Home / Who We Are / Privacy Policy

Privacy Policy

The data controller is Suma Wholefoods.

This policy:

  1. Explains the different types of personal data that we collect
  2. Explains how and why we collect & use your personal data
  3. Explains when we’ll share your data with other organisations and why we need to
  4. Explains the rights & choices you have when it comes to your personal data

Personal Data that we Collect

When you register for an account you will provide us with:

  1. Your name.
  2. Your address.
  3. Your email address.
  4. Your telephone number.
  5. Information around opening times or access to the premises if applicable.
  6. Your credit or debit card details if you are paying by card. Your account number and sort code number if paying by direct debit, BACS details, or other electronic payment methods such as Paypal
  7. Alcohol. You maybe asked to prove that you are over 18 years old. You may be asked for copies of a passport/birth certificate or other that proves your birth date.
  8. We will also collect your account login details if you have chosen to order online
  9. When you shop with us online we will collect: Information about your online purchases (for example, what you have bought & when. This information maybe used to offer bespoke deals or substitutes for out of stock products.
  10. We may also collect, and our third party providers of advertisements and content may collect, information about where you are on the Internet (e.g. the URL you came from, IP address, domain types like .coop, .co.uk and .com), your browser type, the country and telephone area code where your computer is located, the pages of our Website that were viewed during your visit, the advertisements you clicked on, and any search terms that you entered on our Website (“User Information”). We may collect this information even if you do not register with us.
  11. Information about any devices you have used to access our Services (including the make, model and operating system, IP address, browser type and mobile device identifiers)
  12. When you contact us or we contact you or you take part in promotions, competitions, surveys or questionnaires about our Services, we may collect your feedback and contributions to surveys.

How we Use your Data

  1. Manage the account you hold with us
  2. Process your orders and refunds
  3. Make your deliveries
  4. Provide you with updates on operational matters and changes to the service you receive
  5. To notify you of similar goods and services that may be of interest to you. You may opt out of receiving these marketing communications.
  6. If you consent we may pass your details’ to selected suppliers who may contact you to market their goods to you
  7. If you consent we may pass your details’ to selected suppliers who may contact you to market their goods to you.
  8. We may contact you through your social media accounts for marketing purposes
    1. to administer our Website
    2. for statistical purposes to improve this Website and it’s services to you
    3. to serve Website content and advertisements to you we use cookies and similar technologies on our Websites and Mobile Apps to improve your customer experience

How we use Cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. If you have allowed cookies in your web browser, a file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes.

Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

We run some functional cookies which are necessary for the basic functioning of our website. These are always active and can’t be opted out of. These cookies do not collect your personal data and are not used for marketing purposes. You can choose to accept or decline cookies relating to preferences, statistics and marketing. Most web browsers remember your cookie consent choices for future visits to the site, but you can usually modify your browser settings to update your cookie preferences. Declining optional cookies may prevent you from taking full advantage of the website.

Social media cookies

These cookies are set by third-party social media services that we have added to the site to enable you to share our content with your friends and networks and to log-in to, and share information with, Suma’s Services. Some of our Services may include social networking features, such as the Facebook® “Like” button and widgets, “Share” buttons, and interactive mini-programs. Additionally, you may choose to use your own social networking logins from, for example, Facebook or LinkedIn®, to log into some of our Services. If you choose to connect to our Services using a social networking or similar service, we may receive and store authentication information from that social media service to enable you to log in and other information that you may choose to share when you connect with these Services. These Services may collect information such as the web pages you visited and IP addresses for various purposes and may set cookies to enable features to function properly.

Suma is not responsible for the security and privacy practices of the third parties who set or deploy cookies in connection with social media services. You should review the applicable third-party privacy statements carefully to understand their collection and processing of personal information. If you do not want your personal information shared with your social media account provider or other users of the social media service, please do not connect your social media account with your account for the Services and do not participate in social sharing on or in connection with the Services.

If there is no “Cookie Settings” functionality for a Suma website and you wish to opt-out of or remove Cookies, please clear or delete cookies through your browser settings.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  1. Whenever you are asked to fill in a form on our website be aware there may be a ‘subscribe option’ which you should leave unclicked if you do not want the information to be used by anybody for direct marketing purposes
  2. You may opt out of receiving marketing emails by using the unsubscribe link on any correspondence from us; alternatively you can change your subscription preferences using the ‘edit my preferences’ link contained in our marketing emails. You can also contact us directly to let us know.

Why do we process your personal data in this way?

We need to process your personal data so that we can manage your customer accounts, provide you with the goods and services you want to buy and help you with any orders and refunds you may ask for.

When we share your data with third parties

We will use a card payments company to store your card data for future transactions and to process payments. We will ensure that the system is fully PCI compliant (PCI level 1), so your data is secure.

We may share name address, telephone numbers, email addresses with carriers for delivery purposes.

If you consent we may pass your details’ to selected suppliers who may contact you to market their goods to you.

In assessing your request for delivery of goods from us we may make enquiries about you including searching records held by credit reference agencies. We may also check your details held on security alert and fraud prevention schemes if applicable. If necessary we may pass your details to debt collection agencies.
We may need to pass your address, phone number and email address to the relevant food safety authorities in the event of a product recall.

You should be aware that if we are requested by the police or any other regulatory or government authority investigating suspected illegal activities to provide your Personal Information and /or User Information we are entitled do so.

We respect your privacy. The personal information that you give us is held with care and in utmost security. We do not sell, rent or transfer this information to third parties for their marketing purposes unless you agree otherwise.

Your Rights & Choices

Under the Data Protection Act 1998, you have the right to see the personal data we hold about you. This is called a Subject Access Request.

If you would like a copy of the personal data we hold about you, please write to:

Data Protection Officer, Suma Wholefoods, Unit G15, Lacy Way, Lowfields Business Park, Elland, HX5 9DB

You can also email us at compliance@suma.coop

Your right to be forgotten

Individuals have a right to have personal data erased and to prevent processing in specific circumstances:

  1. Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed.
  2. When the individual withdraws consent.
  3. When the individual objects to the processing and there is no overriding legitimate interest for continuing the processing.
  4. The personal data was unlawfully processed (ie otherwise in breach of the GDPR).
  5. The personal data has to be erased in order to comply with a legal obligation.

If these circumstances are met and you would like your data to be erased, please write to:

Data Protection Officer, Suma Wholefoods, Unit G15, Lacy Way, Lowfields Business Park, Elland, HX5 9DB