Privacy Policy

This Privacy Policy sets out the personal information practices for Island Abbey Foods Ltd (“Island Abbey”) and the access to and use of the honibe.co.uk website (the “Site”). Island Abbey may update this Privacy Policy at any time by posting changes on this page. Please check back frequently to see any updates or changes to this Privacy Policy. Your continued use of this Site means that you agree to and accept any updates to this Privacy Policy.

Island Abbey is committed to protecting your privacy, and providing our customers with a secure, private, and enjoyable online shopping experience. Other than as disclosed herein, Island Abbey will not rent, sell or share your information with any third party.

This Site is intended for users who are over 18 years of age. We do not knowingly collect or solicit Personal Information from children.

We abide by the following:

Collection of your personal information.

We collect Personal Information from you in a variety of ways when you interact with Island Abbey as follows:

Data you give us. You may give us data about you:

when you place an order on the Site and during our fulfilment of such order;
by filing in a form on the Site. For instance, when you complete the “CONTACT US” form on the Site or interact with our online help systems;
when you subscribe to our newsletters;
if you ask us to provide you with other marketing communications;
if you ask us to provide you with personalized online content such as targeted advertising;
if you contact us or correspond with us (for example, by phone, email or otherwise) for any other reason;

Data we collect about you

technical information, including the type of device (and its unique device identifier) you use to access a Site, the Internet protocol (IP) address used to connect your device to the Internet, your login information, browser type and version, time zone setting, browser plug in types and versions, operating systems, mobile network information and platform; and
information about your visit to a Site including full Uniform Resource Locators (URL), clickstream to, through and from a Site (including date and time), pages you viewed, page response time, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

Data we collect from or which is provided by third parties. We may be given personal data about you by third parties such as the operator of the Shopify store at the Site or other online shopping sites featuring our products.

PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

We will use the personal data held about you for the purposes stated below:

Purpose of Processing	Type of personal data	Legal basis for processing
To process and deliver any order you place, including managing payments, fees and charges and collect and recover money owed to us.	Your name, email address, password, billing address, delivery address, payment details and phone number.	Performance of a contract.
To manage our relationship with you, including dealing with any enquiries, correspondence, concerns or complaints you have raised with us; notifying you about changes to our terms and conditions and privacy policy; or asking you to leave a review or take a survey.	Your name, email address, address, job title, company name, opinion and information about any concerns or issues you have raised.	Performance of a contract and our legitimate interest – to enable us to keep our records updated and to better understand our customers.
To enable you to participate in contests or similar competitions.	Your name, email address, and address details.	Performance of a contract.
For security and fraud prevention purposes	Your name, email address, job title, company/organization, and any relevant identification documents.	Legitimate interest - to improve and ensure the safety of the Site.
As part of our efforts to keep the Site safe and secure.	Your personal contact details and the technical information mentioned above.	Legitimate interest – to improve and ensure the safety of the site.
To compile reports (which do not personally identify you) about the use of the Site.	The technical information mentioned above.	Legitimate interest – to improve the Site.
To ensure that content on the Site is presented in the most effective manner for you and for your device.	The technical information mentioned above.	Legitimate interest – to improve the Site.
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.	The technical information mentioned above.	Legitimate interest – to understand our fans better, keep the Site updated and relevant and to develop our business and to inform our marketing strategy.
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences.	The technical information mentioned above.	Legitimate interest – to understand our fans better, keep the Site updated and relevant and to develop our business and to inform our marketing strategy.
To better understand our audience.	The technical information mentioned above, email address, address, date of birth, job titles and which organization you are from.	Legitimate interest – to allow us to prepare statistical information to be used internally to better understand our fans, but also to be shared with our advertisers in non-personally identifying form to enable them to understand who their adverts are presented to and who they wish to target for advertising purposes.
To provide you with marketing communications, for example, newsletters, updates and notifications.	Your name, postal address, phone number or email address.	Consent.
To make suggestions and recommendations to you about products, services or events that may be of interest to you.	Your name, date of birth, email address, postal address, phone number or the technical information mentioned above.	Consent.

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you.

Where we have a legal basis to use your personal data without consent (as we have described above), this policy fulfils our duty to process personal data fairly and lawfully and in a manner that you would expect given the nature of our relationship with you, by giving you appropriate notice and explanation of the way in which your personal data will be used.

Where consent is required for our use of your personal data, by ticking the appropriate consent box or otherwise communicating your consent, you consent to our use of that personal data for the purposes covered by the specific consent that you have given. For example, we will only process your personal data for marketing purposes if we have your consent to do so.

MARKETING

As mentioned above, we would like to send and present you with information about Island Abbey which may be of interest to you.

