Privacy Policy

We are Norac Foods UK Limited, trading as La Boulangère and Whaoo!.

We are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect will be processed by us. Please read this privacy policy carefully to understand our views and practices and your rights regarding your personal data. Our site is available by visiting the following domains: www.noracfoodsuk.com, www.whaoo-uk.com and www.laboulangere-uk.com (our site). By visiting our site your personal information will be processed as described in this policy.

For the purpose of data protection legislation, the data controller is Norac Foods UK Limited registered in England and Wales under company number 09350279 and have our registered office at 144 Liverpool Road, London, N1 1LA.

If you have any queries, complaints or requests please contact us please email Whaoo@norac-foods.co.uk or telephone our customer service line on 0203 745 5159.

What information do we collect from you?
Why do we collect this information?
How long do we keep hold of your information?
Who might we share your information with?
How is your data stored and kept secure?
What are your rights?
Changes to this Policy
Cookies
Contact Us

What information do we collect from you?

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data includes full name, username or similar identifier, marital status, title, date of birth and gender.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Financial Data includes bank account and payment card details.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
Usage Data includes information about how you use our website, products and services.
Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

If you fail to provide personal data
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

How is your personal data collected?

We use different methods to collect data from and about you including through:

Direct interactions. You may give us your personal data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- purchase or seek to purchase our products or services;
- create an account on our website;
- subscribe to our publications;
- request marketing to be sent to you;
- enter a competition, promotion or survey;
- sign up for our loyalty program; or
- give us feedback or contact us.
Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see the ‘Cookies’ section below further details.
Third parties or publicly available sources. We will receive personal data about you from various third parties as set out below:
- Technical Data from the following parties:
  - analytics providers such as Google;
  - advertising networks; and
  - search information providers.
- Contact, Financial and Transaction Data from providers of technical, payment and delivery services.

Why do we collect this information?

We process your personal information for the following reasons:

Pursuant to a contract in order to:
- register you as a new customer;
- process information at your request to take steps to enter into a contract;
- provide you with information on our products and services;
- process and deliver your order;
  enable you to partake in a prize draw, competition or complete a survey;
- operate our loyalty scheme;
- maintain business and service continuity;
- send service communications so that you receive a full and functional service and so we can perform our obligations to you. These may be sent by email. These will include notifications about changes to our service; and
- provide information on where to find our products.
On the basis of your consent:
- Where we rely on your consent for processing this will be brought to your attention when the information is collected from you;
- We will only contact you with direct marketing communications if you consent to us doing so and you have the right to withdraw consent at any time. See the What are your rights? section below for more information.
In our legitimate interests of providing the best service and improving and growing our business we will process information in order to:
- register you as a new customer;
- process and deliver your order;
- manage our relationship with you;
- enable you to partake in a prize draw, competition or complete a survey;
- operate our loyalty scheme;
- provide you with a personalised service;
- improve our products and services marketing, customer relationships and experiences;
- keep our site and systems safe and secure;
- understand our customer base and purchasing trends;
- defend against or exercise legal claims and investigate complaints; and
- understand the effectiveness of our marketing.

We will carry out analytics to improve our products and services as set out above.

You have the right to object to processing carried out for our legitimate interests. See the What are your rights? section below for more information.

To comply with legal requirements relating to:
- the provision of products and services;
- data protection;
- health and safety;
- anti-money laundering;
- fraud investigations;
- assisting law enforcement; and
- any other legal obligations placed on us from time to time.

How long do we keep hold of your information?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Who might we share your information with?

For the purposes set out in the ‘Why do we collect this information?’ section above, we will share your personal information with:

the following categories of third parties, some of whom we appoint to provide services, including:
- business partners, subsidiaries, suppliers and sub-contractors for the performance of any contract we enter into with you; and
- hosting companies, IT support providers, online analytics and search engine providers that assist us in the improvement and optimisation of our site.
Any member of our group, which means our subsidiaries.

Additionally, we will disclose your personal information to the relevant third party:

In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
If we are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of our customers, our regulator, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and prevention of money laundering and credit risk reduction.

How is your data stored and kept secure?

At Norac Foods UK Limited, we take your safety and security very seriously and we are committed to protecting your personal and financial information. All information kept by us is stored on our secure servers. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our service, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. More information is available by contacting us.

International transfers of your personal data

We do not transfer your data outside the UK or European Economic Area (“EEA”) (other than between the UK and the EEA). If in future we do need to transfer your data outside the UK or the EEA (other than between the UK and the EEA), we will only do so if adequate protection measures are in place in compliance with data protection legislation.

What are your rights?

Where processing of your personal data is based on consent, you can withdraw that consent at any time.

You have the following rights. You can exercise these rights at any time by contacting us by email Whaoo@norac-foods.co.uk or telephone our customer service line on 020 3745 5159. You have the right:

to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes;

to ask us not to process your personal data where it is processed on the basis of legitimate interests provided that there are no compelling reasons for that processing;

to ask us not to process your personal data for scientific or historical research purposes, where relevant, unless the processing is necessary in the public interest.
to request from us access to personal information held about you;
to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
to ask for data to be erased provided that the personal data is no longer necessary for the purposes for which it was collected, you withdraw consent (if the legal basis for processing is consent), you exercise your right to object, set out below, and there are no overriding legitimate ground for processing, the data is unlawfully processed, the data needs to be erased to comply with a legal obligation or the data is children’s data and was collected in relation to an offer of information society services;
to ask for the processing of that information to be restricted if the accuracy of that data is contested, the processing is unlawful, the personal data is no longer necessary for the purposes for which it was collected, or you exercise your right to object (pending verification of whether there are legitimate grounds for processing);
to ask for data portability if the processing is carried out by automated means and the legal basis for processing is consent or contract.

Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details above. In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority. The relevant supervisory authority in the UK is the Information Commissioner’s Office (ICO) in the UK, at any time. The ICO’s contact details are available here: https://ico.org.uk/concerns/

Changes to our privacy policy

This policy may be updated from time to time. Please check back frequently to see any updates or changes to our privacy policy.

Cookies

We use cookies and similar technology to distinguish you from other users of our site. This helps us to provide you with a good experience when you use our site and also allows us to improve our site.

We use the following cookies for the following purposes:

Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.
Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you and remember your preferences.
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website more relevant to your interests.

You can find more information about the individual cookies we use and the purposes for which we use them in the table below:

Cookie name	Type	Purpose	Expires
Google Analytics Utma	Analytical/ performance	Used to distinguish users and sessions	2 years from set/update
Google Analytics Utmb	Analytical/ performance	Used to determine new sessions/visits	30 minutes from set/update
Google Analytics Utmc	Analytical/ performance	Determine whether new session/visit	End of Browser session
Google Analytics Utmz	Analytical/ performance	Determine traffic source	6 months from set/update
Google Analytics _gid	Analytical/ performance	Used to distinguish users/Unique cookie ID for user	24 hours
Google Analytics _gat_tealium_0	Analytical/ performance	Connects Tag Manager and Analytics	24 hours

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

Contact us

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Norac Foods UK Limited, 144 Liverpool Road, London N1 1LA or by email Whaoo@norac-foods.co.uk or telephone our customer service line on +44 2037455159.