Privacy & Data Protection Policy

Effective Date: May 13, 2024

This Privacy Policy governs the manner in which THE AUTHENTIC FOOD GROUP LIMITED ("the Company", "we", "us", or "our") collects, uses, maintains, and discloses information collected from users (each, a "User") of the website and services provided by the Company. This policy applies to the site and all products and services offered by THE AUTHENTIC FOOD GROUP LIMITED.

1. Compliance with UK GDPR and Data Protection Act 2018

We are committed to protecting the privacy and security of your personal data. This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The Company acts as a Data Controller for the personal information it collects through its corporate portal and operational activities.

2. Categories of Data Collected

We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, register on the site, place an order, fill out a form, and in connection with other activities, services, features, or resources we make available. Users may be asked for, as appropriate, name, email address, mailing address, phone number, and corporate credentials.

  • Technical Data: Includes internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: Includes information about how you use our website, products, and services.
  • Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.

3. Legal Basis for Processing

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation in the UK.

4. Data Retention and Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for seven years after they cease being customers for tax purposes.

5. International Transfers

Your data is primarily stored on secure servers within the United Kingdom. If we transfer your data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: transferring to countries that have been deemed to provide an adequate level of protection for personal data or using specific contracts approved by the Information Commissioner’s Office (ICO).

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, correction, erasure, restriction, transfer, or to object to processing. If you wish to exercise any of these rights, please contact our Data Protection Officer at info@thericelab.sbs.

This document represents a binding legal framework. For full technical disclosure or to report a breach, contact the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.