We will provide your details to our partners, including the operator of the Island Abbey webstore (currently Shopify) and our marketing, only if you have consented to this (and only to the persons that are covered by your consent), but we will not provide your personal data to any other businesses so they can use your personal data for marketing purposes.

We will only send and present you with marketing communications if you would like us to. You will have the opportunity to clearly set out whether you wish to receive marketing communications from us by ticking the relevant boxes.

DISCLOSURE OF YOUR PERSONAL DATA

We may share your personal data with selected third parties in accordance with this Privacy Policy, including:

with the operator of the Island Abbey webstore (currently Shopify) at the applicable Site and who would be contracting with you should you wish to purchase any products via the webstore;
service providers (for example, IT services or CRM services), business partners, suppliers and sub-contractors for the performance of any contract we enter into with you, but also when sending out marketing communications;
professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services;
any member of our group, which means our affiliates, subsidiaries, our ultimate holding company and its subsidiaries;
government or other law enforcement agencies, in connection with the investigation of unlawful activities or for other legal reasons (this may include your location information); or
a third party where all or substantially all of our assets are acquired by such third party, in which case personal data held by us, including your personal data, will be one of the transferred assets.

In addition to the above, we currently share your data with the following third parties for the specified purposes:

Pilothouse Digital Ltd. (marketing)
Klaviyo, Inc. (marketing)
MPP Marketing Group Inc. (marketing)
ReCharge Inc. (subscription management)
Shopify Inc. (order fulfillment and related services)
Vision Logistics (order fulfillment and related services)
Privvy LLC (marketing)
Dorilton Capital Management LLC (general internal business purposes)

RETAINING PERSONAL DATA

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Even if you request that we erase your data, we may still need to keep it (please see below) or may keep it in a form that doesn’t identify you. Unless you have agreed that we may use your personal data for marketing purposes (for example, to provide you with product updates and other marketing communications), we will only keep your personal data for six (6) years after you have made a purchase from us or via the Site.

YOUR LEGAL RIGHTS

You have the following rights regarding your personal data:

Access. You have the right to access data we hold about you. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Rectification or erasure. You have the right to request that we rectify or delete any personal data that we hold about you (unless we have the legal right to retain it). This right does not extend to non-personal data. Please note that your rights to request erasure may be limited by applicable law.
Restriction. You also have the right to restrict us from processing your personal data if the data is inaccurate, the processing is unlawful, or we no longer need your personal data for the purposes for which we hold it.
Data portability. You have the right to obtain personal data we hold about you, in a structured, electronic format, and to transmit such data to another data controller if the legal basis for processing such personal data is consent.
Object /change of preferences. You have a right to request that we stop processing your personal data where we are relying on a legitimate interest (or those of a third party). You have the right to object where we are processing your personal data for direct marketing purposes. For example, if you have given your consent to receive team updates or other marketing communications, but have changed your mind, you have the ability to opt out from receiving such communications going forward by contacting us using the details provided below or by clicking the relevant link in any communications you receive.
Complaints. If for any reason you are not happy with the way that we have handled your personal data, please contact us. If you are still not happy, you have the right to make a complaint to the Information Commissioner’s Office.

Please note that if you ask us to stop processing your personal data in certain ways or erase your personal data, and this type of processing of data is needed to facilitate your use of the Site or the provision of products or services to you, you may not be able to use the Site or receive products or services from us as you did before. This does not include your right to object to direct marketing, which can be exercised at any time without restrictions. Please allow at least ten working days for your request to be actioned.

Please note that the rights mentioned above do not extend to non-personal data.

If you would like to exercise any of the rights mentioned above, please contact us at Compass Healthcare Limited, 12 Samwell Way, Northampton, NN4 9QJ or by email at info@honibe.co.uk.

COOKIES

You can see what cookies we use and why in our cookie policy.

Links to Other Websites

As noted above, there may be links from our Site to other websites; note that this Privacy Policy applies only to our Site and not to websites of other companies or organizations to which our Site may be linked. You must check on any linked sites for the privacy policy that applies to that site and/or make any necessary inquiries in respect of that privacy policy with the operator of the linked site. We have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our Site and welcome any feedback about these sites.

Protection of Personal Information.

We are committed to protecting the security of your Personal Information. We have put in place physical, electronic, and managerial procedures that are designed to safeguard and help prevent unauthorized access, maintain data security, and correctly use your Personal Information as contemplated by this Privacy Policy. Although we will make reasonable efforts to protect personal information from loss, misuse, or alteration by third parties, you should be aware that there is always some risk that an unauthorized third party could find a way to thwart our security systems. Accordingly, we cannot guarantee the security of your data transmitted to the Site and you acknowledge that any transmission is at your own risk.

Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at info@honibe.co.uk.

This policy was last updated July 14, 2021.