure. If you are based within the EU we will only process and/or transfer data outside of the European Economic Area or EEA (i.e. the Member States of the European Union, together with Norway, Iceland and Liechtenstein) where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your personal data.
In order to improve our services, to provide you with more relevant content and to analyse how visitors use our Platform, we may use technologies, such as cookies, pixels or tracking software.
For example, we use software to monitor customer traffic patterns and website usage to help us develop the design and layout of the website in order to enhance the experience of the visitors to our website. This software does not enable us to collect any personal data. In addition, in order to understand how our customers interact with the emails and the content that we send, we use pixels that allow us to know if the emails we send are opened or if the content of our emails is displayed in text or html form.
We may collect information about your computer, including where available your IP address, operating system, browser type, mobile phone operating system and other related details for system administration. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
We also use cookies in our Platform. Cookies are small pieces of information stored by your browser. You can set your browser to not accept/store cookies, or delete specific cookies from our Platform. Using our Platform without the use of cookie may mean the Platform does not operate as intended and may lead to a degraded experience. Our Platform may also use third party cookies; in the case of third party cookies we will not attribute any personal data provided to us to these cookies.
Ffa Da will not share any of your data help on the website.
We do not disclose or sell your information to third parties for the purposes of direct marketing.
We will retain your personal data for as long as we need it in order to fulfil our purposes set out in this Privacy Policy or in order to comply with the law.
We may make changes to this Privacy Policy from time to time, including as part of the new European data protection rules which will come into force on 25 May 2018 through the General Data Protection Regulation (Regulation (EU) 2016/679), and we will update our Platform to show the most recent Privacy Policy.
There are no additions to this Privacy Policy.
Questions, comments and requests regarding this privacy policy are welcome, info@ffada.co.uk.