Privacy Policy
Last Updated: 28th of January 2025
1. Introduction
Welcome to Produce Network (“we,” “us,” “our”). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information about you when you visit our website or otherwise interact with our services. By using our website or services, you agree to the practices described herein. If you do not agree, please discontinue using our website and services immediately.
2. Who We Are
Produce Network is a London-based marketplace that sources fresh produce directly from suppliers in Greece, Italy, France, and Spain to serve restaurants in the UK. For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and, where applicable, the EU General Data Protection Regulation (“EU GDPR”), we act as the Data Controller of your personal data.
Contact Details
• Produce Network
• Email: orders@producenetwork.co.uk
If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at the above details.
3. Data We Collect and How We Collect It
We collect various categories of personal data depending on how you interact with our services.
3.1 Information You Provide to Us
1. Contact Details:
• Name, restaurant or business name, email address, postal address, and phone number.
2. Account Registration Information:
• Login credentials (username, password) for our platform.
3. Financial Data:
• Payment method details, billing information, transaction records when you place orders or set up credit terms.
4. Communications:
• Any information you provide when contacting us via email, chat, phone, or other channels (e.g., support inquiries, feedback, survey responses).
3.2 Information Collected Automatically
When you visit our website, certain information is collected automatically:
1. Technical Data:
• IP address, browser type, operating system, device identifiers, and referring URLs.
2. Usage Data:
• Pages viewed, links clicked, time spent on each page, and other usage metrics.
3. Cookies and Similar Technologies:
• We use cookies, web beacons, and other tracking technologies to remember preferences, enhance user experience, and gather website analytics. You can manage or disable cookies in your browser settings; however, some features of our website may not function properly if cookies are disabled.
3.3 Information from Third Parties
We may receive information from third-party sources:
1. Analytics Providers:
• Aggregated data about site traffic and user demographics.
2. Payment Processors:
• Limited financial or transaction details to confirm payment status.
3. Marketing Partners:
• Prospective business leads or contact details for potential collaborations.
4. Legal Basis for Processing (UK & EU GDPR)
Under applicable data protection laws, we must have a legal basis to process your personal data:
1. Performance of a Contract:
• Processing necessary to fulfill our contractual obligations (e.g., handling your orders, managing your account).
2. Legitimate Interests:
• Processing that supports our legitimate interests (e.g., improving our services, ensuring network security), provided it does not override your fundamental rights and freedoms.
3. Consent:
• Where you have expressly consented to receive marketing communications or any other data processing activities that require consent under law. You may withdraw your consent at any time.
4. Legal Obligations:
• Processing required to comply with a legal obligation (e.g., tax, accounting, regulatory compliance).
5. How We Use Your Information
We use the information we collect to:
1. Provide Our Services:
• Set up and maintain your user account, process orders, coordinate deliveries, and support your use of our marketplace.
2. Payment and Billing:
• Handle invoicing, process payments, offer credit terms, and manage financial records.
3. Customer Support:
• Respond to inquiries, troubleshoot issues, and improve overall customer experience.
4. Service Improvements:
• Evaluate and optimize website performance, logistics operations, and supply chain efficiencies.
5. Marketing and Communications:
• Send newsletters, promotions, or relevant updates about new products or services, in accordance with your marketing preferences.
6. Compliance and Protection:
• Enforce our terms of service, protect against fraudulent or unlawful activity, and comply with legal obligations or requests from authorities.
6. Data Sharing and Disclosure
We respect your privacy and only share your personal data under the following circumstances:
1. Service Providers:
• We engage third-party service providers for tasks such as payment processing, logistics, web hosting, or analytics. These providers are contractually bound to process personal data solely on our behalf and under our instructions, maintaining confidentiality and security.
2. EU Wholesalers/Suppliers:
• We may share limited information (e.g., delivery address) with suppliers to coordinate and fulfill your orders.
3. Legal Compliance:
• We may disclose personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
4. Business Transfers:
• In the event of a merger, acquisition, or sale of company assets, personal data may be transferred as part of the transaction. We will notify you of such changes and any choices you may have.
5. With Your Consent:
• We will share your personal data if you instruct us to or otherwise give explicit consent.
7. International Data Transfers
Since we operate with suppliers across the European Union and service clients in the UK, your personal data may be transferred and processed in these regions. We take necessary measures to ensure that any transfer of personal data is carried out in compliance with relevant data protection laws, including the use of EU Standard Contractual Clauses or other recognized legal mechanisms.
8. Data Security
We employ industry-standard measures to protect your data, including:
1. Encryption:
• SSL/TLS encryption for data in transit, secure storage for data at rest.
2. Access Controls:
• Role-based and password-protected systems to limit access to authorized personnel only.
3. Regular Monitoring:
• Routine security assessments and audits to identify and mitigate vulnerabilities.
Although we strive to safeguard all personal data, no method of transmission or storage is completely secure. We encourage you to choose strong passwords, protect your login credentials, and notify us promptly if you suspect any unauthorized account access.
9. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Once data is no longer needed, we securely delete or anonymise it.
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
1. Right of Access:
• Request confirmation whether we hold your personal data, and obtain a copy.
2. Right to Rectification:
• Request correction of inaccurate or incomplete personal data.
3. Right to Erasure:
• Ask us to delete your personal data under certain conditions (e.g., where it is no longer necessary, or if you withdraw consent).
4. Right to Restrict Processing:
• Request that we limit the processing of your personal data under certain circumstances.
5. Right to Data Portability:
• Receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller where technically feasible.
6. Right to Object:
• Object to processing based on legitimate interests or for direct marketing purposes.
7. Right to Withdraw Consent:
• If we are processing your personal data based on your consent, you can withdraw that consent at any time.
To exercise these rights, please contact us at [info@producenetwork.co.uk] or use the details in Section 2. We will respond to all legitimate requests within the timeframes required by law. If you believe our processing of your personal data is unlawful, you may also lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or the relevant supervisory authority in your jurisdiction.
11. Children’s Privacy
Our services are directed toward restaurants and other commercial entities. We do not knowingly collect or process personal data from individuals under 16 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately so we can take appropriate action.
12. Third-Party Links and Services
Our website may contain links to third-party websites or services for convenience or reference. We do not control and are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
13. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, services, or legal requirements. When we do, we will revise the “Last Updated” date at the top of this page. Any changes will become effective immediately upon posting. We encourage you to review this page periodically for the latest information on our privacy practices.
14. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or our handling of your personal data, please reach out using the details below. We will do our best to resolve any issues and ensure your data is safeguarded.
By continuing to use our website or services, you acknowledge that you have read and understood this Privacy Policy.